The controller of personal data processing is the Limited Liability Company “Latvian Center for Plastic, Reconstructive and Microsurgery” (hereinafter – Medical Institution), registration No .: 40003524503, legal address: Brīvības gatve 410, Riga, LV-1024
Contact information:
Phone no. (+371) 679 698 30
E-mail address: registratura@mcl.lv
Contact information for personal data protection issues:
E-mail address: datu.aizsardziba@mcl.lv
We ensure the fair and lawful processing of personal data by processing your personal data only for specific, pre-determined purposes and with an appropriate legal basis. We process your personal data for the following purposes:
When enrolling you to one of our doctors, we need to identify you in order to find your medical card, if one has been created with us, and to find out whether you are entitled to state-paid healthcare service. We need your contact information to inform you about unforeseen changes in the registration. We also need to find out what health problem you are complaining about in order to enroll you to the right specialist.
For this purpose, we process the following personal data – name, surname, personal identification number, telephone number or e-mail, a health problem you are complaining about.
The legal basis for the processing of these data is the provision of management of treatment or healthcare services (Article 9 (2) (h) of the General Data Protection Regulation [1]).
When providing you with medical treatment, we need to identify you by asking for an identity document. In order to complete the medical documentation in accordance with the applicable legislation, we must process the following personal data – name, surname, personal identification code, year or age of birth, gender.
In cases where the patient is represented by the patient’s legal representatives or authorized representatives, we are obliged to verify the identity of the representatives (name, surname, personal identification code) and the basis of the representation.
The legal basis for the processing of this data is the fulfillment of a legal obligation applicable to the Medical Institution (Article 6, Paragraph 1, Subparagraph c) of the General Data Protection Regulation, Section 15, Paragraph four of the Patients’ Rights Law, Cabinet Regulation No. 265 of 4 April 2006 procedure ”).
In order to ensure the provision of quality medical services, we need to process your health data (for example your health status, including disease diagnosis; disability; blood type and rhesus affiliation; allergies; drug side effects, intolerance; regular medications; surgeries, methods of anesthesia, complications after surgery, and results of treatment, but the list is not exhaustive. The health data processed may differ depending on the problem you have referred to the Medical Institution and the chosen method of treatment).
In order to fulfill the obligation to document the treatment process, we make health data records in your medical records during the provision of the treatment service. In order to comply with legal requirements and complete medical records, such as an outpatient medical card, an inpatient medical card, we need information about your workplace or educational institution.
In order to inform you about changes in the planned manipulations, to find out your health condition during outpatient treatment, to issue certificates and referrals, we need your contact information (address and telephone number or e-mail). In certain cases (if you are unable to make a decision about treatment yourself due to your health condition or age), we may need the contact information (name, surname, telephone number) of your authorized or legal representatives, spouse, or close relatives to contact you regarding your treatment.
The legal basis for the processing of these data is the processing for data (Article 9 (2) (h) of the General Data Protection Regulation), the protection of the vital interests of the patient if the patient is physically or legally incapable of giving his consent (Article 9 of the General Data Protection Regulation). Paragraph 2 (c)), as well as fulfillment of a legal obligation applicable to a Medical Treatment Institution (Article 6 (1) (c) of the General Data Protection Regulation, Cabinet Regulation No. 265 of 4 April 2006 “Procedures for Records of Medical Documents”).
In order to prescribe the prescription medicines you need, we process the following personal data of you – name (names), surname; personal code; the address of the declared, registered or indicated place of residence of the person; gender; date of birth; information on whether you have been granted the status of a needy person if the medicinal product distributed within the framework of the reimbursement procedure has been prescribed on a special prescription. The prescription also includes the following data that can directly indicate your state of health – diagnosis, prescribed medication, instructions for use.
The legal basis for the processing of this data is data processing for health management purposes (Article 9 (2) (h) of the General Data Protection Regulation, Cabinet Regulation No. 175 of 8 March 2005 “Preparation and storage of prescription forms, as well as prescribing and storage of prescriptions). Cabinet Regulation No. 134 of 11 March 2014 Regulations on the Unified Electronic Information System of the Health Sector).
In order to fill in and submit the incapacity for work forms, we need to process the following data – personal identification code of the recipient of the incapacity for work, where applicable – child’s or protected person’s code, name (s), surname, the reason for temporary incapacity for work, periods of incapacity for work, notes on referral to another doctor, the date on which the recipient of the certificate of incapacity for work must take up employment, the date on which the recipient of the incapacity for work certificate will continue to be incapacitated
The legal basis for the processing of this data is data processing for the purpose of health management (Article 9 (2) (h) of the General Data Protection Regulation and Cabinet Regulation No. 152 of 3 April 2001 “Procedure for Issuing Incapacity for Work Certificates”, Cabinet Regulation No. Regulations No. 134 of March 2006 Regulations on the Unified Electronic Information System of the Health Sector).
In order to administer payment for medical services, we may need to process the following personal data: name, surname, personal identification number, account number, address, diagnosis, place of work, status (eg needy person, occupational patient, disabled person, child), the government budgetary resources spent.
The legal basis for the processing of these data is the protection of the legitimate interests of the controller (Article 6 (1) (f) of the General Data Protection Regulation) or the performance of the contract (Article 6 (1) (b) of the General Data Protection Regulation).
In order to receive a decision from the insurance company to cover medical expenses, we would need to process information about your health insurance policy and send your personal data, including health data – information about the diagnosis, treatment process and costs to the insurance company. Such transfer of data may take place if you have given your written consent to the transfer of the personal data specified above to the insurance company.
The legal basis for the processing is your written consent (Article 9 (2) (a) of the General Data Protection Regulation).
Clinical trials are conducted to analyze patients ‘illnesses, the course of treatment, to obtain data to improve the quality and safety of patients’ treatment. For this purpose, the patient’s personal data is processed – name, surname, telephone number or e-mail address, sometimes personal identification code, but mainly, birth data, information about the diagnosis, course of treatment, survival.
The legal basis for data processing is data processing for scientific research purposes (Article 9 (2) (j) and Article 89 (1) and (2) of the General Data Protection Regulation, Article 10, seventh, eighth and ninth paragraphs, and Article 11 of the Patients’ Rights Act). Article).
The medical institution carries out video surveillance at the entrance and in the corridor, the purpose of which is to detect criminal offenses related to the safety of the visitors and the Controller and the protection of property. When performing video surveillance, the following processing of your personal data takes place – image, behavior, location, and time. Video surveillance data shall not be used for any purpose other than the detection of criminal offenses.
The legal basis for the processing of these data is the protection of the legitimate interests of the controller or of a third party (Article 6 (1) (f) of the General Data Protection Regulation).
Information provided by the patient, identity document, information from specialists about the results of examinations, unified electronic information system of the health sector, doctor’s diagnosis (examination results), information from insurance companies, recordings made by video surveillance cameras.
The provision and receipt of information are necessary for us to be able to provide you with appropriate, high-quality and safe medical services and to fulfill the legal obligations of the Medical Institution. In certain cases, not receiving the information may make it difficult or impossible to provide the service.
We process your personal data in accordance with applicable law and ensure that your personal data is not accessed by third parties who have no legal basis for processing your personal data.
Personal data, if necessary, could be received by: the patient himself, the patient’s legal or authorized representatives, doctors involved in the treatment process, the medical institution and its authorized staff, the person delegated to the study, laboratories, insurance company specified by the patient (IT infrastructure technical maintainer) authorized employees, State Social Insurance Agency, State Revenue Service.
Other medical treatment institutions in accordance with the procedures provided for in the Patients’ Rights Law – for the achievement of medical treatment goals; Data State Inspectorate – for the purpose of verifying the compliance of personal data processing with the requirements of regulatory enactments; State Labor Inspectorate – for the investigation and registration of accidents at work and occupational diseases; State Commission of Health and Working Ability Examination Doctors – for the performance of disability examination; court, prosecutor’s office, police, state inspectors for the protection of the rights of the child, orphan’s court, the State Probation Service, the ombudsman, as well as a pre-trial investigation institution – for the performance of the functions specified by law; the Association “Latvian Motor Insurers’ Bureau”, for insurance companies that carry out compulsory civil liability insurance of land vehicle owners – for compensation for losses caused to a person injured in a road traffic accident; the employer of the employee who has been injured in an accident at work – for the investigation of an accident at work in accordance with regulatory enactments which regulate the procedures for the investigation and registration of accidents at work; Center for Disease Prevention and Control – for the acquisition, compilation, processing and analysis of public health and health care statistical information, epidemiological surveillance of infectious diseases, as well as processing of personal data for the purpose of transferring information to the statistical authority; National Health Service – for the administration of health care services paid from the state budget, as well as for the processing of personal data for the purpose of transferring information to a statistical authority; State Agency of Medicines – for monitoring the safety of the use of medicinal products; Health Inspectorate – to ensure the performance of health sector monitoring functions.
Your personal data is not sent outside the European Union (EU) or European Economic Area (EEA) countries.
Your personal data is not used for automated decision-making.
We will retain personal data that must be retained in order to comply with legal requirements within the time limits set by applicable law (for example, medical records included in an Inpatient Medical Card or an Outpatient Medical Card are retained for 75 years after the last record). We will keep the data necessary to prove the fulfillment of our obligations in accordance with the limitation period of the general obligation rights – 10 years. We will keep video surveillance records for 1 month to provide evidence in the event of an incident being recorded.
In accordance with the provisions of the General Data Protection Regulation, you have the right to access your personal data in our possession, request their rectification, erasure, restriction of processing, object to the processing of your data, as well as the right to data portability in the cases and according to the General Data Protection Regulation.
We respect your right to access and control your personal data, so if we receive your request, we will respond to it within the time limits set by law and, if possible, correct or delete your personal data accordingly.
You may obtain information about your personal data held by us or exercise your other rights as a data subject in any of the following ways:
1. by submitting a relevant application in person and identifying ourselves in our office at the address: Limited Liability Company “Latvian Plastic, Reconstructive and Microsurgery Center”, Brīvības gatve 410, Rīga, LV-1024, every working day from 9-16
2. by submitting a relevant application, sending it to us by post to the following address: Limited Liability Company “Latvian Center for Plastic, Reconstructive and Microsurgery”, Brīvības gatve 410, Rīga, LV-1024.
3. by submitting a relevant application, sending it to our e-mail: centre@mcl.lv, signing the application with a secure electronic signature.
Upon receipt of your application, we will evaluate its content and the possibility of your identification, and depending on the situation, we reserve the right to ask you to additionally identify yourself in order to ensure the security and disclosure of your data to the person concerned.
Withdrawal of consent
If the processing of your personal data is based on your consent, you have the right to withdraw it at any time and we will no longer process your personal data which we have processed on the basis of the consent for that purpose. However, we inform you that the withdrawal of consent does not affect the lawfulness of the data processing operations performed up to the time of withdrawal of consent.
If you have a complaint regarding the processing of personal data by us, please contact us first to resolve the situation. If you believe that your rights in the field of personal data protection have been violated, you have the right to submit a complaint to the Data State Inspectorate.
[1] Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC regulation)