fbpx

PRIVACY POLICY

__________________________________________________________

MB “Jonaičiai ir ko”

PRIVACY POLICY

_________________________________________________________

What does this Privacy Policy mean?

This privacy policy (“Privacy Policy”) Privacy Policy) is intended to inform data subjects about the processing of personal data by MB “Jonaičiai ir ko”.
In this Privacy Policy we provide our customers, suppliers and other partners, their affiliates, candidates, correspondence counterparties and other data subjects referred to in this Privacy Policy with information on how we process your personal data.
Any person whose personal data is processed by the Company is hereinafter referred to as
Data subject.

About the Company

Company means MB “Jonaičiai ir ko”, legal entity code 124486387, having its registered office at Pilies g. 38-1, LT-01123 Vilnius, data on the Company shall be collected and stored in the Register of Legal Entities of the Republic of Lithuania.
Contact e-mail.
Contact email for personal data protection issues [email protected].

What is personal data?

Personal data is any information collected by the Company about an individual that can be used to identify the individual and is stored electronically or otherwise.

Personal data includes any information, including name, address, IP address, which the Company collects about individuals for the purposes set out in this Privacy Policy or in a separate consent or agreement with the Company.

This data also includes personal information in the public domain that the Company has access to when you contact the Company via social media or through active actions on the Company’s social media accounts.

The Company’s processing of personal data is based on the following 2016.
27 April.
2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania, the Law on Electronic Communications of the Republic of Lithuania, and other legal acts regulating personal data protection.

Below you can find out how we process your personal data: what personal data we process, the purposes for which we process it, how long we keep it and what rights you have.
You can do this by clicking on the option that interests you.

In this section, we provide information about your rights in relation to our processing of your personal data and when you can exercise these rights.
If you would like more information about your rights or to exercise them, please contact us at the email address provided in this Privacy Policy.
Please contact us at the following email address.

The company will provide you with information on the action taken following your request for the exercise of your rights without undue delay, but at the latest within one (1) month of receipt of the request.
Depending on the complexity of the request and the number of requests received, the aforementioned time limit may be extended for a further 2 (two) months.
In this case, we will inform you within 1 (one) month of receipt of the request of such extension and the reasons for it.
The company will only refuse to exercise your rights in cases provided for by law.

  1. Right of access to your personal data

We want you to fully understand how we use your personal data so that you do not experience any inconvenience.
We first provide information about how we process your personal data in this Privacy Policy (right to be informed).
You can contact us at any time to enquire whether we are processing any of your personal data.
If we store or use your personal data in any way, you have the right to access it.
To do so, please submit a written request to us at the email address specified in this Privacy Policy.
Please provide us with a written request to the email address provided in the Privacy Policy, and provide proof of your identity (if such proof is required in your specific case).

We expect you to respect the principles of fairness and reasonableness when making such requests.

  1. Right to withdraw consent

If you have given us your explicit consent to the processing of your data, you can withdraw it at any time.
S
Withdrawal of consent does not affect the lawfulness of consent-based processing carried out before the withdrawal of consent.

  1. Additional rights

Below you will find information about additional rights that you may have, which you can exercise by following the procedures described below.

  1. You have the right to ask us to correct any inaccuracies in the data we hold.
    In this case, we may ask you to confirm the corrected information.
  1. You have the right to ask us to delete your personal data.
    This right shall be exercised in the cases provided for in Article 17 of the General Data Protection Regulation (EU) 2016/679.
  1. You have the right to ask us to restrict or not to process your personal data:
  • the period of time necessary to verify the accuracy of your personal data when you make a complaint about the accuracy of the data;
  • where our collection, storage or use of your personal data is unlawful, but you choose not to request erasure;
  • where we no longer need your personal data, but you need it to establish, exercise or defend a legal claim;
  • the period necessary to determine whether we have an overriding legal basis to continue processing your personal data if you have exercised your right to object to the processing of personal data.
  1. You have the right to the transfer of data processed by automated means which we have received from you in a structured, commonly used and computer-readable format with your consent or for the purposes of concluding a contract.
    If you exercise this right, we will, at your request, transfer a copy of the data provided by you to you or to a data controller of your choice.
  1. You have the right to object to our use of your personal data in accordance with Article 21 of the GDPR.
    You have the right to object to the processing of your personal data on the basis of legitimate interest (the basis for processing is indicated next to each data processing purpose in the Privacy Policy) or for direct marketing purposes.
  1. Right to request more information

We hope that you will understand that it is very difficult to discuss all possible ways of collecting and using personal data.
We endeavour to provide as clear and comprehensive information as possible and we undertake to update this Privacy Policy as and when our use of personal data changes.
However, if you have any questions about our use of your personal data, we will be happy to answer them or provide you with any additional information we may disclose.
If you have any specific questions or do not understand the information provided, please contact us.

Purpose of the management Data Subject Personal data Legal basis Storage period
Registering for a doctor’s appointment via e-pacientas.lt platform Patient or potential patient (if registering for a first consultation) Name, surname, personal identification number, date of birth, personal identification number, telephone number, email address, etc.
email address, date and time of scheduled visit, doctor registered with
GDPR Articles 6(1)(a) and 9(1)(a) (consent given at the time of registration of the visit) Personal data provided for registration purposes are stored until the scheduled visit, but may be processed for longer periods for other purposes (for example, if the same personal data are subsequently processed for the purpose of providing healthcare services).

!!! To register for a visit via the e-pacientas.lt platform, you need to create an account on the e-pacientas.lt platform.
The e-pacientas.lt platform is not administered by us, but by a third party, Softdent UAB, which acts as an independent data controller for the processing of the registration and other related personal data.
Before registering and submitting your personal data to UAB Softdent, please carefully read UAB Softdent’s privacy policy and other information related to the processing of personal data.
If you do not wish to create an account, please register in another way – by phone, email, e-mail, etc.
You can apply for a new SoftDent by e-mail or in person at the clinic.

Where personal data is processed for the purpose of registering for a doctor’s appointment, Softdent UAB acts as a data processor engaged by us.

Register for a visit by phone Patient or potential patient (if registering for a first consultation) Name, surname, personal identification number, telephone number, date and time of the scheduled visit, doctor you are registered with GDPR Articles 6(1)(a) and 9(1)(a) (consent given at the time of registration of the visit) Personal data provided for registration purposes are stored until the scheduled visit, but may be processed for longer periods for other purposes (for example, if the same personal data are subsequently processed for the purpose of providing healthcare services).
Register for your visit by email.
E-mail
Name, surname, personal identification number, email.
email address, date and time of visit, doctor registered with
Registering for a clinic visit Name, surname, personal identification number, email.
email address or phone number, date and time of visit, doctor with whom you are registered

Purpose of the management

Personal data

Legal basis

Storage period

Other comments

Contracts with suppliers, partners, etc.
(natural persons), drawing up and executing

Name, surname, date of birth, address, business license/individual activity certificate number (for the service provider), details of the services provided, bank account number of the natural person providing or receiving the service or goods

Article 6(1)(b) GDPR (contract)

During the term of the Agreement

The data is transferred to data processors that provide server rental and other administration services.

Contracts with suppliers, partners, etc.
(legal entities), drawing up and executing

Name, surname, position, basis of representation, email
e-mail address, telephone number, content of correspondence

Article 6(1)(f) GDPR (legitimate interest)

During the term of the Agreement

The data is transferred to data processors that provide server rental and other administration services.

Bookkeeping

Name, surname, details of services received/provided and goods sold, and other personal data in invoices and other accounting documents

Article 6(1)(c) GDPR (legal obligation)

The data shall be kept within the time limits laid down by the legislation governing the keeping of accounting records, and in accordance with the General Index of Document Retention Periods

The data is transferred to data processors that provide server rental and other administration services.

Archiving

Data held in contracts with suppliers, partners, etc.
for the purposes of concluding and executing contracts with contractors (both natural and legal persons)

Article 6(1)(c) of the GDPR, the legal obligation provided for in the General Index of Document Retention Periods approved by the Archivist of the Republic of Lithuania in 2011.
9 March 2011.
Order No.
V-100, point 10.37

10 years (after contract expiry)

The data is transferred to data processors that provide server rental and other administration services.

Defending legal claims

Data held in contracts with suppliers, partners, etc.
for the purposes of concluding and executing contracts with contractors (both natural and legal persons)

Article 6(1)(f) GDPR (legitimate interest – defence of legal claims)

10 years (after contract expiry)

Data transmission

courts, public dispute resolution bodies, litigants, lawyers and other legal service providers.

The data is transferred to data processors that provide server rental and other administration services.

For the purposes of selecting candidates for employment, we process the following personal data of candidates: name, surname, place of work, e-mail address, telephone number, address, education, preferred job, date of receipt of CV, information about your personal qualities, work experience (last place of work, length of service with the employer, position held, other work experience), information about your knowledge of foreign languages (language, reading, reading, writing, speaking levels), ability to work with computer programmes, other information in your CV, letter of recommendation and/or cover letter; preferred salary.
Personal data is processed on the basis of your consent, which you express to the Company by sending your CV and/or cover letter.
If you do not submit your CV and/or cover letter, we will not be able to assess your suitability for the position offered.

With your consent, we will contact your current employer, and we may contact your former employer on the basis of our legitimate interest (to select a suitable candidate) and on the basis of Article 5(2) of the Law on the Legal Protection of Personal Data of the Republic of Lithuania, in order to verify information about your qualifications, professional abilities and business qualities (such as your work performance, relations with clients and/or colleagues, evaluation of your work, etc.).
You may withdraw your consent or, as the case may be, object to us contacting your former employer at any time by notifying us at the email address specified in paragraph 2 of the Policy.
2.

In the event that you do not express your individual consent to the processing of your personal data for a longer period of time after the end of the specific job selection, we undertake to delete and/or destroy your personal data within 3 working days after the signing of the contract with the successful candidate or the decision to close the selection.
If you are not selected but have given your consent to the processing of your personal data for the purpose of offering you a job in the future, we will keep your data for 1 year after the end of the selection on the basis of your consent.

On the basis of our legitimate interest, we will process the data (name, surname, email, telephone, information provided by the person) about the person indicated by the candidate – the former or current employer or the person providing the reference – for the purpose of selecting the candidate.
In this case, our legitimate interest is to select the right candidate for the position we are seeking.
We will delete this data within 3 days after the contract with the selected candidate has been signed or the decision to close the selection has been taken.

In order to ensure the quality of service and to preserve evidence of agreements, the Company records the conversations of its employees with interlocutors and for this purpose processes the following personal data of the interlocutors: name, surname, voice, content of the telephone conversation, date and time, and the telephone number of the person called or from whom the call was received.
Telephone conversations are recorded both when you call us and when our employees call you.
We base the recording of telephone conversations on your consent.
You will be informed that the telephone conversation will be recorded before each telephone conversation with our staff.
If you do not agree to the recording of telephone conversations, please contact us in any other way that is convenient for you – by email or by phone.
By email or by coming to our clinic address.
Telephone records are stored
3 months from the date of their recording.

Telephone records are passed on to the data processors we use and may also be disclosed to law enforcement authorities, courts, public dispute resolution bodies, litigants, lawyers and other legal service providers if necessary.

In order to exercise its legitimate interest to ensure the protection of the Company’s confidential information, the continuity of the Company’s business, and to protect the Company’s information systems from hacking and data theft, viruses, dangerous websites, malware, and copyright infringement through technical and internet access and to protect the computer network from heavy loads, the Company may review its employees’ correspondence with contractors and information stored on the Company’s electronic equipment.
For these purposes, the Company processes the following personal data of its employees and of persons who send or receive employee communications: e-mail address, name of sender or recipient, date, and content of information contained in electronic work tools.

Data collected for the purpose of protection of confidential information and protection of the Company’s information systems against hacking and data theft, viruses, dangerous websites, malware, copyright infringement through technical and internet access and computer network against heavy loads, shall be stored for the purpose of defence of legal claims for a period of 4 years in accordance with the provision set out in Article 1.125 (9) of the Civil Code of the Republic of Lithuania.
For the purpose of defending legal claims, the data may be made available to recipients (data controllers) such as courts, law enforcement authorities, public authorities settling disputes, litigants, lawyers and other entities providing legal services.

A company has a legitimate interest in enforcing its rights, including in civil disputes in the event of civil disputes, process the data of the persons involved in the case or their employees names, personal identification numbers, the circumstances of the case, other information relevant to the case, and publicly available information.
The data may be transmitted to law enforcement authorities
, for lawyers or bailiffs enforcing recovery.
The data shall be destroyed after
1 one year after the final settlement of the case and full satisfaction of the Company’s claims (if claims are satisfied).

There are several ways you can contact the Company: by phone, email, phone.
You can contact us by e-mail, social media accounts, the contact form on the website or by sending a letter to the Company’s registered office.
We receive, review and respond to all communications ourselves.
If you contact us, we may process the data you provide to us, i.e.
y.
email.
We may use your email address, name (if provided), username (if the request is sent via a social networking account), workplace (if provided), date, time, recipient, sender (if the message is addressed to you), content of the messages sent and received.

Such data will be processed in order to answer your questions and process your suggestions.
If you do not provide your contact details, it will not be possible to contact you.

Correspondence is stored for 1 year from the date of receipt of the message, except for information for which other time limits are specified in the Privacy Policy or in legal acts.
If you have communicated a news item to us and we have published it, the data of the communication with you will be stored until we publish the publication based on your communication.

Any personal data you provide when you interact with us is only used for the purposes set out above and to view messages and administer and manage communication flows.
We undertake not to use your personal data in any publications in a way that could identify you without your explicit consent.

Please note that we may need to contact you by post, email, etc.
by mail or telephone.
Please notify us of any changes to your personal data.

Our website uses cookies and other tracking technologies.
A cookie is a small file made up of letters and numbers that we place on your browser or on the hard drive of your computer with your consent.
We use different cookies for different purposes.
Cookies also help us to distinguish you from other users of the Website, thus ensuring a more pleasant experience and enabling us to improve the Website.

Most browsers allow you to reject all cookies, and some browsers only allow you to reject third party cookies.
You can therefore take advantage of these options.
However, please note that blocking all cookies will have a negative impact on the use of the Website and without cookies you will not be able to use all the services provided on the Website.
For more information, please visit
AllAboutCookies.orgOrwww.google.com/privacy_ads.html.

We may use the types of cookies described below, but you can find a detailed and up-to-date list of the cookies we use HERE.

Cookies are absolutely essential.

These cookies are essential for our website to work.
The basis for the use of such cookies is Article 73(4) of the Law on Electronic Communications of the Republic of Lithuania.
These cookies are necessary for the operation of the website and cannot be disabled on our systems.
They are usually used in response to what you do on the website, such as starting to browse or selecting your privacy settings.
These cookies do not store any personally identifiable information about you and are deleted as soon as you turn off the website.

Analytical and/or performance cookies.

These cookies allow us to count the number of visits to the website and to monitor the flow of visitors to the website so that we can improve the website.
They allow us to know which pages of the website are the most or least visited and to monitor how visitors navigate through the website.
We use Google Analytics for this purpose.
The data collected is not accessible to any other party.
The information collected by cookies is anonymous and is not intended to identify you or to influence your browsing experience while you are on the website.
If you do not consent to the use of these cookies, you will not be recorded in the visit statistics.
The processing of data collected by these cookies is based on your consent.

Commercial cookies.

These cookies, used by us and third parties, are designed to show you offers or other promotional information that may be of interest to you.
We use cookies that collect data about your browsing history and identify your areas of interest so that we can show you relevant marketing information.
The processing of data collected by these cookies is based on your consent.

Facebook Icons Plugin

This page uses the Facebook Icons plugin.

The information you provide to us via social media (including messages, the use of the “Like” and “Follow” fields, and other communications) is controlled by the operator of the social network.

Our Website contains a link to our account Gyd. V. Jonaitiene Clinic on Facebook and Instagram.

We process the information contained in your social account for the purpose of administering the account on the basis of your consent.
We do not separately store the information contained in the social account (where the data is processed for the purpose of administering the social account, but the data may be stored if it is necessary to process the data for another purpose, such as for the purpose of enforcing rights).

When you visit a social account, the administrator of the social network places cookies on your device that collect personal data.
Cookies are stored both if you are a registered Facebook user and if you do not have a Facebook account.
We do not have access to the collected personal data and can only receive statistical information from the administrator of the social network about the use of the social account.

We recommend you to read Meta Privacy Notice and contact them directly if you have any questions about how they use your personal data.

The controller of the social media network Facebook is based in the United States.

The data of European Union residents published on Facebook is processed by the data controller Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland).
Information on how you can exercise your rights as a data subject can be found at the following address:
https://lt-lt.facebook.com/privacy/explanation/If you have any complaints about Meta Platforms Ireland Limited’s processing of your personal data or the exercise (or non-exercise) of your rights as a data subject, you have the right to lodge a complaint with the supervisory authority in charge of Meta Platforms Ireland Limited – the Irish Data Protection Commission or the State Data Protection Inspectorate.

We receive your data from you, your devices, job applicants, our employees, and our contractors.

We disclose information about you to the data processors we use (IT service providers, etc.). For example, to the provider of the e-pacientas.lt platform, Softdent UAB, providers of rental services for servers where personal data is stored, etc.

In addition, we may disclose information about you:

  • At your request;
  • if that’s what we have to do by law;
  • when you intend to sell the business or part of its assets by disclosing your personal data to a potential buyer of the business or part of the business;
  • the sale of the Company’s business or a substantial part of its assets to a third party.

The list of recipients or categories of recipients specified in the Privacy Policy is subject to change, so if you wish to be informed about changes in the recipients of your personal data, please notify us at the e-mail address specified in this Privacy Policy.
Please notify us by e-mail, using the subject line ”
I would like to be informed about changes in the recipients of my personal data, name, surname“.

Your personal data will be processed in accordance with the General Data Protection Regulation, the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal requirements.
When processing your personal data, we implement organisational and technical measures to ensure the protection of personal data against accidental or unlawful destruction, alteration, disclosure, as well as against any other unlawful processing.

If you believe that your rights as a data subject have been and/or may be violated, please contact us immediately at the email address specified in this Privacy Policy.
Please contact us by e-mail.
We ensure that only upon receipt of your complaint, we will contact you within a reasonable period of time to inform you of the progress of the investigation of the complaint and subsequently the outcome.

If you are not satisfied with the results of the investigation, you can lodge a complaint with the supervisory authority, the State Data Protection Inspectorate: https://vdai.lrv.lt/.

You are responsible for the confidentiality of the data you provide and that The data you provide to us is accurate, correct and complete.
If the data you have provided to us changes, you must not de
Available at to inform us about it by email. by post.
In no event shall we be liable for any damage caused to you as a result of you providing incorrect or incomplete personal data or failing to inform us of any changes to such data.

We may update or change this Privacy Policy at any time. Websites lvisitors can find the current version of this Privacy Policy by clicking on each page of the website the link to the Privacy Policy on each page of the websiteą.
Atlikę reikšmingesnius
PIf there are changes to the Privacy Policy, we will take additional steps to bring the changes to your attention (we will post a newsletter discussing the changes to the Privacy Policy, we will inform you of the fact of the changes in a separate banner on the website, etc.). If you would like to receive an updated Privacy Policy in person at, please notify us at the email address listed in Section 2.
Please notify us at the email address provided in Section 2.

Mob. tel. +370 640 13431
privatusginekologas.lt