GDPR

INFORMATION FOR PATIENTS ON THE PROCESSING OF PERSONAL DATA

According to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR) and Act No. 127/2005 Coll., on Electronic Communications and on Amendments to Certain Related Acts, as amended.

I. Data Controller

The controller of your personal data is the Czech company:

Gynvivus s.r.o.
Company ID: 073 45 500
Registered office: Ke kříži 1610/16, Prague 22 Uhříněves, Czech Republic

The controller provides healthcare services in accordance with Act No. 372/2011 Coll. on Health Services and Conditions of Their Provision, as amended.

II. Purposes of personal data processing

Your personal data are processed for the following purposes:

• provision of healthcare services
• reporting reimbursed healthcare services to health insurance companies
• billing of non-reimbursed healthcare services
• providing information about your health condition to you and other authorized persons
• organization of healthcare services (patient appointments)
• keeping records of income, expenses, payments received and accounting obligations

III. Legal basis for processing personal data

The legal basis for processing your personal data is:

• compliance with legal obligations (in particular Act No. 372/2011 Coll. on Health Services, Act No. 48/1997 Coll. on Public Health Insurance, Act No. 563/1991 Coll. on Accounting, Act No. 586/1992 Coll. on Income Taxes, and Act No. 634/1992 Coll. on Consumer Protection)
• performance of obligations arising from the healthcare contract under which we provide healthcare services (this contract does not have to be concluded in writing)

IV. Recipients of personal data

Recipients of your personal data may include healthcare providers, public authorities and persons authorized to access medical documentation pursuant to Sections 31, 32, 33 and 65 of Act No. 372/2011 Coll. on Health Services.

Personal data may also be processed by processors on the basis of data processing agreements concluded in accordance with GDPR.

Your personal data are not transferred outside the European Union.

V. Period of personal data processing

Personal data contained in medical records are processed for the period specified by Decree No. 444/2024 Coll. on Medical Documentation.

Personal data processed for other purposes are processed for the period required by law or for the duration of your status as our patient and for one year thereafter.

VI. Rights of the data subject

You have the following rights regarding the processing of your personal data:

• the right to request access to your personal data
• the right to rectification of your personal data
• the right to restriction of processing
• the right to erasure of personal data (except for data in medical documentation)
• the right to data portability
• the right to lodge a complaint with a supervisory authority

In the Czech Republic the supervisory authority is:

Office for Personal Data Protection
Pplk. Sochora 27
170 00 Prague 7
www.uoou.cz

VII. Right to object

If your personal data are processed on the basis of legitimate interests, you have the right to object to such processing at any time.

If you raise an objection, we may continue processing only if we demonstrate compelling legitimate grounds that override your rights and freedoms or if processing is necessary for legal claims.

VIII. Mandatory provision of personal data

Processing personal data for the purpose of providing healthcare services is a legal requirement. Failure to provide personal data may result in the inability to provide healthcare services and may endanger your health or life.

IX. Cookies used on www.gynvivus.cz

When operating our website www.gynvivus.cz, we respect your privacy and the integrity of your devices. Our website uses cookies which may contain information about your device or website usage.

Cookies are small text files stored on your device during a website visit. They help ensure proper website functionality, remember settings, and collect anonymous statistics about website usage.

Categories of cookies

• Necessary cookies – essential for proper functioning of the website.
• Analytical cookies – help us understand how visitors use the website.

Cookies used

Cookie: cconsent
Purpose: stores cookie consent status
Validity: 1 year

Cookies: rc::a, rc::c
Provider: Google LLC
Purpose: protection of forms via Google reCAPTCHA

Cookies: _ga, _gid, _gat
Provider: Google LLC
Purpose: analytics via Google Analytics

Google Analytics uses IP anonymization. More information: https://policies.google.com/privacy

X. Effectiveness

We reserve the right to update this information at any time. Updates become effective upon publication on our website.

This information was last updated in 2026.