We take the protection of your personal data seriously. We process data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), Act No. 110/2019 Coll., on Personal Data Processing, and regulations governing the provision of health services.

1. Who processes your data

The controller of personal data is Prim. MUDr. Pavel Navrátil, Company ID (IČO) 49562932, Bořivojova 540/30a, 779 00 Olomouc — a non-state healthcare facility registered by decision ref. no. RZ/1477/94/553.

For questions about personal data protection you can contact us directly: by e-mail at ordinace@seznam.cz, by phone on +420 608 36 33 03 or in person at the clinic.

2. What data we process and why

Patient care

When providing health services we process:

identification data (first name, surname, date of birth, birth number, address),
health insurance data (health insurance company, insured person's number),
contact data (phone, possibly e-mail),
health data (medical history, examination results, prescribed medicines, prescribed and issued hearing aids).

We need the data to provide medical care, keep medical records, bill health insurers for care and to prescribe and dispense hearing aids. The processing is required of us by law (in particular Act No. 372/2011 Coll., on Health Services, and Act No. 48/1997 Coll., on Public Health Insurance); the legal basis is Art. 6(1)(c) and Art. 9(2)(h) GDPR. Without this data we cannot provide you with care.

Bookings and enquiries

When you call us or write an e-mail, we process your name, phone or e-mail and the content of the enquiry — so that we can book you in and reply. Please do not include details about your health in an e-mail; we would rather discuss those in person or by phone.

Contact form

When you write to us through the form on the Contact page, we process your name and surname, e-mail, phone and the text of the message. We use the data only so that we can reply to you and, where applicable, book you in. The legal basis is the performance of steps at your request and our legitimate interest in answering your enquiry (Art. 6(1)(b) and (f) GDPR); we therefore do not need your consent for this.

The message from the form is sent by e-mail to our mailbox ordinace@seznam.cz (the e-mail service is provided by Seznam.cz, a.s.). The content of the message is not stored on the web server; the server only briefly (for at most one hour) remembers an anonymised hash of the IP address and the time of sending to prevent mass sending of unsolicited messages. Please do not include details about your health in the message.

Visiting this website

We load cookies and third-party content only if you consent in the banner on your first visit. This concerns traffic measurement with Google Analytics and evaluation of Google Ads advertising (provider Google Ireland Limited). You can set your consent by category (traffic measurement, advertising, map and reviews). Without consent no cookies are stored on your device; only anonymous technical signals without cookies, which do not identify you, may be sent to Google services (Consent Mode). You can change or withdraw your consent at any time via the Cookie settings link, which you will also find in the footer of every page. The legal basis is your consent under Art. 6(1)(a) GDPR.
We also count visits with the TOPlist service (operator TOPlist s.r.o.). It stores nothing on your device; when a page loads, your browser passes it technical data (IP address, address of the visited page, screen resolution). The legal basis is our legitimate interest in knowing website traffic under Art. 6(1)(f) GDPR.
The Mapy.com rating badge on the Contact page is an image loaded from the servers of Seznam.cz.
The website contains no advertising tools. Fonts and photographs are stored directly on our server.
The web hosting provider's server automatically records technical data about access (IP address, time, browser type) in operating logs. They serve exclusively to ensure the security and operation of the website and are deleted after a short time.
The map on the Contact page is a static image stored on our server (base data © OpenStreetMap contributors) and loads nothing from third parties. The links "Navigate", "Show in Google Maps" and "Show on Mapy.cz" lead to services of Google and Seznam.cz; after clicking you are subject to the terms of the respective company.

3. How long we keep data

Medical records — for the period set by Decree No. 98/2012 Coll., on Medical Records.
Enquiries, e-mails and form messages — for the time necessary to handle them, unless they become part of the medical records.
Accounting and tax documents (e.g. direct payments, co-payments for hearing aids) — for the period set by accounting and tax regulations.

4. Who we share data with

Your data is protected by medical confidentiality. We share it only to the necessary extent and only where required by law or your treatment:

your health insurance company (billing of care and reimbursement of a hearing aid),
other healthcare providers, if needed for your treatment,
hearing aid suppliers to the extent necessary to make a hearing aid or custom mould,
public authorities, where required by law (e.g. national health registers).

We do not transfer patient data outside the European Union and do not use it for marketing. Website visit data may also be processed by Google outside the EU when measuring traffic and displaying maps, but only if you have consented to this.

5. Your rights

You have the right to:

access your data, including inspecting medical records and obtaining a copy,
correction of inaccurate data,
erasure or restriction of processing — except for data we are required by law to retain (medical records),
object to processing,
lodge a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.

You can exercise your rights in person at the clinic, by phone or by e-mail. Before handling your request we will verify your identity.

6. Security

We protect medical records and other data with technical and organisational measures. Only authorised persons bound by a duty of confidentiality have access to them.

Valid from 18 October 2026.

Privacy Policy