Privacy Policy
Helyos Surgery and Rehabilitation Centre
This Privacy Policy sets out the terms and conditions for the collection, processing, storage, use, distribution and protection of personal data of clients of the Helyos Surgery and Rehabilitation Centre (hereinafter referred to as the ‘Centre’, ‘we’, “our”) when using the website [specify the website address] and mobile applications (hereinafter referred to as the ‘Programmes’).
The Policy has been developed in accordance with: the Law of Ukraine ‘On the Protection of Personal Data’, the Law of Ukraine ‘On Information’, Resolution of the Cabinet of Ministers of Ukraine No. 611 of 09.08.1993, the Civil and Commercial Codes of Ukraine.
1. Definition of terms
1.1. Personal data – any information about a natural person who is identified or can be identified.
1.2. Confidential information – information held by natural or legal persons, which is transferred at their request on the condition of confidentiality.
1.3. Information confidentiality regime – legal, organisational and technical measures to protect personal data.
1.4. Client – a natural or legal person who has reached the age of 18, is registered on the website or in the Programme and uses the Centre's services.
1.5. Counterparty – any person who has entered into an agreement with the Centre and has access to confidential information in accordance with the agreement.
1.6. Website – the official website of the Helyos Family Health and Rehabilitation Centre: helyos.com.ua.
1.7. Programme – a mobile application that provides access to the Centre's services.
2. Information relating to confidentiality
Confidential information includes:
2.1.1. Personal data provided by the Client during registration or enrolment: first name, surname, telephone number, email address, etc.
2.1.2. Data automatically transmitted when visiting the Website (IP address, browser data, referral source, etc.).
2.1.3. Medical data, including medical history, examination results, diagnoses and other information about the Client's health.
3. Establishment of confidentiality
3.1. The confidentiality regime is considered to be established after the Client has given their consent to the processing of personal data and the Centre has taken measures to protect the information.
3.2. By using the Website or the Programme, the Client agrees to:
- the processing of their personal and medical data;
- the storage, distribution and transfer of personal data in accordance with the current legislation of Ukraine;
- access to third-party data in cases provided for by law or contract.
4. Rights and obligations of the Client
4.1. The Client has the right to:
- use all functions of the Website/Program;
- access their personal information;
- request changes, deletion or restriction of the processing of personal data;
- file a complaint with the authorities in case of violation of their rights.
4.2. The Client undertakes:
- to provide accurate data during registration;
- not to transfer their account details to third parties;
- to use the Centre's services in a lawful manner;
- not to post information that violates the law or the rights of others.
5. Rights and obligations of the Helios Centre
5.1. The Centre has the right to:
- establish or change the privacy policy;
- restrict or revoke access to services in case of violation of the policy;
- transfer information in accordance with the requirements of the law or with the written consent of the Client;
- send informational messages (advertising, medical reminders, etc.).
5.2. The Centre undertakes to:
- not disclose confidential information without the Client's consent, except in cases provided for by law;
- protect personal data in accordance with the law;
- take organisational and technical measures to prevent unauthorised access, destruction or theft of data;
- keep records and control access to confidential information.
6. Protection of confidential information
6.1. Employees of the Centre are obliged to:
- sign a non-disclosure agreement;
- comply with internal data security policies;
- not disclose information after termination of employment;
- compensate for losses in the event of a proven breach of confidentiality.
6.2. The Centre's contractors are obliged to comply with the terms of non-disclosure in accordance with the concluded agreements.
7. Storage, use, provision and recording of information
7.1. Information carriers are stored in secure premises or encrypted databases.
7.2. It is prohibited to copy or remove confidential data without the consent of management.
7.3. Information is provided only to authorised state bodies on the basis of a written request.
7.4. All access to databases is recorded by responsible persons.
8. Changes to the Privacy Policy
The Centre reserves the right to update or change this Policy at any time.
Changes come into effect from the moment they are published on the Website.
9. Contact Information
Helyos Family Health and Rehabilitation Centre
Address: 17 Lamana Street, Dnipro
Phone: +380670000150
Email: helioscentr@gmail.com
Website: helyos.com.ua
Helyos Lab loyalty programme
To take part in the «Helyos Lab» loyalty programme, we process your name, phone number and preferred language. The legal basis for this processing is the consent you give when enrolling in the programme; the fact and time of that consent, and the version of the text you agreed to, are recorded in the system.
Your loyalty card records which analyses were paid for, their cost and the date they were performed — this is how progress toward the loyalty discount is calculated. Please note: a list of laboratory tests performed is information about your health.
If you arrived via an advertising link, we also record the referral source (UTM tags) for the clinic's own marketing analytics.
This data is used solely to record paid lab analyses, to accrue and issue the loyalty discount, to notify you about the status of your card, and to evaluate the effectiveness of the clinic's advertising channels.
The data is kept for the duration of your participation and for 12 months after your last activity, after which it is anonymised. You may withdraw your consent and request deletion of your data by contacting the Medical Center's administrator.
When you visit reception, the administrator may check your loyalty card against the clinic's medical information system to see the services you have already paid for. From that system we receive only the service name, its price, the date and an internal patient reference. Medical results, diagnoses and reports are never passed to the loyalty programme.