Privacy

Controller: Barbora Stuchlá, who runs this website as a private individual, info@prijimanovepacienty.cz. The full version in Czech is on the About page; if the two ever differ, the Czech one applies.

Reports from visitors ("Know more? Tell others")

We store the status you report, the date, optional details (insurers, English, the practice's website) and an optional note. Notes are not published; only the site owner reads them. We don't store your name or IP address, only an encrypted fingerprint of the IP address (pseudonymised data) to recognise repeated reports and spam. The fingerprint and the note are deleted after 90 days; the report then stays with nothing about you. Legal basis: legitimate interest in useful, unabused information for patients (Art. 6(1)(f) GDPR). Please don't write names or health details in the note.

Messages through "Feedback"

We keep your message, what it is about, the page you wrote from and your e-mail if you give one (so we can reply), plus for 90 days a salted hash of your IP address against spam. Only the site owner reads it; it is deleted after one year. Legal basis: legitimate interest in improving the site and answering you (Art. 6(1)(f) GDPR).

E-mail alerts

We store your e-mail address, the kind of doctor, place and distance, the language of the e-mails, when you confirmed, and for 90 days an encrypted fingerprint of the IP address (to protect the form from abuse). The kind of doctor (e.g. psychiatrist) can hint at your health, so alerts start only with your explicit consent, given with the "I agree, send me alerts" button on the page the confirmation e-mail links to (Art. 6(1)(a) and Art. 9(2)(a) GDPR). We use the address only for the alerts and never share or sell it. Unconfirmed sign-ups are deleted after a week. Otherwise we keep the address until you unsubscribe (link in every e-mail); it is then deleted at once and disappears from the encrypted backups within 14 days.

Information about practices

Practices' names, addresses, phone numbers, e-mail and websites come from the open data of the National Register of Healthcare Providers (ÚZIS ČR). Many practices carry a doctor's name, so this is personal data. We process it to help patients find care (legitimate interest, Art. 6(1)(f) GDPR), together with what practices' own websites say, including the names of doctors a practice's website lists, so a practice registered under a company name can be found by its doctor's name. A practice or doctor can ask for a correction or object: we then hide the "accepting / not accepting" status for good, stop checking its website and won't write to it. We may e-mail a practice once at its register address to ask whether it accepts new patients, and remember when and where we wrote so we never write twice.

Visitor statistics

We count visits with Umami Cloud, without cookies and without storing IP addresses. We only see totals (how many people came, from where, what they clicked), never who. Legal basis: legitimate interest in knowing whether the site helps. Your browser remembers the health insurer you pick in a list (localStorage) so you don't have to pick it again; it isn't sent anywhere.

Who processes data for us

• Hetzner Online GmbH (Germany): the server and encrypted backups.
• WEDOS Internet, a.s. (Czechia): sending e-mails.
• Umami Software, Inc. (USA): visitor statistics; Umami Cloud stores the data on servers in the EU.
• Seznam.cz, a.s. (Mapy.com): maps. Your browser loads the map tiles directly from their servers. When you search for a place we don't know, we send them only the search text.

Your rights

You can ask what we hold about you, have it corrected or deleted, restrict its use and object. Just write to the address above. You can also complain to the Czech data protection authority,Úřad pro ochranu osobních údajů.