Privacy Policy

What is personal data?

Personal data is data that allows identifying you. Personal data does not include anonymous or aggregated data, such as aggregate statistics of users, i.e. data that cannot be unambiguously linked to you. Personal data includes, for example, your first and last name, personal code, gender, language, place of residence, date of birth, phone number, contact details on social media, e-mail address, network identifiers, such as your MAC address and IP address, and cookies.

Data controller

The data controller of the site tervisetõend.ee (hereinafter: Site) is Liikluslab group of companies, consisting of Liikluslab Baltic OÜ (registry code 14812701) and Liikluslab Tervis OÜ (registry code 12190856), located at Rotermanni 18/1-301, Tallinn, e- mail info@liikluslab.ee.

Using the Site

When you use our Site, we automatically collect and store technical information sent by your browser, including the following: your IP address, the website you used to reach the current site, the versions of your browser and operating system, HTTP query parameters, the user’s session identifier, the unique identifier of the device, and the CSRF token. Some of this data is collected using cookies. When visiting the Site for the first time you see a warning that cookies are used. If you continue to use the Site, you agree with the usage of the required cookies. Learn more about cookie files in Cookie policy.

We process your personal data, which is part of this technical data, to ensure the stable and safe use of the Site, protect personal data from loss, damage, theft, or unauthorised access, and, if necessary, to identify a device which has been used to carry out illegal or malicious operations when using the Site. The legal basis for processing is your consent and the legitimate interest of Liikluslab group of companies.

We retain and process the collected technical information until the achievement of the objectives stated above – generally, for three years. After that, the data is deleted automatically.

Health Check Service

The group of Liikluslab companies offers the opportunity to undergo a health check for motor vehicle drivers. The service's Terms of Use are available here.

When you register for a health check, we will ask for your name, personal identification number, e-mail address, telephone number, communication language and the group of health certificate you are applying for. We process this personal data to enable you to complete the health check, to provide you with information about the service and to ask your feedback about the servise. The legal basis for the processing is the legitimate interest of the Liikluslabi group of companies to ensure compliance with the terms and conditions of the service referred to above and to enable health checks to be carried out by partner clinics. In view of the legitimate purpose of the processing, the fact that the conditions of the service referred to above are available to you and reasonable, we consider that your interests or the fundamental rights and freedoms for the protection of personal data do not outweigh our interest. To this end, we will retain and process the personal data until the purposes set out above have been fulfilled, normally for a period of six months after the health check.

The health check is carried out by the Liikluslab Tervis OÜ clinic (license no. L07248). Your health data is only accessible to healthcare professionals who perform the health check and enter the information into the National Health Portal. We do not collect or process this data except for cases where the data is stored based on your consent (see details below).

During the health check you will first be seen by a nurse who will conduct an interview and perform the necessary procedures, entering the information into the Health Portal. The doctor will then review the data along with your electronic health declaration and decide whether to issue a medical certificate for driving. During the health check, you will be asked to provide written consent for the decision to be sent to the email address you provided when booking the appointment. If you give consent, you will receive an email indicating whether the health certificate was issued. If you do not give consent, you can view the decision in the Health Portal. In case the certificate is not issued, the reason for the refusal will also be visible in the portal. We will store your written consent — including your name, email address, and signature (the signature is stored in encrypted form) — for three years. If no consent is given, no data listed above will be stored. The legal basis for data processing is Liikluslab Tervis OÜ’s legitimate interest in being able to prove your consent for sending the decision by email in the event of a potential dispute.

If you are referred for a re-check during the health check, the Liikluslab group of companies will be able to offer you a discount on a re-check. In order to receive the discounted rate, it should be noted in the Liikluslab information system that you have been assigned a re-check (the reason for the re-check and the health-related information are not noted). This is an option, not an obligation. If you do not wish to receive a discount, or do not wish to provide information about the re-check, you do not have to give your consent. You can withdraw your consent by clicking on the link in the e-mail we will send you after the health check. The legal basis for the processing of the data is your consent. We will retain and process your name, personal identification code, the status "referred for a follow-up visit," and your corresponding consent until the purposes set out above have been fulfilled, normally for a period of six months. If you give your consent in a written form at your visit to Liikluslab Tervis OÜ clinic, we will also store your signature (in an encrypted form). If you do not give corresponding consent, the data listed above will not be retained.

Recipients of personal data

Personal data is forwarded to the employees of Liikluslab group of companies who need to process it due to their working duties.

Personal data is forwarded to data processors authorized by Liikluslab group of companies (e.g. nurse, doctor, data storage service provider, accountant or IT service provider) on the basis of contracts concluded between Liikluslab group of companies and the data processors. The data processors are obligated to ensure relevant protective measures in the processing of personal data.

Personal data is stored in the servers of DigitalOcean LLC, which are located in the territories of EU Member States or members of the EEA.

Data may also be forwarded to third parties if this is required by the current legislation (for example, data protection organizations) or if it is necessary in the legitimate interests of Liikluslab group of companies to protect its rights (for example, legal consultant).

Paying for our services

The payment system requests and processes the personal data required for making the payment. The payment system services are provided by Maksekeskus AS (registry code: 12268475, address: Niine 11, Tallinn 10414, Estonia) and Montonio Finance OÜ (registry code: 14557628, address: Kai 1, Tallinn 10111, Eesti). We do not retain or process the client data, with the exception of the name of the payer, which is forwarded to us by Maksekeskus AS and Montonio Finance OÜ.

We retain and process your name, e-mail address, and the payer name in accordance with the provisions of the Accounting Act and the relevant taxation legislation. We retain this data for seven years as an accounting source document. The legal basis for processing is compliance with legal obligations and the legitimate interest of Liikluslab group of companies.

Security and access to data

Liikluslab group of companies implements physical, organisational, and information technological security measures to protect personal data from accidental or illegal destruction, loss, alteration, or unauthorised disclosure or access.

Your rights in the processing of personal data

You have the following rights:

• to receive information about the processing of personal data;
• to access your personal data that Liikluslab group of companies processes;
• to request the rectification of your personal data if the personal data processed by Liikluslab group of companies is incorrect;
• to request the erasure of your personal data if, in your opinion, there is no legal basis for the processing or if the erasure is required in accordance with valid legislation;
• to object to the processing of personal data on the basis of legitimate interest. If the objection is declared valid, your personal data will be erased and will no longer be processed;
• to request the transmission of the personal data which you have submitted to us and the legal basis for the processing of which is your consent or compliance with the terms of use;
• to revoke your consent to procedures of personal data processing.

Please contact the customer service (info@liikluslab.ee) to exercise these rights. You will receive a reply within one month. Some personal data may be retained as backup copies after its erasure for a reasonable amount of time.

Settling disputes

Disputes regarding the processing of personal data are settled via the customer service (info@liikluslab.ee). The supervising authority is the Estonian Data Protection Inspectorate (info@aki.ee).