All about health under one roof

Uni Hospital Multidisciplinary Hospital for Active Treatment with address of registration: Panagyurishte, 100 Georgi Benkovski Street, has established itself as a medical institution – a symbol of universal medical care and innovative medical technology. The medical facility unites 30 specialized clinics, departments and laboratories, where between 17,000 and 18,000 patients from the country and abroad are successfully treated every year. Our mission – All about health under one roof is fully integrated with the comprehensive medical care for the health of patients. The medical facility provides 24-hour medical assistance for diagnosis, treatment and rehabilitation of persons with acute and chronic diseases, injuries, conditions requiring surgical treatment in hospital conditions. The hospital team takes all necessary measures to protect personal data and confidential information by processing personal data of individuals in strict accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), the Personal Data Protection Act , the normative acts in the field of health care and the policy of the medical institution for the protection of personal data.

Personal data is any information that relates to an identified individual or one that can be identified directly or indirectly by an identification number or by one or more specific characteristics. It covers data of any kind that alone or in combination with other data can lead to the unique identification of a particular person.

Health data means personal data related to the physical or mental health of an individual, including the provision of health services that provide information about his/her health status.

Processing of personal data means any operation or set of operations performed using personal data or a set of personal data by automatic or other means such as collection, recording, organization, structuring, storage, adaptation or modification, retrieval, consultation, use, disclosure by transmission, distribution or other way where data is made available, arranged or combined, restricted, deleted or destroyed.

The processing of personal data by Uni Hospital Multidisciplinary Hospital for Active Treatment is necessary to protect the vital interests of the subjects of personal data, and sometimes also of other individuals. The processing is necessary for the performance of our tasks, which are entirely in the public interest, for which we are called upon to perform official duties.

The data available to Uni Hospital Multidisciplinary Hospital for Active Treatment is also processed to ensure the health insurance rights of the patients. The data that Uni Hospital Multidisciplinary Hospital for Active Treatment has for its patients may include:

  1. Basic information about patients – names, identifying number, address, date of birth, contact numbers, etc.
  2. Data related to the patient-hospital relationship – about their diseases and the treatment of the individuals.
  3. Results of various tests – laboratory, imaging, etc.

The information may also include other sensitive personal data revealing racial or ethnic origin, genetic data, biometric data, sex life data. This data is essential for forming a complete picture of the individual health status, for more efficient and timelier implementation of adequate treatment that meets the individual needs of patients. Information is collected via several ways – directly from the patient, from their personal physician or from medical experts working within each patient-specific case.

On the territory of the hospital, video surveillance is carried out in the generally accessible areas. The video surveillance system was created for the purpose of protecting public order, the hospital’s property and the safety of patients, access control to the designated security areas is carried out. Video surveillance is installed at the entrance-exit points of the hospital and the courtyard space. Signs are placed in these areas. Video surveillance records are stored on DVR-video recorders located in protected and guarded spaces. The data is automatically deleted when a certain volume is filled with newly received information, for a period of no more than 30 days.

 

We use the collected information to:

  • make informed decisions regarding healthcare services for patients;
  • ensure the effective and safe treatment of patients;
  • implement successful cooperation with other organizations related to the health of patients;
  • implementation of the genuine public health care activity;
  • the purposes of internal and external audits and inspections by public authorities;
  • the goals of effective financial management of public funds;
  • the improvement of knowledge about diseases and the theoretical and practical improvement of medical specialists;
  • the objectives of public prevention and development of new therapeutic agents, where additional information is provided for each individual.

The law in force allows us, and the nature of the hospital’s business sometimes requires, to provide personal data to third parties. Pursuant to Art. 28 of the Health Act, we sometimes need to provide health information about patients to the hospital, namely in the following cases when:

  • the person’s treatment is to be continued in another medical facility;
  • there is a threat to the health or life of other persons;
  • is necessary for identification of a human corpse or for establishing the causes of death;
  • the information is necessary for the needs of state health control authorities to prevent epidemics and spread of infectious diseases;
  • the information is necessary for the needs of medical expertise and public insurance;
  • the data is necessary for the needs of medical statistics or for medical scientific research, after the data identifying the patient has been deleted;
  • the information is necessary for the needs of the Ministry of Health, the National Center for Public Health and Analyses, the National Health Insurance Fund, the regional health inspectorates and the National Statistical Institute and other similar institutions.
  • The information is necessary for the needs of insurance companies, licensed according to the requirements of the Insurance Code.

Personal data of patients is stored physically and electronically, and accessing it is limited only to employees of the hospital having a direct or indirect connection with the relevant case of the subject of personal data. Personal data of patients is stored for a period of 25 years, in order to effectively track the health history of each relevant case, as well as to protect the life and health of patients.

Any individual whose personal data is processed has the right to request access, correction, deletion or limitation of the volume of personal data relating to him and processed by the hospital, as well as to request from the personal data protection officer that all third parties to whom his personal data were disclosed, for any deletion, correction or limitation of the volume of data.

In order to exercise any of the above rights, or to obtain more information, the individual should contact Uni Hospital Multidisciplinary Hospital for Active Treatment Ltd. by phone: 0357/88 581, by e-mail: uni@unihospitalbg.bg or at place: city of Panagyurishte, 100 „Georgi Benkovski“ street, MHAT „Uni Hospital OOD“.

Any individual whose personal data is processed may submit a complaint to the Commission for Personal Data Protection, which is a supervisory authority in the field of personal data protection.

Commission for Personal Data Protection, e-mail: kzld@cpdp.bg, Internet page: www.cpdp.bg