Privacy policy

  1. This privacy policy sets out the principles for processing the personal data within the operation and use of the Evidentist system in the form of SaaS ("Software as a Service") (hereinafter referred to as the "Evidentist system"), namely personal data that are entered into the Evidentist system operated by HENRY SCHEIN s.r.o, IČO: 053 24 271, with its registered office at Černokostelecká 2085/24, Strašnice, 100 00 Praha 10 (hereinafter referred to as "HENRY SCHEIN") are entered by persons who have purchased the selected version of the Evidentist system and have been granted access to and use of this system on the basis of the agreement for the use of the Evidentist system as a SaaS (hereinafter referred to as "User(s)" and "Agreement"), as well as personal data of the Users of the Evidentist system themselves. The wording of this privacy policy is expressly agreed between HENRY SCHEIN and the User.
  2. Personal data is any information about an identified or identifiable natural person; an identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, a network identifier or to one or more specific elements of the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.
  3. The processing of Users' personal data is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as "GDPR") and in accordance with Act No. 110/2019 Coll. on the processing of personal data and Act No. 480/2004 Coll. on certain information society services, as amended.
  4. For the purposes of the GDPR, a data controller is a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Under the GDPR, a processor is a natural or legal person, public authority, agency or other body that processes personal data for the controller.
  5. The Evidentist system is operated in a cloud-based environment provided by Google and the protection and processing of personal data is also governed by Google's privacy statement.
  6. HENRY SCHEIN obtains personal data directly from the User who enters it into the Evidentist system or otherwise allows HENRY SCHEIN to handle the personal data.
  7. The database folder of the Evidentist system contains personal data of natural persons in relation to whom the User is in the position of a data controller. The User shall comply with all information obligations and obtain all authorizations and consents to enable the User and HENRY SCHEIN to handle personal data within the meaning of this Policy.
  8. While providing the certain Evidentist system services, personal data is processed by HENRY SCHEIN for the purpose and to the extent specified by the User and on the basis of the User's instructions; in such case HENRY SCHEIN is in the position of the processor of such personal data. This includes, in particular, the service of technical support. The obligations set out in the Agreement shall be deemed to be the User's instructions for this purpose. A separate instruction from the User is not required if the processing results from the Agreement and is part of HENRY SCHEIN's obligations. In all other cases of processing of personal data arising from the Agreement, HENRY SCHEIN and the User act as separate controllers, as they each process personal data for a separate purpose.
  9. The processing of personal data while using the Evidentist system particularly includes the personal data of the User, its employees, statutory or other representatives, cooperating persons, clients, business partners of the User or personal data of other participating persons or persons entered by the User into the Evidentist system during its use. The User acknowledges that HENRY SCHEIN will have access to such personal data and is entitled to process such personal data for the purposes set out in this Policy.
  10. In particular, the categories of personal data processed in the operation of the Evidentist system are as follows:
    1. identification data (first name, surname, title, date of birth, birth number, ID number, VAT number, membership in professional chambers, user name and password),
    2. address data (address of residence and place of business, e-mail address, telephone number);
    3. descriptive data (bank details, copies of documents, order history, etc.);
  11. The information and personal data provided by the User are used by HENRY SCHEIN, in particular, to:
    1. provide the Evidentist system services and the related license;
    2. contact the User and provide the User with the requested information;
    3. comply with legal obligations;
    4. fulfil contractual obligations in relation to the User (e.g. technical support for the Evidentist system and related services);
    5. send commercial communications to the User, including information about promotions, events, changes and new services, etc.; the User may refuse to receive commercial communications at any time;
    6. improve the user experience of the Evidentist system and the services provided by HENRY SCHEIN, including customer support services;
    7. keep records of User data, including the management and storage of User passwords;
    8. analyse its business activities and the functioning of the Evidentist system, for which it also uses information from the cookies on the website;
    9. protect its legitimate interests (e.g. in the event of potential legal claims against a User);
  12. The legal basis for the processing of personal data is:
    1. the performance of the concluded Agreement for the use of the Evidentist system in the form of SaaS;
    2. fulfillment of legal obligations;
    3. HENRY SCHEIN's legitimate interests, e.g. for the purpose of enforcing its claims, sending marketing communications and newsletters, analysing its business activities, etc.
    4. the User's consent given by agreeing to this Policy or separately for specific processing.
  13. HENRY SCHEIN does not pass on the personal data collected to third parties, with the exception of: Tom Atom s.r.o. ID No. 03360482, for the purpose of carrying out the development and administration of the Evidentist system for HENRY SCHEIN. The parties shall not involve any other processor or any third party in the processing of personal data in breach of this policy.
  14. The place of processing of personal data is the Czech Republic or another member state of the European Union where the servers are located.
  15. The User and HENRY SCHEIN undertake, taking into account the state of the art, the cost of implementation, the nature, scope, context and purposes of the work with and access to personal data and information, to take all technical and organisational measures to ensure the protection of personal data to exclude the possibility of unauthorised or accidental access to personal data by third parties, their alteration, destruction or loss, unauthorised transfers, other unauthorised processing or other misuse. This obligation shall continue to apply after the personal data have been handled and accessed.
  16. HENRY SCHEIN and the User undertake to provide each other with all necessary cooperation and documentation to ensure smooth and effective cooperation, e.g. if the data subject exercises a right the exercise of which may affect both parties, in particular in the case of dealings with a supervisory authority or other public authorities.
  17. In the case of an exercise of data subjects' rights by a party, the party in whose information systems the personal data concerned by the request are processed shall handle the request. If the request is addressed to the wrong party, that party shall be obliged and instructed to address the request to the other party.
  18. In the event that the User informs HENRY SCHEIN that any personal data subject has exercised his/her right under the GDPR, in particular the right to information, erasure, restriction of processing, transfer of personal data, HENRY SCHEIN shall provide the User, at the User's request, with all the personal data of the personal data subject in question that it processes in one of the standard formats in the performance of the Agreement.
  19. If HENRY SCHEIN and/or the User becomes aware of any personal data breach, they shall inform the other party immediately, but no later than 24 hours after becoming aware of the breach, and shall promptly address the incident thereafter.
  20. HENRY SCHEIN shall not be liable for any overstepping of the purpose of the processing by the User and any violation of the legal basis of the processing defined and carried out by the User, unless caused by a breach of obligations by HENRY SCHEIN.
  21. HENRY SCHEIN shall only process the personal data for the time necessary to fulfil the purposes described above for which they were collected, or for the period of consent to their processing, if such consent was required and further processing of the personal data after withdrawal of consent is not possible for any other legal reason. In addition, personal data will be retained for the period of time required by law, if such retention is required or if such retention may serve the legitimate interests of HENRY SCHEIN (e.g. the enforcement of claims).
  22. If the User is the subject of the personal data, he/she is entitled to request that HENRY SCHEIN informs him/her what personal data of the User it processes. Furthermore, HENRY SCHEIN is obliged to allow access to this data, to correct inaccurate or complete incomplete personal data, to delete the personal data of the User, unless there is a legal reason to retain it. Under certain conditions, the User has the right to request a restriction of processing, e.g. if the User denies the accuracy of the personal data. Under certain conditions, the User has the right to have their personal data transferred. The User also has the right to lodge a complaint with the competent supervisory authority if he/she believes that the law has been violated. In addition, the User has the right to object to processing, for example, if HENRY SCHEIN processes personal data on the grounds of legitimate interest, which will also stop the processing of personal data for these purposes.
  23. During the use of the Evidentist system, information is used and stored in the form of so-called data cookies (small text files called "cookies"). The information relates to the use of the website (identifiers, date of visit, etc.), in particular for the purpose of facilitating use and personalisation. You can refuse the storage of cookies. The types of cookies and the procedure for refusing storage are offered directly in the bar outside the website. The User can always find the list of specific cookies used in the footer of the Evidentist application interface.
  24. We also use the following services:
    1. GOOGLE ANALYTICS
      We use some of the tools of Google Analytics on Evidentist system, which is provided by Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA ("Google"), to analyse traffic and use of the website. These are external cookies (third-party cookies) that are collected and processed anonymously for the purposes of monitoring browsing and improving the efficiency of navigation (performance cookies). These cookies are controlled by a third party and we do not have access to read or write this data.
      Google Analytics cookies are used to collect information that helps us to determine how visitors use the Evidentist website and their preferences, albeit anonymously (however, the IP address of the user is among the information collected). Google Analytics collects and processes this information in order to compile statistical reports on the use of the website or the use of the Evidentist system. However, we do not use this tool to monitor or collect personal data or other information that could lead to the identification of visitors. Our website does not allow third parties to carry out operations of this type. IP addresses are not associated with any other data held by Google, nor does Google attempt to associate any IP addresses with any identities of website users. Google may transfer this information to third parties if required to do so by law or if third parties process this data for the purposes of and on behalf of Google.
      For more information about Google Analytics cookies, please visit the Google website: https://support.google.com/analytics/answer/6004245?hl=cs&ref_topic=2919631.
  25. At HENRY SCHEIN, we are committed to applying these principles and the principle of accountability. Therefore, if you have any concerns or questions about the use of your personal data, please contact us: gdpr@henryschein.cz.