User rights
The following list contains information about your rights that arise from applicable data protection laws:
Right to withdraw consent
Where the processing of your personal data is based on your consent you may withdraw your consent at any time. You may withdraw your consent in writing to the address Zdravilišče Rogaška – Zdravstvo d.o.o., Zdraviliški trg 9, 3250 Rogaška Slatina, Slovenia, with the inscription "for DPO".
Right of access
You can at any time request that the Rogaška Medical Centre provide you with the information on personal data that it keeps on you, including information about which types of your personal data is stored, what they are used for, where it collects them, if not directly from you, and to whom they were disclosed, as appropriate, the period of retention of your personal data, what your rights are that relate to your personal data, and the information on potential existence of automated decision-making (including profiling) and the reasons for the latter, and the significance and anticipated consequences of such processing for you.
Right to rectification
You may at any time request that Rogaška Medical Centre rectify inaccurate personal data that it keeps on you.
Right to restriction
You may request restriction of processing of your personal data from Rogaška Medical Centre, if:
- you contest the accuracy of your personal data, namely for a period enabling the Rogaška Medical Centre to verify the accuracy of the data;
- the processing is unlawful and you request restriction or processing of your personal data instead of deletion;
- the Rogaška Medical Centre no longer needs your personal data, but they are required to store them for the purposes of establishment, exercise or defence of your legal claims;
- you object to processing while the Rogaška Medical Centre verifies whether their legitimate grounds override yours.
Right to portability
Upon your request, the Rogaška Medical Centre will, where technically feasible, transmit your personal data to another controller if the processing is based on your consent or is important for the implementation of the contract, and if the processing is carried out by automated means.
Right to object
If the processing is based on your consent or is important for the implementation of the contract, and if the processing is carried out by automated means, you can, on grounds relating to your particular situation, at any time object to processing of personal data concerning these grounds. Where your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning such marketing, including profiling. In addition, on grounds relating to your particular situation, you have the right to object to processing of personal data relating to this reasons, where personal data are processed for scientific or historical research purposes or statistical purposes, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
Automated individual decision-making, including profiling
You have the right to request from the Rogaška Medical Centre not to be subject to a decision based solely on automated processing of your personal data, if this decision has legal effects for you or has a significant impact on you.
Right to lodge a complaint
In the event of an alleged violation of applicable privacy laws, you may lodge a complaint with the supervisory authority for data protection in the country where you reside or where the alleged violation occurred.
Right to erasure
You may request deletion of your personal data from Rogaška Medical Centre at any time, if:
- the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
- the processing is based on your consent and you withdraw your consent, and there is no other legal ground for the processing;
- the processing is based on your consent and you object to processing, and there is no other legal ground for the processing;
- the personal data have been unlawfully processed;
- this is necessary for compliance with a legal obligations;
- the personal data have been collected in relation to the offer of information society services offered directly to a child. The processing of personal data of a child is lawful when the child is at least 16 years old. When a child is under 16, such processing is lawful only if such consent concerning the child was given or approved by his or her parent or guardian.