Data Processing Agreement
For physicians and practices that entrust us with processing patient data. Concluded under Article 28 GDPR.
Last updated: 26 July 2026
This page summarises a document that is executed in Polish. The Polish version is the only binding one; this summary has no legal effect and is provided for orientation. Questions in English are welcome — write to us and we will answer them.
Who the parties are
The controller is the physician or healthcare provider using EVA. The processor is REMEDY GROUP spółka z ograniczoną odpowiedzialnością, seated in Gdynia, ul. Józefa Bema 15/1, 81-386 Gdynia, Poland, KRS 0001130339, NIP 5862410371. Processing is entrusted only to the extent necessary to provide the service.
What the document covers
- Subject and duration — processing of data entered into the application in order to produce documentation, retrieve clinical information and prepare documents.
- Security measures — the technical and organisational measures we apply, and our duty to notify you of a personal data breach.
- Sub-processors — a general authorisation, with notice of intended changes and your right to object. The list by name is an annex to this agreement.
- Assistance — support in responding to data subject requests and in carrying out impact assessments.
- End of processing — return or erasure of the data once the service ends.
To receive the agreement for signature, write to centrum@remedy.com.pl.