Information on Personal Data Processing
Provision of Health Services
By this document, we as the controller of personal data – company Škoda Auto a.s., tř. Václava Klementa 869, 293 01, Mladá Boleslav, Identification No.: 00177041, registered in the Register of companies kept by the Municipal Court of Prague under section B file No. 332 (hereafter referred to as “company Škoda Auto“) – provide information on the personal data processing and your rights related to this processing.
The processing of personal data includes following activities: Provision of health services
Provision of health services
Purpose of the processing:
Implementation of health and preventive care
Description of the purpose of processing:
We use your personal data for the purposes of setting up and maintaining medical records and performing medical procedures such as examinations, vaccinations, etc. We also use your personal information to prepare reports, applications and assessments.
Legal basis of the processing:
We process your personal data because it is necessary for the purposes of preventive and occupational medicine, for the assessment of an employee's ability to work, medical diagnosis, provision of health care or treatment.
Categories of the personal data we process:
Identification data
Contact information
Birth registration no.
Descriptive data
Data about family and other persons
Health data
Physical characteristics
Psychological characteristics
Data on performance of work activity
Other identification and contact data of the employee
Processing and archiving period:
We will use your personal data when providing care and will also archive it in accordance with health and other regulations.
Categories of data processors or recipients to whom we may provide the personal data:
External doctors
Rehabilitation service providers
External laboratories
Upon request, your personal data may be provided to public authorities, in particular to the National Institute of Public Health, Regional Public Health Stations for the Central Bohemia and Hradec Kralove Region, courts, the Police of the Czech Republic and other law enforcement authorities to the extent necessary and within the limits of the law. The transfer of your personal data may also occur in the event of an investigation of occupational disease, death, malpractice or other cases at the request of a court or executive authorities, to the extent necessary and within the limits of the law.
Source of the personal data:
Directly from you.
Transfers of personal data to third countries or supranational organisations:
As part of the above-mentioned processing, your personal data will not be transferred to any third country or any multinational company.
Automated decision-making based on the personal data:
During this personal data processing, automated decision-making based on the personal data does not occur.
Other information:
Personal data may be archived in the public interest and used for scientific, historical or statistical research purposes. In well-founded cases the personal data can also be the subject of the processing for the purposes of legal matters resolution, including the performance of obligations towards the public administration bodies and monitoring and ongoing evaluation of legal risks.
Archiving
Purpose of the processing:
Archiving in accordance with health and other regulations
Description of the purpose of processing:
Your medical records, including sensitive data about your health, are archived in accordance with the legal regulations governing the obligation to archive medical records.
Legal basis of the processing:
We must carry out the processing to comply with the obligation imposed on us by the legislation. The provision of the data is a legal requirement and failure to provide it may mean a breach of the law.
Categories of the personal data we process:
Identification data
Birth registration no.
Descriptive data
Data about family and other persons
Health data
Physical characteristics
Psychological characteristics
Processing and archiving period:
We will archive your medical records for as long as we are required to do so by applicable and effective law. This period depends in particular on the type of care provided.
Categories of data processors or recipients to whom we may provide the personal data:
Upon request, your personal data can be provided to public authorities, in particular to courts, the Police of the Czech Republic and other law enforcement agencies to the necessary extent and within the boundaries of law.
Source of the personal data:
Directly from you.
Transfers of personal data to third countries or supranational organisations:
As part of the above-mentioned processing, your personal data will not be transferred to any third country or any multinational company.
Automated decision-making based on the personal data:
During this personal data processing, automated decision-making based on the personal data does not occur.
Other information:
Personal data may be archived in the public interest and used for scientific, historical or statistical research purposes. In well-founded cases the personal data can also be the subject of the processing for the purposes of legal matters resolution, including the performance of obligations towards the public administration bodies and monitoring and ongoing evaluation of legal risks.
ŠkoFit
Purpose of the processing:
Registration of the ŠkoFit project members
Description of the purpose of processing:
Registration of new members to the ŠkoFit project in order to inform members about upcoming sporting events, challenges and lectures. Processing of statistics.
Legal basis of the processing:
The processing is based on the consent you have given us. We need to keep your personal data in order to provide you with a quality service, to process statistics and to inform you about all upcoming events related to the ŠkoFit project.
Categories of the personal data we process:
Identification data
Contact information
Descriptive data
Processing and archiving period:
Your personal data will be processed and archived until your account is deleted.
Categories of data processors or recipients to whom we may provide the personal data:
Upon request, your personal data can be provided to public authorities, in particular to courts, the Police of the Czech Republic and other law enforcement agencies to the necessary extent and within the boundaries of law.
Source of the personal data:
Directly from you.
Transfers of personal data to third countries or supranational organisations:
As part of the above-mentioned processing, your personal data will not be transferred to any third country or any multinational company.
Automated decision-making based on the personal data:
During this personal data processing, automated decision-making based on the personal data does not occur.
Other information:
Personal data may be archived in the public interest and used for scientific, historical or statistical research purposes. In well-founded cases the personal data can also be the subject of the processing for the purposes of legal matters resolution, including the performance of obligations towards the public administration bodies and monitoring and ongoing evaluation of legal risks.
What are your rights?
As a part of the personal data processing, you have the following right:
Access to processed personal data.
Revocation of consent to the personal data processing.
Correction of incorrect, inaccurate or incomplete personal data.
Erasure of personal data in case of purpose legal basis termination or in case of unlawful processing.
Restriction of data processing.
Extract of your personal data in a machine-readable format for yourself, or for another controller.
Object to data processing, if you believe that processing of personal data is unlawful.
Not to be subject of automated decision-making.
How you can exercise your rights?
For the inquiries related to the personal data protection and processing, use the following communication channels:
In connection with the exercise of your rights, Škoda Auto may charge a reasonable fee taking into account the administrative costs for the processing when requests from a data subject are apparently unfounded or excessive.
By mail:
Škoda Auto a.s.
Data Protection Office
tř. Václava Klementa 869
Mladá Boleslav II
293 01 Mladá Boleslav
Data Protection Officer
For questions regarding the personal data protection, you can contact directly the Data Protection Officer (DPO) of Škoda Auto.
http://poliklinika.skoda-auto.cz/osobni-udaje
dpo@skoda-auto.cz
Lodging a Complaint
In case you disagree with the way Škoda Auto processes or handles your personal data, you can lodge a complaint with the Data Protection Officer (DPO) of Škoda Auto or a supervisory authority to protect your rights.
Office for Personal Data Protection
Pplk. Sochora 27
170 00 Praha 7
+420 234 665 111
http://www.uoou.cz/