Data deletion

You have the right to ask us to delete your personal data under Article 17 GDPR. The request is free of charge and you do not have to give a reason. This page explains how to make it and what to expect from us.

How to request deletion

1. 01Write to usSend your request to info@ginnova.cz with the subject “Personal data deletion request”. You can also use data box jqu9asj, a letter to Zenklova 340/22, 180 00 Prague 8, Czech Republic, or hand the request in at reception.
2. 02Tell us who it concernsGive your name and surname and the contact you used with us — phone number, e-mail, or the name of your Facebook or Instagram profile. If you only want part of your data deleted, say which; otherwise we will act on the request in full.
3. 03We verify your identitySo that we do not delete the wrong person’s data, we may ask for additional verification. Registered patients are verified through the Medevio app or in person at reception; for a request from a social network we will ask for confirmation from an e-mail address or phone number.
4. 04We get back to youWe deal with the request without undue delay and within one month of receipt at the latest. In complex cases we may extend that by a further two months — we will tell you about the extension and its reason within the first month. We confirm the outcome to the contact you wrote from.

What we delete

• Contact details held outside the medical records — in our address book, reception notes or the booking system.
• The content of communication — e-mails, contact form messages, and social network and WhatsApp messages we no longer need.
• Data processed on the basis of consent — photographs beyond the medical records, testimonials and newsletter contacts.
• Booking records and cancelled reservations where the reason for keeping them has passed.

What we cannot delete

The right to erasure does not extend to some data. This is data the law requires us to keep, or that we need to defend legal claims. In these cases the right to erasure is excluded by Article 17(3) GDPR.

• Medical records — kept under Act No. 372/2011 Coll., on health services, for the period set by Decree No. 98/2012 Coll. For a registering gynecological practice this is usually 10 years.
• Accounting and tax documents — 10 years under the Accounting Act and the VAT Act.
• Records of care billed to your health insurance company.
• Data needed to establish, exercise or defend legal claims — for the limitation period.

Where deletion is not possible we will explain why and which specific data it concerns. We restrict such data to the minimum necessary and use it for nothing other than meeting that obligation.

Data from Facebook and Instagram

If you wrote to us through the clinic’s Facebook or Instagram profile or on WhatsApp, we will delete the conversation on our side along with any contact details we noted from it. Just tell us the profile name or phone number you wrote from.

Data held about you directly by Meta Platforms Ireland Limited as the network operator — your account, activity history, ad preferences — is not available to us and we cannot delete it. You manage it in your own account settings.

Withdrawing consent

You can withdraw consent to processing — for a photograph beyond the medical records, say, or for our newsletter — at any time, by the same route as a deletion request. Withdrawal does not affect the lawfulness of processing carried out beforehand. Neither withholding nor withdrawing consent has any effect on the care you receive.

If you disagree with the outcome

If you are not satisfied with how we handled your request, get back to us — we will explain our reasons and look for a solution. You can also lodge a complaint at any time with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, posta@uoou.gov.cz.