Information on the processing of personal data at Momentum Clinic
CONSENT TO THE PROCESSING OF PERSONAL DATA FOR MARKETING PURPOSES
Identity and contact details of the controller
The administrator of your personal data is the business company Momentum Clinic s.r.o., ID No.: 21396183, registered office Veveří 3163/111, Žabovřesky, 616 00 Brno, registered in the Commercial Register at the Regional Court in Brno, Section C, Insert 138498 (hereinafter referred to as the "Administrator").
The contact details of the Administrator are as follows:
Mgr. Mgr. Jiří Schnabl
Delivery address: Momentum Clinic s.r.o., Veveří 3163/111, Žabovřesky, 616 00 Brno
E-mail address:info@momentumclinic.cz
telephone contact: +420 602 412 447
The controller has not appointed a data protection officer.
Legal reason for processing personal data
The lawful basis for processing your personal data is your consent given to the Administrator in accordance with Article 6(1)(a) of Regulation 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (the "Regulation").
What personal data we process about you
By giving this consent you confirm that you are over 16 years of age. In the case of your registration onhttps://www.momentumclinic.cz/we process your personal data that you yourself have entered in the registration form, i.e.: your name and surname, your email address, IP address, source URL.
Purpose of processing personal data
Your personal data will be processed by the controller for the purpose of advanced marketing, including marketing activities in connection with the offering of the controller's products and services, in particular
sending selected commercial communications and non-addressed commercial communications (newsletters) concerning the website operated by the controller, or the offer of its products and services, including the presentation of its new products, current trends, special offers and promotional discounts of the controller and discount codes, by electronic means of communication within the meaning of Act No. 480/2004 Coll, on certain information society services, as amended;
performing segmentation (profiling) for the purpose of targeting marketing according to the specific needs of the Client, for example, selecting commercial communications with regard to participation in the activities of the Administrator, identified preferences and other information obtained from the Client, i.e. including remarketing (targeted advertising) and behavioural advertising,
inclusion in the Controller's marketing database for profiling and direct marketing (including sending commercial communications);
conducting market research and evaluation in connection with the marketing activities of the controller.
The processing will involve automated decision-making, including profiling, but without legal effects for the data subject. Profiling is used to personalise communications.
Duration of processing of personal data and withdrawal of consent to the processing of personal data
Your personal data will be processed by the controller for the duration of the service of subscription to commercial communications (newsletters) sent by the controller. The personal data will be deleted if you withdraw your consent. However, the deletion does not apply to personal data that the controller processes on the basis of a reason other than this consent. This in no way affects the processing of your personal data to the extent necessary to comply with legal obligations.
Your consent to the processing of your personal data is given voluntarily, and you are under no obligation to provide it, and there is no penalty if you do not provide it to the controller.
You may withdraw this consent at any time, free of charge, by sending an email toinfo@momentumclinic.czor by written communication addressed to the Administrator's registered office, or by means of a link placed at the end of each commercial communication sent. However, the withdrawal of consent does not affect the lawfulness of the processing of personal data based on the consent given before its withdrawal.
To whom your personal data may be disclosed
Your personal data will be accessible to the controller, its employees and, where applicable, to third party processors who provide appropriate safeguards and whose processing meets all legal requirements and who will sufficiently protect your rights and personal data and handle them in a manner customary for direct marketing. In particular, these persons may be persons who send out commercial communications (newsletters), but they will only have access to this data to the extent and for the period necessary and on the basis of a contract for the processing of personal data concluded for this purpose.
Other entities are only granted access for the purpose of fulfilling their legal obligations.
Your rights in relation to the processing of your personal data
If we, as the Controller, process your personal data, you have the following rights in relation to us:
Right of access to personal data: you can request information about the processing of your personal data during the period of processing, i.e. you can request from us what personal data we process and for what reasons.
Right to rectification of personal data: you have the right to request rectification of incomplete or incorrect personal data concerning you.
Right to erasure: You have the right to ask the Data Controller to erase your personal data at any time, in particular where the data is no longer necessary for the purposes for which it was collected or otherwise processed.
Right to restriction of processing: you have the right to ask us to restrict the processing of your personal data at any time if the accuracy or lawfulness of the processing is disputed.
The right to data portability: your personal data processed electronically on the basis of your consent or on the basis of the legal title of performance of a contract may be transferred to another controller at your request.
Right to withdraw consent: you have the right to withdraw your consent to the processing of your personal data at any time.
Right to object to processing: Where we process your personal data on the basis of legitimate interest, you have the right to object to such processing.
All of the above rights can be exercised by sending an electronic mail (email) to the following addressinfo@momentumclinic.cz. This address can also be contacted in connection with a request for further additional information regarding the above rights. Similarly, the above rights may also be exercised by correspondence to the address of the Administrator's registered office.
The right to lodge a complaint with the supervisory authority. The Supervisory Authority is the Office for Personal Data Protection (ÚOOÚ), registration number: 70837627, with registered office at Pplk. Sochor 27, 170 00 Prague 7, telephone: +420 234 665 111 (switchboard), email address:posta@uoou.cz, website:www.uoou.cz
You can exercise individual rights in a written or electronic form addressed to the Administrator, which must contain your clear identification and your request. In the case of an electronic submission, this request must be sent from your registered email address.
Protection and security of your data
When processing personal data, we apply procedures, mechanisms, organizational and technical measures to prevent unauthorized processing. The security and protection of personal data are our key priorities. Personal data is protected to the maximum extent possible using technologies that are appropriate to the level of technical development, and the level of risk of misuse.
We use electronic and manual means for processing personal data.
The data we process for marketing purposes will be processed within the European Union.
Use of cookies
The processing of your personal data may also involve the use of cookies, other network identifiers and possible profiling based on other information collected about you over time based on your purchase history andwebsite traffic (in addition to cookies, this will mainly include data provided by your browser, data about the commercial messages displayed, the products visited and your purchase history, also available from your user account if you are registered with us, or from your personal account if you are registered with us.other available behavioural or demographic data) so that the administrator can offer and provide you with a product tailored to your needs and avoid offering you products that are not interesting to you. The above activity will allow for more precise personalization of the offer and information sent, including sending selected email messages with recommendations and offers based on previously viewed products, as well as sending automated email messages reminding you to complete your order (in case of interruption of this process).
Information on the processing of personal data via a camera system with recording
1) Administrator responsible for your personal data
Non-state healthcare facility Momentum Clinic s.r.o., ID No.: 21396183
registered office at Veveří 3163/111, Žabovřesky, 616 00 Brno
registered in the Commercial Register at the Regional Court in Brno, Section C, File 138498
e-mail: info@momentumclinic.cz
phone: +420 515 910 900
Data box ID: h8h3pif (hereinafter also referred to as the "Clinic")
hereby informs you, in accordance with Article 12 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation), (hereinafter referred to as "GDPR") about the processing of your personal data and your rights.
2) Contact details of the data protection officer
Mgr. Jiří Schnabl
Momentum Clinic s.r.o.,
BC Titanium, Nové sady 25, 602 00 Brno
e-mail: schnabl@momentumclinic.cz
phone: +420 602 412 447
3) Competent supervisory authority for personal data protection
Office for Personal Data Protection
Pplk. Sochora 27, 170 00 Prague 7
tel.: 234 665 111
e-mail: posta@uoou.cz
http://www.uoou.cz
4) Description of the camera system
The camera system is an automatically operated permanent technical system that allows image recordings from monitored locations to be captured and stored. The source of personal data will be image recordings (recordings from the camera system) stored for a certain period of time. The cameras are permanently mounted and have night vision capability. They capture color images, and the quality of the recording is sufficient to identify individuals and recognize their activities. The camera system is in continuous operation 24 hours a day, and all cameras record continuously without sound.
There are a total of 4 cameras located on the premises of the clinic. Location of individual cameras:
in the reception area on the ceiling behind the entrance door, so that it captures the reception area
in the reception area on the ceiling near the wardrobe, so that it captures the reception area
on the ceiling of the main corridor, so that it captures the entrance to the staff facilities
on the ceiling of the staff facilities corridor, so that it captures the entrance to the medical supplies and medicines storage area and the entrance of staff to the clinic premises
A diagram of the location of the individual cameras is available from the data protection officer.
5) Categories of personal data that are subject to processing
Appearance and image information about the behavior and actions of persons recorded by the camera system.
6) Purpose of personal data processing
Personal data is processed for the purpose of:
increasing property protection (theft, burglary, vandalism),
protecting the life and health of persons, increasing the safety of persons (assault, robbery, theft, other physical harm)
preventing extraordinary events,
obtaining evidence for the relevant authorities (courts and the Czech Police in the case of criminal offenses, municipal authorities in the case of misdemeanors),
obtaining material for resolving insurance claims (with the relevant insurance company).
7) Legal basis for processing
In accordance with the GDPR, the processing of personal data using camera recordings is necessary for the purposes of protecting the legitimate interests of the controller or third parties pursuant to Article 6(1)(f) of the Regulation.
The CCTV footage is not intended for monitoring employees and will not be used in the field of labor law (this does not constitute monitoring pursuant to Section 316(2) of the Labor Code). This does not exclude the possibility that, in exceptional and duly justified cases, the footage may also be used to monitor the performance of employees' duties.
8) Categories of data subjects
Employees, clients, and other persons entering the monitored area (suppliers, visitors, etc.).
9) Categories of recipients of personal data
In justified cases:
Law enforcement authorities (courts, Czech police, public prosecutors),
Insurance company for work-related accidents and occupational diseases of employees.
10) Period of personal data processing
The period for storing personal data has been set at 72 hours.
11) Transfer abroad
The controller does not transfer personal data to international organizations or third countries.
12) Automated decision-making, including profiling
Not performed.
13) Method of processing and protecting personal data
Personal data is processed by the controller. Processing is carried out by individual authorized and trained employees of the controller. Processing is carried out using computer technology in compliance with all security principles for the management and processing of personal data. To this end, the controller has taken technical and organizational measures to ensure the protection of personal data, in particular measures to prevent unauthorized or accidental access to personal data, its alteration, destruction or loss, unauthorized transfers, unauthorized processing, and other misuse of personal data.
14) Rights of data subjects
In accordance with Article 12 of the GDPR, we hereby inform you that every data subject has:
a) the right to access personal data and the following information:
the purpose of processing
the category of personal data concerned
the recipients or categories of recipients to whom the personal data have been or will be disclosed
the envisaged period for which the personal data will be stored
any available information on the source of the personal data
whether automated decision-making, including profiling, is taking place
b) the right to rectification
if you believe that the personal data we process about you is inaccurate or otherwise does not correspond to reality
c) the right to erasure
such requests can generally only be granted if the personal data in question:
we are not obliged to process it in order to fulfill our obligations under applicable law or a contract,
we no longer need the data to determine, exercise, or defend our legal claims,
after an objection to processing has been raised and we have found that our legitimate interest in processing this personal data has ceased to exist,
d) the right to restriction of processing, which can be exercised in particular in the following cases:
you contest the accuracy of the personal data processing,
the processing is unlawful, you refuse to have your personal data erased and instead request restriction of its use,
we no longer need the personal data for the purposes of processing, but you require it for the establishment, exercise, or defense of legal claims,
you have objected to the processing and it has not yet been verified whether our legitimate interests outweigh your interests or the fundamental rights and freedoms of the data subject.
e) the right to object
15) Further information on exercising rights in relation to the processing of personal data
Requests to exercise rights in relation to the processing of personal data are accepted:
in writing with an officially certified signature and delivered by post or in person to the controller's registry office,
in electronic form with a qualified electronic signature sent to info@momentumclinic.cz,
via a public data network from the applicant's data box to the controller's data box,
orally in a written record with the data protection officer.
You can exercise your right to correct personal data directly with our medical staff who provide you with healthcare services. In cases without verified identification, the applicant will be asked for additional verification.
If you discover or believe that your rights or the obligations stipulated by law have been violated by us or other entities processing personal data, you can seek redress using all means available to you under applicable law. If you are unable to enforce your rights in any other way, you may also contact or file a complaint with the supervisory authority, which is the Office for Personal Data Protection.
This statement is publicly available on the controller's website at https://www.momentumclinic.cz/.
In Brno on May 1, 2025