The clinic cares about your privacy
SIA "AJKC esthetic", registration number: 40203457667, which operates the Re.New aesthetic medicine clinic, (hereinafter referred to as the Clinic), the main activity of which is aesthetic medicine services, apparatus cosmetology and dermatology, for the implementation of which such devices as Lumenis Stellar M22, Geneo X, NuEra, LightSheer are used.
The Clinic is considered a Controller with respect to the processing of your personal data within the meaning of the General Data Protection Regulation.
The purpose of this privacy policy is to inform you as clearly and comprehensibly as possible about how and why the Clinic uses your personal information. For this reason, we widely use non-legal language and simple sentence structures in this privacy policy.
The goal of the Clinic is to make you feel safe when disclosing your personal data to the Clinic. Personal data is any information that can be used to identify a natural person. The Clinic takes appropriate measures to ensure that your personal data is secure and that your personal data is processed in accordance with applicable data protection legislation and the Clinic's internal procedures. It is important for the Clinic to ensure transparency and openness when processing your personal data. The Clinic is committed to protecting your personal information and respecting confidentiality in everything the Clinic does. This policy allows you to find out what personal data the Clinic may obtain about you, how the Clinic will use it, what your rights are and how you can contact the Clinic. The Clinic may need to update the Privacy Policy. Any changes will be published on the Clinic's website, which, of course, are available to you at any time.
What personal data does the Clinic process and to whom is it transferred?
In order to ensure the performance of the Clinic's functions, we may need to process your personal data, for example:
Providing communication:
PURPOSE: collecting and processing submitted questions, suggestions, complaints and other information in order to prepare answers and ensure communication with the addressee. Communication can take place using the contact forum available on the website or in a free form.
PERSONAL DATA CATEGORIES: Name, surname, contact information, other personal information contained in the question, suggestion or complaint.
LEGAL BASIS: Consent of the data subject - the person submits the aforementioned information to the Clinic by his/her active action.
Organization and provision of consultations:
PURPOSE: the submitted application for consultations or procedures is processed in order to organize a visit, provide a consultation and make an appointment for the procedure. The organization of consultations can take place using the contact forum available on the website, by telephone or in another form.
PERSONAL DATA CATEGORIES: Name, surname, time of visit, information provided during the consultation, recommendations, etc.
LEGAL BASIS: Consent of the data subject and fulfillment of mutual obligations, as the person provides the necessary information to the consultation organization, arrives for the visit and makes payment in accordance with the price list.
Provision of aesthetic medical services:
PURPOSE: to provide high-class consultations and aesthetic medical services, procedures, etc.
PERSONAL DATA CATEGORIES: Health data according to the situation of each person and the performed manipulation: results, patient file, which records the performed service, etc., prescribed recommendations, etc.
LEGAL BASIS: In accordance with the contract concluded with the client and the requirements of regulatory enactments.
Payment administration and accounting organization:
PURPOSE: to administer settlements for the services provided and comply with the requirements of the regulatory framework for accounting.
PERSONAL DATA CATEGORIES: Name, surname, bank account, payment information.
LEGAL BASIS: In accordance with the contract concluded by the client and the requirements of regulatory framework.
Organization of records:
PURPOSE: recording and storage of medical documentation, outgoing and incoming correspondence, contracts, etc.
PERSONAL DATA CATEGORIES: Medical documentation, correspondence, contracts containing personal data.
LEGAL BASIS: Depending on the type of documentation, it may be stored to implement its legitimate interests, for example, to defend interests in court, to comply with the requirements of regulatory enactments, for example, Cabinet of Ministers Regulation No. 265 of April 4, 2006 “Procedures for the Management of Medical Documents”, etc.
Customer reviews:
PURPOSE: customer reviews may be made public to promote the Clinic's awareness and share other clients' experiences.
PERSONAL DATA CATEGORIES: Name of the person, review, which may contain information about the procedure performed and experience.
LEGAL BASIS: Consent.
News posts:
PURPOSE: For marketing and public information purposes, posts may be prepared about events and activities organized or sponsored by the Clinic. Posts are published on the Clinic's website and/or social networks, such as Facebook, Instagram, etc.
PERSONAL DATA CATEGORIES: Posts prepared by the Clinic may include photos, names, surnames, etc. of event participants and/or visitors.
LEGAL BASIS: Legitimate interest – informing the public about the Clinic's activities.
Competitions:
PURPOSE: For marketing and public information purposes, competitions may be organized, the results of which are published.
PERSONAL DATA CATEGORIES: For example, photographs, names, surnames, etc. of competition participants and/or winners in accordance with the competition regulations/rules.
LEGAL BASIS: Consent of participants when participating in the competition.
News:
PURPOSE: Informing customers and other interested parties about our news, discounts, etc.
PERSONAL DATA CATEGORIES: E-mail and/or telephone number (optional), name, surname.
LEGAL BASIS: Consent. You can opt out of receiving commercial communications at any time by clicking on the relevant link in the e-mail or by writing us an informative e-mail, or by confirming in person with an application/form.
Cookies:
PURPOSE: Cookies are small text files that are created and stored on your device (computer, tablet, mobile phone, etc.) as an Internet user when you visit our website. Cookies “remember” the visitor’s experience and basic information and thus improve the usability of the website. Cookies are used to process historical data about the website’s use, diagnose problems and shortcomings in the website’s operation, collect statistics on user habits, and ensure full and convenient use of the website’s functionality.
PERSONAL DATA CATEGORIES: Cookies.
LEGAL BASIS: Strictly necessary cookies are placed automatically and, in accordance with regulatory regulations, do not require the user’s consent. For other cookies, we will ask for your consent, if necessary. If you do not want to allow the use of cookies, you can stop it by using your internet browser settings, however, in this case, the use of the website may be disrupted and difficult. You can delete saved cookies in the settings section of your device's internet browser by deleting the saved cookie history.
Your personal data is safe and will not be transferred to other persons in an inappropriate manner. In exceptional cases, personal data may be transferred to state institutions in cases and to the extent specified in the regulatory framework.
The clinic uses the information system “Smart Medical”. The developer and maintainer of the “Smart Medical” system is SIA “Blue Bridge Technologies”, registration number: 40003932716, which is one of the leading Latvian companies in the development of information technology systems in the healthcare sector. SIA “Blue Bridge Technologies” is the owner of the information system, which provides technical support in cases where the system has technical errors. The Clinic's rights to use the “Smart Medical” system, as well as aspects of personal data protection, are regulated by an agreement concluded with SIA “Blue Bridge Technologies”. This information system ensures efficient information exchange from the reception to the specialist offices, as well as client registration and payments are administered in it. The client can obtain more information about the processing of personal data in this system:
in their agreement concluded with the Clinic;
by writing to us at info@re-new.lv.
Your personal data is not processed in countries outside the European Union and the European Economic Area.
From what sources does the Clinic obtain personal data?
You as a data subject
The clinic obtains your personal data directly from you as data subjects, for example:
-
when signing up for consultations, procedures;
-
when receiving and reviewing submitted questions, suggestions and complaints;
-
when submitting personal data for participation in a competition, etc.
Are created as a result of the process
-
personal data is generated during the provision of the service, for example, diagnostics;
-
when visiting the Clinic premises (video surveillance);
-
cookies.
How long is your personal data stored?
Personal data is stored until:
-
for the fulfillment of an obligation imposed by regulatory framework (e.g. accounting requirements);
-
if processing is based on consent, personal data are processed as long as the consent given is valid and has not been withdrawn;
-
to achieve the specified purpose of processing.
Video surveillance recordings are stored for a maximum of 30 days. Recordings are deleted automatically in chronological order from the moment of recording. Individual recordings may be stored for a longer period of time if this is necessary to achieve certain purposes, for example, for the purposes of investigating incidents and offenses.
A longer storage period for personal data is permissible to meet regulatory requirements regarding the minimum period for storing documents or information or to protect the Clinic's legitimate interests, for example, in the event of legal proceedings. When providing services, we comply with special regulatory acts that determine our obligation to store certain data. If you would like to know more detailed information, please contact us.
Once this period has expired, the Clinic will securely delete your personal data or make it inaccessible (archiving) or de-identified so that it can no longer be linked to you.
How does the Clinic protect your personal data?
Your medical records and the information contained therein cannot be accessed by persons not involved in the treatment process. Your records, medical records and the information contained therein are stored in a separate locked room or in locked cabinets, secured against access by persons not involved in the treatment process. The keys to the room or cabinets are kept by the responsible person.
Patients' personal data are stored on Smart Medical servers in a data center, which is provided with special monitoring, including - a video surveillance system that records what is happening in the data center premises and its surroundings 24/7 (compliance with Tier IV security standards); security and special access to premises of various purposes are provided, including - using biometric access - electronic security systems that verify and identify persons by physical characteristics and indicators.
The clinic provides, constantly reviews and improves security measures to protect your personal data from unauthorized access, accidental loss, disclosure or destruction. To achieve this, the Clinic uses modern technologies, technical and organizational requirements, including firewalls, antivirus programs, encryption.
However, the Clinic recommends that you follow the general security rules for using devices and the Internet, as well as the requirements for protecting and storing your private data (especially personal identification documents). The Clinic is not responsible for unauthorized access to your personal data and/or loss of data if this occurs due to your fault or negligence.
In the event of an incident of security of your personal data, if it poses a potentially high risk to your rights and freedoms, we will immediately notify you, if possible, by publishing the information on our website or in another possible way.
Your rights
The regulatory framework in the field of data protection grants you several rights to influence the processing of your personal data. To exercise these rights, please submit a written application to the Clinic: in person at the Clinic's premises at Marijas Street 13-1 (3rd floor, entrance from Berga Bazar side), Riga, LV-1050 (you must bring your passport or ID card) or by sending an application signed with a secure electronic signature and time stamp to info@re-new.lv. After receiving the application, the Clinic will identify you, i.e. make sure that you are the same person you claim to be, and will provide you with an answer within one month.
Access to personal data: You have the right to request confirmation from the Clinic whether it is processing your personal data, and in such cases, request a copy of the personal data being processed.
Correction of personal data: If you believe that the information about you is incorrect or incomplete, you have the right to ask the Clinic to correct it.
Withdrawal of consent: To the extent that the Clinic processes your personal data based on your consent, you have the right to withdraw your consent to the processing of your personal data at any time. In such a case, the Clinic will stop processing your personal data for the purpose for which you provided your consent. Please note that withdrawal of consent will not give you the right to challenge the lawfulness of the data processing carried out by the Clinic until the withdrawal of consent.
Deletion: In certain circumstances, you have the right to ask the Clinic to delete your personal data. However, please note that deletion of data is not possible in cases where data processing results from regulatory regulations. After the data is no longer necessary for the performance of the specified functions, the Clinic deletes, archives or makes it inaccessible/unidentifiable in some other way.
Restriction of processing and objection to data processing: In certain circumstances, you have the right to ask the Clinic to restrict the processing of your personal data. However, please note that restriction of processing is not possible in cases where data processing results from regulatory regulations.
Data portability: In certain circumstances, you have the right to receive or transfer your personal data to another data controller. This right only includes data that you have provided to the Clinic based on your consent or contract.
Right to contact the Data State Inspectorate: We value your privacy and invite you to contact the Clinic in case of questions and uncertainties, however, if you believe that your personal data is being processed inappropriately, you have the right to contact the Data State Inspectorate. If you are not satisfied with the response received, you have the right to file a complaint with the Data State Inspectorate.
Who can you contact if you have any questions?
If you have any questions about the processing of your personal data, please contact the Clinic.
Clinic contact information:
Address: Marijas Street 13-1 (3rd floor, entrance from Berga Bazar side), Riga, Latvia, LV-1050
Registration number: 40203457667
E-mail: info@re-new.lv
Information phone: +371 67783588
Data protection specialist contact information:
E-mail: info@re-new.lv with the indication “data protection specialist”.
Version 1.0