Privacy policy

We take the protection of your personal data seriously. We process data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), Czech Act No. 110/2019 Coll., on the processing of personal data, and the regulations governing the provision of healthcare services. This English text is a translation for your convenience; the Czech version is the binding one.

1. Who processes your data

The controller of personal data is Prim. MUDr. Pavel Navrátil, Company ID (IČO) 49562932, Bořivojova 540/30a, 779 00 Olomouc, Czech Republic — a non-state healthcare facility registered by decision ref. no. RZ/1477/94/553.

If you have questions about data protection, you can contact us directly: by e-mail at ordinace@seznam.cz, by phone on +420 608 363 303, or in person at the practice.

2. What data we process and why

Patient care

When providing healthcare services we process:

• identification data (first name, surname, date of birth, birth number, address),
• health insurance data (health insurer, insured person's number),
• contact details (telephone, possibly e-mail),
• data about your health (medical history, hearing test results, hearing aids prescribed and supplied).

We need the data to provide healthcare, keep medical records, bill care to health insurers and prescribe and supply hearing aids. The processing is required by law (in particular Act No. 372/2011 Coll., on healthcare services, and Act No. 48/1997 Coll., on public health insurance); the legal basis is Art. 6(1)(c) and Art. 9(2)(h) GDPR. Without this data we cannot provide care.

Appointments and enquiries

When you call or e-mail us, we process your name, telephone number or e-mail address and the content of your enquiry — so that we can book your appointment and reply. Please do not include details of your health in an e-mail; we would rather discuss those in person or by phone.

Contact form

When you write to us using the form on the Contact page, we process your full name, e-mail address, telephone number and the text of your message. We use these details only to reply to you or to book your appointment. The legal basis is taking steps at your request and our legitimate interest in answering your enquiry (Art. 6(1)(b) and (f) GDPR); we therefore do not need your consent for this.

The message is sent from the form by e-mail to our mailbox ordinace@seznam.cz (the e-mail service is provided by Seznam.cz, a.s.). The content of the message is not stored on the web server; the server only briefly keeps an anonymised fingerprint of your IP address and the time of sending, to prevent mass sending of unsolicited messages. Please do not include details of your health in the message.

Visiting this website

• We store cookies only if you give us your consent in the banner on your first visit. They are used solely to measure visits with Google Analytics (provided by Google Ireland Limited). Without your consent no cookies are stored and Google Analytics is not loaded at all. You can change or withdraw your consent at any time via the Cookie settings link, which you will also find in the footer of every page. The legal basis is your consent under Art. 6(1)(a) GDPR.
• We also count visits with the TOPlist service (operated by TOPlist s.r.o.). It stores nothing on your device; when a page loads, your browser passes it technical data (IP address, address of the page visited, screen resolution). The legal basis is our legitimate interest in knowing how many people visit the website under Art. 6(1)(f) GDPR.
• The website contains no advertising tools. Fonts and images are stored directly on our server.
• The web hosting provider's server automatically records technical access data (IP address, time, browser type) in operational logs. These serve solely to ensure the security and operation of the website and are deleted after a short time.
• The “Navigate” link on the Contact page leads to Google Maps; once you click it, Google's terms apply.

3. How long we keep data

• Medical records — for the period laid down by Decree No. 98/2012 Coll., on medical records (for outpatient care usually 10 years from the last visit).
• Enquiries, e-mails and contact form messages — for the time needed to deal with them, unless they become part of the medical records.
• Accounting and tax documents (e.g. patient payments for hearing aids) — for the period laid down by accounting and tax regulations.

4. Who we share data with

Your data is protected by medical confidentiality. We pass it on only to the extent necessary and only where required by law or by your treatment:

• to your health insurer (billing of care and payment for the hearing aid),
• to other healthcare providers, if needed for your treatment,
• to hearing aid suppliers, to the extent necessary to make a hearing aid or earmould to measure,
• to public authorities, where required by law (e.g. national health registers).

We do not transfer patient data outside the European Union and do not use it for marketing. Data about your visit to the website may also be processed by Google outside the EU when measuring visits, and only if you have consented to cookies.

5. Your rights

You have the right:

• of access to your data, including inspecting your medical records and obtaining a copy,
• to have inaccurate data corrected,
• to erasure or restriction of processing — except for data we are required by law to keep (medical records),
• to object to processing,
• to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz.

You can exercise your rights in person at the practice, by phone or by e-mail. Before dealing with a request we will verify your identity.

6. Security

We protect medical records and other data with technical and organisational measures. Only authorised persons bound by a duty of confidentiality have access to them.

Valid from 17 October 2026.