Privacy Policy and Terms of Use

1.1. OÜ MediArte — healthcare services

OÜ MediArte provides healthcare services.

• Registry code: 12709264
• Address: Lüüsi tn 4-30, 10154 Tallinn, Estonia
• Service address: Ahtri 4, 2nd floor, 10113 Tallinn, Medemis Clinic
• License: L07540
• Email: info@synage.ee · Phone: +372 5565 1677

OÜ MediArte is responsible for healthcare services, doctor's appointments, telehealth appointments, processing of patient health data, documentation, invoicing and patient communication. The healthcare provider is Sergey Saadi.

1.2. OÜ Süsivesik — SAADI Akadeemia, courses, webinars and online shop

• Registry code: 17086738
• VAT number: EE102937644
• Address: Lüüsi tn 4-30, Kesklinn district, Tallinn, 10154, Estonia
• Email: info@synage.ee

OÜ Süsivesik is responsible for SAADI Akadeemia, courses, webinars, recordings, digital materials, online shop orders, payments, access management, invoices, customer support and the processing of education-related personal data. SAADI Akadeemia materials are educational and informational services — they are not a healthcare service, not personal medical advice, diagnosis or treatment recommendation, and do not replace consultation with a physician.

1.3. Independent controllers

OÜ MediArte and OÜ Süsivesik act as separate and independent data controllers:

• OÜ MediArte is responsible for healthcare services and patient data;
• OÜ Süsivesik is responsible for training, webinars, digital content and the online shop;
• patient health data is not used for SAADI Akadeemia or shop marketing without separate explicit consent;
• SAADI Akadeemia customer data is not used for the provision of healthcare services without a separate legal basis.

2.1. Purpose of the website

The website publishes information about OÜ MediArte healthcare services, OÜ Süsivesik SAADI Akadeemia, and general topics on health, prevention, lifestyle and education. General content on the website is informational and does not automatically mean that a healthcare services contract has been concluded between the user and OÜ MediArte.

In case of an emergency or a rapidly worsening medical condition, call 112or go to an emergency department. The website, email, SAADI Akadeemia and messaging channels are not intended for emergency care.

2.2. Use of the website

It is prohibited to interfere with the operation of the website, damage its security, violate the rights of third parties, submit false information or share access credentials with unauthorised persons.

2.3. Intellectual property

The website content (texts, videos, courses, recordings, learning materials, designs, photos, logos) belongs to OÜ MediArte, OÜ Süsivesik or is used lawfully. Copying, distribution, sharing access with third parties, and reworking and publishing course or webinar content without permission is prohibited.

2.4. Links to third-party environments

OÜ MediArte and OÜ Süsivesik are not responsible for the content or security of third-party websites, except to the extent that they are used as authorised processors.

3.1. Definitions

Personal data means any information relating to an identified or identifiable natural person.

Health data is a special category of personal data concerning physical or mental health, health status, diagnoses, examinations, test results, treatment, medical history or other circumstances related to health.

Processing means any operation performed on personal data: collection, recording, organization, storage, use, transmission, deletion and destruction.

3.2. General processing principles

• data is processed lawfully, fairly and transparently;
• data is collected for specified and legitimate purposes;
• only the minimum necessary data is collected;
• data is kept as accurate and up-to-date as possible;
• data is stored only as long as necessary or required by law;
• data is protected with appropriate technical and organizational measures.

3.3. Data subject rights (GDPR)

• to be informed about the processing of your personal data;
• to request access, rectification or erasure;
• to request restriction of processing or to object;
• to withdraw consent if processing is based on consent;
• to receive data in a machine-readable format (data portability);
• to lodge a complaint with the Data Protection Inspectorate: info@synage.ee · aki.ee.

For healthcare services, some rights may be restricted to the extent that data retention arises from the statutory obligations of the healthcare provider.

3.4. Data security

Measures applied: access right restrictions, authentication, confidentiality obligations, secure communication channels, data backup, system and log monitoring, contracts with authorised processors, and additional precautions when handling health data.

4.1. When this section applies

When a person books a medical appointment, attends an in-person or remote consultation, sends a healthcare-related enquiry, transmits health data or test results, uses a health optimization program, or communicates with OÜ MediArte as a patient.

4.2. Data processed

General personal data: name, personal identification code, date of birth, contact details, address, language of communication.

Health data: complaints, anamnesis, medical history, diagnoses, test results, medications, allergies, prior treatment, risk factors, treatment plan.

Booking and communication data, payment and accounting data, technical data (IP, browser info, logs, cookies).

4.3. Purposes and legal bases

• Provision of healthcare services — contract performance, legal obligation, and GDPR Art. 9(2)(h).
• Preparation and organization of healthcare services — contract performance and legitimate interest.
• Documentation and statutory obligations.
• Continuity of care and cooperation with other healthcare providers.
• Invoicing and accounting.
• Defence of legal claims.
• Marketing — only on the basis of consent; patient health data is never used for marketing.

4.4. Data sources

From the patient themselves, their legal representative, documents submitted by the patient, booking channels, the telehealth platform, and — where permitted by law — from other healthcare providers.

4.5. Data transfers

OÜ MediArte does not sell personal data. Data may be transferred, to the extent necessary, to IT and hosting providers, partners, laboratories, accounting service providers, the insurer, public authorities and legal advisors.

4.6. Telehealth and digital channels

Remote consultations may take place by phone, video link, the eKliinik / Connected platform or another secure channel. Not all health issues can be adequately assessed remotely.

4.7. Messengers and chat channels

Some services may include limited follow-up support via Telegram or WhatsApp. Sensitive documents, test results and extensive medical histories should be sent via a more secure channel. Messaging channels are not intended for emergency care — in case of an acute condition call 112.

4.8. Retention

• Healthcare data — in line with regulations governing the documentation of healthcare services.
• Accounting data — generally 7 years from the end of the financial year.
• Marketing consent — until consent is withdrawn.
• Technical logs — for a limited time.

5.1. When this section applies

When purchasing a course, webinar or digital material, using the learning environment, managing an account, subscribing to the newsletter, or contacting customer support.

5.2. Data processed

Contact details; order and contract data; payment and invoice data; learning environment data and usage logs; marketing data (consent, email statistics); technical data.

5.3. Health data in SAADI Akadeemia

SAADI Akadeemia is an educational service and not a healthcare service. OÜ Süsivesik does not intentionally collect health data. Please do not send sensitive health data, test results or medical histories in comments, chats or forms. If a user does transmit health-related information, it is processed only to the minimum extent necessary to respond to the enquiry, provide clarification, and recommend consulting a physician.

5.4. Purposes and legal bases

• Order fulfilment — conclusion and performance of the contract.
• Payments and invoices — contract performance and legal obligation.
• Customer communication — contract performance or legitimate interest.
• Service security and fraud prevention — legitimate interest.
• Marketing and newsletter — consent; opt-out possible at any time.
• Defence of legal claims — legitimate interest.

5.5. Data transfers

To hosting and learning environment providers, payment service providers, accounting service providers, email/newsletter/video hosting platforms, IT and security service providers, and legal advisors or competent authorities. Transfers outside the EEA only with a valid safeguard in place.

5.6. Retention

• Order and customer account data — for the duration of the contract and the time necessary to defend possible claims.
• Accounting data — generally 7 years.
• Marketing consent — until withdrawn.
• Technical logs — for a limited time.

News, offers and notifications are sent only on a valid legal basis. Patient and health data are not used for SAADI Akadeemia or shop marketing without separate consent. You can unsubscribe at any time via the unsubscribe link in emails or by writing to info@synage.ee.

Sensitive health data must not be shared in social media comments.

The website uses four categories of cookies:

• essential — basic site operation, login, session, cart, language selection, CSRF protection and storing your cookie consent. No consent required.
• analytics — anonymous usage statistics.
• marketing — advertising pixels and campaign performance (e.g. Meta, Google Ads).
• third-party cookies and embeds — Bunny Stream (video), Fienta (tickets), Montonio (payment redirect), MailerLite (forms), social media and others.

Non-essential cookies are used only with your consent. Consent can be changed or withdrawn just as easily as it was given — via the footer link „Cookie settings" or the button below. Your decision is stored with a timestamp and policy version in our database (AKI requirement).

Concrete list

The provision of healthcare services to a minor follows applicable law and, where necessary, the involvement of a legal representative. SAADI Akadeemia, courses and the online shop are generally intended for adult users.

These terms are governed by Estonian law. Disputes are first resolved by negotiation. Consumers have the right to refer disputes to the Consumer Disputes Committee. Complaints relating to the processing of personal data may be lodged with the Data Protection Inspectorate (aki.ee).

OÜ MediArte and OÜ Süsivesik may amend these terms. The updated version is published on the website and enters into force upon publication, unless a later effective date is indicated in the document.