1. Personal data controller
| Detail | Value |
|---|---|
| Controller | Medical Center Atlant LLC |
| Registered address | 107014, г. Москва, вн. тер. г. муниципальный округ Сокольники, 2-й Полевой пер., д. 2, к. 3, кв. 46 |
| Medical centre address | 105187, г. Москва, ул. Щербаковская, д. 53, к. В |
| Taxpayer ID (INN) | 7704794465 |
| Registration reason code (KPP) | 771801001 |
| Primary State Registration Number (OGRN) | 1117746881713 |
2. Purposes of personal data processing
- identifying the patient, registering a request, and booking an appointment;
- entering into and performing an agreement for medical services;
- organising and providing medical care and carrying out payments;
- maintaining, preparing, recording, and storing medical documentation, including electronic documentation;
- carrying out laboratory, instrumental, diagnostic, and other examinations, and receiving and recording their results;
- maintaining personalised records and creating electronic medical documents;
- performing the medical organisation’s statutory duties for information exchange with state health information systems.
3. Categories of personal data
- surname, given name, patronymic, gender, date and place of birth, citizenship, and address;
- identity document details, telephone number, and email address;
- SNILS and compulsory or voluntary health-insurance policy information, if available;
- information about a legal representative;
- information required to perform the agreement and make payments;
- other data provided by me or required by law.
4. Health information and medical confidentiality
In connection with the provision of medical care, special categories of personal data concerning health are processed: information about seeking medical care, complaints, medical history, diagnoses, examination results, laboratory, instrumental, and other test results, prescriptions, medical interventions and treatment, and other information in medical documentation.
Processing is carried out in compliance with personal-data legislation and medical confidentiality requirements.
5. Tests performed by external medical and laboratory organisations
I consent to the disclosure of my personal data and information covered by medical confidentiality to medical and laboratory organisations engaged by the Operator to perform laboratory, instrumental, diagnostic, and other examinations prescribed for me. Such disclosure is limited to what is necessary to perform the examination, identify biological material, prepare, receive, and transfer the examination results to the Operator.
The information transferred may include my full name, gender, date of birth, necessary identification data, information about the prescribed examination, diagnosis, biological material, and other health information to the extent necessary for the specific examination.
The consent also covers referral and transfer of biological material, including blood, urine, swabs, and other material, to organisations directly carrying out the prescribed examinations, as well as the Operator’s receipt of the results and inclusion of them in my medical documentation.
6. Medical information system and MedRocket LLC
To maintain electronic medical documentation and exchange information, the Operator uses software solutions of MedRocket LLC (OGRN 1122311003760), including the MedFlex system.
To the extent necessary for the system to function and to perform its agreement with the Operator, MedRocket LLC may process personal data on the Operator’s behalf in compliance with personal-data legislation and requirements for confidentiality and information security.
7. Unified State Health Information System (EGISZ)
In the cases and to the extent provided by the legislation of the Russian Federation, the Operator creates and transfers required information and electronic medical documents to the Unified State Health Information System (EGISZ) and its subsystems.
Electronic medical documents may be transmitted technically through the MedFlex system of MedRocket LLC, including to the EGISZ REMD and/or IEMK subsystems.
8. Personal data processing operations and methods
Consent is given for the collection, recording, organisation, accumulation, storage, updating (amendment), retrieval, use, transfer (provision and access) in cases provided by law and this consent, de-identification, blocking, deletion, and destruction of personal data.
Processing may be carried out using automation tools or without them.
9. Term and withdrawal of consent
The consent is effective from the date of signing until the purposes of processing are achieved or the consent is withdrawn, unless another processing or retention period is established by the legislation of the Russian Federation.
Consent may be withdrawn by sending a written request to the registered address of the Operator: 107014, г. Москва, вн. тер. г. муниципальный округ Сокольники, 2-й Полевой пер., д. 2, к. 3, кв. 46.
Withdrawal does not terminate processing in cases where the Operator has the right or obligation to continue processing without the subject’s consent under the legislation of the Russian Federation.
10. Confirmation
I confirm that I understand this consent and that I have been provided with information about the purposes, scope, methods, and conditions of personal data processing; the transfer of data and biological material for examinations; the use of the medical information system; and information exchange with EGISZ.
| Form field | Completed in the consent form |
|---|---|
| Date | “____” ______________ 20____ |
| Patient signature | ________________________________ |
| Patient full name | ________________________________ |
| Legal representative — when consent is given by a representative | Full name, address, identity document, authority document, and signature |