Privacy policy
This policy explains how Mediprime klinika handles the personal data of patients and website visitors under the General Data Protection Regulation (GDPR) and Lithuanian law. It is a translation of the Lithuanian policy, which prevails if the two differ.
Data controller
Mediprime, MB, company code 306670430, V. Krėvės pr. 119, Kaunas, Lithuania. Contact for data protection questions: info@mediprime.lt, +370 640 77799.
What data we collect
- When you book online: your name, phone number, email address, Lithuanian personal code, the scan and time you chose, and your note to the doctor.
- Health data created at the visit (scan reports), kept in medical records.
Why we process data, and on what basis
- To book and provide your visit – performance of a contract (GDPR Art. 6(1)(b)).
- For the healthcare service and medical records – legal obligation and healthcare purposes (GDPR Art. 6(1)(c), Art. 9(2)(h)). The personal code lets us link the scan report to you correctly.
- For messages about your visit (confirmation, reminder, cancellation by text message and email) – performance of a contract.
- For check-up reminders, news and offers by email – only if you agree (GDPR Art. 6(1)(a)): you tick the box when booking or tap the link in an email. We use only your email address for these, never health data. You can withdraw at any time with the link in each email or by writing to us.
How we protect data
Data is stored on servers in the European Union and sent only over encrypted connections (HTTPS). The personal code is stored encrypted in the database. Only the clinic's doctor and reception staff, signed in with personal passwords, can see bookings.
Who we share data with
Service providers who help us process data, under data processing agreements: website and database hosting, and text message and email delivery. We do not sell data or use it for advertising.
How long we keep data
- Medical records are kept for the periods set by law.
- Bookings that did not happen or were cancelled are deleted within 12 months.
- Confirmation code data is deleted after 30 days.
- Consent to news and offers is kept until you withdraw it; after that, your email stays only on the opt-out list so we send nothing more.
Your rights
You have the right to access your data, correct it, ask for it to be deleted or its processing restricted (as far as the law allows), object to processing, and receive your data in a portable format. Contact us using the details above. You can also complain to the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt).
Cookies
The site uses necessary technical cookies. If you agree, Google Ads cookies help us see how many people book or call after seeing our ads; booking and health data are never passed to Google. If you decline, Google receives only anonymous signals without cookies. You can change your choice by clearing this site's data in your browser. The map is embedded from Google Maps, which may use its own cookies.