Privacy Policy

Effective from 01.09.2026.

1. General

Data controller: SL Tervisekeskus OÜ, registry code 17473441, address Sepapaja 12/1, 11415 Tallinn.

Contact for data protection enquiries:

This Privacy Policy describes how SL Tervisekeskus OÜ processes personal data in connection with providing medical services, operating this website, and communicating with patients. Data processing is carried out in accordance with the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and Estonian law.

2. What data do we collect?

  • Patient registration application: name, national ID number, home address, phone, email; for minors - the representative's data.
  • Healthcare service: health data (including diagnosis, prescriptions, test results, treatment records) - collected in the course of providing healthcare services.
  • Website use: cookies, Google Analytics data (anonymised user behaviour).
  • Communications: e-Perearstikeskus messages, telephone recordings (where applicable).

3. Legal basis for processing

  • Performance of the healthcare service contract (GDPR Art. 6(1)(b), Art. 9(2)(h)).
  • Legal obligation (retention of health records).
  • Patient consent (e.g. registration application).
  • Legitimate interest of the data controller (improving website performance).

4. Who do we share data with?

  • Tervisekassa (Estonian Health Insurance Fund) - administration of health insurance.
  • Specialist or other healthcare provider - to ensure continuity of care.
  • Tervise Infosüsteem (Health Information System, Health Board) - to fulfil legal obligations.
  • Parent/guardian - for minor patients.
  • Google Analytics - anonymised statistics (website usage).

Data is not transferred outside the EU without GDPR-compliant safeguards.

5. Cookies

We use three types of cookies:

  • Strictly necessary cookies: session cookies required for the website to function. No consent required.
  • Analytical cookies: Google Analytics (GA4) - anonymised user behaviour on the website. You can disable these in your browser settings.
  • Preference cookies: remembering your language preference.

6. Your rights

  • Right of access to your data (GDPR Art. 15).
  • Right to rectification (Art. 16).
  • Right to erasure, where legally possible (Art. 17).
  • Right to lodge a complaint with the Data Protection Inspectorate (aki.ee).

To submit a request, please contact us at:

7. Data retention

We retain health records in accordance with the Health Care Services Organisation Act. Contact data is retained for as long as necessary for service provision.

8. Changes

This Privacy Policy may be updated. We will notify users of significant changes via this website. Last updated: 01.09.2026.