We recognize that the information we collect from patients and doctors is often of a highly sensitive nature. Because of that, the security of their data and the transparency of its management is on the highest importance for us and as an organization. We have adopted the highest privacy compliance standards relevant to ensure personal information is protected. So, we strictly manage personal information in accordance with requirements established in the Regulations under the Law.
The aim of our companie‘s Privacy Policy is to establish organizational and technical measures intended for the protection of the Personal Data against accidental or unlawful destruction, alteration and/or disclosure as well as against any other unlawful processing. Our new Privacy Policy defines how we behave with the sensitive data while providing and offering our services for our current and future patients.
This instruction is prepared tn accordance with the provisions of the Republic of Lithuania Law on Legal Protection of Personal Data and General Requirements for Organizational and Technical Measures, approved by the Resolution No. 1T-71(1.12) of 12 November 2008 the Director of the State Date Protection lnspectorate.
Procession of personal data
The information of the patients and doctors we are collecting for following purposes: for direct marketing; for performance of statutory obligation, i.e. traceability of advanced therapy medicinal products, pharmacovigilance, traceability of tissues or land cell stored in tissue bank. For example:
1. Patients (for direct marketing):
• Name
• Surname
• Telephone number
2. Patients (for performance of statutory obligation, i.e. traceability of advanced therapy medicinal products, pharmacovigilance, traceability of tissues or land cell stored in tissue bank):
• Name
• Surname
• Personal code
• Address
• Telephone number
• Diagnosis
3. Doctors (for performance of statutory obligation, i.e. traceability of advanced therapy medicinal products, pharmacovigilance, traceability of tissues or/and cell stored in tissue bank):
• Name
• Surname
• Position
• Workplace
• Address of workplace
• Telephone number at workplace
The Personal Data is being provided by the company to State Medicines Control Agency, National Transplant Bureau, State Health Care Accreditation. lf needed, Personal Data may be provided to health care institution which carries out treatment of patient.
Complains
The Personal Data shall be corrected, revised and/or renewed immediately upon occurrence of any of the bellow events.
1. If clients submit a request for the company;
2. If the company is in any other way notified about the change of the Personal Data.
Client shall have the right upon submission of the personal identification document to the company to acquaint with his own Personal Data. Client shall have the right at any time to apply to the company with a request to correct, revise and/or renew his own Personal Data. Furthermore, the client shall have the right at any time to apply to the company with a request to suspend or terminate the processing of his Personal Data.
Storage of Personal Data
The processing of the Personal Data shall be monitored every day. The established violations of the legal acts governing processing of the Personal Data or this lnstruction as well as factors imposing risk to processing of the Personal Data shall be eliminated immediately.
The Personal Data shall be transferred from active data base to passive data base of the Data Controller after the Data Subject ceases using the services of the Data Controller. The Personal Data shall be stored in passive data base of the Data Controller for a period of at least 10 (ten) years as of the moment it is transferred there, except for those cases when applicable legal acts provides for the obligation of the company or the competent authorities oblige the Data Controller to store the Personal Date for longer period.
For complete traceability, data about samples stored in the tissue bank and Personal Data of the patients shall be stored for 30 years as from the day their tissues and cells have been used clinically or after their expiry date.
After the term is over the Personal Data shall be destroyed.
Data protection officer email: duomenuapsauga@froceth.lt