Introduction

Optilase is committed to protecting the privacy of your personal data and to handling your personal data in a transparent and responsible manner in accordance with the General Data Protection Regulation (GDPR, EU - 2016/679) and with the Irish Data Protection Act 2018.

This Privacy Notice explains how and why we collect, process and disclose your personal data. It also outlines your rights in relation to your personal data. Please read the following carefully.

This Privacy Notice is current from 18/10/2023. From time to time we may make changes to our policy, processes and systems in relation to how we handle your personal data. We will update this Privacy Notice to reflect any changes. Those changes will be available on our website and in the clinic.

Controller contact details

Lominol Limited T/A Optilase Clinic (Company Registration Number: 388869) who is the controller for the personal data we process for private or corporate sponsored patients, unless otherwise stated. 

There are many ways you can contact us, including by phone, email and post. 

Clinic Postal Address                                       

Optilase
17B Opera Lane
Cork City
T12 Y7ND

Contact number: +353 01 223 8821

Email: info@optilase.com

Data Protection Officer's contact details

Our Data Protection Officer is Eddie O’ Keeffe. You can contact him at privacy@optilase.com or via our postal address. Please address the envelope to ‘Data Protection Officer’.

The type of personal data we collect

Personal data refers to information relating to an identified or identifiable person. It does not include data that has been anonymised and cannot be traced to an identified or identifiable person.

We currently collect and/or process the following personal data:

• Identifying and Demographic Information: Identifying and Demographic Information: Full name, Date of Birth, gender, address, insurance information, phone number(s) and email address.
• Medical and Health Information (Special Categories Personal Data): scan results, medical history (e.g. current and previous history of doctor treatments and details of surgeries and/or pregnancies); skin and eye conditions (e.g. current or previous history of skin conditions or allergies); use of medication (current or previous history of medication taken and/or creams used), as well as any other relevant health related data customers choose to provide us or upload to our systems in connection with the Services.
• Financial Information: Payment preference, bank account details, credit cards information
• Communication: Record of interaction between patients and clinic such as consultations, emails, phone calls and posts; Phone call recordings; voicemails; emails.
• Patient Preferences and Feedback: Opinions and intentions disclosed during communication with clinic, satisfaction survey responses, complaints
• Electronic Device Information: IP Address and Cookies Information when visiting our website (for more information please see our Cookies Policy)

How we get your personal information

Most of the personal information we process is provided to us directly by you from the following sources:

• Website Contact Form
• Website visits through cookies (See our Cookies Policy for more details)
• When you visit the Website, we collect certain information related to your device, such as your device’s IP address, referring website, what pages your device visited, and the time that your device visited our Website
• Phone or email queries
• Information you sent us on the Health Questionnaires
• Information communicated to and by you throughout your treatment
• Information collected from testing and scanning you have throughout your treatment
• When you engage with us on social media
• When you review our services
• When you apply for an employment vacancy with Lominol Limited

On some occasions we will also receive personal information indirectly from third parties such as:

• GP or other specialist referral
• Technical Data from third parties, including analytics providers such as Google
• Contact, Financial and Transaction Data from providers of technical, payment and delivery services

Why we get your personal information (Purposes and Legal Basis)

How we store your personal information

Your information is securely stored within our Patient Electronic Database System which also include the integration of our web forms system.

The number of paper records processed at Optilase will be very limited and will be stored internally in our secure clinics, and with a trusted third party storage provider.CCTV recordings are securely stored in an authorised staff access controlled area managed directly by Optilase  and are not accessible online. Only a very limited number of authorised Optilase staff can access those recordings and only with regards to security purposes and/or access request. CCTV recordings are deleted after 28 days.

Who we share your personal data with

In order to provide you with best quality of care as well as ensuring the compliance with legal obligation, some of your personal data will be shared on the need to know basis with the following third parties:

• Other healthcare providers that require your personal data as part of the provision of medical treatment;
• Service providers and suppliers that provide goods and services necessary for the provision of services to you (for example customised lens suppliers);
• Other third party advisors (i.e. legal advisor, insurance)  that have access to your personal data as a necessary and controlled part of the provision of service;
• Accreditation bodies such as JCI.

Click on the following link to see our list of sub-processors. “List of Sub-Processors Link”

If you wish to obtain more information on third parties with whom your data may be shared, please contact our Data Protection Officer (privacy@optilase.com).

We will not share your personal data outside the European Union or European Economic Area except for the storage of the Call Recordings as well as the storage of your Treatment Consent which will be stored by approved third party providers on a server located in the US.

Your data protection rights

Under data protection law, you have rights including:

• Your right of access - You have the right to ask us for copies of your personal information. 
• Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. 
• Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances. This right is not absolute as some data must be kept following other legal obligations.
• Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances. 
• Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.
• Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at privacy@optilase.com if you wish to make a request.

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us at privacy@optilase.com

You can also complain to the Data Protection Commission (DPC) if you are unhappy with how we have used your data.

Data Protection Commission Details:

Telephone: +353 (0)761 104 800 or Lo Call Number 1890 252 231

Email: mailto:info@dataprotections.ie

For further information please visit http://www.dataprotection.ie/