The administrator of your personal data is the JIM Foundation, based in Lodz (93-279) at 105 Tatrzanska Street, e-mail address: iod@jim.org, telephone number: 42 643 46 70, entered in the Register of Entrepreneurs of the National Court Register under number 0000127075, NIP number: 7282455613, REGON: 473070238, whose registration files are kept in the Court of Lodz-Centre in Lodz, XX Economic Department of the National Court Register.

You have the right to access your data, to correct them, to request their deletion, as well as the right to limit processing, to object to the processing of your personal data and the right to lodge a complaint to the supervisory authority, which in Poland is the President of the Office for Personal Data Protection, if the data are processed in violation of legal requirements.

The data will be processed for:

1. providing health services and maintenance of medical records - for a period of 20 years counting from the end of the calendar year in which the last entry was made, in accordance with the provisions of the Act of November 6, 2008 on Patient Rights and Patient Ombudsman (Journal of Laws of 2017, item 1318),
2. conclusion and performance of the contract concluded with the Administrator - for the time necessary for the performance of the contract, and after its termination, the personal data will be processed for the time necessary to demonstrate the correctness of the performance of the obligations arising therefrom until the expiration of the time limits indicated in the regulations on archiving,
3. in case of voluntary and optional consent, the data will also be processed for marketing purposes consisting in providing you with information about the services offered by the Administrator and other promotional information and events by means of messages sent to your e-mail address or telephone number and during telephone conversations with you - until you withdraw your consent to receive marketing communications.
4. performance by the Administrator statutory obligations, including in particular handling settlements with the National Health Fund - for the time necessary to carry out the Administrator's statutory obligations,
5. realization of the legally legitimate interest Administrator described below - for the time necessary for the realization of the Administrator's legitimate interest, in this regard, however, no longer than until your objection is deemed justified by your particular situation.

You will not be subject to to a decision that is based solely on automated processing, including profiling, and produces legal effects on you or is similarly materially affected.

Provision of data is voluntary, but the consequence of not providing it will be the inability to provide health services.

Recipients of your personal data may be: National Health Fund, entities providing legal, IT, laboratory services, other medical entities, public authorities to the extent necessary for them to carry out their tasks and duties (e.g. ZUS, MOPS, courts, Disability Adjudication Teams), Polish Post, courier companies.

The legal basis for processing to the extent necessary for the provision of health services and the maintenance of medical records is Article 9(2)(h) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter: RODO). To the extent necessary for the Administrator to perform its statutory duties, including in particular handling settlements with the National Health Fund, the basis is Article 6(1)(c) of the RODO.

The basis for data processing is also Article 6(1)(f) of the RODO, i.e. the Administrator's legitimate interest in providing the necessary settlements in connection with the agreement, asserting claims, direct marketing and building relationships and image.

If you agree to receive marketing communications also to your e-mail address and telephone number, the legal basis will also be Article 10 of the Act of 18.07.2002 on the provision of electronic services and Article 172 of the Act of 16.07.2004. Telecommunications Law.

You have two types of rights to object to the processing of your personal data, if the controller processes your personal data:

1. on the basis of legitimate interests, then you may object on grounds related to your particular situation;
2. for direct marketing purposes, then you may object in any case.