Privacy Policy regarding the processing of personal data and medical information of the Individual Entrepreneur Natalia Igorevna Bidnik

1. General provisions

1.1. This Privacy Policy defines the procedure for collecting, processing, using, storing, protecting and disclosing personal data, medical information and other information provided by individuals (hereinafter referred to as the Patient, User) when seeking medical services from individual entrepreneurNatalia Igorevna Bidnik, (hereinafter referred to as the Doctor, Owner of personal data), as well as when using the website https://alter-ego.net.ua/ (hereinafter referred to as the Site).

1.2. This Policy applies to information received:

• when visiting the Site;
• through consultation appointment forms;
• during a telephone, electronic or online request;
• during an in-person appointment;
• during remote consultations (telemedicine);
• in the process of further interaction with the Patient.

1.3. The service provider processes personal data in accordance with: the Law of Ukraine "On Personal Data Protection"; the Law of Ukraine "Fundamentals of the Legislation of Ukraine on Health Care"; the Law of Ukraine "On Psychiatric Care"; other regulatory legal acts of Ukraine.

By using the Site, signing up for a consultation, or receiving medical services, a person confirms that they have read this Policy and agree to its provisions.

2. Owner of personal data

2.1. The owner of personal data is:

Individual entrepreneur Natalia Igorevna Bidnik
RNOKPP: 3362806829
Address of activity: 82078, Lviv region, Sambir district, Potik village, Centralna st., building 7

3. Data that may be collected

The following categories of data may be processed during the interaction:

3.1. Identification and contact details:

• last name, first name, patronymic (if available);
• date of birth;
• phone number;
• email address;
• residential address (if necessary);
• details of the legal representative.

3.2. Medical information:

• complaints;
• life and medical history;
• information about mental state;
• previous diagnoses;
• results of tests and examinations;
• information about treatment;
• allergic reactions;
• prescribing medications;
• other information necessary for the provision of psychiatric care.

3.3. Interaction data and financial data:

• date and time of recording;
• consultation history;
• contact via messengers, email or phone;
• records regarding the organization of the reception;
• the fact of payment;
• payment date;
• sum;
• transaction details in the amount necessary for settlements.

3.4. Technical data:

• IP address;
• browser type;
• device type;
• cookies;
• technical access logs;
• date and time of visiting the Site.

4. Purpose of processing personal data

4.1. The Patient's personal data is processed by the Doctor exclusively to the extent necessary for the proper provision of medical services and compliance with the requirements of the legislation of Ukraine.

4.2. Personal data is processed for the purpose of organizing an appointment for a consultation, agreeing on the date, time and format of the appointment, ensuring communication with the Patient, sending messages regarding the appointment, postponement or cancellation of the consultation, as well as for the proper organization of the service provision process.

4.3. Medical and personal data may be processed for consultations, history taking, health assessment, diagnostics, establishing a preliminary or clinical diagnosis, determining treatment tactics, prescribing medication, providing recommendations, dynamic monitoring of the Patient's condition and treatment correction.

Personal data may also be used to maintain medical records, enter information into relevant information systems, issue prescriptions, certificates, referrals, medical reports and other documents in cases and in accordance with the procedure provided for by the legislation of Ukraine.

In the case of remote consultations, personal data may be processed for the purpose of organizing and conducting telemedical appointments, identifying the Patient, and ensuring proper communication during the consultation.

4.4. Data is also processed for the purpose of making payments for services provided, accounting and tax accounting, confirming payments, maintaining internal reporting and fulfilling financial obligations in accordance with the legislation of Ukraine.

In addition, personal data may be processed for the purpose of protecting the legitimate rights, interests and safety of the Doctor and the Patient, resolving disputes, considering appeals and fulfilling other obligations imposed on the Doctor by the current legislation of Ukraine.

5. Legal basis for processing personal data

5.1. The processing of the Patient's personal data is carried out by the Doctor exclusively if there are appropriate legal grounds and within the limits necessary to achieve the specified processing purposes, in accordance with the Law of Ukraine "On Personal Data Protection", the Fundamentals of Ukrainian Legislation on Healthcare, the Law of Ukraine "On Psychiatric Care" and other regulatory legal acts of Ukraine.

The legal grounds for processing personal data may include, in particular:

• voluntary consent of the Patient – in cases where such consent is required by law, in particular when applying via the website, registration forms, electronic services, communication channels or regarding certain methods of using personal data;
• the need to conclude and execute a contract - for making an appointment for a consultation, confirming an appointment, providing medical services, making payments, communicating with the Patient, and fulfilling the mutual obligations of the parties;
• the need to provide medical care and maintain medical records - to collect medical history, assess health status, establish a diagnosis, prescribe treatment, monitor progress, issue prescriptions, referrals, conclusions and other medical documents within the scope of the Doctor's competence;
• compliance with the requirements of the legislation of Ukraine - in cases where data processing is mandatory to comply with the requirements of tax, accounting, medical, licensing and other legislation, as well as at the request of authorized state bodies in cases provided for by law;
• protection of the vital interests of the Patient or other persons - in particular in emergencies, crisis situations, cases of threat to life or health, when the prompt processing or transfer of necessary information is reasonably necessary;
• the legitimate interest of the Doctor – within the limits that do not violate the rights and freedoms of the Patient, in particular to protect rights in controversial situations, conduct internal administration of activities, ensure information security, prevent abuse, confirm the fact of providing services and properly organize the work of the practice.

6. Medical secrecy and confidentiality of the consultative and treatment process

6.1. Information about the fact of the Patient's request for medical care, his/her health status, established or preliminary diagnosis, examination results, prescribed treatment, course of therapy, content of consultations, personal information obtained during the appointment, as well as other medical data constitute medical (medical) secrecy in accordance with Article 40 of the Law of Ukraine "Fundamentals of the Legislation of Ukraine on Healthcare".

6.2. The doctor undertakes to ensure the confidentiality of such information, to take appropriate organizational and technical protection measures and to prevent its disclosure to third parties without legal grounds or due consent of the Patient, except for cases expressly provided for by the legislation of Ukraine.

6.3. Access to information constituting medical confidentiality may only be granted to persons who need such information to perform professional, legal or technical functions within the scope of providing medical care and who are obliged to observe the confidentiality regime.

The information obtained during consultations is used exclusively for the purpose of:

• proper provision of medical care to the Patient;
• conducting diagnostics, assessing health status and determining treatment tactics;
• maintenance, storage and processing of medical documentation;
• preparation of prescriptions, certificates, referrals, conclusions and other documents within the scope of the Doctor's competence;
• organization of further treatment, dynamic monitoring and repeated consultations;
• compliance with the requirements of Ukrainian legislation;
• protection of the rights and legitimate interests of the Patient and the Doctor in cases provided for by law.

6.4. In the case of remote consultations, the Doctor applies available measures to protect electronic communications, however, the Patient is aware that the use of the Internet, mobile communications or third-party services may be accompanied by technical risks that do not always depend on the Doctor.

6.5. Audio, video or other technical recording of the consultation may be made only with the prior mutual consent of the parties or in other cases expressly provided for by the legislation of Ukraine.

7. Transfer of personal data to third parties

7.1. The Doctor ensures the confidentiality of the Patient's personal data and does not transfer them to third parties, except in cases where such transfer is necessary for the provision of medical services, compliance with the requirements of the legislation of Ukraine, or is carried out with the consent of the Patient.

The transfer of personal data may be carried out exclusively within the necessary scope and on the basis of appropriate legal grounds, in particular to the following categories of recipients:

• laboratories, diagnostic centers, pharmacies and other healthcare institutions - to the extent necessary to conduct examinations, treatment, issue referrals or provide medical care;
• electronic medical information systems, state electronic registries and healthcare services - in cases and in accordance with the procedure provided for by law;
• online recording services, hosting providers, site administrators, electronic communication and technical support services - to organize reception, communication and proper functioning of information resources;
• to banks, payment systems and financial institutions – to the extent necessary to make payments, refunds or confirm settlements;
• accountants, auditors, tax consultants, lawyers - to the extent necessary for conducting business activities and fulfilling legal requirements;
• to state bodies, law enforcement agencies, courts and other authorized entities - in cases expressly provided for by law;
• to other persons - exclusively on the basis of the separate consent of the Patient or his legal representative.

7.2. Persons to whom personal data is transferred are obliged to use it only for the specified purpose and to comply with the requirements of the law on the protection of personal data and confidentiality.

8. Online consultations and remote communication

8.1. To organize and conduct remote consultations, the Doctor may use modern means of electronic communication, in particular:

• video communication;
• telephone communication;
• messengers;
• email;
• specialized medical platforms;
• other communication channels agreed upon by the parties.

8.2. The use of remote communication means is carried out solely for the purpose of making an appointment, conducting consultations, transmitting recommendations, medical documents, clarifying information and further supporting the Patient.

8.3. However, the Patient is aware that the transmission of information via the Internet, mobile communications or third-party digital services cannot guarantee absolute security and may be accompanied by technical risks, communication interruptions, unauthorized access by third parties or other circumstances that do not always depend on the Doctor.

8.4. By requesting a remote consultation, the Patient agrees with the specifics of this format of interaction and undertakes to independently provide the appropriate technical conditions for communication.

9. Protection of personal data and processing of sensitive information

9.1. The Doctor takes appropriate organizational, technical and administrative measures to protect the personal data of Patients from unlawful processing, accidental loss, destruction, damage, unauthorized access, alteration or dissemination in accordance with the requirements of the Law of Ukraine "On Personal Data Protection" and other applicable legislation of Ukraine.

9.2. In order to ensure information security, the following measures may be applied, in particular:

• restricting access to personal data only to authorized persons;
• use of passwords, authorization and access identification means;
• backup of information in the required volume;
• control access to medical documentation and electronic records;
• storing documents in a way that prevents access by unauthorized persons;
• internal control over compliance with the confidentiality regime.

9.3. Personal data that may be processed by the Doctor also includes: sensitive personal data, in particular, information about health status, mental state, requests for psychiatric care, diagnosis, medical history and other information that, according to the law, requires an increased level of protection.

9.4. Such data shall be processed solely to the extent necessary for:

• providing medical care;
• conducting diagnostics and treatment;
• maintaining medical records;
• compliance with legal requirements;
• protection of the vital interests of the Patient;
• other cases expressly provided for by law.

At the same time, the Patient is aware that no method of storing or transmitting data via the Internet, mobile communications, or electronic services can guarantee absolute security, and therefore the Doctor cannot exclude all possible technical risks that are beyond his control.

10. Data of minors

10.1. In the case of providing medical services to minors, the processing of their personal data is carried out taking into account the requirements of civil law, legislation in the field of health care and personal data protection.

10.2. Consent to the processing of personal data, registration for a consultation, obtaining information about treatment and other legally significant actions are carried out by parents, adoptive parents, guardians, custodians or other legal representatives in cases and in accordance with the procedure provided for by the legislation of Ukraine.

10.3. The doctor has the right to request documents confirming the authority of the legal representative, if this is necessary for the proper provision of medical services or protection of the rights of a minor Patient.

11. Storage of personal data

11.1. Data is stored for the period necessary to achieve the purpose of processing, as well as for the periods established by the legislation of Ukraine for medical, accounting and tax documentation.

12. Amendments to the Policy

12.1. The owner of personal data has the right to make changes to this Privacy Policy. The current version of the Policy is always posted on the Site. Further use of the services after making changes is considered confirmation of the User's consent to the updated version.