{"id":562,"date":"2025-08-29T06:16:12","date_gmt":"2025-08-29T06:16:12","guid":{"rendered":"https:\/\/medreport.ee\/privaatsustingimused\/"},"modified":"2025-10-06T16:04:08","modified_gmt":"2025-10-06T16:04:08","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/medreport.ee\/en\/privacy-policy\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t

Privacy policy<\/h1>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

1. General Principles<\/p>

1.1 The protection of personal data is very important to MedReport O\u00dc, and we take it with<\/p>

the utmost seriousness. This Privacy Policy describes what personal data we collect, how<\/p>

and why we process it, and what your rights are in relation to your personal data.<\/p>

1.2 In processing personal data, we comply with applicable legislation, including:<\/p>

– the General Data Protection Regulation (EU) 2016\/679 (GDPR),<\/p>

– the Estonian Personal Data Protection Act,<\/p>

– the Health Services Organisation Act, and<\/p>

– other relevant regulations governing the processing of health data.<\/p>

1.3 MedReport O\u00dc processes personal data only on lawful grounds, for specific purposes,<\/p>

and to the minimum extent necessary.<\/p>

1.4 These terms apply to the processing of personal data carried out in the course of<\/p>

providing services by MedReport O\u00dc.<\/p>

2. Data Controller<\/p>

Company name: MedReport O\u00dc<\/p>

Registry code: 16381793<\/p>

Address: Sepapaja 12\/1, Tallinn 11415<\/p>

E-mail: info@medreport.ee<\/p>

Data Protection Officer contact: info@medreport.ee<\/p>

3. Personal Data Processed<\/p>

We process the following data:<\/p>

– General data: name, personal identification code, date of birth, contact details.<\/p>

– Health data: results of examinations and tests, treatment information, hereditary factors,<\/p>

and health behaviour.<\/p>

– Billing data: bank account number, invoices, payment history.<\/p>

– Contract and service data: contracts, orders, complaints.<\/p>

– Communication data: e-mails, recorded phone calls (with notification).- Website usage data: IP address, device type, visits, etc.<\/p>

4. Purposes and Legal Basis for Data Processing<\/p>

MedReport O\u00dc processes personal data for the following purposes:<\/p>

– To conclude and perform contracts (including the provision of healthcare services).<\/p>

– To comply with legal obligations (e.g. reporting data to the Estonian Health Insurance<\/p>

Fund).<\/p>

– On the basis of legitimate interests (e.g. improving service quality, compiling statistics).<\/p>

– To process contact details (e.g. e-mail, phone) in order to inform clients of their health<\/p>

examination results, including potential health risks.<\/p>

– On the basis of consent, e.g. for direct marketing, if the client has given such consent.<\/p>

5. Cookies and Website Usage Information<\/p>

Our website uses cookies and Google Analytics:<\/p>

– Collected data may include browser type, IP address, language preference, device type,<\/p>

session data.<\/p>

– You may disable cookies at any time in your browser settings.<\/p>

– Statistics are collected in an anonymised form.<\/p>

6. Data Retention<\/p>

We retain personal data only as long as necessary:<\/p>

– For contract performance and compliance with retention obligations (e.g. 5 years or more,<\/p>

as required by law).<\/p>

– For statistical purposes (e.g. sales records up to 5 years).<\/p>

– For security and dispute resolution purposes.<\/p>

7. Data Disclosure<\/p>

Personal data may be disclosed to:<\/p>

– Authorised processors (e.g. laboratories, doctors, IT service providers) solely for the<\/p>

purpose of providing the service.<\/p>

– Public authorities, where required by law.- Third parties (e.g. auditor, legal counsel) only on a lawful basis.<\/p>

– Health data will only be disclosed on lawful grounds and, where appropriate, in<\/p>

anonymised form.<\/p>

8. Your Rights<\/p>

You have the right to:<\/p>

– access your data,<\/p>

– request correction or deletion,<\/p>

– restrict processing or object to it,<\/p>

– withdraw consent,<\/p>

– request data portability.<\/p>

All rights may be exercised by writing to info@medreport.ee. If your rights have been<\/p>

violated, you have the right to contact the Estonian Data Protection Inspectorate.<\/p>

9. Security<\/p>

– We apply appropriate technical and organisational measures to protect personal data.<\/p>

– Access is granted only to employees and partners who need it for work purposes.<\/p>

– Contracts with authorised processors ensure compliance with data protection<\/p>

requirements.<\/p>

10. Complaints and Breach Procedure<\/p>

– If you suspect a breach, please contact us at info@medreport.ee.<\/p>

– You have the right to lodge a complaint with the Estonian Data Protection Inspectorate.<\/p>

– In the event of a data breach, we will notify, if necessary, within 72 hours.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

Privacy policy 1. General Principles 1.1 The protection of personal data is very important to MedReport O\u00dc, and we take it with […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"footnotes":""},"class_list":["post-562","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/medreport.ee\/en\/wp-json\/wp\/v2\/pages\/562","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/medreport.ee\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/medreport.ee\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/medreport.ee\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/medreport.ee\/en\/wp-json\/wp\/v2\/comments?post=562"}],"version-history":[{"count":4,"href":"https:\/\/medreport.ee\/en\/wp-json\/wp\/v2\/pages\/562\/revisions"}],"predecessor-version":[{"id":567,"href":"https:\/\/medreport.ee\/en\/wp-json\/wp\/v2\/pages\/562\/revisions\/567"}],"wp:attachment":[{"href":"https:\/\/medreport.ee\/en\/wp-json\/wp\/v2\/media?parent=562"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}