KiireArstKiirearst
Login

Privacy Policy

Last updated: 10/28/2026

1. Introduction and Data Controller

KIIRE EKSAM OÜ (hereinafter referred to as "we", "us", "our company" or "KiireArst") operates the KiireArst service and is committed to protecting your privacy and personal data in accordance with the General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act.

Data Controller:

KIIRE EKSAM OÜ
Registry code: 16272806
Address: Harju maakond, Maardu linn, Rebasheina tee 16, 74117
Email: [email protected]

2. Nature of Our Service

KiireArst is an automated doctor appointment booking service operating through the official Terviseportaal (Health Portal) system. Our service:

  • Monitors available doctor appointments in real time
  • Automatically books appointments matching your selected criteria
  • Operates exclusively through the official authorization mechanism of Terviseportaal
  • Does not replace or alter your relationship with healthcare providers

3. Personal Data We Collect

We collect and process the following categories of personal data:

3.1 Registration Data

  • Phone number (for authentication and SMS notifications)
  • Email address (for account notifications)

3.2 Identification Data (via Terviseportaal)

  • First and last name
  • Estonian personal identification code (isikukood)
  • Health insurance status (Haigekassa)

3.3 Booking-Related Data

  • List of active medical referrals
  • Scheduled doctor appointments
  • Preferred doctors, specialties, locations and time preferences
  • Appointment booking authorization status

3.4 Technical Data

  • IP address (for security purposes only)
  • Browser type and version
  • Device information

We do NOT collect:

  • Full medical records, diagnoses or medical history
  • Payment card data (processed by Montonio)
  • Smart-ID, Mobile-ID or ID-card credentials
  • Social media data or browsing history

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

  • Performance of a contract: to provide the appointment booking service (GDPR Art. 6(1)(b))
  • Consent: for processing health-related data through Terviseportaal authorization (GDPR Art. 9(2)(a))
  • Legitimate interests: to prevent fraud, ensure security and improve the service (GDPR Art. 6(1)(f))
  • Legal obligations: to comply with Estonian accounting and tax legislation (GDPR Art. 6(1)(c))

5. How We Use Your Data

Your personal data is used exclusively for:

  • Authenticating your identity via phone number
  • Accessing Terviseportaal on your behalf through official authorization
  • Monitoring available doctor appointments according to your filters
  • Automatically booking appointments according to your settings and permissions
  • Sending SMS/email notifications about successful bookings
  • Managing your subscription and processing payments
  • Providing customer support
  • Fulfilling legal obligations

We will NEVER:

  • Share your data with third parties for marketing purposes
  • Access your medical records beyond information required for appointment booking
  • Use access to Terviseportaal for unauthorized purposes

6. Authorization and Access to Terviseportaal

Our service operates through the official Terviseportaal authorization mechanism:

  • You grant us authorization through Terviseportaal to book doctor appointments on your behalf
  • Authorization is created and managed exclusively through official Terviseportaal systems
  • We undertake to use your Authorization ONLY for:
    • Viewing available doctor appointments
    • Accessing your active medical referrals
    • Booking appointments matching your criteria
    • Obtaining your Haigekassa status
    • Viewing upcoming appointments
    • Obtaining authorization status
  • All automated actions are performed strictly according to the settings, filters and permissions configured by the user
  • You may revoke the authorization at any time through Terviseportaal settings
  • Authorization is automatically removed when:
    • Your subscription expires
    • Your booking quota is exhausted
    • You delete your account

7. Data Sharing and Third Parties

We share your personal data only with the following trusted third parties:

7.1 Terviseportaal (Health Portal)

To access appointment information and perform bookings on your behalf

7.2 Montonio (Payment Processor)

For secure payment processing. Montonio complies with the PCI DSS standard

7.3 SmsApi (SMS Service Provider)

To send booking confirmation notifications

7.4 Hosting Provider

Our servers are located within the European Union, ensuring GDPR compliance

All third-party data processors are bound by data processing agreements in accordance with GDPR requirements where required under Article 28 GDPR.

8. Data Security

We apply industry-standard security measures:

  • Encryption of data in transit (TLS/HTTPS) and at rest
  • Secure authentication using one-time OTP codes
  • Regular security updates
  • Hosting servers within the EU in compliance with GDPR

Authentication codes are temporary and automatically deleted after expiration.

Despite the security measures we apply, no method of internet data transmission can guarantee absolute security.

9. Data Retention

We retain your personal data only for the necessary period:

  • Active account data: while your account remains active and for 30 days after deletion
  • Booking history: for 3 months after each booking
  • Financial records: for 7 years in accordance with Estonian law
  • Authorization data: automatically deleted after subscription expiry or quota exhaustion

After retention periods expire, data is securely and permanently deleted.

10. Your GDPR Rights

You have the following rights regarding your personal data:

  • Right of access: request a copy of your personal data
  • Right to rectification: correct inaccurate or incomplete data
  • Right to erasure ("right to be forgotten"): request deletion of your data
  • Right to restriction of processing: restrict how your data is processed
  • Right to data portability: receive your data in a structured machine-readable format
  • Right to object: object to processing based on legitimate interests
  • Right to withdraw consent: withdraw consent for processing health-related data at any time

To exercise your rights, contact us at [email protected]. We undertake to respond within 30 days.

You also have the right to file a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon): [email protected], www.aki.ee

11. Cookies and Analytics

KiireArst uses a minimal amount of cookies:

  • Essential cookies: required for authentication and proper service functionality
  • Analytics: we use Umami Analytics — a privacy-focused analytics solution that does not use tracking cookies. Based on our current implementation, we believe separate consent (banner) for such analytics is not required under applicable EU legislation

We do NOT use:

  • Third-party advertising cookies
  • Cross-site tracking
  • Social media tracking pixels

12. International Data Transfers

All personal data is stored and processed within the European Union. We do not transfer data outside the EU/EEA.

13. Automated Processing

Our service performs automated appointment monitoring and booking solely based on criteria, settings and permissions configured by the user. We do not make automated decisions producing legal or similarly significant effects without user involvement.

15. Security Breach Notifications

In the event of a personal data breach that may create a risk to your rights and freedoms, we will notify affected users and the relevant supervisory authorities in accordance with GDPR requirements.

16. Changes to This Privacy Policy

We may periodically update this Privacy Policy. Changes will be published on this page with an updated "Last updated" date. In the event of significant changes, we will notify users via email or SMS.

17. Contact Us

For questions related to privacy or the exercise of your rights:

Email: [email protected]
Company: KIIRE EKSAM OÜ (Registry code: 16272806)
Address: Harju maakond, Maardu linn, Rebasheina tee 16, 74117