Information for interns

Introductory information

As part of our health service provision, we also employ interns. Whether it is interns who come to us for practice as part of their secondary and higher education studies, or interns who work for us as part of their attestation training. If you are our trainee or would like to become one, we will need to process some of your personal data. In principle, we receive this data directly from you or from the organisation that arranges your traineeship.

What personal data do we process and for what purpose? And what is the legal basis for this processing?

In order to carry out a traineeship in our healthcare facility, we need to process the following data about you:

• identification data: name, surname, title, date of birth and gender;
• contact data: personal data that you provide us with in order for us to communicate with you, in particular contact address, telephone number, e-mail address;
• data related to the performance of the traineeship, which we understand to be information about your education, integrity, medical fitness, training received, your previous experience.

The scope of the data processed will always be adapted to the type of internship you are doing with us. Your personal data is always processed to the extent necessary, on the basis of the steps leading to the conclusion of the internship contract and the subsequent performance of this contract. Also, the period of time for which we process your data for the purpose of providing training is determined by the length of your internship.
On the basis of our legitimate interests, we also process your identification and contact data as well as data related to the performance of the internship in order to protect our legal claims. You have the right to object to such processing at any time, which can be exercised as detailed below. For these purposes, we process personal data for the duration of the limitation period (a maximum of 10 years from the end of the internship) for claims arising from or related to your internship. In the event that legal, administrative or other proceedings are initiated, we process your personal data to the extent necessary for the duration of such proceedings.

In what form is my personal data processed?

We process your data in electronic and paper form.

To whom can we disclose your personal data?

We manage your personal data within our organisation and we only pass it on to third parties with your consent in principle. In some cases, however, we may have to pass your personal data on to other recipients without your consent.
In some cases, we are entitled to further disclose your data on the basis of the law. In particular, this may include disclosure of your data to government authorities.
In some cases, we also use external suppliers, in particular for technical support of our information system. These activities may involve the processing of some of your personal data. The external suppliers are in the position of so-called processors and have a written contract with us, which obliges them to comply with strict principles when handling your data. In this case, your consent is not required for the purposes of carrying out the processing activity, as such processing is directly permitted by law. Please know that we choose our suppliers according to strict criteria, so you do not have to worry about your data. Currently, the following categories of processors process your personal data.
We do not transfer your personal data abroad as a matter of principle. This can only happen exceptionally if you give your consent or if this is required by law.

What rights do you have in relation to your personal data?

As a data subject, the law gives you a number of rights. As a trainee, you have the following rights in relation to your personal data.

Right of access to personal data

You obviously have the right to know what data is being processed about you, for what purpose, for how long, where we obtained the data, whether and to whom we are transferring it. You also have the right to be informed of other rights relating to this data. This document is mainly intended to inform you, however, we are ready to provide you with confirmation or clarification on any point of this information.
If you ask us to do so, we will also provide you with a copy of the personal data processed without undue delay. We are entitled to charge a reasonable fee for this copy, particularly if it is requested repeatedly, in relation to administrative costs. If you make this request in electronic form, we will automatically assume that you are also interested in receiving the information in electronic form. However, you have the option to request it in another way. Please note that the right to obtain a copy of the personal data processed cannot adversely affect the rights of other persons.

Right to rectification of personal data

If you discover that the personal data we process about you is inaccurate or incomplete, you have the right to request that we complete or correct it without undue delay.

Right to restriction of processing of personal data

This right allows you to request, in certain cases, that certain of your personal data be marked and not be further processed for a certain period of time. This is not the same as the right to erasure, as the restriction of processing is not permanent. You have the right to have us restrict the processing of your personal data if:

• you contest the accuracy of the data we process about you for the time necessary to verify its accuracy,
• the processing is without legal basis (e.g. beyond the data we are entitled to process) but you prefer to restrict the processing instead of erasing it, for example because you expect to provide us with the data in the future anyway,
• we no longer need to process your personal data but you require it for the establishment, exercise or defence of legal claims,
• you object to the processing (see the next point in the notice for this right).

If processing is restricted, the data may only be processed with your consent or for the establishment, exercise or defence of legal claims, for the protection of the rights of another person, whether natural or legal, or for reasons of important public interest.

Right to object to the processing of personal data

You may only exercise your right to object to the processing of your personal data where we would process some of your personal data in the public interest or on the basis of our legitimate interest. If this happens, we will only continue to process your personal data if we can demonstrate compelling legitimate grounds for doing so (in particular, if we need it to establish, exercise or defend legal claims).

Right to complain to a supervisory authority

The exercise of the rights set out so far is without prejudice to your right to lodge a complaint with the Data Protection Authority using the contact details set out at the beginning of this document. You can file a complaint at any time when you have doubts about whether your personal data is being processed as it should be, i.e. unlawfully or in breach of the law.

Right to erasure

In some cases, as a data subject, you also have the right to have your personal data erased. We generally erase your personal data when we no longer need it and have no legal basis for processing it. We will also delete your data if it has been processed on the basis of consent and that consent has been withdrawn.
Please note that even if this is one of the grounds for erasure, it does not mean that we will immediately delete all your personal data. This right does not apply if the processing of the personal data is still necessary for compliance with our legal obligations, for archiving purposes, for scientific or historical research or statistical purposes, or for the establishment, exercise or defence of legal claims.

Right to withdraw consent

Where your personal data is processed on the basis of consent, you also have the right to withdraw consent at any time. However, the withdrawal of consent will not affect any previous processing that we have carried out prior to the withdrawal of consent.

How can I exercise individual rights?

For all matters relating to the processing of your personal data, whether it is an enquiry, exercising a right, making a complaint or otherwise, you can contact our Data Protection Officer in the following ways:

• by post or in person at U Nemocnice 1, 128 00 Prague 2,
• by e-mail at poverenec@uhkt.cz,

We will process your request without undue delay, but within a maximum of one month. In exceptional cases, in particular due to the complexity of your request, we are entitled to extend this period by a further two months. We will, of course, inform you of any such extension and the reasons for it.