01General information
Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR), Sabjanics Medical Korlátolt Felelősségű Társaság (Sabjanics Medical Kft.) (registered office: 1065 Budapest, Révay utca 6. Fsz. 7. ajtó; tax number: 32525485-2-42; company registration number: 01-09-442824; represented by: András Sabjanics, managing director; hereinafter: Data Controller) provides data subjects with the following information on the processing of personal data.
The Controller processes personal data for purposes arising from its operations, in particular in providing healthcare services, in order to contact patients, in order to record data subjects' data in meeting its statutory duties, for document-handling processes linked to the Controller's operations and for invoicing, and in order to perform its duties under the healthcare services contract (hereinafter: the Contract).
The Controller collects and processes personal data only in accordance with the law. While operating the website, it processes personal data given on the contact form, or sent to the email address stated there (name, email address, telephone number), so that it can give suitable information and services to people who visit the site. The Controller states that it processes personal data as set out in the privacy notice and complies with the applicable legislation.
The Controller processes only personal data that are essential for the purpose of the processing to be achieved and that are fit for that purpose. It processes personal data only to the extent and for the time needed to achieve the purpose. The Controller protects the personal data it processes in every way that can reasonably be expected.
The Data Controller: Sabjanics Medical Korlátolt Felelősségű Társaság (Sabjanics Medical Kft.) Address of the Data Controller: 1065 Budapest, Révay utca 6. Fsz. 7. ajtó Contact details of the Data Controller: email: andras@sabjanicsmedical.com
Legal basis for processing: The legal basis for processing is the consent of the data subject and compliance with a legal obligation to which the controller is subject [GDPR Article 6(1)(a) and (c)]; furthermore, under Section 5(1)(b) of Act CXII of 2011 (Infotv., the Hungarian Act on Informational Self-Determination and Freedom of Information), processing is necessary for the performance of tasks assigned to the controller by law.
Consent to processing: When concluding the contract, the contracting party expressly consents to the processing and transfer of the personal data they provide voluntarily.
Data subjects: Patients (contracting parties). Data subjects also include visitors to the website who provide personal data in order to make contact. The retention period always depends on the specific purpose, but data are erased without delay once the original purpose has been fulfilled.
Consent may be withdrawn at any time by a request sent to the contact email address. If there is no legal bar to erasure, the data are erased.
Providing the data above is necessary for contact, entering into a contract, providing a healthcare service and invoicing.
The data subject may ask the Controller for access to personal data concerning them, for their rectification or erasure, or for restriction of their processing, may object to the processing of such personal data, and may exercise the right to data portability.
| CATEGORIES OF DATA PROCESSED | PURPOSE OF PROCESSING |
| Name of the natural person / company name | Contact, entering into a contract, performance of the engagement, invoicing |
| Place and date of birth | Administration, identification, contact |
| Mother's name | Administration, identification, entering into a contract, performance of the engagement |
| Permanent address / place of residence / registered office | Administration, identification, entering into a contract, performance of the engagement, invoicing |
| Contact, administration, invoicing | |
| Telephone number | Contact |
| Identity card or passport number / registration number in the case of a legal person | Meeting the statutory duty of identification |
| Tax number and/or EU VAT number, tax identification code | Administration, identification, entering into a contract, performance of the engagement, invoicing |
| Bank account number | Invoicing, refunds, administration |
| Personal identification code | Administration, identification, entering into a contract, performance of the engagement |
| Name of the legal representative | Contact, entering into a contract, performance of the engagement, invoicing |
The data subject may withdraw consent to processing at any time, but this does not affect the lawfulness of processing based on consent before the withdrawal.
Retention period: for the duration of the contractual relationship plus 5 years, or the statutory retention period for medical records.
How data are stored: electronically and on paper.
The Controller stores data subjects' personal data on paper and electronically, and their financial data only electronically, in closed systems used in its operations. Confidentiality duties and IT security measures ensure that the data are kept securely.
02Principles of processing
Principle of purpose limitation: The Data Controller processes personal data lawfully and only for specified purposes.
Principle of data minimisation: Only the data needed to achieve the purpose are processed, and data sets are reviewed regularly.
Principle of accuracy (data quality): The data processed are kept up to date; inaccurate data are corrected or erased.
Principle of storage limitation: Personal data are processed only for as long as necessary, until the purpose is fulfilled.
Rights of the data subject:
- withdrawal of consent at any time
- request for access to their personal data
- request for rectification, erasure or blocking
- objection to processing
- request to restrict processing
- request for the transfer of data
Submitting requests:
- email: andras@sabjanicsmedical.com
- by post: 1065 Budapest, Révay utca 6. Fsz. 7.
03Processing linked to operation of the website
Website operator: Name: E-LAB Marketing Agency – Abel Gyorgy Autonomo Registered office: Spain, 46006 Valencia, Calle Centelles 32. Phone: +34 657 833 250
Purpose of processing: making contact, providing information, presenting our services. Legal basis: the consent of the data subject. Data processed: name, email address, phone number, appointment time, content of the message. Retention period: until the purpose of the contact is fulfilled, or until erasure at the data subject’s request.
Use of cookies: The website uses cookies that are essential for it to work. Their purpose is to ensure the website functions, to support statistical analysis and to improve the user experience.
Data collected by cookies: unique identifier, time of visit, IP address, browser type, operating system details. Retention period: 365 days from the last visit.
Google Analytics: The website uses Google Analytics to analyse visitor traffic. The measured data are anonymised before being transferred to and stored on servers in the USA. IP addresses are anonymised within the EU.
Social media: Sabjanics Medical Kft. can be found on Facebook, Instagram and TikTok.
Purpose of processing: sharing information, promotion, providing a way to reach us. Data processed: the user’s public profile data (name, profile picture). Legal basis: the voluntary consent of the data subject. Retention period: according to the rules of the social platform.
Data transfer: Sabjanics Medical Kft. transfers data to third parties lawfully and solely for the purposes of processing, for example to health authorities, to its accountant, or under a legal obligation.
Transfers abroad: Personal data are transferred to a third country only if the data subject has expressly consented, or if the transfer takes place with appropriate safeguards and an adequate level of personal data protection is ensured in that country.
04Closing provisions
If the data subject's rights are infringed, or in the case of a comment, a complaint may be made at the contact details below, and the competent authorities may be contacted:
- Competent court
- National Authority for Data Protection and Freedom of Information (NAIH): H-1530 Budapest, Pf.: 5., address: 1125 Budapest, Szilágyi Erzsébet fasor 22/C.
- Sabjanics Medical Korlátolt Felelősségű Társaság (Sabjanics Medical Kft.): 1065 Budapest, Révay utca 6. Fsz. 7. ajtó; email: andras@sabjanicsmedical.com
This Notice is available on the Provider's website and at its registered office. By use of the service, the Notice forms an inseparable annex to the Contract and the General Terms and Conditions.
05Definitions
GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data.
Personal data: Any information relating to an identified or identifiable natural person.
Special category data: Personal data relating, for example, to health, sex life or political opinions.
Data controller: The natural or legal person who determines the purposes and means of processing.
Data processor: A natural or legal person who processes personal data on behalf of the controller.
Data processing: Any operation performed on data, such as collection, storage, alteration, transfer or erasure.
Recipient: The person to whom personal data are disclosed.
Data transfer: Making data available to a specified third party.
Data of public interest: Data generated in the course of the duties of a state or local government body that do not qualify as personal data.