LEGAL BASES FOR PROCESSING YOUR PERSONAL DATA
(INCLUDING SPECIAL CATEGORY DATA)
Under the Law of the Republic of Armenia “On Personal Data Protection” and other applicable
laws, we must ensure that each use of your Personal Data is justified by lawful grounds. We rely
on several such grounds.
In some cases, we process your Personal Data because it is necessary for a contract to which
you are a party, or to take steps at your request prior to entering into a contract (for example, to
provide healthcare services). In other situations, we may process your Personal Data where it is
necessary for our legitimate interests or those of a third party, provided that your interests and
fundamental rights do not override those interests. Examples of such legitimate interests include
the administration and management of our services, as well as ensuring network and information
security.
We may also process your Personal Data where it is necessary to comply with legal obligations
(for example, under health and safety legislation or other regulatory requirements).
In certain circumstances—particularly where we process special category personal data that is
not covered by the grounds above—we rely on your explicit consent (for example, where we
need to process certain health data). You have the right to withdraw this consent at any time.
We may also process special category personal data such as health data, race, religion, or
genetic/biometric data, which benefit from enhanced protection under data protection laws. In
addition to relying on one of the lawful bases above, we must have an additional justification to
process these categories. Processing may be necessary for the provision of healthcare services,
including preventive or occupational medicine, medical diagnosis, or the administration of
healthcare systems. It may also be necessary for reasons of substantial public interest, such as
preventing fraud or protecting someone’s welfare, or for establishing, exercising, or defending
legal claims. In some cases, it may be required to protect vital interests where an individual is
physically or legally incapable of giving consent. If none of these justifications apply, we will
request your explicit consent before processing these special categories of Personal Data.
HOW DO WE USE YOUR PERSONAL DATA?
We collect and process your personal data in a number of ways, including through your use of
our Platform and through the provision of our services.
We collect, process, store, and use personal data provided to us by our users or subsidiary
entities, or on their behalf, during and in connection with the services we provide.
Below we describe how we use your Personal Data and, in each case, the legal basis on which
we rely. Our legitimate interests are listed where relevant.
PURPOSE / ACTIVITY — LAWFUL BASIS (INCLUDING LEGITIMATE INTERESTS)
To register you as potentially interested in the services of healthcare providers listed on our
website.
• Necessary for our legitimate interests (to develop our services and grow our business).
To manage our relationship with you, which will include: (a) informing you about changes to
our Privacy Policy; (b) inviting you to complete a medical history questionnaire.
Page 2