Privacy policy
SIA “Gremošanas slimību centrs “GASTRO”” Privacy policy
Personal data controller:
SIA “Gremošanas slimību centrs “GASTRO””
Reg.Nr.40003575389
Legal adress: Gaiļezera street 1, Rīgā, LV-1079
Homepage: www.gastrocentrs.lv
Number: 25717172
E-mail: [email protected]
The privacy and personal data protection of patients and visitors (hereinafter referred to as data subjects) is important to SIA “Gremošanas slimību centrs “GASTRO”” (hereinafter referred to as GASTRO CENTRS), therefore all necessary measures are taken to ensure the security of data subjects’ personal data. This privacy policy has been developed to help data subjects understand how GASTRO CENTER takes care of their personal data, as well as to inform data subjects about their rights regarding their personal data.
General information
The purpose of the privacy policy is to provide the data subject with information about the purpose of personal data processing, the legal basis, the types of data processed, the data storage period, the recipients of the data, and the rights of the data subject.
The privacy policy applies to data processing regardless of the form or environment in which the data subject provides personal data to GASTRO CENTRS (in person, on the GASTRO CENTRS website, in paper format, by telephone, or by electronic means).
GASTRO CENTRS:
– protects the personal data of data subjects by implementing administrative, technical, and physical security measures to ensure that personal data is processed in accordance with the requirements of regulatory enactments;
– explains what personal data is necessary to receive services and how it will be processed in the future;
– processes the data subject’s personal data using modern technology, taking into account the existing risks and the organizational, financial, and technical resources available to GASTRO CENTER;
– improves the technical solutions at its disposal, taking into account current industry trends and opportunities.
The controller does not make any automated decisions or profile personal data.
The controller does not transfer personal data to third countries (countries outside the European Union and the European Economic Area).
Purposes of personal data processing, legal basis and personal data to be processed
Provision and administration of healthcare services:
For identification of the data subject – name, surname, personal identification number. If the data subject is a minor, the name, surname, personal identification number and contact details of the legal representative are processed.
Registration and administration of the data subject’s visit, communication – name, surname, personal identification number, contact information (telephone number, e-mail address); health information. If you book your visit by phone, a recording of the phone call, as GASTRO CENTRS records phone calls to ensure the quality of service.
When you make an appointment electronically on the GASTRO CENTRS website, GASTRO CENTRS obtains the following personal data: name, surname, personal identification number, date of birth, gender, declared place of residence, actual place of residence, e-mail address, telephone number, date and time of visit, type of healthcare service, and medical professional.
Before visiting the doctor, the data subject fills out a questionnaire about their health. GASTRO CENTRS sends a link to the questionnaire to the email address or phone number provided by the data subject. The completed health questionnaire is stored in GASTRO CENTRS’ technical resources and is available to the doctor. The identity of the data subject and confirmation that the completed health questionnaire has been received from a specific e-mail address is verified when the data subject arrives for their appointment.
Before visiting the doctor, the data subject fills out a questionnaire about their health. GASTRO CENTER sends a link to the questionnaire to the email address or phone number provided by the data subject. The completed health questionnaire is stored in GASTRO CENTER’s technical resources and is available to the doctor. The identity of the data subject and confirmation that the completed health questionnaire has been received from a specific e-mail address is verified when the data subject arrives for their appointment.
Execution, conclusion, and performance of the contract for the provision of healthcare services – identification data (name, surname, personal identification number), contact information (phone number, email address); health information; financial information (bank name, current account number, card number).
Preparation, storage, and use of the data subject’s medical records – name, surname, personal identification number, contact information (telephone number, e-mail address); information about health status, diagnosis, examinations, treatment and other information related to the data subject’s health.
Provision of healthcare services, including assessment of the data subject’s health status; performance of medical examinations; providing necessary consultations and procedures; prescribing medication necessary for treatment – name, surname, personal identification number, contact information (telephone number, e-mail address); health information confirming the diagnosis, examinations and treatment methods, etc. information that the relevant healthcare professional will choose to ascertain and record in the medical documentation in the specific situation.
Payment administration – identification data (name, surname, personal identification number), contact information (telephone number, e-mail address); financial information (bank name, payment account number, card number), insurance information.
Video surveillance to prevent or detect criminal offences related to property protection and staff security control – visual appearance, behavior, and other data contained in the video surveillance recording (location, time).
Evaluation of data subjects’ objections/complaints, communication with data subjects about their objections.
Quality control of healthcare services provided.
GASTRO CENTRS processes the personal data of data subjects on the following legal grounds:
– compliance with regulatory enactments – to fulfill obligations specified in external regulatory enactments or to exercise legally granted powers (General Data Protection Regulation, Article 6(1)(c), (e), Article 9(2)(h), e.g., the Medical Treatment Law, the Patient Rights Law, Cabinet of Ministers Regulation No. 265 of April 4, 2006, “Procedures for the Management of Medical Documents,” etc.;
– Article 6(1)(b) of the General Data Protection Regulation (conclusion and performance of a contract);
– for medical diagnosis and treatment purposes (Article 9(2)(h) of the General Data Protection Regulation);
– in cases where processing is necessary for the purposes of the legitimate interests pursued by GASTRO CENTRA in court (Article 9(2)(f) of the Regulation);
– for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes (Article 6(1)(e) and Article 9(2)(j) of the General Data Protection Regulation);
– based on Article 6(1)(f) of the General Data Protection Regulation – for the following legitimate interests of GASTRO CENTRA, such as managing data subject records and visits, ensuring communication, conducting video surveillance; quality control of healthcare services provided;
– consent of the data subject (Article 9(2)(a) of the General Data Protection Regulation) – for clinical training in accordance with nationally accredited education programs; for conducting clinical research.
Access to personal data and data recipients
Please be advised that the data subject’s personal data is accessible to:
– GASTRO CENTRA doctors, physician assistants, head nurse, general care and surgical nurses, customer service center employees, or other medical record management employees who require the data subject’s data to perform their job duties;
– relatives and close friends of the data subject, only with the consent of the data subject.
GASTRO CENTRS discloses and transfers personal data:
– if the consent of the data subject or visitor has been obtained;
– persons specified in regulatory enactments, upon their justified request, in accordance with the procedure and to the extent specified in regulatory enactments;
– in cases specified in external regulatory enactments, if it is necessary to defend the legal interests of GASTRO CENTRA;
– personal data processors, e.g., SIA “MediCloud” (information on personal data processing is available here), Limited liability company “DATAMED” (information on personal data processing is available here), in accordance with the service provided, observing the obligations of the processor set out in the General Data Protection Regulation, including confidentiality;
– laboratory testing service providers, as personal data processors.
Source of data
GASTRO CENTRS primarily obtains personal data from the data subject. In the course of providing healthcare services, GASTRO CENTRS may obtain personal data from other third parties, e.g., medical institutions, medical professionals, regarding the healthcare services and treatment provided to the data subject.
Storage of personal data
GASTRO CENTRS stores and processes the personal data of data subjects as long as at least one of the following criteria applies:
– until the obligations arising from the agreement concluded between GASTRO CENTRU and the data subject are fulfilled or the data subject is provided with healthcare services;
– the obligation to store the relevant personal data arises from regulatory enactments;
– until the request/submission specified by the data subject has been reviewed and/or fulfilled;
– until GASTRO CENTRS or the data subject can exercise their legitimate interests in accordance with the procedure established by external regulatory enactments (for example, to submit objections or bring an action in court);
– as long as the data subject’s consent to the relevant personal data processing is valid, unless there is another legal basis for data processing;
– video surveillance recordings are stored for no longer than 30 days from the date of recording;
– Telephone call recordings are stored for 6 (six) months.
Informing data subjects
GASTRO CENTRS informs data subjects about the processing of personal data:
– about video surveillance – there’s a warning sticker in the GASTRO CENTER rooms with the most important info about the controller, the purpose of video surveillance, and where to find other important info about data processing;
– when contacting GASTRO CENTER by telephone, the data subject is informed about the audio recording in accordance with Gastro’s privacy policy;
– when visiting the website, the data subject is informed about both the use of cookies and the data processing carried out by GASTRO CENTRS.
When starting to receive medical services, the data subject is informed about the processing of his or her data.
Datu subjekta tiesības
The data subject has the right to request access to their personal data, correct or delete it if they believe it has been processed unlawfully, restrict the processing of their personal data or object to the processing of their personal data, as well as ensure the right to data portability. The person has the right to lodge a complaint with the Data State Inspectorate, e-mail address: [email protected], adress: Elijas street 17, Riga, LV-1050.
In order to exercise the rights of the data subject, the person (data subject) must submit an application:
– in writing in person at GASTRO CENTRĀ, presenting a personal identification document;
– electronically, by signing the application with a secure electronic signature and sending it to the e-mail address: [email protected]
– by sending the application by post to the address Gailezera street 1, Riga, LV-1079.
Upon receiving a request from a data subject to exercise their rights, GASTRO CENTRS will verify the identity of the data subject, evaluate the request, and fulfill it in accordance with regulatory enactments.
GASTRO CENTRS shall respond to the data subject as soon as possible, but no later than within one month, taking into account the method of response specified by the data subject.
If the response is sent by post, it is addressed to the data subject (the person whose personal data has been requested) in a registered letter. If the response is provided electronically, it is signed with a secure electronic signature (if the request was submitted with a secure electronic signature).
If the processing of the data subject’s personal data has been initiated and is carried out in accordance with the data subject’s consent, the data subject has the right to withdraw it at any time.
The withdrawal of consent does not affect data processing carried out while the data subject’s consent was valid.
Cookies
Cookies are small files that are stored on the visitor’s computer by the browser each time the visitor visits a website, to the extent specified in the visitor’s browser settings. Certain cookies are used to select and tailor the information and advertisements offered to the visitor based on the content that the visitor has viewed previously, thereby making the use of the Website simple, convenient, and individually tailored to the visitor.
GASTRO CENTRS processes functional (technical) and analytical cookies. Functional (technical) cookies are necessary for the website to function and are important for ensuring the basic functionality of the website, such as displaying the content of the website. These cookies cannot be disabled, they do not reveal the user’s identity and do not collect user information.
The GASTRO CENTRS website only uses Google Analytics cookies, which allow Gastro to track the number of visitors to the website, their country of origin, the browser they use, and the specific pages they visit.
|
Cookie name |
Cookie type | Objective of the action | Storage period |
| wp-wpml_current_language | Saving language settings | Remember the user’s chosen website language. |
1 session |
Controlling and deleting cookies
Visitors can control and/or delete cookies at their discretion. More information about this process is available at here. Visitors can delete all cookies stored on their computer, and most browsers can be configured to block cookies from being stored on the computer. Visitors can opt out of cookies in their browser settings or here. To make the necessary settings, visitors need to familiarize themselves with the rules of their browser. If cookies are blocked, visitors will have to manually adjust the settings each time they visit the website, and some services and features may not work.
You can change cookie settings or delete them in your web browser settings. Here are links to information resources on cookie management in the most popular web browsers:
– Firefox
– Chrome
– Safari
– Opera
– Edge
– Explorer
Statistical data on website visitors can only be accessed by the controller’s employees who are responsible for analyzing such data.
Unless otherwise specified, cookies are stored until the action for which they were collected has been completed, after which they are deleted.
Data subjects have the right to lodge complaints about the use of personal data State Data Inspectorate, if the data subject considers that the processing of his or her personal data infringes his or her rights and freedoms under the applicable regulatory enactments.
The administrator reserves the right to change the Cookie Policy at any time. It is the responsibility of the website visitor to independently check the content of the website in order to familiarize themselves with any changes to the rules.
Changes to the Privacy Policy
In order to improve the quality of data processing, Gastro may change this privacy policy by posting it on this website. Gastro recommends that data subjects visit this section of the website regularly to find out the latest information.
Rīgā, 2025.gada 25.aprīlī