MK EN AL

PRIVACY POLICY

of MoeZdravje

The Ministry of Health of the Republic of North Macedonia with headquarters at ul. Vodnjanska bb., 1000 Skopje (hereinafter: Ministry of Health) manages a mobile and computer application through which users of health services can track their data on scheduled referrals, past referrals, results of examinations, see and download generated COVID-19 certificates, see and download recovery certificates for COVID-19 and other data registered in the National System for Electronic Records in Health in accordance with the Law on records in the field of health (hereinafter: MoeZdravje).

In this Privacy Policy are explained: the purposes, scope and method of collecting and processing your personal data while using MoeZdravje.

NOTE: By accepting this Privacy Policy and using the services of MoeZdravje, you agree to the specified way of collecting and processing your personal data when using the services of MoeZdravje.

For any questions you have regarding the meaning of this Privacy Policy, its application, the method of processing personal data or the use of your legal rights to protect personal data, you can contact the personal data protection officer of the Ministry of Health: Diana Ristovska Dodevski, with e-mail address: [email protected]

  1. Purpose of processing

    Based on your consent given by accepting this Privacy Policy in order to provide the services related to MoeZdravje, the Ministry of Health:

    1. processes your personal data registered in the National System for Electronic Health Records; and
    2. collects and processes your personal data when using MoeZdravje.

    Specifically, the purposes of collecting and processing your personal data are as follows:

    • Providing the services of MoeZdravje: MoeZdravje uses your personal data registered in the National System for Electronic Health Records in order to be able to display them on the MoeZdravje application, i.e. to provide you with access and insight into your personal data which are already collected by health care providers. Those data includes details for vaccination certificates for COVID-19. The user is able to check their vaccination status and access and download the vaccination certificate for COVID-19. The user is also able to check his or her recovery status from COVID-19 and to download the recovery certificate for COVID-19. Also, the user is able to see the same data for their child if the child is insured under them.
    • Troubleshooting and improving MoeZdravje: MoeZdravje uses your personal data in order to enable the functionality of MoeZdravje, to evaluate the functioning of MoeZdravje, as well as to eliminate errors or improve the usefulness of MoeZdravje for users .
    • Compliance with the regulation: There are cases in which MoeZdravje collects and uses your personal data because there is a legal obligation or an order from a government body.
    • Communication: MoeZdravje may use your personal data in order to communicate with you regarding the services of MoeZdravje. Communication means communication in any form (personal, telephone, postal, e-mail communication or communication through an electronic communication platform).
    • Prevention of abuses: MoeZdravje may use your personal data in order to prevent fraud, misuse of MoeZdravje, violation of laws by or to protect the interests of patients, MoeZdravje or third parties from illegal or immoral behavior.
  2. Method of collecting personal data

    In order to enable you to use the services of MoeZdravje in accordance with the Rules and conditions of use of MoeZdravje and to improve the services provided through MoeZdravje, MoeZdravje may collect personal data:

    • By accessing data from the National System for Electronic Records in Healthcare; and
    • Data related to the use of MoeZdravje, such as name, surname, e-mail address, username and password for accessing MoeZdravje.
  3. Permissions Policy

    In order for MoeZdravje to be able to recognize you through the Internet browser, i.e. your device, and thus provide you with the service, MoeZdravje uses the internet permissions (ACCESS_NETWORK_STATE).

  4. Provision of personal data to third parties

    MoeZdravje will not provide your personal data or allow third parties unjustified access to your personal data.
    Third parties to whom MoeZdravje may transfer your personal data may be:

    • Third parties engaged in connection with the provision of services to MoeZdravje: These third parties may use your personal data only to perform the necessary service and may not use the personal data for other purposes.
    • Authorities: MoeZdravje may disclose your personal data to authorities or a person designated by them, if there is an explicit legal basis for this, an order from a court or an administrative authority, and if it is necessary to protect rights, interests, property or safety of MoeZdravje, MoeZdravje partners, users of MoeZdravje services, the public or any third party.
  5. Time limit for keeping personal data

    MoeZdravje only stores your personal data related to access to MoeZdravje, such as name and unique identification number in order to be able to connect the user and load the data from the National System for Electronic Health Records, e-mail address and phone number in order to send notifications in future. Your personal data that MoeZdravje use from the National System for Electronic Health Records is not stored on the MoeZdravje application server or systems directly connected to it. Those data are only stored on users mobile devices in order the application to be used in offline mode using the secure database storage SQLite.

    Your personal data that MoeZdravje downloads from the National System for Electronic Health Records is not stored on the MoeZdravje application or systems directly connected to it.

  6. The right to delete, correct, correct, supplement, obtain personal data

    You have the right to request from MoeZdravje for the deletion, correction, addition of your personal data stored at MoeZdravje. At the same time, it is possible that certain of your personal data cannot be deleted due to a legal obligation to keep them.

    There are certain data that are stored in other registers, and which MoeZdravje only uses. In relation to that data, you should request your rights to deletion, correction, correction, addition and access before the competent registers.

  7. Limitation on collection and use

    If you do not want to receive any kind of communication (e-mail, messages, phone calls, communication via electronic communication platforms), then you can request this from MoeZdravje with an electronic request.
    If you do not want to receive notifications through the MoeZdravje application, then you can request it from MoeZdravje.

  8. Right of access

    In addition to what is stated in this Privacy Policy, you additionally have the right to request confirmation from MoeZdravje whether MoeZdravje is processing your personal data and to get access to that personal data and to the following information: (i) purposes of the processing; (ii) categories of personal data being processed; (iii) users or categories of users to whom personal data has been disclosed or will be disclosed, especially users in third countries or international organizations; (iv) the anticipated period for which the personal data will be kept, and if this is not possible, the criteria used to determine that period; (v) information on how to exercise your right to rectification or erasure of personal data or restriction of processing of personal data related to the subject of personal data, or right to object to such processing; (vi) information on how to exercise your right to submit a request to the Personal Data Protection Agency for the protection of your rights; and (vii) the existence of an automated decision-making process, including profiling.

  9. The right to withdraw consent to the processing of personal data

    You have the right to withdraw the consent given to this Privacy Policy at any time by deleting the User Profile or requesting MoeZdravje.

  10. Security of Data

    The personal data protection system of MoeZdravje was created with the main purpose of protecting the privacy and personal data of the users of the services of MoeZdravje.

  11. Changing the policy

    MoeZdravje has the right to change the Privacy Policy or the practices surrounding the collection and processing of your personal data when using the services of MoeZdravje, for which you will receive an appropriate notification.

  12. Application to the Personal Data Protection Agency

    If you believe that with the collection or processing of your personal data, some of your rights have been violated or any of the provisions of the Personal Data Law have been violated, then you can submit a request for protection to the Personal Data Protection Agency.