Privacy Policy

  • Company Name: Alexandria Dereri

    Business ID: 3446832-2

    Phone: (+358) 40 154 2582

    Email: alexandriadereri@gmail.com

  • Name: Alexandria Dereri

    Email: alexandriadereri@gmail.com

    Phone: (+358) 40 154 2582

  • Customer and Patient Registry / Customer Registry

  • Personal data is processed for the following purposes:

    • establishing and maintaining a customer relationship

    • managing appointments

    • providing counseling and therapy services

    • billing and accounting

    • fulfilling legal obligations

    • communicating with customers

  • The processing of personal data is based on:

    • the performance of a contract

    • the data controller’s legal obligations

    • the customer’s consent, when necessary

    • the data controller’s legitimate interest in maintaining the customer relationship

  • The register may process, for example:

    • name

    • personal identification number (if necessary)

    • contact information

    • billing information

    • appointment information

    • notes related to the customer relationship

    • information related to treatment or counseling to the extent that it is necessary for the provision of the service

  • Data is generally obtained from:

    • the customer themselves

    • other healthcare providers or partners, with the customer’s consent

    • authorities, when permitted or required by law

  • Information will not be disclosed to third parties without the customer’s consent, unless there is a legal obligation or right to do so.

    Data may be disclosed to an accountant, a payment service provider, or IT system providers to the extent necessary for the provision of the service.

  • As a general rule, data is not transferred outside the EU or EEA. If services are used whose servers are located outside the EU or the EEA, transfers are carried out in accordance with the safeguards provided by applicable data protection legislation.

  • Personal data is retained only for as long as necessary to provide the service or as required by law.

    Retention periods for patient records are determined in accordance with applicable law.

  • Personal data is protected by appropriate technical and organizational measures.

    Access to the data is restricted to those individuals whose job duties require it. Measures in place include, among others, user IDs, passwords, data encryption, and, where necessary, two-factor authentication.

  • The data subject has the right to:

    • receive information about the processing of their personal data

    • review the data concerning them

    • request the correction of inaccurate data

    • request the erasure of data when there are legal grounds for doing so

    • restrict the processing of their personal data

    • object to the processing of their personal data in certain situations

  • Requests and questions regarding data protection can be sent to:

    alexandriadereri@gmail.com

    We strive to respond to all data protection requests without undue delay and no later than one month.