MYMED Tervisekeskuse privaatsuspoliitika

MYMED Health Centre Privacy Policy

  1. What data do we process and where does it come from?

We primarily process the following data:

  • your and your relatives’ contact details
  • personal identification code and date of birth
  • information about your workplace and occupation
  • health data
  • The data originates from:
  • you
  • a parent or guardian if the patient is a minor or has limited legal capacity
  • relatives
  • our database
  • other healthcare providers and laboratories
  • national systems (e.g. Health Information System, Prescription Centre, health insurance data)
  1. What do we use your data for?

Your data is mainly used for providing healthcare services:

  • appointment registration
  • sharing information about healthcare services
  • diagnosing, treating, and preventing diseases
  • monitoring and assessing health status

In addition, your relative’s contact details may be used if we are unable to reach you directly or if you have agreed to communicate via a contact person.

Data is also used for:

  • ordering additional analyses and tests or consulting with other doctors
  • documenting healthcare services and fulfilling legal obligations
  • transmitting data to the Estonian Health Insurance Fund and national institutions, for example for:
  • compiling healthcare statistics
  • billing and accounting
  • quality control and audits
  • handling applications and complaints

If there is no legal basis for processing data, we will ask for your consent.

  1. Who else may have access to your data?

Your data may also be accessed by:

  • our accounting and IT support service providers
  • the patient portal administrator
  • in certain cases, authorities (e.g. police, courts)

We do not transfer your data to third countries or international organisations without your consent.

  1. How long do we retain data?

Data is retained in accordance with Estonian legislation:

  • health record data: 110 years from birth
  • medical history data: 30 years after the end of treatment
  • accounting documents: 7 years

More detailed information about retention periods can be obtained from our data protection specialist.

  1. You have the right to:
  • receive information about what data we process and why
  • access your data
  • restrict the processing of data or submit other objections
  • receive a copy of your data
  • withdraw your consent at any time, if it has been given

Requests can be submitted in writing or by email to our centre.

  1. Changes to the Privacy Policy

We may update this policy in accordance with changes in legislation. The current version is always available at our centre and on our website: [www.mymed.ee](http://www.mymed.ee)

Contact for questions or complaints:

Email: [info@mymed.ee](mailto:info@mymed.ee)

Phone: 6405030

Data Protection Specialist: Dr Karin Pärnpuu

March 2026