Personal Data Processing
INFORMATION ON PERSONAL DATA PROCESSING
We take care of your health responsibly and recognize the importance of data protection. We respect and protect the privacy of each individual, and we make sure your personal data is handled responsibly. The Public Institution Centro Poliklinika (hereinafter referred to as “the Clinic”) processes personal data, including data of special categories, in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) as well as the provisions of the legal acts of the Republic of Lithuania regulating the activities of health care institutions and the provision of health care services.
Personal data is provided to:
- National Health Insurance Fund under the Ministry of Health and Territorial Health Insurance Fund (Vilnius, Kaunas, Klaipėda, Panevėžys, Šiauliai), in the compulsory health insurance information system SVEIDRA;
- The Ministry of Health in the Electronic Health Services and Cooperation Infrastructure Information System
- The State Social Insurance Fund Board under the Ministry of Social Security and Labour (SODRA);
- Disability and Working Capacity Assessment Office under the Ministry of Social Security and Labour;
- healthcare institutions where treatment, health examination or nursing services are/were provided to the patient;
- institutions controlling health care services;
- Commissions for the review of the condition of incapacitated persons to perform their functions;
- the Court, the prosecutor's office, pre-trial investigation institutions, municipal child rights protection divisions and other institutions to which such a right is granted by the legal acts of the Republic of Lithuania;
- insurance companies only with the consent of the individual.
By collecting and using your personal data received from you or other sources, we undertake to:
- process only for clearly defined and legitimate purposes;
- process lawfully, transparently, fairly in order to ensure the security of the data processed;
- ensure that redundant data is not processed;
- process for no longer than is necessary and only for specified purposes;
- perform other duties provided for by legal acts.
PATIENT’S RIGHTS AND THEIR ENFORCEMENT
The General Data Protection Regulation ensures the following rights for you:
- Know (be informed) about the processing of your personal data. The Clinic shall provide you with information on for what purposes and what data are processed or is intended to be processed as well as other additional information.
- Get acquainted with your personal data processed in the Clinic. You have the right to receive information on the sources of the data and what data is collected, the purpose for which they are processed and the recipients of the data. The Clinic, upon your request, shall provide the requested data no later than within 30 calendar days from the date of the request. Such data shall be provided by the data controller free of charge once per calendar year.
- Require to rectify, suspend or destroy ("the right to be forgotten") your personal data. You have the right to request to correct of incorrect, incomplete, inaccurate personal data and to request to destroy illegally, fraudulently obtained personal data or suspend the processing of such personal data, except for storage. The Clinic will immediately check such personal data and, if necessary, correct or destroy it.
- At your request, restrict the processing of personal data until the lawfulness of their processing has been verified, if you believe that the processing of data does not comply with the requirements of the law, the data is incorrect, incomplete or inaccurate, obtained illegally or unfairly.
- The right to personal data portability. You have the right to receive personal data relating to you that you have provided to the Clinic in a structured, commonly used and computer-readable format, and to request that such data be transferred to another data controller if technically possible.
- The right to object to the processing of personal data. In case your data is processed for the purposes of direct marketing or social and public opinion research, you have the right to object to the processing of your personal data without explaining the reason. And if you agreed earlier, you have the right to withdraw your consent at any time. In case the Clinic is in exercise of official authority under the law to process your data in the legitimate interest, you have the right to object to the processing of your personal data by submitting a written request to the Clinic, however, the objection must be legally justified. Upon receipt of such a request, the Clinic shall immediately terminate the processing of personal data free of charge and inform the data recipients thereof. At your request, the Clinic shall notify you of the termination of your data processing activities or the refusal to terminate the data processing activities. This right shall not apply if the processing is necessary to carry out a task in the public interest or to exercise of official authority vested in the Clinic.
You also have the right to submit a complaint to the Clinic regarding the institution's action (inaction) as well as any request or instruction related to the processing of your data to the Clinic in writing in one of the following ways:
- by delivering directly to the address: Pylimo Str. 3, LT-01117 Vilnius;
- by mail: PI Centro poliklinika, Pylimo str. 3, LT-01117 Vilnius;
- el. email: email@example.com.
Upon receipt of such a request or instruction, the Clinic shall, not later than within one month from the date of the request, provide a response and perform or refuse to perform the actions specified in the request. If necessary, this period may be extended by two months, depending on the complexity and number of applications. In this case, we will notify you of such an extension within one month of receiving the request as well as the reasons for the delay.
Video surveillance shall be performed in certain areas of the Clinic premises if it is necessary to ensure the security of the employees and the premises or the property and documents therein. Video surveillance locations are marked with the sign "Rooms are monitored by video cameras".
Image data is stored on digital media for 21 calendar days. At the end of the image storage period, the image data is automatically overwritten, deleting the oldest period.
Video surveillance is prohibited in the Clinic premises where the person has a reasonable expectation of absolute privacy and where such surveillance would violate human dignity (eg. toilets, showers, changing rooms, etc.)
Data Protection Officer
The task of the Data Protection Officer is to ensure the compliance of the activities of the institution with the General Data Protection Regulation, to participate in resolving issues related to personal data protection, to advise on personal data protection issues. The Data Protection Officer must ensure the secrecy or confidentiality related to the performance of his or her tasks in accordance with the law of the European Union or the Republic of Lithuania.
Data Protection Officer - Rolanda Adlienė - has been appointed in order to implement the requirements of the General Data Protection Regulation in the Polyclinic. If you have any questions regarding the processing of personal data and security, please contact us by e-mail firstname.lastname@example.org. or tel. (8 5) 26 10 410.