GDPR

PRIVACY NOTICE ON PERSONAL DATA PROCESSING ACTIVITIES

pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the ‘GDPR’)

1. Who processes your personal data?

The company that manages Your personal data:

PHOENIX Zdravotnícke zásobovanie, a.s.

Company ID: 34 142 941

Registered office: Pribylinská 2/A, 831 04 Bratislava

Registration: Commercial Register of the Municipal Court of Bratislava III, Section Sro, File No. 1300/B

(hereinafter referred to as the “Controller”)

The Controller operates the webpage thecircleoflifewithhiv.com (“Webpage”) and the services connected with the use of this webpage.

This Webpage is dedicated to the healthcare professionals (“HCP”) only and is not intended for the use of the general public.

2. What personal data do we process and why?

A) Webpage related services

The Webpage serves to the Controller as a platform for provision of certain services to the healthcare professionals.

These services consist of:

Registration to meetings - we will collect personal data from HCPs to register their participation to the relevant meeting/ event, including a confirmation that they are practicing HCPs, and also to arrange for their accommodation, hospitality and travel logistics with respect to their physical presence at the meetings and events they have registered for, whenever the case
access to Webcasts (educational content) which are being posted on the website in the dedicated section; the content of such webcasts is view only and cannot be downloaded. Such services include one-way communication only.

For the purpose of creating an user account to use the Webpage related services, operating and enabling the proper use of the Webpage and the services, we process certain data as follows:

your contact details (name and surname, and email address), country and specialization to create an account for you for the use of the Webpage related services,
name and surname, full titles, working institution, working function/role, town/city, country, mobile phone number, date of birth, number of your ID document or passport and its expiration date and nationality, food requirements, preferred way of travel, in order to organize your participation at the meetings and events (making reservations at the respective hotels, flights tickets, airport transfers, etc.)

Legal basis: fulfillment of contract

Your personal data are processed in connection to the services you related to the Webpage. The legal basis is Article 6 (1) (b) of GDPR: “processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.”

Registration is completed once confirmed by the processor. In case the registration is not confirmed, the personal data shall not be stored and shall be deleted. In addition, we may conduct Meeting surveys – wherein we will collect only anonymous one-site survey questionnaires with closed questions (no possibility to write free text), without collecting personal data from HCPs. While taking the surveys, we will for a limited time dispose with the information that you have taken part at the Meeting survey. Once the survey is submitted, the data that you have submitted survey will be immediately deleted. Participation at the Meeting surveys is strictly voluntary and by taking part at this anonymous survey you give a consent that for a very limited time we technically know that you decided to participate at the survey.

Legal basis: Consent

Your personal data are processed in connection to the surveys you choose to participate in. The legal basis is Article 6 (1) (a) of GDPR: “the data subject has given consent to the processing of his or her personal data for one or more specific purposes.”

B) Statistical and analytical evaluation

We may process anonymized data on the use of the Website for the purpose of evaluating the functioning and use of the Website by HCP. This data is statistical.

No personal data is processed for these purposes.

3. How long do we process your personal data?

Personal data provided to us are processed as follows:

registration data are processed for the entire period you decide to have the account opened on the Website.
registration data are used until the event or until you decide to cancel your registration, which you can do at any time. However, please be informed that, for the purpose of providing the required services (making reservations at the respective hotels, flights tickets, airport transfers, etc.), your personal data are further transferred to the agency and different retention periods may apply.
Personal data processed when participating in our surveys are instantly deleted once the survey is submitted.
Your data will be deleted and your account deactivated after three years of inactivity after your last log-in on the Website.

4. Who helps us process data?

Your personal data is also processed by our processors.

These are our business partners who assist us in the operation and administration of our Website and in connection of the provision of the services and may therefore process on our behalf and on our instructions some of your personal data that you entrust to us when using the Website. This processing is necessary to provide the services you requested from our Website.

Our processors as subcontractors include in particular:

SKI TRAVEL - PROEVENTS s.r.o.

registered office: 29. januára 677, 059 38 Štrba, Slovakia

Company ID: 44 361 297, which processes personal data in order to organize the events and your attendance to these events, as well as to provide administration of the Website. More information on how SKI TRAVEL - PROEVENTS s.r.o..

We may also transfer personal data to the extent necessary to third parties who process it on their own behalf and under their own responsibility; such entities include, in particular, the respective hotels, airlines etc.

Your personal data will not be transferred to third countries outside of Europe.

Your personal data will not be subject to automated decision-making or profiling.

5. Source of personal data

For the provision of the Webpage related servicers we obtain your personal data directly from you when you enter it into Website.

We also obtain some of the processed data from your device (mobile phone, tablet, PC) that you use to connect to our Website.

Providing your personal data for the purposes of the Website is entirely voluntary. However, failure to provide your personal data to its processing will result in the objective impossibility of providing you the services via Website.

6. What are your rights?

As a data subject under the GDPR, you have the right to:

a) withdraw your consent to the processing of your personal data at any time without affecting the lawfulness of the processing based on consent before its withdrawal;

b) to access your personal data and receive a copy of the data we process;

c) to rectify or complete incorrect or incomplete personal data concerning you;

d) restriction of the processing of personal data in accordance with Article 18 of the GDPR (e.g. if the data is incorrect or processed unlawfully and one of the cases provided for in the GDPR applies);

e) to obtain personal data concerning you that you have provided to the controller on consent or on a contract as legal base for the processing, in a structured, commonly used and machine-readable format and to transmit those data to another controller (so-called right to data portability), where technically feasible;

f) object to the processing of personal data based on the legitimate interest of the controller for reasons related to your specific situation;

g) request the erasure of personal data whose processing purpose has ended or in the cases specified in Article 17 of the GDPR.

If you believe that your rights have been violated in connection with the processing of your personal data, you have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, website: https://www.dataprotection.gov.sk/uoou/ or to the data protection authority in the Member State of your habitual residence or place of work.

7. How to exercise your rights under the GDPR?

If you have any questions regarding the processing of your personal data or if you wish to exercise your rights, you can contact the controller at any time:

a) by email at: dpo@phoenix.sk

b) in writing to our registered office address above.