Privacy
Controller: Kordamed AS, Pärnu mnt 80, 10131 Tallinn, Estonia, kordamed@kordamed.ee, +372 611 00 11.
What data we process
- Patients: name, personal ID code or date of birth, contact details, place of residence and health data (physical and mental health).
- Employees: name, personal ID code, contact details and employment data.
Legal basis and purpose
We process patient data to provide health care under the Estonian Health Services Organisation Act, Health Insurance Act and Medicinal Products Act. Employee data is processed under the Employment Contracts Act. We comply with the EU General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act. We share data with third parties only where the law requires it, for example with the national health information system.
Retention
- Patient health records: 110 years from the patient's birth
- Employment contracts: 10 years after the contract ends
- Accounting records: 7 years
Your rights
You have the right to be informed about how your data is processed, to see your data and, where the law allows, to ask for it to be corrected, deleted or restricted. You also have the right to data portability and to withdraw consent. Contact us using the details above. You may also complain to the Estonian Data Protection Inspectorate (aki.ee).
This website
This website does not use tracking or advertising cookies.