Privacy Policy

1. Name and details of the Data Controller

Saint James Hospital Hungary Health and Service Ltd. (hereinafter referred to as Saint James Hospital Hungary Ltd., Data Controller, Institution)

Mailing address: 1026 Budapest, Szilágyi Erzsébet fasor 33-35.

Phone number: +36 1 788 2927

Email address:

Website: www.lassjol.hu

Company registration number: 01 09 876654

Data Controller’s representative: Jean Claude Muscat, Balázs Zentai

Data Protection Officer: Consact Ltd., Dr. Barbara Kőrösi

Data Protection Officer’s contact: , +36 30 2040319

Saint James Hospital Hungary Ltd. and its employees consider strict compliance with legal regulations and respect for patients’ right to informational self-determination crucial for the protection of patients’ health and personal data. Recorded health and personal data are treated confidentially, in accordance with data protection laws and professional regulations, as specified in this data processing information. The institution takes all necessary security, technical, and organizational measures to ensure the security of data.

The current version of this information is continuously available on the website www.lassjol.hu, at the reception, and in various locations within our institution.

2. Legal basis for data processing

Our activities related to the processing of health and personal data are primarily governed by the following laws:

• Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information
• Act CLIV of 1997 on Healthcare
• Act XLVII of 1997 on the Processing and Protection of Health and Related Personal Data (hereinafter referred to as Eüak)
• Government Decree 43/1999 (XII. 3.) on the Detailed Rules of Financing Healthcare Services from the National Health Insurance Fund
• Act CL of 2017 on the Rules of Taxation
• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “GDPR”)

This information applies to:

• Every organizational unit providing healthcare services within the institution, the organizational unit supervising and controlling professional activities, and employees who handle health and personal data.
• Every natural person using healthcare services provided by the institution, whether publicly or privately financed, and every other natural person whose personal data is processed by the Data Controller (hereinafter referred to as the data subject).
• Every health and personal identificati