GDPR Compliance Notice

Applies to: Patients, Website Visitors, Partners

Issued by: Preciva Wellness/Medical Center

41 Anton Tayner St., Central District, 4000 Plovdiv, Bulgaria

office@preciva.eu

+359 882 977 155

1. Introduction

Preciva Medical Center is committed to protecting your personal data and respecting your privacy. As a data controller, we operate in accordance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and the Bulgarian Personal Data Protection Act.

This GDPR Compliance Notice explains how and why we process your data, and what rights you have as a data subject.

2. What Personal Data We Collect

Depending on your interaction with us, we may collect the following:

For patients:

Name, date of birth, gender
Contact details (email, phone, address)
National ID or insurance number (if applicable)
Medical history, diagnosis, treatment data
Appointment and billing records

For website visitors:

IP address, device type, cookies, browsing behavior
Contact information submitted through online forms

3. Purpose of Data Processing

We process your data only when necessary and for the following purposes:

To provide medical consultations, diagnostics, and therapies
To book, manage, and confirm appointments
To contact you about your care
To fulfill legal and regulatory obligations
To improve our services and user experience
To send promotional updates or health tips (with your consent)

4. Legal Basis for Processing

We process your data based on one or more of the following legal grounds:

Consent – For email marketing or collecting health data via online forms

Contractual necessity – To deliver services requested by you

Legal obligation – For tax, insurance, or medical regulation purposes

Legitimate interest – To improve our services and communication

5. Data Sharing & Recipients

We never sell your data. We may share it with:

Licensed healthcare professionals within Preciva
Partner labs or medical institutions (with your consent)
IT and analytics providers (under strict confidentiality)
Legal or regulatory authorities (when required by law)

6. International Transfers

As a rule, we process your data within the EU. If data must be transferred outside the EU (e.g., via IT tools), it will be protected by standard contractual clauses or other approved safeguards.

7. How We Store and Protect Your Data

We take data security seriously:

All sensitive data is stored securely in encrypted databases
Access is restricted and monitored
We maintain up-to-date security protocols and antivirus protection
We regularly review and audit our data handling practices

8. How Long We Keep Your Data

We retain your data only as long as necessary:

Patient medical records: 10 years (as per Bulgarian medical law)
Website form submissions: up to 12 months
Cookie data: as specified in our Cookie Policy
After this, data is securely deleted or anonymized.

9. Your Rights Under GDPR

You have the right to:

Access the data we hold about you
Request correction of inaccurate data
Request deletion (“right to be forgotten”)
Withdraw consent at any time
Restrict or object to data processing

Request data portability

File a complaint with the Commission for Personal Data Protection (CPDP), Bulgaria

https://www.cpdp.bg

To exercise any of these rights, email us at office@preciva.eu.

10. Automated Decision-Making

We do not use your data for automated profiling or decision-making that significantly affects you.

11. Updates to This Notice

We may revise this GDPR Notice occasionally. Any updates will be posted on our website with a new effective date.

12. Contact

If you have questions or concerns about this notice or how your data is handled, contact:

Preciva Wellness/Medical Center

office@preciva.eu

+359 882 977 155

41 Anton Tayner St., Central District, 4000 Plovdiv, Bulgaria