Cookies and privacy policy

You have the right to access the data that TEHIK has collected about you. The data can be accessed by submitting a request to TEHIK. The request must be digitally signed or hand-signed in a way that allows the handwritten signature to be verified – TEHIK must be able to verify that the handwritten signature was given by the person who made the request.

TEHIK will reply to the request as soon as possible, but not later than within one calendar month. The time taken to reply may depend on the content and volume of the request submitted. Unless otherwise stated in the request, the data will be provided electronically. TEHIK has the right to refuse to disclose information if the disclosure of the information may:

• harm the rights and freedoms of another person;
• undermine national security;
• prevent or damage the prevention, detection, or proceeding of an offence or the execution of the sentence;
• otherwise be in breach of applicable law.

You have the right to request the rectification of inaccurate personal data relating to you or, if TEHIK no longer has a lawful basis for processing your personal data, to request the restriction of the use of your personal data or its erasure.

You have the right to contact TEHIK at info@tehik.ee or its Data Protection Officer at andmekaitse@tehik.ee with any questions regarding the processing of your personal data.

The regulation described below extends to natural persons who turn to TEHIK to protect their privacy. If TEHIK has received a request on behalf of an institution or a legal person, their work contact details will be displayed in the public register of documents (e.g. if you are a journalist requesting explanations from TEHIK, please use only your work contact details). The public register of documents of TEHIK can be found at: The public document register of TEHIK(Opens in new tab)north_east.

If TEHIK has received a request for a response (e.g. a request for explanations, a memorandum, an application, or a request for information), personal data will be used to respond to the request. If, in the course of responding to the request, the need arises to collect additional information and it is necessary to make enquiries to other institutions, personal data relating to the person making the request will be disclosed only to the extent necessary for the response.

If TEHIK has received a request that falls within the competence of another institution, TEHIK will forward the request to the competent institution for processing or return it to the person who submitted the request.

TEHIK has the right to use correspondence data internally to assess the quality of work and to collect statistics in a non-personalised form.

The metadata of correspondence with TEHIK is visible in the public document register of the institution. This does not include the name of the person who made the request or received the letter. For the protection of the privacy of individuals, the title of the request will appear in the public register of documents as "Request for explanation" or "Request for information", depending on the content of the request.

Under national law, correspondence with natural persons is information to which access is restricted to protect their privacy. If access to correspondence with another person is requested, it must be checked whether it is possible to disclose all or part of the document requested. Restricting access depends on the content of the document. Grounds for access restrictions are set out in section 35 of the Public Information Act.

Irrespective of any restriction on access to the document, TEHIK is obliged to issue documents to an institution or person who has a direct right to request them under national law (e.g. a court, an out-of-court proceedings authority, or an investigation authority.

Pursuant to the national regulation, TEHIK may disclose the circumstances of correspondence if there is an obvious public interest (subsection 38 (1) and subsection 30 (4) of the Public Information Act). This right is used only in very exceptional cases, while avoiding undue interference with the privacy of the parties concerned. TEHIK reserves the right to provide explanations to the public about its activities, if necessary, if the person has made the information public. In this case, the information will not be disclosed to a greater extent than the person has previously disclosed.

Correspondence with natural persons is retained for five years. Documents that have exceeded this time limit should normally be destroyed. The exact retention period of the data can be found in the list of documents in the administrative procedures of TEHIK, based on the serial number or index of the document. The administrative procedures are available in the public register of documents of TEHIK(Opens in new tab)north_east.

When visiting the health portal and accessing information, the data collected and stored about the website visitor is limited to the IP address used, which is not linked to a specific individual.

TEHIK collects and stores information about which part of the website is visited, which files are downloaded, and when the website is visited. The data collected is used to compile visitor statistics to develop the website and make it more convenient for the user.

The customer support of the Health Portal can be contacted by calling +372 794 3943. TEHIK does not record phone calls. TEHIK may use the data from phone calls in a non-personalised form to compile internal statistics with a view to changing and improving the quality of work. No summaries or other information will be disclosed about phone calls.

If TEHIK identifies a personal data breach that may pose a likely risk to the rights and freedoms of a natural person, the documents provided for in the national regulation will be drawn up, if necessary, and the breach will be notified without delay, but not later than within 72 hours, to the controller or the national supervisory authority (Data Protection Inspectorate). The Data Protection Officer of TEHIK is responsible for the notification.

Where the breach is likely to result in a serious risk to the rights and freedoms of a natural person, the person will be informed of the occurrence of the breach without delay, but not later than within 72 hours, to enable the person to take the necessary precautions to mitigate the situation.

Where a breach is detected, appropriate measures will be taken immediately to bring the breach to an end without delay and to minimise or eliminate any possible consequences of the breach.

Information relating to natural persons may be available to TEHIK in digital format. In the public register of documents published on the website of TEHIK, the names of natural persons appear as initials. TEHIK collects information only for the performance of the tasks assigned to it by law. The information held by TEHIK is subject to the Public Information Act, which provides that any person may re-use the information on websites and in public databases for their own commercial or other private interests. For re-use, information can be downloaded in machine-readable form and combined with information collected elsewhere.