Principles of personal data processing and principles of use
of the website www.uhealy.com
This policy is valid and effective from the 1st of January, 2024.
These policies govern the terms of personal data processing and use of the www.uhealy.com website operated by the company
Uhealy online s.r.o.
CIN: 19164041
With registered office at Korunní 2569/108, Vinohrady, 101 00 Prague 10, Czech Republic
Registered at the Municipal Court in Prague under file no. C 382388
Contact electronic address: help@uhealy.com,
(hereinafter referred to as "Provider")
Contact electronic address of the Provider:
Address for delivery of Uhealy online s.r.o.: Korunní 2569/108, Vinohrady, 101 00 Prague 10, Czech Republic
e-mail: help@uhealy.com
(hereinafter referred to as "Contact address")
1. Introductory provisions
1.1. The principles of personal data processing and the principles of use of the website (hereinafter referred to as the "Policies") define and specify the basic rights and obligations of the Provider, the Customer and the Visitors, especially in the area of personal data protection and other issues when using the Provider's web interface, on the website www.uhealy.com, in the Provider's applications and internal systems (each of them hereinafter referred to as "web interface"). By visiting the web interface, providing consent by ticking the relevant button, transferring such consent to the Provider from the Customer or possibly sending a request or question on the web interface, using it or using the services and products of the Provider, the Person confirms that the Person has familiarized themselves with these principles and agrees with them and wants to be bound by them.
1.2. The Customer is a legal entity or a natural person who has concluded any contract with the Provider, regardless of the form. Customer also refers to natural persons who perform activities as employees of the Customer or otherwise cooperate with the Customer. The Provider is obliged to request the consent of the Customer´s customers, employees, cooperating persons and other persons who are natural persons whose data must be used (processed) by the Provider in the performance of the contract or are related to the performance of the contract with the Provider, to process their personal data. This consent remains valid for the entire duration of the contract between the Customer and the Provider. Wherever there is talk of the need for the consent of natural persons to the processing of personal data in connection with the contract, the Customer undertakes to obtain such consent and keep it valid as per this paragraph. The Customer expressly declares that the Customer has all such consents in accordance with the legislation and that the Customer complies with the applicable legislation when transferring or making personal data available to the Provider.
1.3. The Visitor is any natural or legal person who visits any web interface of the Provider, contacts the Provider in any way, or visits an establishment or event (e.g. a lecture) of the Provider. By accepting an order or offer of services or concluding an individual contract, regardless of its form, the Visitor becomes the Customer.
1.4. Where the Provider is referred to in these Principles, it also refers to the persons who are employees and cooperating third parties of the Provider.
2. Submission of questions, requests and contact with the Provider
2.1. When using the web interface, the Visitor is obliged to provide all data correctly and truthfully. If the Visitor submits a question, request or establishes any other contact with the Provider, the Visitor is obliged to provide true personal data during any contact, to announce that the Visitor is a person acting on behalf of some person or that another person is acting on behalf of the Visitor, or to announce that there has been a change in personal data and the Visitor is obliged to update these without delay. The data provided by the Visitor is considered by the Provider to be correct and up to date. These obligations also accrue to the Customer.
2.2. Both the Visitor and the Customer acknowledge that the web interface may not be available continuously, especially with regard to the necessary maintenance of the Provider's hardware and software equipment, or necessary maintenance of hardware and software equipment of third parties.
2.3. The Provider is not responsible to the Person for any loss directly or indirectly related to the loss or damage of data.
3. Protection of personal data
3.1. Protection of personal data of the Customer, Visitor or any other person whose personal data was provided directly by this person to the Provider or was provided by a cooperating person of the Provider, meaning particular personal data for the purpose of or in connection with the performance of any contract with the Provider or the provision of another service by the Provider in connection with the contract (hereinafter referred to as the "Person", who is a natural person) is provided by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and on the repeal of the Directive 95/46 EC (hereinafter referred to as "GDPR"), the Provider's internal regulations, physical, hardware and software security and relevant legal regulations.
3.2. The Provider collects and processes the following personal data of the Person, if the Person is a natural person, to the following extent:
· name and surname
· home address
· invoicing address, if it is different from the home address
· telephone number
· e-mail address
· health problem description
In the case of health professionals:
· name and surname
· address of residence
· invoicing address, if it is different from the address of residence
· identification number
· tax identification number, if assigned
· telephone number
· e-mail address
· educational background
· former work experience.
3.3. If, under exceptional circumstances, the Provider is provided with personal data that is classified as particularly sensitive according to GDPR legal standards – e.g. ethnic origin, religious belief or health status – the Provider is obliged to process such sensitive personal data only in accordance with the relevant legislation. Since the Provider usually obtains personal data from its Customer, the Customer hereby expressly declares that the Customer has obtained and has valid consent from the Person to process such personal data, including particularly sensitive personal data. The Customer is obliged to inform the Provider of the expiration of the Person's consent within 7 days from the occurrence of such a fact.
3.4. The Provider may entrust a third party as a processor with the processing of the Person's personal data. The realization of the rights of Persons is not affected by this.
3.5. The Persons have the following rights:
a. the right to access personal data
i. This right means that the Person may request information from the Provider about whether the Provider processes personal data concerning the Person or not. If such data is processed, the Person has the right to request information about the purposes for which, to what extent and in what manner the Provider processes personal data and may request a copy of this data. Issuance of a copy may be charged by the Provider, especially if these requests are repeated.
b. the right to correct inaccurate and to complete incomplete personal data
i. This right means that the Person can request correction or addition of personal data at any time. The Provider will carry out such a request without undue delay while taking into account current technical possibilities.
c. the right to erasure
i. This right means that, if the Person requests the Provider, the Provider will delete personal data if: (i) they are no longer needed for the purposes for which they were collected or otherwise processed, (ii) the processing is unlawful, (iii) the Person objects to the processing and there are no overriding legitimate reasons for the processing of personal data, (iv) the legal obligation for processing established by the law of the European Union or national legal regulations has ceased, (v) the Person withdraws the consent to the processing of the Person's personal data and at the same time there are no longer any other reasons for their processing.
d. the right to limit the processing of personal data
i. This right means that the Person can request the restriction of the processing of personal data. In such a case, the Provider will make the personal data unavailable, temporarily delete or store them, or perform other processing operations that will ensure the proper exercise of this right.
e. the right to data portability
i. This right means that the Person may request that personal data concerning the Person, which are processed automatically and on the basis of consent or contract, be transferred to a third party. If the exercise of this right would adversely affect the rights of other persons, it is possible that such a request will not be granted.
f. the right to object
i. This right means that the Person can object to the processing of personal data due to a legitimate interest or for the purposes of marketing activities. If the Provider objects to processing for the purposes of marketing activities, the Provider will stop processing personal data for the purpose of sending marketing communications. If the Person raises an objection to the processing due to a legitimate interest, the Provider will first evaluate such objection and inform the Person about its handling. If the objection is upheld, the Provider will stop processing these personal data, but it may also happen that it will not be possible to comply with such an objection.
g. the right to file a complaint about the processing of personal data
i. In the event of dissatisfaction with the processing of the request and the exercise of the right, the Person whose personal data is processed has the right to file a complaint with the supervisory authority - the Office for Personal Data Protection, website: www.uoou.cz, phone: 234 665 111, based in Pplk. Sochora 727/27, Prague, 170 00.
h. the right to withdraw consent to the processing of personal data to the extent it was provided.
The Person may withdraw consent at any time without giving a reason, either by clicking on the relevant link, in writing at the address Korunní 2569/108, Vinohrady, 101 00 Prague 10, Czech Republic, or via the e-mail address afore mentioned.
3.6. The personal data referred to in Article 3.2 will only be processed for the necessary period and in compliance with all other legal obligations and with regard to ensuring the quality of services, for a maximum period of 5 years. Personal data will be processed in electronic form in an automated manner or in printed form in a non-automated manner.
3.7. The Provider does not trade in the personal data of Persons. Personal data of Persons may be transferred abroad and to third parties (whether abroad or domestically) and may be accessed from abroad only in exceptional cases, depending on the need to procure a certain matter from the contract, usually at the Customer's request, contained or not contained in the contract or in the event that the Provider uses a third party to transport the shipment for the Customer.
3.8. The Customer and the Visitor agree that the personal data provided is accurate and that they have been informed that this is a voluntary provision of personal data.
3.9. Personal data of the Persons may be used for marketing communications. If the Person revokes consent to the processing of personal data, the Person shall state whether the consent is revoked only in relation to certain personal data or to all personal data, and further, the Person is entitled to state for what purposes the consent is revoked or if the consent is revoked for all of them. If the Person withdraws consent only for some personal data and/or for some purpose, e.g. the Person withdraws consent to the processing of the address for the purpose of not wishing to receive further marketing communications, the Provider considers that the consent given for other personal data and purposes is still valid.
3.10. The Provider processes personal data of Persons for the following purposes:
a. provision of services and fulfilment of the contract
i. The data is processed by the Provider for the purpose of being able to fulfil the contract, in particular to provide services, enable visits of the web interface, enable registration in a third-party system, offer products and services for purchase and everything related, including abroad, to register and contact the Customer, and related services.
ii. The legal basis in this case is therefore the processing of data for the purpose of fulfilling the contract.
b. fulfilment of legal obligations
i. The data is processed by the Provider mainly in connection with the obligations of accounting and tax legislation, regulations governing archiving and record keeping, or in connection with other legal regulations.
c. providing news, tips and marketing offers
i. Data is processed by the Provider for the purpose of sending news, tips and marketing information about services based on the consent of the Person or the transfer of such consent to the Provider from the Customer.
ii. After granting such consent, the Person may be contacted by e-mail, by telephone or using other means of remote communication, and the Person will thus obtain valuable information about the Provider's current offer of services, prices, special offers, services and other points of interest.
iii. If the Person grants this consent or such consent is passed on to the Provider from the Customer, the Person acknowledges that the provision of this consent is voluntary, that the consent can be revoked at any time, in writing to the address of the company's headquarters or by e-mail using the procedure described above.
iv. Failure to provide this consent does not affect the performance of the contract.
d. protection of the legitimate interest of the Provider, especially regarding the need to record performance, support, obligations from contracts, etc.
Based on the legitimate interest and preservation of the functioning of the Provider, the Provider may process personal data also for the purposes of potential dispute resolution or enforcement of legal claims.
The realization of all the rights of the Persons is bound to the submission of an application to the Provider, in particular by means of a sample application available for download on the Provider's web interface or through a request sent to the e-mail listed below; however the Provider politely points out that the Provider's activities are bound by legal regulations that stipulate many obligations, especially accounting and tax obligations. With reference to legal obligations, the realization of the rights of Persons may be refused or denied. Please submit requests and objections electronically to the aforementioned e-mail address or by post to the Contact address and mark it GDPR. The provider will handle your request without undue delay, within one month at the most. In exceptional cases, especially due to the complexity of your request, the Provider is entitled to extend this period by another two months. We will inform you about such a possible extension and its justification.
4. Processing time and form
4.1. Personal data will be processed for 5 years for purposes of art. 3.10 and for 10 years for accounting, tax and record purposes. Personal data will be processed in electronic form in an automated manner and in printed form in a non-automated manner. The Provider uses internal regulations to protect personal data, physical, hardware and software security, and the protection of personal data is part of the obligations of the Provider's employees and collaborators under labour law.
5. Google Analytics, cookies and prohibition of automatic data downloads
5.1. The Provider uses a service enabling data analysis, especially Google Analytics and cookies, for the registration of Visitors and other Persons and the individualization of the content of the web interface.
5.2. The Person agrees to the storage of so-called cookie files and their analysis together with functional cookies. In the event that it is possible to place an order on the web interface and to fulfil the obligations of the Person from the contract without the storage of so-called cookies, the Person may revoke the consent according to the previous sentence at any time, using the procedure of revocation of consent to the processing of personal data.
5.3. The person agrees that the Provider prohibits automatic scanning and/or downloading of data from the Provider's web interface, especially so-called crawling. In the event that the Person commits automatic scanning and/or downloading of data from the Provider's web interface, the Person undertakes to pay a fine of EUR 4,000 to the Provider for each such violation. After the fine payment, the Provider still has the option to claim damages from the Person for such a violation.
6. Copyright protection
6.1. The content of the Provider's website, web interface, design, appearance, videos, texts, excerpts from books and all available materials (texts, photographs, images, logos and others) including those in related printed media (promotional flyers, advertisements, etc.), and the content of the software of the web interface and these Policies are protected by copyright of the Provider and may be protected by other rights of other persons. Any single content may not be changed, copied, reproduced, distributed or used by any third party for any purpose without the written consent of the Provider. The names and designations of products, goods, services, firms and companies may be registered trademarks of their respective owners.
6.2. The Provider reserves the right to share the posts listed on the web interface also through the Facebook network and other social networks and to also appropriately refer to the Customer's identity in them.
7. Final provisions
7.1. The Provider may unilaterally change or supplement the wording of these Policies at any time. The rights and obligations of the parties are always governed by the wording of the Policies under which they were created. The Policies become valid and effective on the day they are published on the Provider's web interface.
7.2. If the Person violates the rights of third parties when using goods, services or information from the web interface, the Provider is not responsible for this. If compensation for damages or other similar performance is to be recovered from the Provider, the Provider has the right to subsequently recover this performance from the Person who committed the violation of the right, including all related claims, especially the costs of legal representation.
7.3. The person is prohibited from any intervention in the technical or substantive nature of the web interface. The person is obliged to notify the Provider of a failure of the web interface function or an attack from the outside, which manifests itself in particular by displaying content unrelated to the provision of security especially by displaying pornographic content.
7.4. The Provider bears no responsibility for advertising or any other form of promotion carried out by any third party through the web interface and is not responsible for the content of messages exchanged between Persons in some parts of the web interface (e.g. on social networks) or within the Customer's systems and reserves the right to remove a message that contains any information that can be considered illegal, offensive or otherwise unacceptable, solely on the basis of their own judgment.
7.5. The provider reserves the right to change or remove any part of the web interface at any time without prior notice.
In Prague on January 1st, 2024
Uhealy online s.r.o.
___________________________________________________________________________
Cookie Policy
We, as the Data Controller, are the company Uhealy online s.r.o., located on the web interface www.uhealy.com, with a registered office at Korunní 2569/108, Vinohrady, 101 00 Prague 10, Czech Republic, Company ID No.: 19164041, registered in the Commercial Register maintained by the Court in Prague, File No. C382388, contact email: help@uhealy.com, use and collect Cookies through the web interface. In this Cookie Policy we explain what Cookies are and why we collect them from you.
What are Cookies?
Cookies are small text files placed on your device that allow us to remember certain information about you for multiple purposes, such as delivering the functionalities of the website, product development, service improvement, business development, online advertisement, marketing analytics, information security, and fraud prevention.
Which Cookies are we collecting?
We are collecting the following cookies on our website:
System Cookies
1) Cookies that are strictly necessary for the operation of our website and provision of our services (these cannot be turned off)
Performance cookies
1) Cookies that we use for statistics in order to improve our services,
2) Cookies that we use to personalise your experience on the website,
3) Cookies that we use for marketing purposes.
What cookies are we collecting?
This cookie is used to let you login through Google.
__gsas
The following cookies are used for the login and authorisation system on our platform:
__Host-next-auth.csrf-token pvisitor
__Secure-next-auth.session-token
__Secure-next-auth.callback-url
Refusal of Cookies
You can turn off the Performance Cookies by setting your cookie preferences to Only Essential Cookies. You can also turn off Essential (System) Cookies in the browser settings, but please keep in mind that by doing so you may no longer access certain features and pages of the website.