2. What data we collect

Depending on your interaction with us, we collect different categories of data:

Identification and contact data

• First and last name
• Date of birth
• Residential address
• Phone number, email address, occupation

Health data (special category of data)

• Medical history
• Examination findings (audiograms, endoscopy recordings, photo and video documentation)
• Diagnoses and treatment recommendations
• Data on surgical procedures and anesthesia
• Information on the medications you take and your allergies

Technical data from the website

• IP address, device and browser type
• Date and time of visit, pages viewed
• Cookie data (see Cookie Policy)

3. Why we collect your data

We process your data solely for the following purposes:

• Provision of health care — consultation, diagnostics, treatment, surgical procedures, follow-up
• Maintaining medical records in line with statutory obligations
• Communication with you — scheduling appointments, reminders, sharing reports
• Billing services and issuing receipts
• Legal and regulatory obligations (tax, statistical, health inspection)
• Site security and abuse prevention

4. Legal basis for processing

We process your data on one or more of the following legal bases:

• Consent you have given us for specific processing (e.g., sending informational messages by email)
• Performance of a contract for the provision of health services to you
• Legal obligation of the controller (Health Care Act, Health Records Act, tax laws)
• Protection of vital interests of the patient — particularly in emergencies
• Legitimate interest of the controller for site security and service improvement

5. With whom we may share your data

We do not sell or transfer your data to third parties for marketing purposes. We may share it only with:

• Healthcare professionals involved in your care — anesthesiologist, nurses, external consultants
• Other healthcare institutions to which we refer you for further diagnostics or treatment, with your consent
• Laboratories and radiology facilities performing additional tests at our request
• Accounting and legal advisors to the extent necessary for their services to us
• Government bodies when required by law (tax authority, health inspection, courts)
• IT service providers (hosting, email, scheduling systems) that act on our instructions and with whom we have signed processing agreements

Everyone with access to your data is bound by an obligation of medical and business confidentiality.

6. How long we keep your data

• Medical records — in accordance with the Health Records Act, at least 10 years from the last examination (certain record types longer)
• Accounting records — at least 10 years in accordance with tax laws
• Marketing contact data — until consent is withdrawn
• Technical data from the site — at most 12 months, unless a specific cookie is set to a shorter period

8. How we protect your data

We apply organizational and technical safeguards appropriate to the processing risk:

• Access to medical records is limited to staff bound by medical confidentiality
• Physical records kept in locked cabinets on clinic premises
• Electronic records protected by password and role-based access
• Site protected by SSL certificate (HTTPS)
• Regular data backups

9. Cookies and site technical data

Our site uses cookies for proper functioning and to improve the user experience. For details on the cookies used, see our Cookie Policy.

10. Changes to the Privacy Policy

We may update this Privacy Policy from time to time. The most recent version is always available on this page, with the effective date noted. We will notify you of significant changes directly (by email or a site notice) before they take effect.