4.Processing of personal data

4.1. Receipt of PD

4.1.1. All PD should be received from the subject himself. If the PD of the subject can only be obtained from a third party, then the subject must be notified of this or consent must be obtained from him.

4.1.2. The operator must inform the subject about the purposes, intended sources and methods of obtaining PD, the nature of the PD to be received, the list of actions with PD, the period during which the consent is valid and the procedure for its withdrawal, as well as the consequences of the subject's refusal to give written consent to receive them.

4.1.3. Documents containing PD are created by:

a) copying the original documents (passport, education document, TIN certificate, pension certificate, etc.);
b) entering information into accounting forms;
c) obtaining the originals of the necessary documents (work record, medical report, characteristics, etc.).

The procedure for the PD subject's access to his PD processed by the Organization is determined in accordance with the legislation and is determined by the internal regulatory documents of the Organization.

4.2. PD processing

4.2.1. The processing of personal data is carried out:

with the consent of the personal data subject to the processing of his personal data;
in cases where the processing of personal data is necessary for the exercise and fulfillment of functions, powers and duties assigned by the legislation of the Russian Federation;
in cases where when personal data is processed, access to an unlimited number of persons to which is provided by the subject of personal data or at his request (hereinafter – personal data made publicly available by the subject of personal data).

Employees' access to the processed PD is carried out in accordance with their official duties and the requirements of the Clinic's internal regulatory documents.

Employees who are allowed to process PD are familiarized with the organization's documents establishing the procedure for processing PD, including documents establishing the rights and obligations of specific employees.

The clinic eliminates the identified violations of the legislation on the processing and protection of personal data.

4.3. Filling out the form of informed voluntary consent to the processing of personal data.

4.3.1.The patient can leave three types of personal data in the Clinic:

personal data – permanent residence address, contact phone number, passport data;
special health data (of the subject of personal personal data - the patient) – all information related to health the amount of treatment provided, including information about the very fact of contacting a medical organization, is the data that is entered into the medical record;
biometric data (of the subject of personal personal data - patient) – any information about the physiological and biological characteristics of a person, on the basis of which it is possible to establish his identity (dental casts, X-rays, photographs, etc.).

4.3.2. At the first visit to the Clinic organization and each time during hospitalization, the patient is asked to fill out a form of informed voluntary consent to the processing of personal data. During subsequent visits to the Clinic, information about personal data (or their changes) may be clarified by the registry staff.

4.3.3. The information obtained is accumulated in a single computer database of the Clinic, stored and used by medical personnel in the provision of medical services.

The refusal of the patient to give written consent to the processing of his personal data is not a reason for not providing him with medical services at the Clinic.

4.4. The purposes of PD processing:

ensuring the organization of medical care to the population, as well as the most complete fulfillment of obligations and competencies in accordance with Federal Laws dated 11/21/2011 No. 323-FZ «On the basics of protecting the health of Citizens of the Russian Federation», dated 04/12/2010 No. 61-FZ «On the circulation of medicinal products funds» and dated 11/29/2010 No. 326-FZ «On compulsory medical insurance of citizens in the Russian Federation», the Rules for the provision of paid medical services by medical organizations, approved by the Decree of the Government of the Russian Federation No. 1006 dated 4.10.2012;
implementation of labor relations;
implementation of civil law relations.

4.5. Categories of personal data subjects

The Clinic processes personal data of the following subjects:

individuals who are in an employment relationship with the institution;
individuals who are close relatives of employees of the institution;
individuals who have resigned from the institution;
individuals who are candidates for employment;
individuals who are in civil law relations with the institution;
individuals who have applied to the institution for medical care.

4.6. PD processed by the Clinic:

data obtained during the implementation of labor relations;
data obtained for the selection of candidates for work in the organization;
data obtained during the implementation of civil law relations;
data obtained when providing medical care.

4.7. Personal data is processed:

using automation tools.
without using automation tools.

4.8. Storage of personal data

4.8.1. PD of subjects can be obtained, further processed and transferred to storage both on paper and in electronic form.

4.8.2. Personal data recorded on paper are stored in lockable cabinets or in lockable rooms with limited access rights (registry).

4.8.3. Personal data of subjects processed using automation tools for different purposes are stored in different folders (tabs).

4.8.4. It is not allowed to store and place documents containing PD in open electronic catalogs (file sharing sites) in ISPs.

4.8.5. The storage of PD in a form that allows to identify the subject of PD is carried out no longer than the purposes of their processing require, and they are subject to destruction upon achievement of the processing goals or in case of loss of the need to achieve them.

4.9. Destruction of PD

4.9.1. Destruction of documents (media) containing PD is carried out by burning, crushing (crushing), chemical decomposition, transformation into a shapeless mass or powder. Shredder is allowed to destroy paper documents.

4.9.2. PD on electronic media are destroyed by erasing or formatting the media.

4.9.3. The destruction is carried out by the commission. The fact of the destruction of PD is documented by the act of destruction of media signed by the members of the commission.

4.10. Transfer of PD

4.10.1. The clinic transfers PD to third parties in the following cases:

the subject has expressed his consent to such actions;
the transfer is provided for by Russian or other applicable legislation within the framework of the procedure established by law.

4.10.2. List of persons, to whom the PD is transmitted

The Pension Fund of the Russian Federation for accounting (legally);
Tax authorities of the Russian Federation (legally);
Social Insurance Fund (legally);
Territorial Fund of compulsory medical insurance (legally);
insurance medical organizations for compulsory and voluntary medical insurance (legally);
payroll banks (based on the contract);
judicial and law enforcement agencies in cases of, established by law;
credit bureaus (with the consent of the subject);
law firms operating within the framework of the legislation of the Russian Federation, in case of non-fulfillment of obligations under the loan agreement (with the consent of the subject).

Work with Us