Skip to main content
EN
ET EN FI

Privaatsuspoliitika

1. What is the purpose of this privacy policy?

This privacy policy explains to patients of NOOR Aesthetic Clinic which personal data the clinic processes, how and for what purposes the data is processed, and what rights individuals have in relation to the processing of their personal data.

Dermis Clinic OÜ is the controller of personal data. Its registry code is 16820219, registered address Liiviku tee 3, Tabasalu, 76901 Harku municipality, Harju county, Estonia, telephone +372 59009272 and email info@n8r.ee.

This privacy policy fulfils the information obligations arising from Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation, GDPR).

 

2. For what purposes and how does NOOR Aesthetic Clinic process personal data?

NOOR Aesthetic Clinic provides healthcare and beauty services to patients. The clinic processes patients’ contact details and health data in order to provide healthcare services. The legal bases for processing are Articles 6(1)(b) and 9(2)(a) of the GDPR, section 41(1) of the Estonian Health Services Organisation Act, and the individual’s consent.

The clinic requires a patient’s first and last name and personal identification code to verify their identity. NOOR Aesthetic Clinic uses the telephone number and email address to contact the patient in connection with providing the service, including booking confirmations and reminders and information about changes or other relevant matters.

NOOR Aesthetic Clinic collects health data and treatment-related information necessary for providing its services and stores this information in the clinic’s client database for up to 10 years.

When a patient pays for services, NOOR Aesthetic Clinic processes invoice information to enable payment. Invoices are retained for seven years as required by the Estonian Accounting Act. If no payment arrangement can be reached with a patient regarding an unpaid invoice, the clinic may use a debt collection service and disclose the invoice information to that service provider for this purpose.

NOOR Aesthetic Clinic sends marketing messages by email only with the client’s consent. A client consents to receiving the newsletter by joining the clinic’s mailing list through the online form. Providing a date of birth when registering in the clinic’s client database is regarded as consent to receive information about birthday offers.

 

3. How does NOOR Aesthetic Clinic protect patients’ personal data?

NOOR Aesthetic Clinic keeps patient information confidential. The clinic uses technical and organisational safeguards to prevent unauthorised access or disclosure. Confidentiality obligations are included in the agreements of all employees and cooperation partners.

 

4. What rights do individuals have regarding their personal data?

Under the GDPR, individuals have the right to access their personal data and receive a copy, request the transfer of their personal data to another controller, request erasure, correction or completion of their data, and request restriction of processing.

To exercise these rights, please contact your usual contact person at NOOR Aesthetic Clinic or send your request to info@n8r.ee.

If an individual is not satisfied with how NOOR Aesthetic Clinic has handled a complaint, they have the right to lodge a complaint with the Estonian Data Protection Inspectorate.

The contact details of the Estonian Data Protection Inspectorate are: telephone +372 627 4135; email info@aki.ee; postal address Väike-Ameerika 19, 10129 Tallinn, Estonia.

Close Menu