Last updated: 2026-06-01
This Privacy Policy (hereinafter – Privacy Policy) provides detailed information about how the data controller – UAB Žiūra, legal entity code 123092165, registered office address Rygos g. 15, LT-05245 Vilnius, email address [email protected] (hereinafter – the Company, we) processes your personal data, including why we process it, to whom we provide it and how long we store it. In this Privacy Policy you will also find information about your rights related to the processing of your personal data and other information required under the EU General Data Protection Regulation 2016/679 (Regulation).
The terms used in the Privacy Policy are understood as defined in the legal acts governing personal data protection (the Regulation, the Law on Legal Protection of Personal Data of the Republic of Lithuania and others).
This Privacy Policy does not apply to information collected and used by third parties, for which we are not responsible. Therefore, before you start using third-party websites or applications, we recommend that you read the privacy policies published on the respective websites, mobile applications or programs that you use or will use.
1. What personal data do we process, for what purposes and on what legal grounds?
We may collect your personal data in various ways. First of all, we collect personal data directly from you. Where permitted by applicable legal acts and where we have a legal basis to do so, we may also collect personal data from other sources, for example, from state institutions, or generate it ourselves when you use our website.
We may also receive your personal data related to registration with a doctor from third parties (for example, from Mano daktaras, UAB) when you use the registration plugin on our website.
The Company processes your personal data only for specific purposes, in compliance with the requirements established in legal acts and on the legal grounds described further in this section below. In all the cases mentioned below, the Company processes personal data only to the extent necessary to achieve the respective clearly defined and legitimate purposes, taking into account personal data protection requirements.
2.1. Provision of healthcare services and fulfilment of the rights and obligations established in legal acts and applicable to the Company
The Company processes personal data in order to ensure the proper provision of healthcare services and the fulfilment of the rights and obligations established in legal acts and applicable to the Company.
Personal data processed:
- General patient data: first name, surname, date of birth, personal identification number, address, email address, telephone number, insurance ID number, signature.
- Special data: health data, the collection of which is necessary in order to properly provide specific healthcare services, as well as those special categories of personal data that the Company is obliged to process under the medical documentation forms approved by the Minister of Health, patient photographs, other special patient data – referrals, test results, etc.
- General data of parents/guardians of minors and other representatives: first name, surname, telephone number, address, email address, basis of representation, signature.
- Data related to the conclusion and performance of contracts: patient forms filled in, date of conclusion (termination) of the contract, contract terms, other personal data specified in and related to the contract.
- Payment data: amounts payable to the Company, outstanding debts, payment history, bank account, bank, other personal data related to payments.
For this purpose, we process your personal data on the basis of a contract (Article 6(1)(b) of the Regulation), a legal obligation applicable to us (Article 6(1)(c) of the Regulation), our legitimate interests (Article 6(1)(f) of the Regulation), the need to protect your vital interests (Article 9(2)(c) of the Regulation), your consent (Article 9(2)(a) of the Regulation), and for the purposes of preventive or occupational medicine (Article 9(2)(h) of the Regulation).
2.2. Conclusion and performance of contracts for services (other than healthcare) and goods provided by the Company
The Company processes personal data in order to ensure the proper conclusion and performance of contracts with you, the provision of services rendered on the basis of contracts, including proper information about matters related to the services and the contract.
Personal data processed:
- Identity or identification data: first name, surname, personal identification number, date of birth, age, signature.
- Contact data: address, telephone number, email address.
- Data related to the provision of services and the conclusion and performance of contracts: date of conclusion (termination) of the contract, contract terms, other personal data specified in and related to the contract.
- Payment data: amounts payable to the Company, outstanding debts, payment history, bank account, bank, other personal data related to payments.
For this purpose, we process your personal data on the basis of a contract (Article 6(1)(b) of the Regulation) and/or a legal obligation applicable to us (Article 6(1)(c) of the Regulation).
2.3. Administration of enquiries, complaints and feedback
In cases where you contact us with an enquiry, complaint or feedback, the Company processes personal data in order to examine and resolve the questions, complaints or feedback submitted.
Personal data processed: first name, surname, email address, the content of enquiries, complaints and feedback, telephone number, the date and time of contacting the Company, other communication information.
For this purpose, depending on the content of the enquiry, complaint or feedback you submit, we process your personal data on the basis of a contract (Article 6(1)(b) of the Regulation), a legal obligation applicable to us (Article 6(1)(c) of the Regulation), our legitimate interest in ensuring the proper management of enquiries (Article 6(1)(f) of the Regulation), and your consent (Article 6(1)(a) and Article 9(2)(a) of the Regulation).
2.4. Direct marketing and assessment of customer experience
The Company may process your personal data when carrying out direct marketing and seeking to provide information about its goods and services, as well as to enquire about the goods and the quality of the services provided (by sending newsletters, by calling).
After sending a message, the Company may collect statistical data about your behaviour with the message, for example, whether you opened the email, which links you clicked, which device you used and its technical characteristics. The Company does this by tracking logged information about your access to the Company’s website or by means of cookies (if you give your consent) (for information collected by cookies, see Section 2.8 of the Policy).
Personal data processed: email address, telephone number, the content and dates of the messages sent, the content of the feedback (assessment) you provide.
For these purposes, we process your personal data on the basis of your consent (Article 6(1)(a) of the Regulation), except in cases where you are our customer and have not objected to our direct marketing of products and services similar to those purchased. In the latter case, we may send direct marketing messages to your email address on the basis of our legitimate interest (to ensure the development and availability of our goods and services) (Article 6(1)(f) of the Regulation).
2.5. Ensuring the security of property and persons (video surveillance and recording)
In order to ensure the security of its property, as well as of visitors and staff and their property, the Company carries out video surveillance on its premises.
Personal data processed: image, video recording date, metadata.
For this purpose, we process your personal data on the basis of our legitimate interest in ensuring the security of property and persons (Article 6(1)(f) of the Regulation).
2.6. Searching for job candidates and organising recruitment
The Company processes the personal data of candidates applying for vacant positions at the Company.
Personal data processed: CV, other data related to the candidates’ qualifications, professional abilities and business qualities.
For this purpose, we process your personal data on the basis of our legitimate interest in carrying out a proper selection of candidates for positions at the Company (Article 6(1)(f) of the Regulation). If, after an unsuccessful selection, you agree that we may contact you in the future regarding open positions, we will process your personal data on the basis of your consent (Article 6(1)(a) of the Regulation).
2.7. Other purposes
The Company may also process your personal data for other purposes if it has obtained your consent for this, or must process personal data in order to comply with the requirements of legal acts, or has the right to process the data on the basis of its legitimate interest. In these cases, you will be informed separately about such processing of personal data.
2.8. Cookies
When you visit the website, we want to provide content and functions that are tailored specifically to your needs. This requires cookies. These are small text files that are automatically created while browsing the website and are stored on your computer or other terminal device.
- Necessary cookies. These cookies activate the website’s basic browsing or access functions. Without these cookies, the website and the functions used on it will not work. These cookies are always used and are set without your consent.
- Functional cookies. These cookies are necessary for you to move around the website and use its functions. For example, functional cookies are used to remember your login information. We use these cookies only with your consent.
- Statistical cookies. These cookies collect aggregated statistical information about how people use our website. For example, statistical cookies can help us understand how users browse or use our website and identify the most frequently used areas of the website. We use these cookies only with your consent.
- Targeted advertising cookies. These cookies collect information about your browsing habits. They are used to make advertising better tailored to you and your interests. We may also use these cookies to limit the number of times advertising is displayed and to assess how advertising on our website reaches users. The cookies are usually placed by third-party providers in order to generate information about your interests based on your behaviour online. We use these cookies only with your consent.
- Other third-party cookies. Our website may also contain social network cookies. These cookies allow you to share what you have done on the website on social media, for example, on “Facebook”, “Twitter” or “Pinterest”. We are not responsible for such cookies. Please read carefully the privacy policies of these third parties.
| Name | Provider | Purpose | Storage period |
|---|---|---|---|
| CookieLawInfoConsent | ziura.lt | Stores the record of the user’s cookie consent. Determines whether the visitor has confirmed the use of cookies and which categories they have allowed. | 1 year |
| cookielawinfo-checkbox-necessary | ziura.lt | Stores the user’s consent for the necessary cookies category. | 1 year |
| cookielawinfo-checkbox-functional | ziura.lt | Stores the user’s consent for the functional cookies category. | 1 year |
| cookielawinfo-checkbox-analytics | ziura.lt | Stores the user’s consent for the analytics cookies category. | 1 year |
| cookielawinfo-checkbox-advertisement | ziura.lt | Stores the user’s consent for the advertisement cookies category. | 1 year |
| cookielawinfo-checkbox-performance | ziura.lt | Stores the user’s consent for the performance cookies category. | 1 year |
| cookielawinfo-checkbox-others | ziura.lt | Stores the user’s consent for the other cookies category. | 1 year |
| viewed_cookie_policy | ziura.lt | Determines whether the user has viewed and confirmed the cookie policy. | 1 year |
| pll_language | ziura.lt | Polylang plugin cookie. Stores the language selected by the user and ensures the correct display of the website language version. | 1 year |
| sbjs_current | ziura.lt | WooCommerce cookie. Stores the traffic source of the current session (e.g. direct access, search, advertising). | During the session |
| sbjs_current_add | ziura.lt | WooCommerce cookie. Stores additional data of the current session – date, IP address and browser information. | During the session |
| sbjs_first | ziura.lt | WooCommerce cookie. Stores the traffic source of the first visit to the website. | During the session |
| sbjs_first_add | ziura.lt | WooCommerce cookie. Stores additional data of the first visit – date, IP address and browser information. | During the session |
| sbjs_migrations | ziura.lt | WooCommerce internal cookie used to track version updates of the SourceBuster.js library. | During the session |
| sbjs_session | ziura.lt | WooCommerce cookie storing the number of session page views and the date of the last activity. | During the session |
| sbjs_udata | ziura.lt | WooCommerce cookie storing the user’s browser and operating system information. | During the session |
When you use a browser to access the content we provide, you can configure your browser to accept all cookies, reject all cookies, or to consent only to cookies of a certain category. Each browser is different, so if you do not know how to change your cookie settings, please check its help menu. Your device’s operating system may contain additional cookie controls. If you do not want information to be collected by means of cookies, use the simple procedure available in most browsers that allows you to opt out of the use of cookies. To learn more about how to manage cookies, please visit: https://www.allaboutcookies.org/manage-cookies/
However, please note that in some cases deleting cookies may slow down your internet browsing speed, limit the operation of certain website functions or block access to the website.
3. To whom does the Company transfer your personal data?
When processing your data, we apply the necessary security measures to ensure the confidentiality of the data.
Your data may be reviewed by our employees responsible for website management, service administration and information technology maintenance, but access to the data is granted only to those employees who need it to perform their functions.
In compliance with the requirements of legal acts, the Company may transfer your processed personal data to the following categories of third parties:
- Engaged service providers. The Company may transfer the processed personal data to third parties acting on behalf of and/or on the instructions of the Company that provide the Company with customer service, software maintenance, accounting, correspondence sending and other services, in order to ensure the proper provision, management and development of the Company’s services.
- State and municipal institutions and budgetary bodies, for example, territorial patient funds, institutions examining complaints, the State Health Care Accreditation Agency under the Ministry of Health, the Public Health Centre, etc.
- Other healthcare institutions and laboratories carrying out tests.
- Insurance companies with which you have concluded contracts.
- Persons/companies carrying out the debt recovery process and managing joint databases. If you fail to make the payments due from you properly and on time, the Company has the right to provide your personal data to other legal entities managing joint debtor data files, debt management and recovery companies, courts, notaries and bailiffs.
- Where we believe that disclosing information is necessary in order to defend our rights, to ensure your or others’ safety, to investigate cases of fraud or to comply with a request from a state institution, e.g. so that bailiffs can make deductions under enforcement documents.
- Other third parties. We may also disclose personal data to potential investors or buyers in cases where this is necessary for the purposes of negotiations, company restructuring, sale, attraction of investments or other similar purposes. In such a case, we ensure that such data recipients undertake to protect the transferred data in accordance with the applicable personal data protection legal acts and to use it only for the specified purposes.
The Company normally processes personal data within the territory of the European Economic Area (EEA). If cases arise where data has to be transferred outside the EEA, this is done only if at least one of the following conditions is implemented: (1) the European Commission has recognised that the country to which the data is transferred ensures an adequate level of personal data protection; (2) a data processing agreement has been concluded in accordance with the standard contractual clauses approved by the European Commission; (3) codes of conduct are followed and other safeguards under the Regulation are applied.
4. How long do we store your personal data?
The Company processes your personal data for no longer than is required by the specified data processing purposes or provided for by the applicable legal acts, if they establish a longer data storage period.
To determine the data storage period, the Company applies criteria that correspond to the obligations specified in legal acts, also taking into account the rights provided for the person, e.g. it provides for a data storage period during which claims related to the performance of the contract may be submitted, should any arise, etc. For example, the storage periods of some data are as follows:
- patients’ personal data will be stored for no longer than 10 years where the patient receives the service without a doctor’s referral, and for no longer than 25 years in cases where the patient receives the service with a doctor’s referral;
- video surveillance data will be stored for no longer than 30 calendar days;
- purchase or service contracts (other than healthcare services) (and therefore the personal data contained therein) must be stored for no less than 10 years from the performance of the contract;
- the data of candidates for open job positions will be stored during the selection process; once the selection ends successfully, the data is further processed as described in the employee privacy notice, and where the selection ends unsuccessfully and the candidate agrees to be contacted regarding other open positions in the future, the data will be stored for no longer than 2 years after consent is given;
- your data is stored for direct marketing purposes until you withdraw your consent, but in any case for no longer than 2 years (where personal data is processed on the basis of consent) or until you unsubscribe from the Company’s newsletters, but for no longer than 2 years after your last interaction with the Company’s newsletters (where personal data is processed on the basis of the Company’s legitimate interest).
- the data collected by cookies is stored as described in the “Cookies” section above.
If your data is needed in order to defend our rights, your data may be stored until the end of the relevant legal proceedings.
In cases where your personal data is in the texts of relevant documents (contracts, powers of attorney, etc.), we will archive and store it in accordance with the periods specified in the Index of General Document Storage Periods approved by order of the Chief Archivist of Lithuania.
When personal data is no longer necessary for the purposes of its processing or the set storage period expires, it will be securely destroyed, except for data which, in cases established by law, must be transferred to state archives.
7. What rights do you have?
You have the right to request:
- To access the personal data processed by the Company about you;
- To rectify incorrect, incomplete or inaccurate personal data about you;
- To erase personal data or restrict personal data processing operations;
- To exercise the right to data portability;
- To object to the processing of your personal data when the Company processes it on the basis of its legitimate interest;
- Where personal data is processed on the basis of consent – to withdraw the given consent to the processing of your personal data at any time, without affecting the lawfulness of consent-based data processing prior to the withdrawal of consent.
You have the right to submit a complaint about the processing of personal data to the State Data Protection Inspectorate at any time, L. Sapiegos g. 17, 10312 Vilnius, [email protected], +370 5 271 28 04, 279 1445.
You have the right to contact the Company at any time regarding our processing of personal data by emailing [email protected].
8. Validity and amendments of the Privacy Policy
The Company has the right to unilaterally review and update this Privacy Policy. The Company will inform you of any amendments to the Privacy Policy by announcing them on the Company’s website. If the amendments or additions are substantial, the Company will inform you about such amendments separately.
