With this privacy policy, Pealinna perearstid OÜ (registry code 14629411) (hereinafter “PP”) provides an overview of the personal data it collects that is necessary for the provision of its services.
1. PROCESSING OF PERSONAL DATA
1.1. Personal data is any information relating to a natural person, such as the person’s name, address, contact details, etc. Personal data also includes special categories of personal data, which cover, among other things, a person’s health data.
1.2. Processing of personal data means any operation performed on personal data. PP processes personal data, including health data, only to the extent necessary for performing its duties and for providing prompt, high-quality service to individuals. PP has a statutory obligation to protect the privacy of its clients and users.
1.3. We collect and process your personal data only where a legal basis exists and only for lawful purposes.
1.4. We collect and process your personal data when:
- you visit our clinic – we process your personal data, including data concerning your state of health, in diagnosing and treating illness;
- a patient has named you as their contact person – we process your personal data in order to communicate information relating to the patient;
- you request the release of your medical records – we use your personal data, or with your consent the personal data of the person who submitted the request to receive the documents, when releasing the document;
- you send us a request for explanation, a memorandum, a request for information or a complaint – we use your personal data to establish the circumstances set out in the complaint and to respond to you;
- you submit a suggestion or a letter of thanks – with your consent, we publish your name on the clinic’s website and Facebook page;
- you apply for a job with us – we rely on the information you have provided. Every candidate has the right to know what data we have collected about them.
2. TRANSFER OF DATA
2.1. PP releases data relating to you to institutions or persons who have a statutory right to request such data (e.g. the Health Insurance Fund, the Health Board, an insurer in the event of an insurance claim, the police, etc.). Documents containing special categories of personal data are sent to recipients by registered post or by encrypted e-mail.
3. PROTECTION OF PERSONAL DATA
3.1. PP has implemented the necessary information and cyber security measures and stores patients’ personal data in a manner that ensures effective protection of personal data in accordance with the law.
3.2. PP does everything it can to protect your personal data and to comply with the legislation governing data protection and privacy. Access to patients’ personal data is granted only to those persons for whom it is necessary in connection with the performance of their work duties. Our employees are bound by a duty of confidentiality and we do our utmost to ensure that your personal data is protected in our hands.
4. ACCESSING YOUR PERSONAL DATA
4.1. You have the right to access the data we have collected about you. You can submit a request at the Pealinna Perearstid clinic or send it to the e-mail address info@pealinnaperearst.ee.
4.2. Data is released on the basis of an identity document or sent by encrypted e-mail.
4.3. You have the right to request the rectification or erasure of inaccurate personal data.
5. PROTECTION OF RIGHTS AND CONTACT DETAILS
5.1. For questions relating to the processing of personal data, you may contact PP’s data protection specialist by e-mail at juta.puvi@gmail.com or by phone: 6100 580.
5.2. If you find that we have violated your rights in the processing of personal data, you may lodge a complaint either with the data protection specialist or with the Estonian Data Protection Inspectorate (Väike-Ameerika 19, Tallinn 10129, e-mail: info@aki.ee ).
5.3. I confirm that I have read this privacy policy and that I fully understand and expressly agree that PP collects, uses and transfers my personal data in accordance with the terms set out in this privacy policy.