1. What do we need?
Our Personal Data Protection Policy governs the use and storage of your data. You can view our Personal Data Protection Policy on our website.
“SOBAL-PENTAGRAM” Ltd. and “MC Pentagram 2012” Ltd. are data controllers of the personal data that you (the Data Subject) provide to us. We collect the following types of personal data from you:
- For patients registered online – First Name, Last Name, Phone
- For Registry patients – First Name, Middle Name, Last Name, PIN (EGN), Address, Phone
- For Inpatient Medical Care patients – First Name, Middle Name, Last Name, PIN (EGN), Address, Phone, Guardian information (Name and phone); Detailed medical condition of the patient; Copy of health insurance book; Medical History containing patient examinations – Anamnesis; Epicrisis
- For clients and partners – First Name, Middle Name, Last Name, PIN (EGN), Address
2. Why do we need it?
Your personal data is necessary for us to provide you with the following services:
- Online registration
- Registry registration
- Provision of hospital medical care
- Execution of contractual relations with clients / partners
3. What do we do with your Personal Data?
Your personal data is processed at “SOBAL-PENTAGRAM” Ltd. at the address: 11 Dimitar Petkov St., Sofia, Bulgaria. Your personal data is processed at “MC Pentagram 2012” Ltd. at the addresses: 11 Dimitar Petkov St. and 109-111 Vranja St., Sofia, Bulgaria.
The hosting and storage of your data take place at “SOBAL-PENTAGRAM” Ltd. and “MC Pentagram 2012” Ltd. at the address: 11 Dimitar Petkov St., Sofia, Bulgaria.
Third parties that have access to your personal data:
- NHIF (National Health Insurance Fund), Health Insurance Funds, control bodies performing compliance checks, judicial authorities and experts, other state bodies (police, investigation, prosecution, SANS, Commission for Countering Corruption and Illegal Asset Forfeiture, and others), insofar as there is a legal obligation to provide such data
- IT providers for the purposes of development and technical support of the systems of “SOBAL-PENTAGRAM” Ltd. and “MC Pentagram 2012” Ltd. Auditors and consultants who verify the compliance of “SOBAL-PENTAGRAM” Ltd. and “MC Pentagram 2012” Ltd. with external and internal standards and requirements
Your personal data is processed through manual and automated means, and no automated decision-making or profiling will be applied to them.
4. How long do we store it?
According to the laws of the Republic of Bulgaria, we are obliged to store your documents for the following periods of time:
- Website registration – 1 month, online
- Outpatient sheet – 1 year
- All other patient documents – 5 years
- Documents of clients and partners – 11 years
After these periods, your personal data stored with us will be irreversibly destroyed. Any personal data stored by us for marketing notifications and service updates will be stored until you notify us that you no longer wish to receive this information.
5. What are your rights?
You have the right to access the personal data that “SOBAL-PENTAGRAM” Ltd. and “MC Pentagram 2012” Ltd. hold about you, to correct errors, to request deletion, or to object to the processing of your personal data. You can do this at the email gdpr@pentagram2012.com or by mail at 11 Dimitar Petkov St., Sofia, Bulgaria, “SOBAL-PENTAGRAM” Ltd. and “MC Pentagram 2012” Ltd., Data Protection Officer.
If you believe that the personal data we hold about you is inaccurate or incomplete, you have the opportunity to request to see this information, correct it, or delete it. Please contact us via the Subject Access Request Form, available upon request at gdpr@pentagram2012.com or by mail at 11 Dimitar Petkov St., Sofia, Bulgaria, “SOBAL-PENTAGRAM” Ltd. and “MC Pentagram 2012” Ltd., Data Protection Officer.
In the event that you wish to withdraw your consent, you may do so only with respect to your personal data that does not affect the lawfulness of the processing of your data (Art. 6 and Art. 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC).
In the event that you wish to file a complaint about the way we have processed your personal data, please contact the Data Protection Officer at gdpr@pentagram2012.com or by mail at 11 Dimitar Petkov St., Sofia, Bulgaria, “SOBAL-PENTAGRAM” Ltd. and “MC Pentagram 2012” Ltd., Data Protection Officer. Our Officer will review your complaint and make every effort to resolve the issue.
If you still believe that your personal data has not been processed in a lawful manner, you can contact the Commission for Personal Data Protection and file a complaint with them at the email: kzld@cpdp.bg