Lille Hambaravi OÜ (LH) Privacy Policy
Lille Hambaravi OÜ (LH) provides dental services in the Republic of Estonia at Ädala 1, Tallinn 10614. This privacy policy outlines the principles of data protection and processing applied by LH to ensure the protection and security of your personal data. LH has implemented reasonable and necessary measures to safeguard your security and the confidentiality of personal data.
Access to personal data is limited only to employees whose duties require it, and the processing of data is restricted solely to what is necessary for providing dental services. LH makes every effort to protect personal data from falling into the hands of unauthorized persons.
The processing of personal data is necessary for the fulfillment of contracts. We want you to be aware of what personal data we process, the reasons for processing it, how we use personal data, and what your rights and obligations are.
Scope of the Privacy Policy
This privacy policy applies to you, for example, when:
You use LH services;
LH provides you with healthcare services;
You call the LH contact phone number;
You contact LH by email or another means of communication.
LH does not knowingly process the data of persons under the age of 13, except when data processing is necessary for providing healthcare services.
Purpose of Collecting and Processing Personal Data
LH collects and processes personal data for the following purposes:
provision of healthcare services;
development of healthcare services;
communication with patients, consumers, employees, and cooperation partners;
advancement of dental science;
responding to inquiries and resolving applications;
evaluation of the quality of services and products;
processing customer feedback related to the website, products, and services;
improvement, modification, and enhancement of services;
ensuring the security of network and information systems;
detecting and resolving technical and information security issues;
detecting and preventing fraud or misuse.
When we process your personal data based on our legitimate interests, we always consider and balance possible effects on you (both positive and negative) and your rights under data protection law. Submitting personal data to LH is not mandatory, but refusal to do so may mean that LH cannot provide you with healthcare services or can only do so partially.
Principles of Personal Data Protection
LH applies physical, technical, and organizational security measures to ensure the protection and confidentiality of personal data, such as locks, electronic monitoring systems, firewalls, anti-malware programs, and spam filtering systems. We update and test security technology periodically. We provide access to your personal data only to employees who need it to perform their work. In addition, we train our employees on the importance of confidentiality, data protection, and security.
In providing healthcare services, LH uses Innovatik Hammas treatment management software (hereinafter “Hammas”). With Hammas software, it is possible to manage patient data, treatment information, digital images, work plans, billing, send SMS reminders, and much more. Hammas improves the work of both doctors and the entire clinic and helps users provide consistently high-quality healthcare services. The provider of Hammas treatment management software is Innvoaatik OÜ.
Examples of Situations Where LH May Process Your Personal Data
When registering for healthcare services – when you book an appointment (on-site, by email, by phone, through online booking), we process your data (name, personal identification code, address, contact details, etc.);
When providing healthcare services – collecting, entering, modifying, and adding health data (including from the e-health database) to your medical record is necessary mainly for providing healthcare services, assessing health condition and treatment dynamics, and preparing a treatment plan;
When providing healthcare services – a dentist may take photos of you (including your entire face) to consult with experts (e.g., technicians, laboratories). By sharing photos, the dentist can determine the most optimal treatment plan and/or necessary procedure with expert assistance and perform other activities required for healthcare services.
Photos taken during your treatment may be used by the dentist in trainings to enable dentists to develop modern treatment methods. For this, the dentist will ask for your permission (consent). You have the right to withdraw your consent at any time by sending a signed request to the email address: lill@lillehambaravi.ee. Withdrawal of consent does not affect actions performed prior to withdrawal.
When your child or ward visits our dentist – we process your personal data to verify your relationship with the patient. We will provide you with information about the patient’s health data unless the patient or law enforcement authorities have determined otherwise;
When a patient has listed you as their contact person – we process your contact details to share information related to the patient;
When you request the release of medical records (for yourself, your child, or ward) – the release of documents is carried out in accordance with legal bases and by following applicable security measures;
When you file a complaint or information request (including via communication tools) – we use your personal data to clarify the circumstances of the complaint/request and to respond;
When applying for a job at LH – we rely on the data you provide and information that can be collected from public sources. By sending us your CV, you consent to us contacting you.
Data Processed
LH may collect and process the following data about you:
first and last name;
personal identification code;
residence details;
contact information (phone number, email, postal address, etc.);
health data (including from the e-health database);
document details (e.g., document number, etc.);
other data necessary for providing healthcare services;
X-rays, scans;
photos.
Methods of Data Collection
LH collects your data:
directly from you or your representative when you book a healthcare service appointment, communicate with us via communication tools, or during healthcare services provided by a healthcare provider;
from the e-health database.
Use of Personal Data
LH may use your data in its legitimate interests, including for:
providing healthcare services (including treatment planning, diagnosis, treatment, etc.);
entering into transactions with you (e.g., healthcare service contract and other agreements);
communicating with you (e.g., about service conditions, resolving applications and inquiries, negotiations, etc.);
conducting and developing business activities (e.g., data analysis, auditing, developing new products and services, improving existing services, identifying usage trends);
monitoring and preventing fraud, money laundering, and scams;
fulfilling legal, audit, regulatory, insurance, security, and processing requirements;
responding to inquiries from public and government authorities, including those located outside your country of residence;
legal cooperation with law enforcement agencies or for other purposes arising from legislation.
Legal Bases for Processing Personal Data
LH processes your personal data on the following bases:
to conclude a healthcare service contract;
to fulfill obligations arising from laws (e.g., Health Services Organization Act);
with your consent (e.g., using your photos in training, requesting LH to share your data with third parties for healthcare services);
on a legal basis (e.g., for preventing fraud, money laundering, and scams).
Data Protection and Processing on the LH Website
LH collects data about you arising from the use of www.lillehambaravi.ee (hereinafter the Website), including for example:
when you book a doctor’s appointment on the Website, in which case you may be asked for your name, contact details, address, and billing address;
communicating with you (including responding to inquiries);
improving services and the Website, enhancing user-friendliness;
informing you;
processing bookings.
Sharing and Disclosure of Personal and Other Data
Personal data may be disclosed or transferred to the following third parties:
institutions or individuals who have the legal right to request such documents (e.g., law enforcement agencies, Health Insurance Fund, Health Board, insurance provider in case of an insurance event, etc.);
with your consent, to LH partners for providing the best healthcare service;
to other third parties in cases of mergers, sales, or other changes related to LH, or in bankruptcy or other similar proceedings.
Storage and Location of Personal Data Processing
LH retains your data for as long as necessary to fulfill the purpose of collection or longer if required by law. Under the Health Services Organization Act, LH is required to retain your personal data for 30 years from the date of collection. If data is no longer needed for the original purpose, it will be deleted in accordance with LH’s data processing policy. Collected personal data is processed in the Republic of Estonia. At your request or with your consent, we may also transfer your personal data outside the Republic of Estonia.
Your Rights Regarding Data Processing
If LH processes personal data based on your consent, you have the right to withdraw your consent at any time. If the legal basis for processing is LH’s legitimate interest, you have the right to object to processing based on specific circumstances. You have the right to access your personal data collected by LH. In addition, you have the right to correct and/or supplement processed data.
If you wish to exercise your rights, you may submit a request to LH’s Data Protection Officer by email at lill@lillehambaravi.ee. Withdrawal of consent does not render previous processing unlawful.
Correction, Restriction, and Deletion of Personal Data
LH is obliged to correct, delete, or supplement processed and/or processing personal data without undue delay if, due to the purpose of processing, the data is incorrect, unnecessary, incomplete, or outdated. You have the right to request LH to restrict the processing of personal data in the following cases:
if you dispute the accuracy of the processed personal data;
if you believe the processing is unlawful but do not request deletion, only restriction of use;
if LH no longer needs your personal data for processing purposes, but you require it for legal claims;
if you have objected to processing until LH verifies whether its legitimate interests override your interests, rights, and/or freedoms.
If you request restriction of processing for the above reasons, LH will notify you before ending the restriction. If LH refuses your request to correct inaccurate data, you will be informed in writing, including the reasons for refusal. In such a case, you may contact the Data Protection Inspectorate. LH will notify recipients of the data and the source of inaccurate personal data of the correction, unless impossible or unreasonably complicated.
LH Data Protection Officer, Changes to the Privacy Policy, and Complaints
The management board of Lille Hambaravi OÜ has appointed a Data Protection Officer.
You may contact the Data Protection Officer regarding any inquiries and complaints related to LH’s processing of personal data by email at lill@lillehambaravi.ee.
LH has the right to unilaterally change the above privacy terms without prior notice. If you are not satisfied with how LH has handled your personal data or your privacy inquiry or request, you have the right to file a complaint with the local data protection authority (Estonian Data Protection Inspectorate, https://www.aki.ee/).
Last updated: 31.08.2025