Privacy Policy
Declaration
We hereby declare that, as the controller of your personal data, we comply with all legal obligations required by applicable legislation, particularly the Personal Data Protection Act and the General Data Protection Regulation (GDPR). Accordingly, we declare that:
We will process your personal data only on the basis of a valid legal ground, primarily legitimate interests, performance of a contract, compliance with legal obligations, or consent granted by you.
We fulfil our information obligations under Article 13 of the GDPR before commencing the processing of personal data.
We will enable and support you in exercising your rights under the Personal Data Protection Act and the GDPR.
Personal Data Protection Information
In connection with the processing of your personal data by Cievna klinika Blumental s. r. o., acting as the data controller, we hereby provide you, as the individual whose personal data is being processed (hereinafter referred to as the “data subject”), with information pursuant to Articles 13 and 14 of the GDPR.
We have structured this information in the form of questions and answers to make it clear, accessible, and practical.
Who is the controller of your personal data?
The controller of personal data processed through the website www.blumentalclinic.sk, pursuant to Section 5(o) of Act No. 18/2018 Coll. on Personal Data Protection, as amended (hereinafter referred to as the “Act”), is:
Cievna klinika Blumental s. r. o.
Šancová 42
811 05 Bratislava
Slovakia
We process your personal data as the data controller. This means that we determine how and for what purposes your personal data is processed, how long it is retained, and which additional processors may assist us with its processing.
If you wish to contact us regarding the processing of your personal data, you may do so by email at info@blumentalclinic.sk or in writing at the address provided above.
What personal data do we process and why?
We process personal data that you have voluntarily provided to us for the following purposes:
Provision of Services and Performance of Contracts
We require certain personal data to fulfil our contractual obligations, including:
Email address
First name and surname
Residential address
Company identification number (IČO), if applicable
Tax identification number (DIČ), if applicable
VAT identification number (IČ DPH), if applicable
Bank account number
Telephone number, where necessary
This information is required for the performance of contracts, such as providing access to applications, delivering products, or fulfilling other contractual obligations, as well as for accounting purposes.
If you are our customer, we must also process your billing information to comply with legal obligations relating to the issuance and retention of tax documents.
Marketing – Sending Newsletters
We use a limited amount of your personal data (email address and name) for direct marketing purposes, particularly for sending commercial communications.
If you are an existing customer, we process this information based on our legitimate interests, as we reasonably assume that you may be interested in our news and updates. This processing may continue for three years following your last order or invoice.
If you are not an existing customer, we will send you newsletters only with your consent, for a period of three years from the date your consent was granted.
Consent is obtained through a double opt-in confirmation process. This confirmation constitutes your explicit consent to the processing of your personal data.
In both cases, you may unsubscribe from our newsletters at any time by clicking the unsubscribe link included in each email or by contacting us at info@blumentalclinic.sk.
Photographic Documentation and Testimonials
We may publish your photographs, videos, or written testimonials on our website only with your explicit consent.
Such materials may remain published until you withdraw your consent.
You may withdraw your consent at any time using our contact details.
Unless otherwise specified or required by law, we retain your personal data for the duration of the applicable statutory limitation periods.
Cookies
When you browse our website, we may record your IP address, the duration of your visit, and the website from which you arrived.
We use cookies to measure website traffic and analyse visitor activity.
You may browse our website using browser settings that restrict the collection of personal data.
You can disable cookies directly through your web browser, including:
Google Chrome
Mozilla Firefox
Internet Explorer
Other web browsers
For more detailed information about cookies, please refer to our Cookies Policy.
Security and Protection of Personal Data
We protect your personal data to the greatest extent possible using modern technologies and security measures appropriate to the current state of technological development.
We treat your personal data with the same care as our own.
We have implemented and maintain available technical and organisational measures designed to prevent the misuse, damage, loss, or destruction of your personal data.
These measures include:
Secure access to our computers through password protection.
Secure access to our mobile phones through passwords and fingerprint authentication.
Secure access to our email accounts through usernames and passwords.
Secure access to email marketing applications through usernames and passwords.
Secure access to invoicing systems through usernames and passwords.
Encrypted communication on our website using a valid HTTPS certificate.
Secure access to restricted website sections through usernames and passwords.
Regular software updates.
Personal data may be processed electronically through automated means or in printed form through non-automated procedures.
Which third parties have access to your personal data?
To ensure the proper operation of our company, certain third-party service providers may have access to personal data.
These include:
Marketing service providers
IT service providers
Email marketing and newsletter distribution providers, including Mailchimp
These providers process personal data to the extent necessary to deliver their services.
Do we transfer personal data to third countries?
We do not transfer your personal data to third countries.
We process personal data exclusively within the European Union or in countries that provide an adequate level of data protection based on a decision of the European Commission.
What rights do you have regarding the processing of your personal data?
Under applicable data protection legislation, you have several rights concerning your personal data.
If you wish to exercise any of these rights, please contact us at info@blumentalclinic.sk.
Right to Information
You have the right to receive information about how your personal data is processed.
This Privacy Policy is intended to fulfil that obligation.
Right of Access
You may request information about the personal data we process about you and the reasons for such processing.
We will provide this information within 14 days of receiving your request.
Right to Rectification
If your personal information changes or you believe that any information we hold is inaccurate or incomplete, you have the right to request its correction or completion.
Right to Restriction of Processing
You may request that we restrict the processing of your personal data if:
You believe that the information we process is inaccurate.
You believe that the processing is unlawful but do not wish to have the data deleted.
You have objected to the processing of your personal data.
You may also restrict the scope of personal data processed or the purposes for which it is processed.
For example, unsubscribing from our newsletter restricts the use of your personal data for marketing communications.
Right to Data Portability
You have the right to request that your personal data be transferred to another organisation.
We will handle such requests in the same manner as requests for access and provide the relevant information in a machine-readable format.
We will fulfil your request within 14 days.
Right to Erasure (Right to Be Forgotten)
You have the right to request the deletion of your personal data.
Although we value our relationship with you, we respect your right to have your personal information erased.
Upon receiving a valid request, we will delete your personal data from our systems, as well as from the systems of our processors and backups, where applicable.
We reserve a period of 14 days to complete the deletion process.
However, in certain circumstances, we are legally required to retain specific information.
For example, tax documents must be retained for the period prescribed by applicable legislation.
In such cases, we will delete all personal data that is not subject to a separate legal retention obligation.
We will notify you by email once the deletion process has been completed.
Right to Lodge a Complaint with the Data Protection Authority
If you believe that we are not processing your personal data in accordance with applicable legislation, you have the right to lodge a complaint with the relevant Data Protection Authority at any time.
We would appreciate it if you contacted us first regarding any concerns so that we have an opportunity to investigate the matter and correct any potential shortcomings.
Unsubscribing from Newsletters and Marketing Communications
We may send you emails containing information, articles, products, services, and other relevant updates.
If you are an existing customer, we send these communications based on our legitimate interests.
If you are not yet a customer, we will send them only with your consent.
In either case, you may unsubscribe at any time by clicking the unsubscribe link included in each email or by contacting us at info@blumentalclinic.sk.
Confidentiality
We assure you that all employees and contractors who process your personal data are required to maintain confidentiality regarding your personal information and the security measures used to protect it.
This obligation also applies to information whose disclosure could compromise the security of your personal data.
The confidentiality obligation remains in force even after the termination of the contractual relationship with us.
Your personal data will not be disclosed to any other third party without your consent.
Do we use profiling or automated decision-making?
Cievna klinika Blumental s. r. o. does not use automated decision-making or profiling as part of its activities.
These Personal Data Processing Principles have been effective since 25 May 2018 and replace all previous personal data protection policies.
Cookies Policy
A cookie is a small text file stored on your computer by a website you visit.
When you visit the same website again, cookies allow the website to remember your previous preferences and settings.
Essential Cookies
Essential cookies are necessary for the proper functioning of a website.
They are usually generated by the content management system (CMS) used to operate the website.
The storage of these cookies depends on your browser settings.
If you consider it appropriate, you can disable them through your browser.
However, essential cookies are required for basic website functions, such as navigation, and disabling them may prevent certain parts of the website from functioning correctly.
Technical Cookies
Technical cookies are not strictly necessary for the website to function but can improve your experience when using it.
For example, they may store information about your login preferences, such as the “Remember Me” function, or other website settings that you can customise.
Tracking Cookies
Tracking cookies are used to monitor and analyse visitor behaviour on the website.
Our website uses Google Analytics for this purpose.
All information collected through these cookies is aggregated and therefore anonymous.
Nevertheless, you may reject tracking cookies through the cookie settings bar displayed at the bottom of the website.
If you reject these cookies, the Google Analytics tracking code will not be loaded.
Other Third-Party Cookies
Third-party cookies may be stored on your device when you visit our website, even though we do not directly control them.
These cookies do not store personal information but may collect technical information about your device and web browser.
Common third-party cookie providers include:
Google
Facebook
Vimeo
YouTube
Google Cookies
Google cookies may be placed in your browser when you use Google services connected to your Google account.
We cannot directly control or delete cookies placed in your browser by another domain, as this is not technically possible.
You may prevent or limit their use by signing out of your Google account in your browser. However, in some cases, even private or incognito browsing may not completely prevent their use.
Under the GDPR, Google is responsible for managing cookies associated with its own services and obtaining the relevant consent from users.
Google may also store a cookie recording the consent you provided when creating your Google account.
You can, however, control whether Google Analytics tracking code is loaded on our website, as described in the Tracking Cookies section.