Privacy Policy

In effect from 01.01.2026

1. Who we are

Concept Invest s.r.o., IČO 27583643, DIČ CZ27583643, registered office: Honzíkova 671/16, Dolní Měcholupy, 111 01 Praha 10, Czech Republic. Commercial register entry: C 113440, kept by the Municipal Court in Prague.

Contact: info@h24app.cz, +420 774 387 775.

2. What H24 CRM does

H24 CRM works on top of your booking system. We only read booking data from your calendar — we do not create, edit or delete bookings. We do not store or process medical data (diagnoses, medical history, test results) — only the contact and organisational data connected to an appointment: name, phone, email, and the date and status of the visit.

3. What data we process

• Clinic patient data: name, phone, email, appointment history (attended / did not attend / rescheduled / cancelled), where this is required for CRM functions — for example, to follow up on a missed visit.
• CRM user data (clinic staff): name, email, actions in the interface.

4. On what legal basis

We process patient data on the clinic's instructions: we are the processor and the clinic is the controller of personal data in the terms of the GDPR, Regulation (EU) 2016/679. When the integration is connected, the clinic and H24 enter into a data processing agreement (DPA).

5. Where the data is stored

On servers in London, United Kingdom — one of the strictest jurisdictions for personal data protection. British requirements are effectively equivalent to the European ones and are officially recognised as such, so this arrangement suits clinics inside the European Union and outside it alike.

6. Who we share data with

We do not pass data to third parties. Access is limited to authorised H24 staff, and only to the extent required to support the service.

7. How long we keep it

For as long as the integration is active. When the clinic disconnects the integration — one button in the marketplace — access to the data is lost immediately.

8. Data subject rights

A patient may ask the clinic, as the data controller, for access to their data, its rectification or erasure, and restriction of processing, and may lodge a complaint with the Úřad pro ochranu osobních údajů, the Czech data protection supervisory authority.

9. Cookies

See the separate Cookie Notice.

10. Changes to this policy

We may update this policy; the current version is always available at this address.