Effective Date: 01/01/2024

Mercy Health Services (MHS) is committed to ensuring the privacy and protection of personal data in accordance with the General Data Protection Regulation (GDPR). This policy outlines our practices for collecting, using, and safeguarding personal data of individuals within the European Economic Area (EEA).

1. Data Collection and Use We collect personal data only for specified, legitimate purposes and process it lawfully, fairly, and transparently. This includes data collected from patients, employees, and website users.

2. Data Subject Rights Individuals have the right to access, correct, or delete their personal data, and to restrict or object to its processing. Requests can be made through our contact information below.

3. Data Security We implement appropriate technical and organizational measures to ensure the security of personal data against unauthorized access, alteration, disclosure, or destruction.

4. Data Breach Notification In the event of a data breach, we will notify affected individuals and the relevant supervisory authority within 72 hours, as required by GDPR.

5. Data Transfers Personal data may be transferred outside the EEA only if appropriate safeguards are in place to protect it in accordance with GDPR requirements.

6. Data Retention Personal data is retained only as long as necessary to fulfill the purposes for which it was collected, in compliance with legal and regulatory requirements.

Contact Information

Mercy Health Services: info@mercymhcs.com

By using our services, you agree to the terms of this GDPR Compliance Policy. Thank you for choosing Mercy Health Services.