Data Protection Procedure

"GP Klinika" Personal Data Processing Policy

Data controller:

"G.Papečkio įmonė"
Zamenhofo St. 7, Kaunas city.
LT-44287
Company code: 135285880
VAT number: LT100005707012
Mobile: +370 656 82505

Other terms used to describe the data controller in this description: “We”, ”Data Controller”, ”Clinic”, “Aesthetic Surgery Clinic”, “Plastic Reconstruction Clinic”.

Introduction

At "G.Papečkio įmonė" Special attention is paid to the security of customer and partner data. The staff is trained and adheres to strict requirements when working with the personal data of customers or partners. In G. Papečkis' company, data is processed transparently, clearly defining the purpose, scope, transfer limits, establishing the rights of the controller and processors, respecting and fulfilling obligations to the data subject. G. Papečkis Clinic presents all essential aspects of data processing in its daily activities in this data processing policy.

This description provides all information on how personal data is processed when visiting websites, the Facebook page, or sending emails from a computer or a device that supports telephone communication, covering the following topics:

How customers' personal data is used
What personal data is collected?
What measures are used to ensure data security?
How users can help protect their personal data
Data subjects' rights
Legal framework
Cookies
Contact Information
Third parties/Third parties and micro-websites

How personal data is used

Basic information

"G.Papečkio įmonė" uses personal data for the following purposes:

Providing clinic services or goods to clients;
Improving the quality of services provided;
When creating a website or Facebook or similar social network page;
Writing invoices, accepting and transferring payments;
To establish and confirm identity;
To ensure the prevention of money laundering and terrorist financing;
To ensure the provision of healthcare services;
To provide commercial offers and service descriptions electronically, but only with the consent of the data subject;
For marketing purposes, but only with the consent of the data subjects;
Allowing the clinic administration, Lawyers, Accountants, Auditors to verify information, conduct inspections, submit reports on activities performed, answer questions asked or communicate directly with the client;
Institutions inspecting healthcare activities, upon submission of a legally justified request to disclose certain, specifically specified data during the inspection;
Legal obligations (employment of employees, payment of salaries, subordination to Health Care Institutions, etc.);
In cooperation with law enforcement authorities, provided there is a real legal basis and a document proving it;

The clinic is not responsible for the security of data when the user connects via insecure Internet connection servers (e.g. public Internet connection and other connections of questionable security). .

Marketing Policy

Commercial offers for customers and partners

"G.Papečkio įmonė" company uses the personal data of customers and partners for electronic marketing purposes (only with the direct consent of the person) and for this purpose sends electronic offers to customers or partners with the latest offers from the clinic.
"G.Papečkio įmonė" aims to provide only information that is of interest to a specific data subject. These offers can be declined at any time in the following ways:
Stop sending offers when sending a request.
By clicking on the "unsubscribe from newsletter" link located inside each newsletter, at the bottom.
By calling the clinic reception and asking them to tell you how to opt out of receiving commercial emails.

All personal information is collected directly from the client/patient. We are not responsible for the marketing strategies used by sites such as Google, Bing, Yahoo, Facebook, Instagram and the like. However, to avoid any conflict of interest, we indicate how you can opt out of the collection of one or another information from the above-mentioned sites in the cookie usage graph.

Disclosure of data to third parties

Our company partners and data processors

In order for the clinic staff to provide certain services, we may need to disclose certain of your personal data to companies: medical research laboratories, IT companies, telecommunications companies, and health care regulatory authorities. Such disclosure of personal information to third parties is only possible if the companies have permission to receive personal information and evidence that data security will be ensured in accordance with the General Data Protection Regulation and other data protection laws.

List of people to whom your data may be or is being transferred:

Bank and bank representatives;
Insurance companies;
State supervisory control services (Ministry of Health, Public Health Center, and others);
Lawyers;
Judicial authorities, during the examination or execution of cases, upon separate lawful request;
In cases of ensuring the protection of our employees, inventory, tangible and intangible assets, to the institutions ensuring this;
For companies or individuals providing accounting services
For the Marketing Department;
For administration staff;
For medical and nursing staff;
To another medical institution, according to the legal basis;
Your workplace, at the patient's request (due to illness, sick leave, and similar cases);
Persons authorized by the patient, but only with a clear legal basis;
For a manager responsible for ensuring international communication (Medical Tourism).

In all cases of data transmission, we ensure all possible data transmission security.

Other stakeholders

In addition to the entities mentioned above, G. Papečkis' company never sells or otherwise transfers personal data to third parties, companies or individuals not specified in these rules.

Data transfer outside the European Union or the European Economic Area

The data you provide never and in no way travels outside the European Union or the European Economic Area. All information transmitted by you is stored on the servers of our verified companies or on external secure and encrypted media, in electronic format or on paper. This ensures data protection against unwanted loss, leakage, copying or other criminal disclosure.

Only a limited number of individuals who have such access to the data you provide may access it in order to perform their job functions. The groups of such individuals are discussed in the previously mentioned section on the purposes for which your provided data is used.

In all cases, if an unintended disclosure of data to third parties occurs, we react quickly and take all necessary security measures to prevent it. In the event of a breach, we always fulfill our data security obligations and inform the relevant Authorities and the data subject.

How long do we store your data?

When providing healthcare services, we are guided by legal instructions to keep your data only for as long as necessary, so we always review data and delete data that is no longer relevant. We keep different data for different periods of time, but the average data retention period is 25 years.

Your rights

Your rights to your personal data processed by GP Klinika:

You may require GP Clinic to inform you about the methods of information collection, duration, storage location, intervention of third parties, and the scope and purpose of the use of personal information, in accordance with the General Data Protection Regulation;
You may submit a request to access the data processed about you, correct or delete the information you have provided to GP Clinic, if there is an appropriate purpose and evidence, and the legal and technical possibility to do so;
You may request to transfer your data, provided that this does not violate data protection requirements;
You may refuse to provide certain personal information that is not necessary to provide a healthcare service. You will be informed of this option before you provide such information;
You can refuse the use of certain cookies or applications, as indicated in your browser's cookie policy (Cookies, use of cookies)
You can unsubscribe from the newsletter by simply clicking on the link below the newsletter text, which you can find in each newsletter message.

In all cases, please fill out a free-form application and send it to: dap@gpklinika.lt

We will review your request within 20 days and provide you with a response with the possibility of implementing your requests.

For additional questions, please contact: data protection officer:

dap@gpklinika.lt
Opening hours: Thursday 9 am - 4 pm

Legal framework

Laws under which your personal data is processed, used and stored at GP Clinic:

the Civil Code of the Republic of Lithuania;
Law of the Republic of Lithuania on the Management of State Information Resources;
the Law of the Republic of Lithuania on the Legal Protection of Personal Data;
Law on Cybersecurity of the Republic of Lithuania;
the Law on the Health System of the Republic of Lithuania;
The Law on Healthcare Institutions of the Republic of Lithuania;
The Law of the Republic of Lithuania on Patients' Rights and Compensation for Damage to Health;
The Law on Health Insurance of the Republic of Lithuania;
The Law on Pharmacy of the Republic of Lithuania;

Description of the Procedure for the Establishment, Development, Modernization and Liquidation of State Information Systems, approved by the Government of the Republic of Lithuania of 27 February 2013 Resolution No. 180 „On the Approval of the Description of the Procedure for the Establishment, Development, Modernization and Liquidation of State Information Systems“ (hereinafter referred to as the Description);

General Data Protection Regulation 2016/679.

Other legal acts regulating the secure processing, storage and destruction of electronic information;