An explanation of what personal data we process about you, for what purpose, how long we retain it, and what rights you have in relation to that data.
The controller of personal data is YK Clinic s. r. o., with its registered office at Tolstého 5, 811 06 Bratislava – Staré Mesto, Company ID (IČO) 57 593 418. This notice applies to citizens and persons residing in the European Economic Area and in Switzerland. It explains what we do with data we obtain about you through the website ykclinic.eu and in connection with the provision of healthcare.
When processing personal data, we comply with the requirements of the GDPR and Act No. 18/2018 Coll. on the Protection of Personal Data. This means, among other things, that we:
If you have questions or wish to know exactly what data we hold about you, contact us.
We collect or receive personal data for several purposes related to the provision of healthcare and the operation of the practice. Click to expand the details.
Why: so that we can book you an appointment, confirm it, and answer your questions — by phone, email, or via the booking form on the website.
What data: first name and surname, telephone number, email address, selected service, preferred date and time, and the text of your message.
Legal basis: performance of a contract or steps prior to entering into a contract (Art. 6(1)(b) GDPR) and legitimate interest in handling your enquiry (Art. 6(1)(f) GDPR).
How long: we retain messages and enquiries for a maximum of 2 years from the last communication. If you become a patient, the data are transferred to the medical records and the retention periods under point 1.2 apply.
Why: so that we can provide gynecological, aesthetic, or infusion care and keep the documentation prescribed by law.
What data: identification data including birth number (rodné číslo), contact details, health insurance details, medical history, examination results, diagnoses, procedures performed, prescribed treatment, and image documentation.
Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR) and the provision of healthcare (Art. 9(2)(h) GDPR) in conjunction with Act No. 576/2004 Coll. on Healthcare and Act No. 578/2004 Coll.
How long: pursuant to Act No. 576/2004 Coll. — as a rule 20 years after the last provision of healthcare; for certain types of documentation otherwise. We cannot shorten this period even at your request.
Why: so that we can issue a document for services provided and fulfil tax and accounting obligations.
What data: first name and surname, billing address, details of the service provided and its price, and payment details.
Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).
How long: 10 years pursuant to the Accounting Act and the Value Added Tax Act.
Why: so that we know which parts of the website are useful for visitors and can improve them.
What data: truncated IP address, device and browser type, pages visited, time spent on the site, and referral source.
Legal basis: your consent given via the cookie banner (Art. 6(1)(a) GDPR). Without consent, statistical cookies are not activated.
How long: a maximum of 26 months, after which the data are automatically deleted.
Why: so that we can inform you about new services, promotions, or changes to consulting hours — if you have expressed interest.
What data: name and email address, and optionally a telephone number.
Legal basis: your consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time — via the unsubscribe link in the email or by writing to our email address.
How long: until consent is withdrawn, but for a maximum of 3 years from the date it was given.
Data concerning your health fall under Article 9 GDPR among the special categories of personal data. We process them exclusively for the purposes of preventive and occupational medicine, medical diagnosis, and the provision of healthcare, under a duty of confidentiality pursuant to Section 80 of Act No. 578/2004 Coll.
We never use these data for marketing purposes and do not disclose them to third parties beyond what is required by law or for which you have given explicit consent. Access is limited to healthcare staff who need it to perform their work.
This website uses cookies. Necessary cookies ensure the basic functionality of the site and are always activated. Statistical and marketing cookies are activated only with your consent, which you grant via the cookie banner and may change or withdraw at any time.
We disclose personal data to third parties only when required by law or a court order, or in response to a law-enforcement authority to the extent permitted by law.
We have entered into a data processing agreement with Google. Google may not use these data for any of its other services, and the inclusion of full IP addresses is blocked.
If the website or the practice were transferred to another controller, your data may be provided to advisers and any prospective acquirer and handed over to the new owner. We will inform you of such a change in advance.
We adopt appropriate technical and organisational measures to limit misuse of and unauthorised access to personal data. This means that only persons who need the data have access to them, access is protected, and security measures are regularly reviewed. Medical records are kept in a locked area, electronic records are password-protected, and data transmission via the website is encrypted using the HTTPS protocol.
This notice does not apply to third-party websites linked from this site — for example Instagram. We cannot guarantee that those third parties will handle your personal data reliably and securely. Please read their own privacy notices before using them.
We reserve the right to amend this notice. We recommend that you review it from time to time so that you remain informed of any changes. In the event of a material change, we will actively inform you.
If you have questions or wish to know what personal data we hold about you, contact us using the details below. You have the following rights:
Always clearly state who you are so that we can be sure we do not alter or erase the data of the wrong person. We will respond to a request within one month at the latest.
With regard to medical records, the right to erasure is limited — their retention is required by law and we cannot erase them before the statutory period has expired.
If you are not satisfied with the way we process your personal data, you have the right to lodge a complaint with the supervisory authority:
Have a question about the processing of your data? Write to us — we will be happy to answer.