Terms of personal data processing

With this privacy policy document, Elu ja Ilu Keskus provides an overview of the principles for processing personal data by persons providing services at the center. Elu ja Ilu Keskus provides both healthcare and beauty services and processes personal data only to the extent necessary for the provision of services, management of client relationships, and compliance with applicable legal obligations.

Personal data is any information relating to an identified or identifiable natural person, including name, personal identification number, contact details, and billing information. Personal data also includes special categories of personal data, including health data, which are processed only in cases and to the extent permitted by law. Processing of personal data includes any operation performed on personal data, such as collection, recording, use, disclosure, and storage. Elu ja Ilu Keskus processes personal data to ensure high-quality, safe, and professional services and to protect client privacy.

Personal data is collected and processed only where there is a legal basis and for clearly defined purposes. Personal data is primarily processed when a client contacts Elu ja Ilu Keskus to receive healthcare or beauty services, including for service provision, assessment of health status, selection of appropriate services, and follow-up communication. Personal data is also processed when a client designates a contact person, requests the issuance of documents or certificates, submits an inquiry, notice, request for information, or complaint, communicates electronically with the center, or applies for employment. When applying for a job, only the data provided by the applicant is processed, and the applicant has the right to know which data has been collected about them.

Elu ja Ilu Keskus discloses personal data to third parties only where there is a legal obligation or right to do so, including to the Estonian Health Insurance Fund, the Health Board, insurance companies in the event of an insured incident, and law enforcement authorities. Documents containing special categories of personal data are sent by registered mail or in encrypted electronic form. Healthcare services are provided and documents are issued in Estonian.

Elu ja Ilu Keskus applies appropriate organizational, technical, and IT security measures to ensure the confidentiality, integrity, and availability of personal data. Access to personal data is granted only to employees and cooperation partners who require it to perform their duties. All persons with access to personal data are subject to confidentiality obligations.

Clients have the right to access the personal data collected about them and to request the correction of inaccurate data or deletion on legal grounds. Requests may be submitted in writing to the center or sent by email to info@eluilu.ee Personal data is disclosed based on an identity document or transmitted in encrypted electronic form.

For questions related to the processing of personal data, clients may contact Elu ja Ilu Keskus at info@eluilu.ee or by phone at +372 56 255 165. If a client believes that their rights have been violated in the processing of personal data, they have the right to file a complaint with Elu ja Ilu Keskus or the Estonian Data Protection Inspectorate (Väike-Ameerika 19, Tallinn 10129, email: info@aki.ee).