Data protection conditions

OÜ Sportomedica Data Protection Terms

OÜ Sportomedica processes personal data in accordance with the Personal Data Protection Act of the Republic of Estonia and the General Data Protection Regulation of the European Union.

  1. We process the personal data of our patients and clients on the basis of the Health Services Organisation Act, the Health Insurance Act and the Medicines Act. We process the personal data of job applicants and employees on the basis of the Employment Contracts Act. Personal health data of individuals is a special category of personal data.
  2. We collect personal data for specified purposes, which is mainly to provide healthcare services to our patients and clients, and this data is not used for other purposes. If we intend to further process personal data for purposes other than the purpose for which it was originally collected, we will provide you with relevant information about the purposes of further processing the data and will not process it for other purposes before obtaining your consent.
  3. When collecting personal data, we strictly limit ourselves to the data necessary to provide healthcare services to our patients and clients. The purpose of collecting personal data of job applicants and employees is to recruit the necessary employees and conclude an employment relationship with AS Orthopedica.
  4. In order to identify and correct incorrect personal data, we ask our patients, clients and employees from time to time for confirmation of the accuracy of the personal data.
  5. Personal data retention periods
    – We retain the health records of patients and clients for 110 years from the birth of the patient or client.
    – We retain student health records, echocardiographic examination protocols with images for 5 years.
    – We retain referrals, nursing histories, test results, etc. that are part of the medical history for 30 years after the end of the medical history.
    – In the case of job applicants with whom an employment relationship is not concluded, we retain CVs for one year from the rejection decision (basis – Equal Treatment Act).
    – We retain personal data until the end of the competition.
    – We retain employees’ employment contracts for 10 years after the end of the employment contract.
    – We store letters and accounting documents sent to AS Orthopedica for 7 years.
  6. We process personal data securely, protected from unauthorized or unlawful processing, accidental loss, destruction or damage. We only transfer personal data known to us to third parties in cases arising from legislation.
  7. By transferring your personal data to us, you have given us permission to process them. If personal data becomes known to us in another way, we will provide you with information about the processing of personal data within 1 month, unless
    – you already have this information,
    – providing the information is impossible or requires disproportionate effort (e.g. in the case of research and statistics),
    – obtaining or publishing personal data is provided for by law, or
    – personal data is covered by an obligation of confidentiality.

The notice we provide about the processing of your personal data (if personal data is not collected from the person himself/herself) contains the following information:
– our data as the controller;
– our data protection officer;
– legal basis and purpose of processing;
– types of personal data;
– information on legitimate interest;
– recipients of personal data;
– data retention period;
– transfer to a third country;
– source of personal data;
– automated decisions and profiling.

  1. We transfer personal data to third countries (outside the European Union) only if it is strictly necessary and if these countries have met the adequacy requirement for the protection of personal data.
  2. AS Orthopedica clients, patients, job applicants and employees have the following rights, both during the collection of personal data and in situations where data is not collected from the person themselves:
    – the right to request access to personal data concerning the person;
    – the right to request correction of data;
    – the right to request deletion of data;
    – the right to restrict the processing of personal data;
    – the right to object to the processing of personal data;
    – the right to request the transfer of personal data;
    – the right not to be subject to a decision based on automated processing
    – the right to withdraw consent;
    – the right to lodge a complaint with a data protection supervisory authority.

OÜ Sportomedica is responsible for compliance with the above conditions. Our contacts: tel. +372 6461436 and e-mail address info@sportomedica.ee

Annex to the agreement on one-time data transfer

For questions regarding the protection of personal data, you can contact data protection specialist Egle Rõivassepp by writing to the e-mail address egle.roivassepp@sportomedica.ee

With complaints regarding the processing of personal data, you can contact the Estonian Data Protection Inspectorate at the e-mail address info@aki.ee or by phone +372 627 4135.