Personal data refers to all data that allows for the identification of an individual, regardless of the form or format in which the data is presented, such as a person’s name, personal identification code, address, contact details, etc. The concept of personal data also includes special categories of personal data, which among other things, include information about a person’s health status.

The processing of personal data is any operation performed on personal data.
At HNRK, personal data is processed in accordance with the Estonian Personal Data Protection Act and the European Union General Data Protection Regulation.

We process your data when:

• you use our services or wish to book an appointment for them
• you are listed as a patient’s contact person
• you request information about a patient currently or previously undergoing treatment with us
• you fill out a form for a personalized treatment offer
• you apply for a job with us, work for us, or provide services to us
• you submit a compliment, complaint, or suggestion to us, either on paper or via our website

• you send us an information request
• you are within the surveillance area of cameras on the hospital premises
• you visit our website

The data collected about your visit is limited to the internet address (IP address) of the computer or computer network used and the time of the visit (time, date, year). We do not link IP addresses to information that identifies you. We collect statistics on which parts of the website you visit and how long you stay there, in order to develop our website and make it more user-friendly. For this purpose, we use cookies, which are small text files stored on your computer or mobile device when you visit our website. You can opt out of cookies at any time by changing your device’s browser settings and deleting already saved cookies. Read more

By submitting personal data to us, you have given us permission to process it.
Cameras are installed inside the hospital premises and in the outdoor areas. These cameras transmit live images, record them, and allow for playback. Camera recordings are stored for 30 days.
To ensure the protection and lawful processing of personal data, the hospital implements organizational, physical, and IT security measures.

According to the Personal Data Protection Act, everyone has the right to access personal data collected about them and to know the extent and purpose for which their personal data has been processed. If the data has changed or is inaccurate for any other reason, the individual has the right to request the corresponding corrections in accordance with the law.

You have the right to request from HNRK the rectification, erasure, restriction of access, or portability of your data.
The hospital does not disclose or transfer personal data to third parties, except when such an obligation arises from law or with the data subject’s consent.

For questions regarding the processing of personal data, you can contact our data protection specialist at the email address info@hnrk.ee and by phone at 4725400.

If you believe that we have violated your rights in the processing of personal data, you may submit a complaint to either the hospital’s data protection specialist or the Data Protection Inspectorate (Tatari 39, Tallinn 10134, phone: +372 627 4135, email: info@aki.ee).

Haapsalu Neurological Rehabilitation Centre does everything possible to protect your personal data and comply with legal acts regulating data protection and privacy.