Privacy Policy

General

The controller of personal data is Valvekliinik OÜ, registry code 11576944, address Sepapaja 12/1, 3. korrus, 11415 Tallinn, who has undertaken to protect and respect Your privacy.

We collect the data requested on this website in order to provide a service to a person, to identify a person, to contact a person, or to resolve questions concerning a person.

Valvekliinik OÜ is the controller of the personal data that is collected on this website. Valvekliinik OÜ complies with Estonian and European Union legislation when processing personal data of patients and entitled third parties. 
Valvekliinik OÜ uses the personal data of the Patient and entitled third parties for the purposes for which our center has collected this data and to the extent necessary to fulfill these purposes.

In addition, specific terms apply to Valvekliinik OÜ’s online consultations, which are outlined below in the section “Online Consultation Terms“.

Sharing of personal data

Valvekliinik OÜ may share Your personal data with companies that offer us supportive services such as website analysts and companies offering customer service. The aforementioned companies are authorized to use personal data only for the purpose of providing services that have been requested by us. Where a provider (e.g. Google, Meta) transfers data outside the European Economic Area, this is based on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses. 

We may disclose Your personal information directly or indirectly to third parties if we use the services of third parties to develop and/or maintain our website and/or to provide web hosting or other technical services. We will only share Your personal information with third parties as described in this Privacy Statement. We will not sell Your personal information to third parties.

Valvekliinik OÜ shares personal data to the following recipients:

• Service providers in order to fulfill obligations arising from laws; 
• To related third persons, with the consent of the Patient;
• Guardians;
• Specialists;
• Health Insurance Fund;
• Health information system;

How Valvekliinik collects personal data

We collect personal data directly from subjects with their consent, either by e-mail, or by receiving feedback with the inquiry form (incl. agreeing to receive letters from us). For data about visits to this website, see “Cookies and similar technologies”. 

Cookies and similar technologies

Your choice. On your first visit you see a cookie banner. Necessary cookies are always on. Analytics and marketing cookies, and the scripts that use them, load only with your consent. If you make no choice, reject, or close the settings window, they are not loaded. You can change your choice or withdraw consent at any time with the “Cookie settings” link at the bottom of the page. Your choice is kept for 6 months.

Necessary cookies. cc_cookie (your cookie choice, 6 months). On pages with a contact form, Google reCAPTCHA (Google Ireland Ltd) protects the form from spam. To do this, Google receives device and browser data and your IP address, and may set the _GRECAPTCHA cookie (6 months). reCAPTCHA is not loaded on pages without a form. The legal basis is our legitimate interest in protecting forms from abuse.

Analytics (with your consent). Google Analytics 4 (Google Ireland Ltd) shows which pages are viewed and how the site is used, so we can improve it. Your name, personal ID code and anything typed into forms are not sent to Google. Words typed into the site search are not passed to Google. Cookies: _ga, _ga_8XVJ1D2639 (13 months).

Marketing (with your consent). Google Ads (Google Ireland Ltd) and Meta Pixel (Meta Platforms Ireland Ltd) help us measure whether our ads on Google and Facebook reach people looking for our services, and show our ads to people who have visited our website before (remarketing). To do this, information about your visit is shared with Google and Meta, such as the page viewed, device and browser data and your IP address. They are used only on the home, price list, doctors and occupational health pages; they are not used on booking, contact or health-topic pages. Cookies: _gcl_au (13 months), _fbp (3 months), Google advertising cookies (doubleclick.net).

Google Maps. The map loads only when you click “Show map”. Google then receives your IP address and may set its own cookies. You can also open the address directly in Google Maps.

Booking (eKliinik). The booking page shows the eKliinik booking system (connectedserver.eu), run by our service provider, inside the page. The provider’s terms apply inside that frame. Tools running in the frame (including Google services) are not controlled by our cookie banner.

Cookieless statistics. We also use cookieless visit statistics (Plausible, mango.dignicy.com). It stores nothing on your device and builds no profile of you. The legal basis is our legitimate interest in knowing how many people visit the site.

Transfers outside the European Union. Google and Meta may transfer data outside the European Union (USA). Such transfers are based on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

Legal basis. The legal basis for analytics and marketing cookies, Google Maps and the related processing is your consent (GDPR Art. 6(1)(a)). Withdrawing consent does not affect processing that took place before.

Purposes for gathering and processing personal data of a patient

We may gather and process the following data tied to You:

• Information that You present or have previously presented on our website, including information presented via interactive applications (for example form for renewal of repeat prescriptions);
• If you have contacted us via e-mail, we may store the e-mail collaboration and all of its contents;
• Technical data about visits to this website (e.g. IP address, browser); see “Cookies and similar technologies”.

We gather and process patient personal data for the following purposes:

• In order to fulfill obligations rising from the law;
• To form a health card;
• To register for medical services;
• To provide medical services;
• To provide emergency first aid;
• To provide a referral to a specialist;
• To perform necessary analyses;
• To compile lists;
• To forward invoices;

Processing personal data of a patient in order to form a health card

In order to form a health card, Valvekliinik OÜ collects the following personal data from You:

• First and last name;
• Birthday, -month, and –year;
• Personal identification code;
• The address for the minor’s place of residence, also the place of residence registered in the passport;
• Phone number and if possible, the place of residence registered in the passport;
• The name of childcare institution, school, or workplace;
• Name of workplace and title for working patients;
• In case of permanent incapacity for work, the percentage of incapacity for work needs to be indicated;
• In case of disability, the severity of the registered disability;
• Type of state pension, number of the pension certificate, and name of the issuer;
• The date of registering the patient in the patient list
• The first and last name, and the phone number of the patient’s family physician;
• Any allergies to medication or foods;
• Blood type and Rh affiliation;
• For regularly used medicines – the name of the medicine, the name of the active substance, the form of medication, single dosage amount, daily dosage amount;
• Immunization dates and names of vaccines;
• Any health risks like smoking, under- or overweight, alcohol or substance use;
• Occupational and workplace hazards such as noise, vibration, chemicals, radiation, asbestos, forced posture, weight lifting, physical and mental overload, and other health hazards;
• Any surgical operations;
• Anamnesis;
• Names of any diagnosed illnesses;
• Results of any examinations, testing, and consultations;
• When writing an incapacity for work certificate, its number, start and end dates, issue of a duplicate; the reason, content, and duration for temporary relief of working conditions or transfer to another job (start and end dates) if the doctor or midwife decides on the need for it;
• Name and quantity of the medicinal product when issuing a prescription; in the case of a prescription for a medicinal product to be reimbursed by the Health Insurance Fund, also the prescription number and the discount rate.

Online Consultation Terms

Valvekliinik OÜ offers the possibility of online consultations with a doctor. By booking and using an online consultation, you agree to the following terms:

• Prescription sleep medications, sedatives, strong painkillers, and antibiotics will not be issued through an online consultation.
• Only one health issue can be addressed per consultation.
• Payment for the online consultation must be made via the payment link provided by the doctor.
• The consultation fee is non-refundable.
• By using the online consultation, I give my consent for my health information to be accessed so that the healthcare professional can provide appropriate advice.

Ways of using the data on the website

Valvekliinik OÜ can use data about You to:

• Provide the contents of our website for the most efficient way for You and Your computer;
• To contact You in regards to questions about the functionality of the website and technical questions regarding the use of the website;
• To fulfill duties that we have based on the contracts between us;
• To give You the option to use our interactive applications, if You would like to,
• To advise You of changes to our services;

We may use Your data for statistical purposes in order to collect concentrated data about the browsing activities and habits of the people who visit our website. We look at statistics in aggregate, and we use analytics only with your consent (see “Cookies and similar technologies”).

Marketing and newsletter

If you have given separate consent (for example by subscribing to the newsletter), Valvekliinik OÜ may use your email address and name to send you news, health tips, reminders and special offers. Consent is voluntary and is not a precondition for receiving our services.

The legal basis for sending marketing messages is your consent (Article 6(1)(a) of the General Data Protection Regulation). In addition, we may send existing patients messages about similar services on the basis of § 103¹ of the Electronic Communications Act, always offering the option to opt out of such messages.

You have the right to withdraw your consent at any time. Every marketing email contains an unsubscribe link, and you may also stop the notifications by contacting info@valvekliinik.ee. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Data entered on other websites

The articles on this website may contain embedded content from other sources (for example videos, pictures, articles, etc.). The content from other sources acts in the same way as if the user would be using this content on the source page. These websites may collect information about You, use cookies, add third-party tracking, and monitor your interactions with that embedded content. The Google Maps map loads only when you click “Show map” (see “Cookies and similar technologies”).

How long does Valvekliinik OÜ store Your data?

Valvekliinik OÜ does not store any data collected on our website for longer than we would need for the purpose of the data collection and the purposes for obligations deriving from laws.

In case that we have fulfilled the purpose of data collection, we will delete all unnecessary personal data as follows:

• The health card and personal data collected on it will be stored for at least 110 years from the date of birth of the patient;
• The data of a third entitled person * appointed by the Patient shall be deleted by revoking the consent of the entitled person, revoking the Patient’s authorization, or the death of the Patient;
• Your cookie choice (cc_cookie) is kept for 6 months, analytics cookies for 13 months and marketing cookies for up to 13 months (see “Cookies and similar technologies”);
• Google Analytics event data is kept in Google Analytics for up to 14 months;

*Third entitled person – a person who is entitled to receive special types of personal data about the Patient with the consent and authorization of the Patient.

Legal basis for the processing of personal data

• Valvekliinik OÜ has the right to process special types of personal data for a patient based on the Health Services Organisation Act;
• Valvekliinik OÜ has the right to process personal data (which does not belong to special types of personal data) in accordance with the procedure for documenting the provision of health care services and the conditions for storing these documents.
• The personal data of a third entitled person are processed according to the entitled person’s agreement and the Patient’s wishes.
• Personal data is processed in order to fulfill other obligations arising from the legislation of the Republic of Estonia.

Your rights

Valvekliinik OÜ finds that the rights of the subjects of personal data are important. The rights you have regarding your personal data are listed below:

• You have the right to contact Valvekliinik OÜ at any time regarding any questions You may have regarding the processing of personal data, by e-mailing the address info@valvekliinik.ee.
• You have the right to request for Valvekliinik OÜ to stop processing or to delete Your data (right to be forgotten).
• You have the right to tick a certain box on the forms to block the processing/collection of personal data.
• You have the right to contact Valvekliinik OÜ at any time to update your personal data, if it has changed.
• You have the right to know whether we have any data regarding You, to access this data, and demand that it is corrected, in case there are any mistakes in it.
• You have the right to request the deletion or blocking of Your personal data if the processing is not in compliance with the applicable legal requirements regarding privacy.
• You have the right to object to processing of your personal data that is based on our legitimate interest (GDPR Art. 21).
• You have the right to receive the personal data you provided to us in a machine-readable format and to transmit it to another controller (right to data portability, Art. 20).
• You have the right to withdraw your consent at any time. You can withdraw cookie consent with the “Cookie settings” link at the bottom of the page.
•  You have the right to turn to the Estonian Data Protection Inspectorate (www.aki.ee, info@aki.ee) in connection with complaints concerning the processing of personal data.

Any inquiries regarding processing data are replied to within 14 working days since receiving the inquiry. If the person submitting the request sends redundant, identical, and overly burdensome inquiries, Valvekliinik OÜ has the right to charge a reasonable fee for answering the inquiry.

In case that Valvekliinik OÜ is unable to satisfy the submitted request, any reasons for the refusal shall be provided.

Changing the procedure for personal data protection of Valvekliinik OÜ

Valvekliinik OÜ can change the Privacy Policy at any time based on the personal data protection requirements.

Valvekliinik will publish the updated version of the Privacy Policy on their website.

Contacts of Valvekliinik OÜ

In case You have any questions, remarks, or information regarding personal data protection, please e-mail us at info@valvekliinik.ee