GDPR

Basic rules of procedures related to the processing of personal data when providing consulting services in the field of homeopathy

Art. 1

1. JUDr. Iva Bíliková, Id. No.: 71345884, with headquarters at Kounicova 14/71, 602 00 Brno, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter “GDPR”), revised its own procedures related to the processing of personal data when providing consulting services in the field of homeopathy, and as a result of their summarization hereby declares the basic rules of procedures related to the processing of personal data.

2. JUDr. Iva Bíliková ensures compliance with these rules when processing personal data by herself, or a possible co-worker, and in case of suppliers – external processors of personal data – has contractually secured guarantees of an adequate protection pursuant to Article 28 of the GDPR.

Art. 2

1. JUDr. Iva Bíliková processes personal data exclusively in accordance with the legal reasons set out in Article 6 of the GDPR, only to the necessary extent and for the necessary period. Purposes of personal data processing and the period of their processing are maintained for each individual agenda in a record of processing activities pursuant to Article 30 of the GDPR, provided that the conditions of this provision are met.

Art. 3

1. JUDr. Iva Bíliková, in accordance with usual standard practices in providing consulting services in the field of homeopathy, guarantees an appropriate secure processing of personal data and adopts measures to secure personal data, in particular by means of:

Art. 4

1. JUDr. Iva Bíliková fulfills all the rights of data subjects.

2. JUDr. Iva Bíliková further, and in particular:

3. Proposals of records, information, processing of requests/complaints and of notifications pursuant to Art. 4 (2) are deposited at JUDr. Iva Bíliková.

4. Data subjects may submit their requests/complaints for the exercise of their rights described in Art. 4 (2) to JUDr. Iva Bíliková, especially via an e-mail at the contact email address or in written at the headquarters’ address.

Art. 5

1. JUDr. Iva Bíliková performed a risk analysis of the processing of personal data and took appropriate technical and organizational measures to ensure the processing, as described above. The risk analysis concluded: the processing of personal data does not pose a high risk to the rights and freedoms of the data subjects concerned, and therefore it is not necessary to carry out a data protection impact assessment („DPIA“).

2. JUDr. Iva Bíliková assessed the processing of personal data from the perspective of Art. 37 of the GDPR; as the conditions for appointing a data protection officer are not given pursuant to the recital no. 91 of the GDPR, she is not obliged to appoint a DPO. A DPO is thus not appointed.

3. JUDr. Iva Bíliková – in addition to records on processing activities pursuant to Art. 30 of the GDPR, provided that the conditions of this provision are met – keeps records of eventual consents to the processing of personal data, unless there is another legal title for personal data processing, and records personal data security breaches.

4. JUDr. Iva Bíliková regularly, at least once a year, evaluates compliance with personal data protection rules, incl. technical and organizational measures, and adopts remedial actions, eventually updates internal documentation related to personal data protection as necessary.

These rules were adopted 21.12.2021.

JUDr. Iva Bíliková