Privacy Policy

The controller of your personal data is:

• medassist.cz (service operator)
• Company ID (IČO): 07519931
• Registered address: Týnská 1807, 251 68 Kamenice – Těptín, Czech Republic
• GDPR contact email: ahoj@medassist.cz
• Phone: +420 601 286 445

For any questions about how we handle your personal data, contact us at the email above. We respond within 30 days at the latest.

We only process data you provide via our contact form or other communication:

• name (if you provide it)
• email address
• phone number / WhatsApp
• city and the content of your message / request
• preferred date and time (for the Booking‑for‑you service)
• billing information for payments (handled by Stripe)
• technical data (IP address, browser type, cookies)

Your request may contain data concerning health (e.g. the medical specialty, the type of care needed, a note about the patient's condition). We process such data solely to the extent necessary to handle your request, and only on the basis of your explicit consent. Please share only what is genuinely needed.

We process your data for the following purposes:

• handling your inquiry and connecting you with a doctor — performance of contract (Art. 6(1)(b) GDPR)
• processing payments — performance of contract
• issuing and storing accounting documents — legal obligation (Art. 6(1)(c) GDPR)
• analytics and service improvement — legitimate interest (Art. 6(1)(f) GDPR)
• marketing cookies and analytics — your consent (Art. 6(1)(a) GDPR)
• processing of data concerning health (special category personal data) — your explicit consent (Art. 9(2)(a) GDPR)

Data concerning health (medical specialty, description of the problem, information about the patient) is a special category of personal data under Art. 9 GDPR. We process it solely on the basis of your explicit consent under Art. 9(2)(a) GDPR, given by ticking the dedicated box in the order form, and only to the extent necessary to find a suitable doctor and secure an appointment. You may withdraw the consent at any time at ahoj@medassist.cz; withdrawal does not affect the lawfulness of processing before it, but it may mean the service cannot be completed.

We may share your data only with the following vetted processors:

• Lovable Cloud / Supabase — database and website hosting (EU)
• Stripe Payments Europe, Ltd. — payment processing (EU/US)
• Meta Platforms (WhatsApp) — if you contact us via WhatsApp
• selected healthcare facilities — only data necessary for booking, with your knowledge
• email and analytics providers

We never sell your data to third parties for marketing purposes.

Some processors (Stripe, Meta) may process data outside the EU, particularly in the US. Transfers are based on:

• Standard Contractual Clauses approved by the European Commission (SCC)
• the EU‑U.S. Data Privacy Framework

We keep personal data only for as long as necessary:

• contact forms and communication: max. 12 months from the last interaction
• accounting and tax documents (invoices, payments): 10 years per Czech Act No. 563/1991 Coll.
• analytics cookies: max. 14 months
• cookie consent: 12 months, then we ask again

Regarding the processing, you have the right to:

• access your data (Art. 15)
• rectification of inaccurate data (Art. 16)
• erasure / 'right to be forgotten' (Art. 17)
• restriction of processing (Art. 18)
• data portability (Art. 20)
• object to processing (Art. 21)
• withdraw consent at any time (Art. 7(3))
• lodge a complaint with the supervisory authority

You can lodge a complaint with the Czech Office for Personal Data Protection. To exercise your rights, write to ahoj@medassist.cz.

On your first visit a cookie banner appears. Without your consent we store only strictly necessary cookies — analytics, marketing and external-content cookies are not loaded before you allow them. Consent is voluntary, granular per category, and can be changed or withdrawn any time via the “Cookie settings” link in the footer.

• Strictly necessary (always on)
• Analytics — consent only
• Marketing & remarketing — consent only
• External content — consent only

Consent lasts 12 months, then we ask again. You can change it any time via the “Cookie settings” link in the footer or by clearing cookies and local storage in your browser. Refusing has no effect on the booking wizard or on handling your request. See the third parties' own policies: Google, Seznam.cz.

We protect your data with appropriate technical and organizational measures:

• HTTPS encryption across the whole site
• encrypted database storage (Supabase, EU)
• data access restricted to necessary persons only
• regular backups

We may update this policy. We will inform you of substantial changes by email or a notice on the site. The current version is always available on this page.