Privacy Policy

PRIVACY AND PERSONAL DATA PROTECTION POLICY

1. GENERAL PROVISIONS

1.1. The privacy and personal data protection policy (hereinafter referred to as the "Policy") of the AI DI MEDICAL GROUP LIMITED LIABILITY COMPANY (hereinafter also referred to as the "Company", "Medical Center") defines the procedure for the collection, use, transfer, and storage of personal data and was developed with in order to ensure the protection of the rights and interests of persons whose personal data is collected by the Owner and processed in its personal data bases (hereinafter referred to as Personal Data Subjects/Clients) for the purpose of implementing relations between the Clients and the Owner, in connection with the Owner's business activities.

This Policy is developed on the basis of the Law of Ukraine "On Personal Data Protection", the Law of Ukraine "On Information", the Law of Ukraine "On Electronic Commerce" and the requirements of Ukrainian legislation in the field of personal data protection and processing.

The policy is an internal regulatory document of the Medical Center, which defines the key conditions and rules for using the website: https://idclinic.com.ua (hereinafter - the "Site"), the status of the information posted on it, the protection and protection of personal data, provided by Subjects of personal data, in order to regulate access to this information, its processing, transfer and protection.

The Owner strictly adheres to the principle of confidentiality and general requirements for the processing of personal data received from the Subjects of personal data, which are defined in this Policy and the current legislation of Ukraine in the field of personal data protection.

1.2. Definition of basic terms

The terms used in this Policy have the following meanings:

• Personal data base – a named set of ordered personal data in electronic form and/or in the form of personal data files ;
• Responsible persons- persons who are responsible for the organization of the Owner's activities or a separate area of his activities, which are related to the need to protect and process personal data in accordance with this Policy and the current legislation of Ukraine;
• The owner of personal data is AI DI MEDICAL GROUP LIMITED LIABILITY COMPANY, a legal entity that determines the purpose of processing personal data, establishes the composition of this data and the procedures for its processing, unless otherwise specified by the legislation of Ukraine (hereinafter - the "Owner");
• Commissioner - Commissioner of the Verkhovna Rada of Ukraine on human rights;
• The consent of the subject of personal data is a voluntary expression of the will of a natural person (provided that he is informed) regarding the granting of permission for the processing of his personal data in accordance with the formulated purpose of their processing, expressed in writing or in a form that makes it possible to conclude that consent has been given. In the field of e-commerce, the consent of the subject of personal data may be given during registration in the information and telecommunications system of the subject of e-commerce by marking the consent to the processing of his personal data in accordance with the stated purpose of their processing, provided that such a system does not create opportunities for the processing of personal data until the moment of ticking (hereinafter - "Consent");
• Processing of personal data - any action or set of actions, such as collection, registration, accumulation, storage, adaptation, change, renewal, use and distribution (distribution, implementation, transfer), depersonalization, destruction of personal data, including using information (automated) systems;
• Personal data - information or a set of information about a natural person who is identified or can be specifically identified;
• Administrator of personal data - a natural or legal person who is authorized by the owner of personal data or by law to process this data on behalf of the owner;
• The subject of personal data is a natural person, the Client, whose personal data is processed;
• Third party - any person, with the exception of the subject of personal data, the owner or manager of personal data and the Commissioner of the Verkhovna Rada of Ukraine for human rights, to whom the owner or manager of personal data transfers personal data.
• Depersonalization of personal data - the removal of information that makes it possible to directly or indirectly identify a person;
• Identification - the procedure of recognizing a user in the system, as a rule, with the help of a predetermined name (identifier) or other information about him, which is perceived by the information (automated) system;
• Client - (buyer, consumer, user, patient) – a natural person, Subject of personal data, who uses the goods and services of the Owner and/or who applied to the owner for the provision of medical and other services (to whom such services are provided);
• The site https://idclinic.com.ua is a collection of data, electronic (digital) information that has a unique name (domain name), access to which is carried out via the Internet, and is the property of AI DI MEDICAL LIMITED LIABILITY COMPANY GROUP";
• An automated (information) system is an organizational and technical system in which information processing technology is implemented using technical and software tools, which, in particular, are used to process and protect personal data. The Owner uses the following automated systems: Joomla (hereinafter referred to as the "Automated System");
• A cookie is a small text file that is stored on the device for record keeping. Cookies record information about user activity when using information (administrative) systems, in particular - websites. Some cookies remain on the user's device until they are deleted .
• Account – a formalized record on computer equipment (computers, servers) that identifies the user on such equipment, contains data on access to part of the catalogs and computer program, computer equipment, and also defines the rights of such access, that enable the account owner to add, delete, change digital content, provide access to individual data to other persons, terminate access within the account.

2. PERSONAL DATA PROCESSING

2.1. Personal data processed by the Owner must be accurate and reliable and, if necessary, updated.

2.2. The composition and content of personal data must be relevant, adequate and not excessive in relation to the defined purpose of their processing. The amount of Personal Data that can be included in the Personal Data Base is determined by the terms of the Personal Data Subject's Consent or in accordance with legislation.

2.3. The primary sources of information about a natural person are: documents issued in his name; documents signed by her; information that a person provides about himself.

2.4. Processing of personal data is carried out for specific and legal purposes specified in the Agreement, or in the cases and in the order provided by the legislation of Ukraine. It is not allowed to process data about a natural person, which is confidential information, without his consent, except in cases defined by law, and only in the interests of national security, economic well-being and human rights.

2.5. Personal data are processed in a form that allows the identification of the natural person to whom they relate, no longer than is necessary for the legitimate purposes for which they were collected or further processed.

2.6. The owner does not process personal data about racial or ethnic origin, political, religious or ideological beliefs, membership in political parties and trade unions, criminal convictions. Processing of personal data related to sexual life, biometric or genetic data is carried out exclusively in cases when such information is necessary for the purposes of health protection, quality control of the provision of medical services and in other cases determined by the legislation of Ukraine.

2.7. Personal non-property rights to personal data, which each natural person has, are inalienable and inviolable.

3. COLLECTION OF PERSONAL DATA

3.1. The Owner collects and accumulates Personal Data voluntarily provided by Personal Data Subjects in writing, orally, by means of electronic communication (including via the Internet) or in any other way:

- in the course of the Owner's economic activity;

- in the process of implementing contractual, pre-contractual and other commercial relations with Personal Data Subjects;

- when carrying out marketing, including advertising, activities;

- in the process of implementing other legal relationships that require processing of Personal data;

- from other legal sources.

3.2. The Owner collects and processes any Personal Data that is voluntarily provided by Personal Data Subjects and meets the specified purpose, and is specified in the Personal Data Subject Consent, including, but not limited to, the following categories of Personal Data (personal data composition):

- the registration number of the taxpayer's registration card (if available) or the series and number of the passport (for individuals who, due to religious beliefs, refuse to accept the registration number of the taxpayer's registration card and have reported this to the relevant supervisory authority and have a mark in the passport);

- surname, first name, patronymic;

- date and place of birth;

- the address of the actual place of residence or stay;

- series and number (if available) of an identity document (passport of a citizen of Ukraine, temporary certificate of a citizen of Ukraine, birth certificate (for persons under the age of 14), permanent residence permit in Ukraine, refugee certificate, identity card of a person in need of additional protection, temporary residence permit, etc.), authority that issued the document, date of issue, validity period;

- phone number, e-mail address (hereinafter - "Contact data");

- information about the legal representative of the person (surname, first name, patronymic, documents certifying his identity and the powers of the legal representative in accordance with the legislation) (if available);

- gender;

- state of health (processed only to the extent and in cases necessary when placing orders for diagnostics to establish a medical diagnosis and/or receive medical services provided by the Owner).

3.3. Personal data is processed by the Owner on the basis of the Agreements received from the Subjects of personal data and on other legal grounds in strict accordance with the current legislation of Ukraine in the field of personal data protection and stored in electronic form using the Automated System.

3.4. Obtaining Consent is not necessary in cases where the processing of personal data is carried out on the basis of the requirements of the legislation of Ukraine.

3.5. The Client gives his Consent to the processing of his personal data in accordance with the purpose defined by this Policy, and confirms that he is familiar with the composition and content of personal data collected by the Owner, his rights defined by the Law, the purpose of collecting personal data, the list of third parties to whom it is transferred personal data, a list of services provided by the Owner, and your desire to receive precisely such pre-selected services.

3.6. The collection of personal data takes place exclusively on the condition of receiving the Consent from the Client, after registering/placing an order on the Contractor's Websites, when making an appointment with a doctor, when registering for a newsletter subscription, filling out the "leave feedback"/"call me back" forms, etc., or under the time of the visit to the Medical Center and the signing of the Consent for the processing of personal data.

3.7 . Video recordings, photographs and/or recordings of telephone conversations with Clients may be used by the Owner to exercise and protect their rights and legitimate interests. The term of storage of information obtained with the help of video surveillance systems is not less than two weeks and not more than one year , based on the technical capabilities of the equipment.

4. OWNER'S PERSONAL DATA BASES

4.1. Documents and programs containing certain categories of Personal Data in paper and/or electronic forms, which the Owner constantly uses in the course of his activities, constitute the corresponding Personal Data Bases or their parts.

4.2. The subject of personal data is informed about the inclusion of his Personal Data in the Personal Data Base, about his rights defined by the legislation of Ukraine, the purpose of data collection and the persons to whom his Personal Data is transferred, simultaneously with the provision of Consent.

4.3. The Owner processes the Clients' Personal Data defined by this Policy in the Personal Data Database in accordance with the terms of the relevant Agreements provided by the Clients to the Owner in connection with the Owner's business activities.

4.4. The Owner may decide to create other Personal Data Bases or terminate the functioning of existing Personal Data Bases.

4.5. The owner of personal data is obliged to notify the Commissioner of each change in information subject to notification within ten working days from the date of such change.

5. PURPOSE AND METHODS OF PERSONAL DATA PROCESSING. TERMS

5.1. The general purpose of Personal Data processing is the Owner's business activities, including, but not limited to, the following purposes:

- providing medical services, establishing a medical diagnosis and storing diagnostic results, establishing compliance with the conditions under which medical services are provided and carrying out related operations;

- ensuring the proper functioning of the electronic data system, improving the efficiency of medical services, ensuring the timeliness of its provision and the reliability of statistical information;

- implementation of economic activity from medical practice;

- fulfillment of the requirements of legislation in the field of health care;

- fulfillment of the requirements established by the regulatory and legal acts of the Ministry of Health of Ukraine;

- preparation of statistical, administrative and other reporting information on the activities of the Owner in accordance with the requirements of the legislation;

- compliance with the requirements of legislation in the field of taxation;

- ensuring communications with Clients;

- provision of consultations and information regarding the Owner's goods, works and services;

- conducting marketing activities, research and advertising campaigns, analysis of consumer attitudes (loyalty programs, bonus programs, promotions, NPS surveys, etc.), including, but not limited to, actions such as sending informational and/or advertising messages about promotions or special offers through electronic, courier or postal mailing, sending SMS or voice messages, any information related to the Owner's business activities in the field of service provision, etc.;

- ensuring the rights and legal interests of the Owner and interested parties;

- ensuring the implementation of relations in the field of services provided by the Owner;

- accounting, financial and management accounting;

- business correspondence, including providing answers to requests from state bodies;

- relations that require the processing of Personal data and are aimed at obtaining income and implementing the provisions of the Civil Code of Ukraine, other legislation that regulates the activities of the Owner, the Owner's Charter, internal regulations and policies, etc.;

- other purposes necessary for the Owner to carry out business activities, and provided for by the terms of the relevant Personal Data Subject Agreements.

5.2. When processing Personal Data, the Owner takes all necessary organizational and technical measures to protect Personal Data from unauthorized or accidental access to them, destruction, distortion, blocking, reproduction, distribution of Personal Data, as well as other illegal actions.

5.3. Processing of Personal data is carried out using methods that ensure the confidentiality of such data and in compliance with the established requirements for ensuring the security of Personal data and technologies for storing such data, in accordance with the current legislation of Ukraine.

5.4. The person responsible for the preservation and protection of Personal data stored in electronic form ensures the presence in the programs in which personal data is processed in electronic form, the functions of saving information about operations related to the processing of personal data and access to them.

5.5. The term of processing of personal data of Customers is set by the Owner depending on the purpose of processing Personal data. Personal data is stored in the Personal Data Database all the time during the duration of the relationship between the Client and the Owner and in accordance with the terms determined by the current legislation of Ukraine. In the event that the Client does not contact the Owner for a longer period of time, the Personal Data of such a Client shall be deleted from the Personal Data Base.

6. PROTECTION OF PERSONAL DATA

6.1 . When processing Personal Data, the Owner ensures their protection against unauthorized access in accordance with the current legislation of Ukraine.

6.2. Protection of Personal Data stored in electronic form in the Automated System is ensured by restricting access to Accounts using unique passwords.

6.3. Automated systems are mandatorily provided with anti-virus protection, protection against leakage of Personal Data and means of uninterrupted power supply of system elements.

7. ACCESS PROCEDURE FOR THIRD PARTIES TO PERSONAL DATA

7.1. Third parties may receive the right of access to the Personal data contained in the Owner's personal data bases, exclusively under the conditions specified in the Agreement and in accordance with the requirements of the legislation of Ukraine.

7.2. Access to Personal Data is not granted to a Third Party, if the specified person does not have the legal right to receive them, refuses to undertake obligations to ensure the protection and processing of personal data, or is unable to provide them in accordance with the Agreement and the requirements of the legislation of Ukraine.

8. RIGHTS OF PERSONAL DATA SUBJECTS

8.1. Subjects of personal data have the right to:

- to know about the sources of collection, the location of their personal data, the purpose of their processing, the location or place of residence (residence) of the owner or controller of personal data, or to give the appropriate instructions for obtaining this information to persons authorized by him, except for cases established by law;

- receive information about the conditions for providing access to personal data, in particular information about third parties to whom personal data is transferred;

- to access your personal data;

- receive a response to a request about whether his personal data is being processed, as well as receive the content of such personal data within the time limits established by law;

- present a reasoned demand to the owner of personal data with an objection to the processing of his personal data;

- make a reasoned demand for the change or destruction of your personal data by any owner and administrator of personal data, if these data are processed illegally or are unreliable;

- to protect your personal data from illegal processing and accidental loss, destruction, damage due to intentional concealment, failure to provide or untimely provision of data, as well as protection from providing information that is unreliable or dishonors the honor, dignity and business reputation of a physical person individuals;

- file complaints about the processing of your personal data with the Commissioner or the court;

- apply legal remedies in case of violation of the legislation on the protection of personal data;

- enter a reservation regarding the limitation of the right to process your personal data when giving consent;

- withdraw consent to the processing of personal data;

- know the mechanism of automatic processing of personal data;

- to protect against an automated decision that has legal consequences for him.

8.2. Subjects of personal data may have other rights provided for by the current legislation of Ukraine.

9. ORGANIZATION OF WORK WITH PERSONAL DATA

9.1. To ensure compliance with the requirements of Ukrainian legislation regarding the protection and processing of Personal Data, as well as the terms of this Policy, the Owner appoints Responsible Persons from among its employees.

9.2. The responsible person fulfills his duties in accordance with this Policy and the norms of the current legislation of Ukraine regarding the collection and protection of personal data. The requirements of the responsible person for measures to ensure the security of personal data processing are mandatory for all employees who process personal data.

9.3. The responsible person has the right to :

9.3.1. access to all Personal Data Bases of the Owner, as well as to the premises or any other places of storage of Personal Data in order to check compliance with this Policy and legislation on the protection of Personal Data;

9.3.2. to receive explanations from the Owner's employees, who have access to the Personal Data, regarding the actions taken by them in relation to the Personal Data stored in the Owner's Personal Data Bases;

9.3.3. demand the termination of violation of the requirements of this Policy and current legislation regarding the processing and protection of Personal Data;

9.3.4. to ensure the preservation of the keys to the premises/closets/safes where documents containing Personal Data are stored, and also not to transfer them to other persons; not to disclose access codes and passwords to computers through which personal data can be accessed to persons who do not have and should not have access to Personal Data;

9.3.5. other rights necessary for the fulfillment of obligations regarding the organization of processing and protection of Personal Data contained in the Owner's Personal Data Bases.

9.4. The responsible person is obliged to :

- check the correctness of the documents, as well as the performance of other actions necessary to comply with the current legislation in the field of Personal Data protection;

- ensure compliance with the rights of Personal Data Subjects, receive and respond to requests for information containing Personal Data, in accordance with the requirements of the law;

- receive notifications from the Owner's employees about the facts of violations in accordance with the terms of this Policy and take measures necessary to overcome or prevent possible negative consequences, as well as renew the state of compliance with the requirements of this Policy and current legislation on the protection and procedure for handling Personal Data;

- organize the Owner's work in general in accordance with the requirements of the legislation in the field of Personal Data protection;

- in the case of changes to Personal Data or destruction of Personal Data, the Responsible Persons are obliged to simultaneously notify the Personal Data Subject of the corresponding actions with his Personal Data in the manner prescribed by this Policy;

- keep records of employees who have access to Personal Data and records of operations related to the processing of the Subject's Personal Data and access to them. For this purpose, information is stored about: the date, time and source of collection of the Subject's Personal Data; change of personal data; viewing personal data; any transfer (copying) of the subject's personal data; date and time of deletion or destruction of personal data; an employee who performed one of the specified operations; the purpose and basis of modification, revision, transfer and deletion or destruction of Personal Data. In the case of processing Personal Data of Subjects using an Automated System, such a system automatically records the specified information. This information is stored by the Owner during the periods stipulated by the legislation of Ukraine;

• ensure recording of violations of the processing and protection of personal data; take all other measures necessary to fulfill the duties assigned to them;
• ensure periodic change of unique passwords and access codes to Accounts through which Personal Data can be accessed;

- provide anti-virus protection in the Automated System where personal data is stored; ensure the use of technical means of uninterrupted power supply of computers through which you can access Personal Data.

9.5. Duties of employees of the Owner who process personal data:

All employees of the Owner who have access to Personal Data are obliged to:

• familiarize yourself with this Policy in order to comply with the norms and rules established by the Policy when processing Personal Data;
• use Personal Data only in accordance with professional or official or labor duties;
• prevent the loss of Personal Data or their improper use;
• not to allow the disclosure in any way of Personal data entrusted to them or which became known in connection with the performance of professional or official or labor duties (except for cases provided for by law), while such an obligation is valid even after their termination of activities related to personal data, except for cases established by law;
• do not hand over to unauthorized employees and/or third parties the keys to premises where servers with Personal Data Bases are stored, to safes or cabinets where documents containing Personal Data are stored, or access codes and passwords to computers through which personal data can be accessed;
• urgently notify the Responsible Person in case of: loss or accidental destruction of media with Personal Data; their loss of keys to premises, safes, cabinets where Personal Data is stored; if the identification data for logging into the Automated System, where Personal Data is stored, became known to other persons; detection of attempted unauthorized access to personal data; the fact of violation of the Personal Data protection regime and other requirements of this Policy;

Upon dismissal from work or transfer to another position, in a timely manner transfer to the head of the structural unit or another employee designated by the director of the company, information carriers containing Personal data that were received or created personally or jointly with other employees during the performance of official duties.

10. ACCESS PROCEDURE TO PERSONAL DATA

10.1. Access to Personal Data is granted to the Owner's employees only in cases where such access is necessary for the performance of their professional or official or labor duties.

10.2. Employees who receive access to personal data give a written Commitment not to disclose personal data entrusted to them or which became known to them in connection with the performance of professional or official or labor duties.

10.3 . The date of granting the right of access to personal data is considered the date of granting the obligation by the relevant employee.

10.4. The date of deprivation of the right to access Personal Data is considered to be the date of dismissal of the employee, the date of transfer to a position, the performance of duties in which is not related to the processing of personal data.

10.5. In the case of dismissal of an employee who had access to Personal Data, or his transfer to another position that does not involve work with Personal Data of subjects, measures are taken to prevent access of such a person to Personal Data, and documents and other media containing Personal Data Data of the Subjects are transferred to another authorized employee.

10.6. The Owner may approve separate procedures in the event of a violation of the Personal Data protection regime. If necessary, the director of the company or a duly authorized person appoints an official investigation in case of violations of the personal data protection regime. Based on the results of the official investigation, disciplinary sanctions may be imposed on employees guilty of violations.

11. FINAL PROVISIONS

11.1. The Owner takes measures to ensure the protection of Personal Data at all stages of their processing.

11.2. The owner independently determines the list and composition of measures aimed at the security of personal data processing, taking into account the requirements of legislation in the areas of personal data protection and information security.

            11.3. Personal data protection includes measures aimed at preventing their accidental loss or destruction, illegal processing, including illegal destruction or access to personal data.

11.4. This Policy (its subsequent revisions) is published on the Owner's website in the "Privacy Policy" section.

12. COOKIES

12.1. The Owner's sites use cookies .

A cookie is a file containing an identifier (a string of letters and numbers) that is transmitted by a web server to a web browser and stored by the browser. Third-party analytics systems are used to work with cookies . Analytics systems allow you to perform computer recognition with the user's permission. The identifier is then sent back to the server each time the browser requests a page from the server.

12.2. Cookies can be “persistent” or “ session ”:

- A persistent cookie is stored by the web browser and remains valid until the set expiration date, unless the user deletes it before the expiration date;

- Session cookies expire at the end of the user session when the web browser is closed.

12.3. Cookies , as a rule, do not contain any information that identifies the user's personal data.

12.4. Both session and persistent cookies are used on the Owner's Sites .

12.5. The user can delete cookies that are already stored on his computer.

Appendix No. 1

to the Privacy Policy

and protection of personal data

CONSENT TO PERSONAL DATA PROCESSING

1. The clientby means of a free and in no way unrestricted expression of will, gives consent to the Owner (the AI DI MEDICAL GROUP LIMITED LIABILITY COMPANY) to the processing of his personal data in the Personal Data Database voluntarily provided to the Owner:

- during a visit to the Medical Center, the Client gives voluntary consent by personally signing the Consent to the processing of personal data, and in the case of self-registration, or when making an online appointment with a doctor, signing up for newsletters, filling out the "leave a review" / "call me back" form », etc. , by putting a mark on granting permission for the processing of personal data in accordance with the stated purpose of their processing.

2. The client consents to the processing of his following personal data:

• the registration number of the taxpayer's registration card (if available) or the series and number of the passport (for individuals who, due to religious beliefs, refuse to accept the registration number of the taxpayer's registration card and have notified the relevant supervisory authority about it and have a mark in the passport);
• surname, first name, patronymic;
• date and place of birth;
• the address of the actual place of residence or stay;
• series and number (if available) of an identity document (passport of a citizen of Ukraine, temporary certificate of a citizen of Ukraine, birth certificate (for persons who have not reached the age of 14), permanent residence permit in Ukraine, refugee certificate, certificate a person who needs additional protection, a temporary residence permit), the body that issued the document, the date of issue, the validity period;
• phone number, e-mail address (further - contact data);
• information about the legal representative of the person (surname, first name, patronymic, documents certifying his identity and the powers of the legal representative in accordance with the law) (if available);
• sex;
• state of health (processed only to the extent and in cases necessary when placing orders for diagnostics to establish a medical diagnosis and/or receive medical services provided by the Owner).

The Client undertakes to provide accurate and truthful information about himself, as well as to notify the Contractor in a timely manner of changes related to the provided information.

3. Owner of personal data: AI DI MEDICAL GROUP LIMITED LIABILITY COMPANY (IDRPOU code 43705366); location and postal address: 08136, Kyiv region, Buchansky district, village Kryukivshchyna, str. Victory, 38.
4. Purpose and goals of personal data processing in the Personal Data Database:

The Client is hereby notified and consents to the fact that his personal data is processed by the Owner for the purpose of the Owner's business activities, including, but not limited to, the following purposes:

- provision of medical assistance, establishment of a medical diagnosis and storage of diagnostic results, establishment of compliance with the conditions under which medical services are provided and implementation of related operations;

- ensuring the proper functioning of the electronic health care system, increasing the efficiency of medical care, ensuring the timeliness of its provision and the reliability of statistical information;

- implementation of economic activity from medical practice;

- fulfillment of the requirements of legislation in the field of health care;

- fulfillment of the requirements established by the regulatory and legal acts of the Ministry of Health of Ukraine;

- preparation of statistical, administrative and other reporting information on the activities of the Owner in accordance with the requirements of the legislation;

- compliance with the requirements of legislation in the field of taxation;

- ensuring communications with Clients (including receiving feedback from Loyalty Program participants, ensuring relations in the field of consumer rights protection, etc.);

- provision of consultations and information regarding the Owner's goods, works and services;

- conducting marketing activities, research and advertising campaigns, analysis of consumer attitudes (loyalty programs, bonus programs, promotions, NPS surveys, etc.), including, but not limited to, actions such as sending informational and/or advertising messages about promotions or special offers through electronic, courier or postal mailing, sending SMS or voice messages, any information related to the Owner's business activities in the field of service provision, etc.;

- ensuring the rights and legal interests of the Owner and interested parties;

- ensuring the implementation of relations in the field of services provided by the Owner;

- accounting, financial and management accounting;

- business correspondence, including providing answers to requests from state bodies;

- relations that require the processing of Personal data and are aimed at obtaining income and implementing the provisions of the legislation of Ukraine, which regulate the activities of the Owner, the Charter of the Owner, internal regulations and policies, etc.;

- other purposes necessary for the Owner to carry out business activities, and provided for by the terms of the relevant Personal Data Subject Agreements.

The Client hereby informs and gives the Owner Consent for the following actions to be taken with the Client's personal data (including by the Owner's employees within the scope of their work duties):

• Collection of personal data in the amount necessary to achieve the purpose and goals of personal data processing specified in clause 2 of this Agreement and the Policy on the procedure for processing and protecting personal data of Clients, approved by the Owner;
• Processing of personal data, including, but not limited to, collection, receipt, registration, accumulation, systematization, storage, adaptation, clarification (updating, changing, renewing), use, distribution (distribution, implementation, transfer, including transfer to managers of personal data data and third parties determined by the Contractor independently, including the transfer to foreign subjects of relations related to personal data, including cross-border transfer to any managers or third parties at the discretion of the Owner, under the conditions of ensuring adequate protection of personal data The Client agrees that the Owner is not obliged to personally notify the Client about such transfer), depersonalization, blocking, destruction of personal data, as well as any other actions or set of actions related to the processing of personal data in accordance with the purpose. and purposes of their processing, including processing in internal and/or corporate systems, resources, programs, databases of the Owner, including using information (automated) systems;
• Making changes to the Client's personal data at the request of other subjects of relations related to personal data, in the manner prescribed by the current legislation of Ukraine.

5. The Client is hereby notified of his rights as a Subject of personal data, in accordance with the Law of Ukraine "On the Protection of Personal Data", the Client has the right to:

• to know the location of the personal data base, which contains his personal data, its purpose and name, location and/or place of residence (residence) of the owner or manager of personal data, or to give an appropriate order to obtain this information to persons authorized by him, except in cases established by law;
• to receive information about the conditions for providing access to personal data, in particular information about third parties to whom his personal data is transferred;
• to access your personal data;
• to receive no later than thirty calendar days from the date of receipt of the request, except in cases provided by law, an answer on whether his personal data is stored in the relevant personal data base, as well as to receive the contents of his personal data that are stored;
• present a reasoned demand to the owner of personal data with an objection to the processing of his personal data;
• make a reasoned demand for the change or destruction of your personal data by any owner and manager of personal data, if these data are processed illegally or are unreliable;
• to protect your personal data from illegal processing and accidental loss, destruction, damage due to intentional concealment, failure to provide or untimely provision of them, as well as protection from providing information that is unreliable or disgraces the honor, dignity and business reputation of a natural person ;
• file complaints about the processing of your personal data with the Commissioner or the court;
• apply legal remedies in case of violation of the legislation on the protection of personal data;
• enter a reservation regarding the limitation of the right to process your personal data when giving consent;
• withdraw consent to the processing of personal data;
• know the mechanism of automatic processing of personal data;
• to protect against an automated decision that has legal consequences for him.

Access to the Client's personal data is granted to third parties in accordance with the procedure provided by the Owner's internal documents, provided that such access is necessary for the realization of the specified purpose of personal data processing specified in the Policy and meets the requirements of legislation in the field of personal data protection.

6. Duration of this Agreement

The term of processing of personal data of Customers is set by the Owner depending on the purpose of processing Personal data. Personal data is stored in the Personal Data Database all the time during the duration of the relationship between the Client and the Owner, within the terms determined by the current legislation of Ukraine. In the event that the Client does not contact the Owner for a longer period of time, the Personal Data of such a Client shall be deleted from the Personal Data Base.

7. Other conditions

The Owner recommends that Clients, in the event of a change in their personal data, notify the Owner in a timely manner.

In order to exercise his rights, defined by Article 8 of the Act of Ukraine "On the Protection of Personal Data", the Client may contact the Owner with a corresponding written request:

• through means of electronic communication by sending a letter to the email address of the Owner: This email address is being protected from spambots. You need JavaScript enabled to view it. ;
• through the means of postal communication or courier service, by sending a letter to the postal address of Volodilets: 08136, Kyiv region, Buchansky district, village Kryukivshchyna, str. Victories, 38 .

The moment of inclusion of the Client's personal data in the Personal Data Base and the start of their processing occurs immediately after the Client gives his consent to the processing of his personal data, in the manner determined by clause 1 of this Agreement and the Policy approved by the Owner.

By giving consent to the processing of his personal data, the Client confirms that he has been duly informed by the Owner about the inclusion of his personal data in the Personal Data Base on the terms set out in this Agreement, in accordance with the Policy on the procedure for processing and protecting personal data of Clients, approved by the Owner, as well as about the composition and content of the collected personal data, the Client's rights, defined by the Law of Ukraine "On the Protection of Personal Data", the purpose and objectives of the collection of personal data and the persons to whom his personal data is transferred.

In the case of the Client's refusal to give consent to the processing of personal data in accordance with the specified purpose, the Owner reserves the right not to provide the services ordered by the Client, if the lack of the necessary data of the Client does not allow the Owner to provide services in compliance with the current legislation of Ukraine.

The Owner uses cookies ( required cookies ) for the uninterrupted operation of the Site and the creation of services and offers taking into account the needs of the Clients (optional cookies - the Client must additionally agree to them). The customer can change the settings of his device himself.

8. Administrators of the Personal Data Base are:

• enterprises, institutions and organizations of all forms of ownership, state authorities or local self-government bodies, and financial institutions that process personal data in accordance with the law;
• other private persons and organizations to ensure that the latter perform their functions or provide services to the Owner in accordance with the deeds concluded between such persons (organizations) and the Owner;
• an authorized body of state power responsible for verifying information in the relevant register of the central database of the Ministry of Health of Ukraine.

                     The administrator of personal data can process Personal data only for the purpose and to the extent determined by the legislation of Ukraine and this Policy.

• Icoone Laser
• Finexel Evero (All in One Fractional CO2 Laser System)
• PACT lamp for the treatment of fungal diseases
• PRP Regenlab
• Apparatus for shockwave therapy BTL 6000 SWT TOPLINE (Great Britain)
• BTL Exilis Elite
• BTL 6000 Lymphastim
• BTL Vac II
• IPL Exilite BTL
• Voluson E8