Personal Data Protection

What is GDPR?

GDPR is a legal act adopted by the European Union, which regulates personal data protection principles (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC)

When does GDPR become effective?

GDPR has been in force since 25th May, 2018.

Which activities are regulated by GDPR?

GDPR regulates personal data processing. Personal data processing means any kind of activities that are performed on personal data, such as: collecting, storing, deleting, handling and transmitting. 

What is personal data?

Personal data refer to information about an identified or identifiable natural person on the basis of such identifiers as: full name, PESEL number, home address or date of birth, for instance.

Does TU ZDROWIE process personal data?

Yes, Towarzystwo Ubezpieczeń ZDROWIE S.A processes personal data of those who are covered by a health insurance with TU ZDROWIE.

When is TU ZDROWIE allowed to process personal data?

We are allowed to process personal data only when there is a so called legal basis for data processing. Legal bases for data processing are: acceding to a health insurance agreement, and in case of information on performed medical services (data on state of health) an expressed consent of the subject. 

Who gives consent?

Every adult Insured Person on their own behalf.

On behalf of children and teenagers under the age of 16, the consent is given by one of the parents or legal guardians.

Why does TU ZDROWIE need the Insured Persons’ consents?

According to the GDPR regulations we need to obtain your consents to transmit your data to medical facilities and a medical operator, so that you are able to obtain services in a non-cash way. 

Without the consents not only can we not settle accounts with medical facilities for provided services, but also we cannot obtain information on those services.

What if I refuse to give a consent, may I still use the benefits?

We will not be able to provide medical facilities and medical operators (24h Helpline) with your personal data, but the cover remains active and you can use services on the cost return basis (reimbursement). 

Can I withdraw my consent for data processing?

You can withdraw your consent for personal data processing any time.

What do I do when after giving my consents I get information on the website that PESEL or phone number are incorrect? 

Perhaps we have incorrect data, therefore we are unable to verify it and send a text message with verification code that would confirm you giving the consents. 

Please contact your employer/policyholder to correct the data that is transmitted to us.

Consent to the processing of personal data