GENERAL INFORMATION
Menopauzės klinika, UAB (hereinafter referred to as the Company/Data Controller) hereby establishes the terms and conditions for the processing of personal data when using the website managed by the Data Controller, providing services, servicing individuals by contacting them by telephone or in other ways, as well as when shopping in the online store.
Data controller details:
Menopause Clinic, UAB
Legal entity code: 307150055
VAT number: LT100018036618
Registered office address: A. Rotundo g. 5-101, LT-01400, Vilnius
Tel. +370 629 42433
Email: info@menopauzesklinika.lt
The terms and conditions set out in the Privacy Policy apply each time you access our content and/or services, regardless of the device (computer, mobile phone, tablet, etc.) you use. Please read the Privacy Policy carefully, as each time you visit the website owned by the Data Controller, you agree to the terms and conditions described in this Privacy Policy. If you do not agree to these terms and conditions, please do not visit our website, use our content and/or services.
Individuals under the age of 16 may not provide any personal information through our website. If you are an individual under the age of 16, you must obtain the consent of your parents or other legal guardians before providing any personal information.
When processing personal data, the Data Controller is guided by and complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the GDPR), the Law of the Republic of Lithuania on the Legal Protection of Personal Data and other applicable legal acts regulating the protection of personal data.
The terms used in the Privacy Policy are understood as they are defined in the GDPR.
PRINCIPLES OF DATA PROCESSING
When processing your personal data, we:
- we will comply with the requirements of valid and applicable legal acts, including the GDPR;
- we will process your personal data in a lawful, fair and transparent manner;
- we will collect your personal data for specified, explicit and legitimate purposes and will not further process it in a manner incompatible with those purposes, except to the extent permitted by law;
- we will take all reasonable measures to ensure that personal data that are inaccurate or incomplete, having regard to the purposes of their processing, are promptly rectified, supplemented, their processing suspended or destroyed;
- we will keep them in a form that allows you to be identified for no longer than is necessary for the purposes for which the personal data are processed;
- we will not provide personal data to third parties or make them public, except as specified in the Privacy Policy or applicable laws;
- We will ensure that your personal data is processed in such a way that appropriate technical or organizational measures ensure adequate security of personal data, including protection against unauthorized or unlawful processing of data and against accidental loss, destruction or damage.
INFORMATION COLLECTED ABOUT YOU AND USE OF THE INFORMATION COLLECTED
We may use the information we collect and process personal data for the following purposes:
- for the purpose of providing services (including healthcare services), concluding and executing a contract, including transferring your health data to laboratories and other healthcare institutions when additional tests are necessary:
| Data categories | For this purpose, we will process your name, surname, contact details (telephone number, e-mail address), date of birth, insurance ID number, special category data (services provided, tests, diagnoses, visits to specialists, descriptions of services provided, medical histories, health data, referrals, consent forms for procedures, etc.), photographs (including of individual body parts). |
| Legal basis for processing | The legal basis for the processing of personal data is provided for in Article 6(1)(a), (b) and (c), Article 9(2)(a), (b), (c), and (h) of the GDPR. |
| Processing times | We will process this data of yours within the time limits set by legal acts. Client agreement – 10 years after the end of the agreement; Outpatient health history of the individual – 15 years after the last visit; Outpatient treatment statistical card of the individual – 5 years after the last visit; Outpatient patient registration journal – 5 years after the last visit. |
| Data source | We receive your data directly from you, as well as from other healthcare institutions, laboratories, and territorial health insurance funds. |
| Categories of data recipients | We may transfer your data to other healthcare institutions, territorial health insurance funds, insurance companies, laboratories conducting research, institutions investigating disputes, as well as to our Company’s auditors and legal advisors, in accordance with the procedure established by law. |
- For registration and visit administration purposes
| Data categories | For this purpose, we will process your name, surname, contact details (telephone number, email address), date of birth, and insurance ID number. |
| Legal basis for processing | The legal basis for the processing of personal data is provided for in Article 6(1)(b) and Article 9(2)(a) of the GDPR. |
| Processing times | We will store information about your visit registration for no longer than 5 years after your visit. |
| Data source | We receive your data directly from you. |
| Categories of data recipients | We may transfer your data to suppliers providing online registration services (www.manodaktaras.lt) and website support services. |
- For the purpose of customer service (administration of requests, inquiries, complaints, feedback or other communication from interested parties)
| Data categories | For this purpose, we will process your name, surname, telephone number, e-mail address, and the content of your communication with the Company. |
| Legal basis for processing | We will process this data in accordance with Article 6 of the GDPR. 1 d. a, f ir BDAR 9 str. 2 d. on the basis of point a. |
| Processing times | Jūsų duomenis tvarkysime 1 metus nuo Jūsų kreipimosi dienos, išskyrus jei duomenis būtina tvarkyti ilgiau, siekiant išspręsti pretenziją, yra atliekamas tyrimas ar kitas ginčo nagrinėjimo procesas – iki ginčo nagrinėjimo pabaigos. |
| Data source | We receive data directly from you. If you submit a complaint to a supervisory authority, we may receive your data from these authorities. |
| Categories of data recipients | We may transfer data to suppliers providing online registration services, website support services, dispute resolution institutions, as well as to our Company’s auditors and legal advisors. |
- For direct marketing purposes
| Data categories | For this purpose, we will process your phone number, email address, age, gender (in order to provide you with the most suitable offer). |
| Legal basis for processing | We will process this data in accordance with Article 6 of the GDPR. 1 d. on the basis of point a. |
| Processing times | We will process your data for 5 years from the date of receipt of your consent or until you withdraw your consent. |
| Data source | We receive data directly from you. |
| Categories of data recipients | We may transfer data to suppliers providing online registration services, website support services, and direct marketing services. |
- Recording telephone conversations for the purpose of quality improvement and contract conclusion (evidence of contract terms)
| Data categories | For this purpose, we will process your phone number, the content of the conversation, and the time of the call (start and end time). |
| Legal basis for processing | We will process this data in accordance with Article 6 of the GDPR. 1 d. on the basis of point a. |
| Processing times | We will process your data for no longer than 6 months from the date of recording the conversation. |
| Data source | We receive data directly from you. |
| Categories of data recipients | We may transfer data to companies providing telephone call handling, communication services, and data storage services. |
- For the purpose of protecting persons and property
| Data categories | For this purpose, we will process your image when you visit our Company’s premises. |
| Legal basis for processing | We will process this data in accordance with Article 6 of the GDPR. 1 d. on the basis of point f. |
| Processing times | We will process your data for a maximum of 14 days from your visit to our Company, or for a longer period if there is reason to suspect that the video recording will be needed for an investigation or possible crime. In such a case, we will retain the video data until the final investigation of the incident and a decision is made. |
| Data source | We receive data from video surveillance cameras installed on the Company’s premises. |
| Categories of data recipients | Companies providing video surveillance (security) services. |
- For the purpose of providing other services (to register you so that you can use our online shopping service; to pay for your shopping cart through a selected external banking service provider, accounting and fulfillment of tax obligations, etc.):
| Data categories | For this purpose, we will process your name, surname, telephone number, email address, residential address, and other data that you provide to us. |
| Legal basis for processing | We will process this data on the basis of Article 6(1)(a), (b), and (c) of the GDPR. |
| Processing times | We will retain your data for 5 years after the last day you used our services or content. After this period, the data will be deleted in a way that makes it impossible to reproduce it. |
| Data source | Personal data is obtained when a website visitor visits the website and/or submits it to the website. |
| Categories of data recipients | The information required for payment processing and confirmation will be transferred to entities processing payments in the online store. Also to our partners providing delivery of goods or other services you have ordered. We will provide these service providers with only as much of your personal information as is necessary to perform the specific service. |
Other information we collect:
We may also collect other information about you, your device, or your use of our website content with your consent. You may choose not to provide us with certain information (such as information requested when registering with our online store), but in this case you may not be allowed to use the online shopping service we offer.
The collected information may be disclosed to law enforcement institutions in accordance with the procedure provided for by the legal acts of the Republic of Lithuania.
YOUR RIGHTS
The data subject whose data is processed by the Data Controller has the following rights:
- to know (be informed) about the processing of your data (right to know);
- to have access to your data and how it is processed (right of access);
- to request the correction or, taking into account the purposes of personal data processing, the completion of incomplete personal data (right to rectification);
- to destroy your data or to stop the processing of your data (except for storage) (right to destruction and right to be forgotten);
- to require the Data Controller to restrict the processing of personal data on one of the legitimate grounds (right to restriction);
- the right to data portability (right to portability);
- object to the processing of personal data where such data is processed or is intended to be processed for direct marketing purposes, including profiling insofar as it is related to such direct marketing. If you no longer wish your personal data to be processed for direct marketing purposes, including profiling, you may write an e-mail to the address specified in this Privacy Policy or call us by phone and object to the processing of your personal data for direct marketing purposes and/or to the processing of your personal data solely by automated means, including profiling*, without giving any reasons for your objection;
- lodge a complaint with the competent supervisory authority. If you believe that your personal data is being processed unlawfully or your rights are being violated, you have the right to lodge a complaint with the State Data Protection Inspectorate (L. Sapiegos g. 17, Vilnius, tel. (370 5) 271 2804, 279 1445, e-mail
ada@ada.lt ) or with the supervisory authority in another European Union Member State where you have your permanent place of residence or place of work (list of supervisory authorities:https://edpb.europa.eu/about-edpb/about-edpb/members_lt#member-lt ). In all cases, before filing a complaint, please contact us so that we can find an appropriate solution together. - The right to compensation for damages due to improper processing of personal data.
*Based on the personal data you have provided, your personal data may be profiled for the purpose of direct marketing in order to offer you individually tailored solutions and offers. You may withdraw your consent to the processing of personal data by automated means, including profiling, or object to it at any time. The Data Subject has the right to submit any request or instruction related to the processing of personal data to the Data Controller in writing in one of the following ways: by direct delivery; by post; by e-mail (addresses are specified in this Privacy Policy). Upon receipt of such a request or instruction, the Data Controller shall, no later than within one month from the date of the request, provide a response and perform the actions specified in the request or refuse to perform them. If necessary, the specified period may be extended for another two months, taking into account the complexity and number of requests. In such case, within one month from the date of receipt of the request, the Data Controller shall inform the Data Subject of such extension, together with the reasons for the delay. The data controller may not create conditions for data subjects to exercise the above-mentioned rights, except for disagreement with the processing of personal data for direct marketing purposes, when, in cases provided for by law, it is necessary to ensure the prevention, investigation and detection of crimes, violations of official or professional ethics, as well as the protection of the rights and freedoms of the data subject or other persons. .
The Data Controller informs that the implementation of the above rights may depend on the conditions for the implementation of a specific right established in legal acts, therefore, in the presence of specific grounds established in legal acts, the Company has the right to refuse to satisfy your request to implement a specific right in a reasoned letter.
Your request for the exercise of your rights will be processed within 1 month, and if necessary, this period may be extended to 2 months. The Company will inform you about the extension of the period for processing your request.
FINAL PROVISIONS
Personal data is protected from loss, unauthorized use and alteration. We have implemented physical and technical measures to protect all information we collect for the purposes of providing our services. Please note that while we take reasonable steps to protect your information, no website, online transaction, computer system or wireless connection is completely secure, and you assume the risk associated with the transmission of data.
The Website may contain links to external websites, such as those of our business partners or websites that advertise our products and/or services. When following such links to any of these websites, please note that these websites and the services they provide have their own privacy policies and we are not responsible or liable for these policies or for the personal data collected on these websites or in the course of providing the services, such as contact or location data. We recommend that you review these policies before providing any personal data to these websites or using any of the services.
The Data Controller has the right to unilaterally change or update this Privacy Policy.
