Respecting the privacy of those who have entrusted us with their personal data, we present this Privacy Policy of United Clinics Sp. z o.o. It will provide you with an easy and accessible way to learn how we process your personal data.
In accordance with the General Data Protection Regulation of April 27, 2016. (GDPR), the Administrator of your personal data is United Clinics Services Sp. z o.o., headquartered in Warsaw at 28 Towarowa Street, 00-839 Warsaw (hereinafter referred to as Administrator or United).
For all matters related to the processing of your personal data, you may contact the Administrator's designated Data Protection Officer by writing to the e-mail address iod@utdclinics.com.
Depending on the relationship you have with us, we may process your personal data for different purposes. Below you will find detailed information on this subject with a breakdown of the dependencies between you and us.
If you are a candidate for an employee or associate of United or one of United's equity affiliates, we process your personal data to the extent necessary for the recruitment process and for the purpose of the recruitment process. This data includes your name, date of birth, contact information and information about your education, professional qualifications and previous employment history. We process these data because they are necessary to conclude a contract with you (legal basis Article 6 sec. 1, b GDPR). Provision of this data is necessary to start the recruitment process.
Other personal data you provide to us in your resume or cover letter, such as information about your linguistic skills or interests, we process on the basis of your consent (legal basis Article 6 sec. 1, a GDPR). Their provision is voluntary. Accordingly, please add the following clause in the recruitment documents you send us (resume, e-mail containing your resume or otherwise): I consent to the processing by United Clinics Services Sp. z o.o., based in Warsaw, Poland, and companies affiliated by equity with United, of my personal data contained in this document/application for the purpose of recruitment by United. I have been informed that I may withdraw my consent at any time and that withdrawal will not affect the legality of processing prior to withdrawal.
If you want us to consider your candidacy also for other recruitment processes, add an additional sentence: I also agree to the processing of my personal data for the purposes of future recruitment processes.We process your personal data for the time necessary to conduct the recruitment, no longer than for a period of 6 months, unless you have agreed to processing also for the purposes of conducting future recruitment processes.
If you are an employee of United or you are a party to a cooperation agreement or a similar civil law relationship, we process your personal data in accordance with the requirements of the provisions of the Labor Code Act of June 26, 1974, in the concluded employment contract and other documents signed during the course of your employment or to the extent necessary for the performance of the civil law contract concluded with you and for the other processing purposes listed below:
• for the performance of the employment contract or civil law contract concluded with you (Article 6 sec. 1, b GDPR) for the duration of the contract, and after its termination for the period after which claims under the contract become time barred. In addition, if you participate in the production of videos, photo and image sessions, multimedia presentations, training and integration meetings, etc., your name, image, voice and/or statements may be used by the Administrator free of charge and repeatedly (unlimited in quantity and territory) for the duration of the concluded contract and for a period of 10 years from the date of termination of this contract;
• for archival and evidentiary purposes in the event of a legal need to prove facts, in particular in the context of complaint, court and administrative proceedings (Article 6 sec. 1, f GDPR), for the duration of the contract concluded with United and, after its termination, for the period after which claims under the contract become time-barred;
• for archival purposes concerning settlements of wages due to you under the concluded employment contract or civil law contract and tax settlements resulting from the law (Article 6 sec. 1, c GDPR), for the duration of the contract and for 10 years from the end of the calendar year in which you terminated your employment with United;
- for the purpose of reporting, updating and deleting your data to the Social Insurance Institution and the settlement of social insurance contributions (Art. 6 sec. 1, c GDPR), for the duration of the contract and for 10 years from the end of the calendar year in which you terminated your employment with United.
Provision of personal data is voluntary, but it is a condition for the conclusion of an employment contract or a civil law contract, as failure to provide it prevents the conclusion of the contracts in question with you.
If you are a person contacted by the Administrator for a business purpose, or if you are a person who contacts the Administrator for the purpose of soliciting or making an offer of cooperation to the Administrator, or for any other business purpose, United will process your personal data for the purpose of business correspondence, to the extent identical to the content of that correspondence, including, in particular, your name, your business e-mail address and telephone number (if provided), and your business position (Article 6 sec. 1, f GDPR). Processing will take place for the duration of the correspondence - until its purpose has been achieved - and after its termination for the period after which any claims that may arise from it are barred. Provision of personal data is voluntary but is a prerequisite for correspondence.
If you are a person representing the Administrator's business partner in dealing with the Administrator or in signing a contract with the Administrator, or if you are a person indicated by the business partner in the content of the concluded contract for contact, the Administrator processes your personal data in order to perform the contract concluded with the business partner. The scope of the processed data does not go beyond those provided in the contract or business correspondence and includes, in particular, your name, business email address and telephone number (if provided), and business position (Article 6 sec. 1, b GDPR). Processing will take place for the duration of the contract and, after its termination, for the period after which any claims that may arise therefrom are barred.
When you use United's social network profiles, you share with us your personal information that corresponds to the consents you have given to the social network administrators and the levels at which your profiles are completed and made public, such as your name, nickname, image, ID number, email address and others, by interacting with our profiles and the content we publish. On the other hand, if you are a user of our websites, cookies are placed automatically on your device you use to browse the pages. They are safe for your device and, in particular, do not pose a risk of downloading unwanted/malicious software to your device or getting viruses. For detailed information on the processing of your personal data in connection with your use of United's social media pages and cookies, please visit our website in the Cookies Policy.
In accordance with the provisions of the GDPR, we guarantee you the following rights in connection with the processing of your personal data:
• access to data - you have the opportunity to receive full information about whether, what and how we process your personal data, including receiving a copy of the data we process that concerns you;
• correction (rectification) of data - you can request immediate correction of your personal data that is incorrect and completion of incomplete personal data;
• deletion of data (being forgotten) - you have the right to request the deletion of your personal data from our datasets and those of other controllers of your personal data;
• limitation of processing - you can request the limitation of the processing of your personal data in relation to the amount to the purposes of processing or the time of processing;
• transfer of personal data - you have the right to request to receive in a structured, commonly used machine-readable format your personal data and to have it sent to another controller.
If we process your personal data based on your consent, you may withdraw it at any time. At the same time, this action will not affect the lawfulness of the processing that took place before the withdrawal.
If our processing of your data is based on our legitimate interests, you can object to our processing of your data at any time. Then, after considering your request, we will not be able to process your data about which you have made an objection, unless we can demonstrate that we have a valid legitimate interest in processing your personal data that is legally deemed to override your interests, rights and freedoms, or if we have grounds to establish, assert or defend against claims.
You can submit a request to exercise your rights by writing to iod@utdclinics.com.
The application should include data that will allow us to uniquely identify you - at least your name and additional data such as your phone number, email address or date of birth. You should also unambiguously specify which right you want to exercise. We will try to fulfill your request promptly, no later than within 30 days of its correct submission (along with identification data).
In connection with the processing of your personal data, you have the right to lodge a complaint to the supervisory authority, which in Poland is the President of the Office for Personal Data Protection, 2 Stawki Street, 00-193 Warsaw, e-mail: kancelaria@uodo.gov.pl, tel. 22 531-03-00.
The nature of the processing of personal data includes collecting, capturing, organizing, structuring, storing, adapting or modifying, downloading, viewing, using, disclosing by sending, distributing or otherwise making available, matching or combining, limiting, deleting and destroying.
We share your personal data with our employees and associates to the extent necessary to fulfill the accepted purposes of processing.
To the extent necessary to achieve the purposes of processing, we may share your personal data with entities with whom we cooperate in providing services related to our operations, e.g., providers of medical record-keeping systems, entities providing accounting, human resources, legal services to us, etc.
If you are participating in a recruitment process for one of our affiliated companies, we may share your personal information with that company.
Recipients of your personal data may also be:
• authorized authorities, for example: national tax administration authorities, Social Security, inspection authorities;
• other entities, if you have given separate consent.
Your personal data will not be subjected to profiling by us and will not be used by us to make automated decisions.
The Administrator will not transfer your personal data outside the European Economic Area (which includes the European Union, Norway, Liechtenstein and Iceland) or to international organizations.