GENERAL TERMS of USE and PRIVACY POLICY of the eHealth System of the Republic of Armenia

Version 1.04

The present document (hereinafter: General Terms) sets out the rules and conditions of use, information security, privacy policy and liability for the Integrated Health Information System of the Republic of Armenia (hereinafter: eHealth System or System), which apply to all Users of the System.

Definitions

eHealth System: An aggregate of infrastructure and information that ensures the entry, processing, storage, archiving and use of each person’s health data in an electronic environment.

Subscriber A healthcare provider licensed in the Republic of Armenia, an insurance company providing health insurance, or a state body or organization that has the right to access health data.

Authorized state body: Ministry of Health of the Republic of Armenia

Operator: National eHealth Operator CJSC

User: A patient using the System, a medical worker or other employee of a Subscriber or the Authorized state body using the System for the purpose of carrying out their functions (administrative, supervisory, monitoring, etc.).

General Terms

  • The data entered into the System may be used to obtain detailed medical information about an individual, to provide health services, and to reimburse those services, and the de-identified data – for studies, analyses, and monitoring.
  • The infrastructure of the System and the de-identified data contained in its database are the property of the Republic of Armenia.
  • The system is managed, maintained and continuously improved by the Operator, which operates within the framework of its rights and obligations set out in the concession agreement entered into with the Government of the Republic of Armenia.
  • The System operates on the basis of the following principles:
    1. The information contained in the System is personally identifiable, except for the cases provided for by law.
    2. The database is centralized for all participants of the System.
    3. The information is available at any time to all authorized Users within the scope of their permissions.
    4. The information is confidential and protected.
  • Every person who has a public service number or a certificate on not receiving a public service number in the Republic of Armenia has a personal page in the System. The personal pages of minors under 16 years of age, and those of totally or partially incapacitated persons, can be managed by their legal guardians.
  • The System software, the System’s mobile application and their components are the intellectual property of the Republic of Armenia represented by the Government of the Republic of Armenia, of Ericsson Nikola Tesla d.d., Sylex Sarl or Maysis Apahov LLC.
  • As a User, a perpetual, royalty-free, non-exclusive and revocable license is granted to you to use the System software in the territory of the Republic of Armenia.
  • All Users, except patients, are assigned roles in the System with specific sets of permissions (Subscriber administrator, doctor, nurse, etc.).
  • Using the System is free-of-charge for all Users.
  • You may not transfer the right of use granted to you to another person.
  • You may not duplicate, re-develop, reproduce, distribute, modify, or use the System software in any unauthorized manner.

Information Security and Liability

  • The data contained in the System is stored in a data centre located in the territory of the Republic of Armenia, on hardware manufactured by leading manufacturers. The connection with the System is protected and encrypted, which guarantees the protection and security of the data.
  • The System is protected from unauthorized access and attacks with the best tools used in the industry.
  • The System is regularly updated and upgraded, taking into account the latest technological developments.
  • Users access the System using strong identification mechanisms, i.e. they register in the System with an ID card. After their initial registration, a User may also log into the System with a username and password. For security reasons, a verification code may be required at each login.
  • Registration with an ID card may not be required for accessing and using certain limited features.
  • To have full access to the System, you must meet the following conditions:
    1. You must have a stable internet connection.
    2. You must use an up-to-date browser.
    3. The device you use to access the System must be in good condition, free of viruses and other malicious programs. Its operating system must have the latest security updates and an antivirus software.
  • You may also get limited access to the System and use certain features through the System’s mobile application.
  • You must:
    1. Use the System in accordance with the legislation of the Republic of Armenia, these General Terms and other terms and conditions that may be set by the Operator.
    2. Properly protect your ID card, your PIN/PUK codes, and your username and password, and take measures to prevent their unauthorized use by third parties.
    3. Not give third parties access to your device while you are logged into your personal page.
  • If you are a medical worker or other employee of a Subscriber or the Authorized state body, you must use the permissions given to you in the System solely for the purpose of performing your functions and job responsibilities
  • You may not:
    1. Use the System in any way that may affect the safe and uninterrupted operation of the System.
    2. Use the System with any unauthorized or unlawful purpose.
    3. Take actions to gain unauthorized access to the System or any part thereof, including by using another person’s login information.
    4. Disable, damage or bypass the security firewalls in the System in any manner whatsoever.
    5. Collect and export/extract data from the System in any manner, including by using automated tools, unless exporting/extracting data is permitted and provided for within the scope of your permissions in the System.
  • For security reasons, every action performed in the System is automatically logged and stored for an indefinite period.
  • You are responsible for all actions that are performed using your ID card, PIN/PUK codes or your username and password.
  • The Authorized state body and the Operator shall not be liable for any damage caused by circumstances beyond their control.
  • You shall be liable, in accordance with the legislation of the Republic of Armenia, for damages caused to the Republic of Armenia, the Operator or third parties that result from your use of the System in violation of the legislation of the Republic of Armenia or these General Terms.
  • The Operator shall make every effort to ensure the continuous availability of the System.
  • The Operator periodically updates and upgrades the System. You may be required to perform certain actions regarding the updates or upgrades.
  • The System may be unavailable during pre-planned updates or upgrades; you will be informed about such updates and upgrades through armed.am
  • For System failures, the Operator is liable directly to the Authorized state body.
  • The Operator shall not be liable for System failures, if these are caused by circumstances beyond its control, such as, without limitation, force-major situations.
  • The Operator shall not be liable for any damage caused to you or third parties as a result of the unlawful disclosure or use of personal data or other information received from the System, any person’s illegal access to the System or its unauthorized use or misuse, but commits to using the best tools in the industry to prevent any unauthorized access or data tampering.
  • Should you become aware of any breach of these General Terms, or circumstances or situations that pose a threat or may potentially pose a threat to the security of the System or the personal data stored therein, you shall immediate inform the Operator.

Personal Data Privacy Policy

  • The procedure for processing personal data through the System, the rules for viewing a patient's data stored in the System, the list of people, who may view a patient’s records with the patient's (or their legal guardians) consent, and the scope of their permissions in the System, the procedure for accessing and viewing personal data in a patient’s electronic medical records, are defined by the legislation of the Republic of Armenia.
  • With regard to the System, Subscribers and the Government of the Republic of Armenia are data processors (data controller, according to GDPR (EU) 2016/679). The Operator – an authorized entity (data processor, according to GDPR (EU) 2016/679) - processes the personal data on behalf of the Government of the Republic of Armenia.
  • In compliance with the provisions of the Law of the Republic of Armenia "On Personal Data Protection", a Subscriber ensures that the data in the System is updated, and all data concerning patient visits, services provided, medical interventions, diagnoses, prescriptions, personal health and medical data provided for by the law are entered into the System, in accordance with the procedure defined by the Authorized state body.
  • All patient personal data and medical secrets stored in the System are protected under the law.
  • Personal data entered into the System are kept for an indefinite period of time, unless otherwise provided for by the legislation of the Republic of Armenia.
  • In order to register in the System, you may be required to provide your email address, phone number or other data, as well as to create a password. All the information you provide during registration and your encrypted password are stored and used to identify you during future logins. The email address you provide and your phone number will be used to verify your registration, as well as during other actions in the future that require verification. Your email address and phone number may also be used to send you notifications. You can change your email address and phone number at any time on your personal page.
  • You are responsible for the validity and availability of the email address and phone number you provide. The Operator shall not be liable for any damage you suffer as a result of the invalidity or unavailability of the phone number or email address you have provided, or as a result of a third party having gained access to the information sent to that phone number or email address.
  • In order to register you in and provide you services through the System, it is interconnected with a number of databases owned by state bodies of the Republic of Armenia, and receives information necessary to identify you and perform other actions, in accordance with the legislation of the Republic of Armenia.
  • The following data received during your registration are stored and used to identify you in the future: name, surname, date of birth, public service number.
  • Users may view their own medical data stored in the System, as well as the personal data of minors under 16 years of age and totally or partially incapacitated persons under their care, if the System contains information about their relation.
  • Apart from you, your personal data in the System is only visible to the medical workers involved in the provision of the relevant medical services, and to the state body or insurance company financing those services, in accordance with and to the extent provided for by the legislation of the Republic of Armenia.
  • Only doctors may view your full health record with your consent, or in case of emergencies, if you have given your permission.
  • If you are a medical worker, you must keep confidential any and all patient personal data that be-come known to you during the performance of your job responsibilities, and you must use them solely in the manner and to the extent necessary for the performance your job responsibilities.
  • The Authorized state body and the Operator do not have access to patients’ personal data stored in the System.
  • The Authorized state body may receive statistics and deidentified reports from the System, with-out the right to process the personal data in the System.

User Service

  • The Operator has a service centre that handles letters and complaints in writing or via email to the following addresses, as well as calls to the following number:
    area 1/2, 14/1 Hr. Nersisyan Street, Yerevan, Republic of Armenia, +374 11 20 20 33, contact@armed.am
  • Letters and complaints in writing or via email are processed within 10 business days.
  • The service centre assists medical workers, and patients who have questions about or problems accessing their personal page.
  • The Operator does not have the right to assist you or give advice regarding data or entries on your personal page. For these, you should contact your healthcare provider.

Entry into Force and Amendments

  • These General Terms enter into force when you confirm that you accept them.
  • These General Terms may be amended at any time by publishing a new, updated edition (version) on armed.am․ New versions shall enter into force when you confirm that you accept them.

Miscellaneous

  • Issues not regulated by these General Terms shall be regulated by the legislation of the Republic of Armenia.
  • These General Terms are governed by, and interpreted in accordance with, the legislation of the Republic of Armenia. Disputes arising out of these General Terms shall be exclusively submitted to the competent courts of the Republic of Armenia.
  • These General Terms may also be published in languages other than Armenian. In case of discrepancies between the texts, the Armenian shall prevail, regardless of the language in which you have read and accepted the General Terms.

ARMED eHealth mobile application terms of use and privacy policy

Version 1.05

This document sets out the terms of use and data privacy policy for ARMED eHealth mobile application (the Application).

This document (including its further modifications and additions) is an agreement between you and SYLEX SA (hereafter, the Provider), and shall remain in force for as long as you use the Application. This document also governs the services accessible through the Application.

The Application is interconnected with and gives you limited access to the Integrated eHealth Information System of the Republic of Armenia (hereinafter, eHealth system).Therefore, in order to use the Application you must also read and accept the General Terms of Use and Privacy Policy of the eHealth system.

By signing into the Application and accepting this document, you confirm that you have also read the General Terms of Use and Privacy Policy of the eHealth system and accept its terms and conditions without reservation.

Services, Intellectual Property and User License

  • The Application gives you limited access to the eHealth System, in particular, it allows you to view your visits, diagnoses and other medical data from your personal records in the eHealth system, to make and cancel appointments, etc. (Additional Services).
  • With the purpose of supporting the efforts against COVID-19, as an Additional Service, the Application also allows you to access your COVID-19 test results, your vaccination information, access and download your digital COVID certificates and recovery certificates.
  • The Application will allow you access to the same limited extent to the personal records of individuals for whom you are legally responsible, if the eHealth system contain information about your relationship.
  • The Additional Services available to you through the Application are provided by the National eHealth Operator CJSC (hereinafter, Operator), which operates the eHealth system on the basis of a concession contract with the Government of Armenia.
  • SYLEX SA and/or the Operator hold all intellectual property rights in or licenses to use the Application and its components.
  • A perpetual, royalty-free, non-exclusive and revocable license is granted to you to use the Application in the territory of the Republic of Armenia.
  • The Application is not sold to you, and no intellectual property right therein is transferred to you.
  • You may not copy, reproduce or modify the Application, create derivative software or applications, or use the Application in any other unauthorized manner.

Information Security

  • To download and use the Application, your device must meet at least the following conditions:
    • it must have a stable internet connection
    • it must be in a good working condition, and must not have viruses, malware and/or incompatible software or applications.
  • You are responsible for all use of the Application from your device. Any action performed through the Application installed on your device will be considered to have been performed by you.
  • You must:
    • Use the Application in accordance with the legislation of the Republic of Armenia, this document and other terms and conditions set by the Operator, and without infringing on the rights and interests of third parties;
    • Use the Application solely for the purpose for which it was made available to you;
    • Not make your device available to third parties once you have signed into the Application
  • It is prohibited to:
    • Use the Application in any manner that may affect the safe and uninterrupted operation of the eHealth System and/or the Application;
    • Use the Application for any unlawful or unauthorized purpose;
    • Try to obtain unauthorized access to the eHealth System and/or the Application or any of their components;
    • destroy, damage or bypass any security firewall contained in the Application․
  • For security reasons, every action performed through the Application is automatically logged and stored.
  • In order to improve the Application, the Provider may from time to time release new updates.

Liability

  • The Application is provided to you “as is”, and use of the Application is at your sole risk.
  • The Provider and the Operator do not warrant that the Application and the Additional Services will operate without defects or other shortcomings, but they will make reasonable efforts to prevent defects and shortcomings in the Application and Additional Services.
  • You shall be liable, in accordance with the legislation of the Republic of Armenia, for damages caused to the Provider, the Operator or third parties that result from your use of the Application in violation of the legislation of the Republic of Armenia, the Terms of Use of the eHealth System or this document.
  • The Provider and the Operator shall not be liable for any damage that you incur as a result of unlawful actions of third parties, their illegal access to the Application, its unauthorized use or misuse, but commit to using the best tools in the industry to prevent any unauthorized access or data tampering.
  • The Provider and the Operator shall not be liable for failures of the Application and Additional Services resulting from circumstances beyond their control.

Personal Data Privacy Policy

  • Personal data is processed through the eHealth System in accordance with the legislation of the Republic of Armenia and the Term of Use of the system.
  • When you first sign into the Application, you are required to provide your personal public service number or name, surname and birth data, as well as a phone number, which are used to identify you and to connect to your account on the eHealth System.
  • In order to gain access to all Additional Services available or to recover your profile, you may be asked to pass additional authentication of identify for which you will have to take and submit photos of your face through the Application.
  • The additional authentication is performed by the Operator's staff, who compare the photos of your face with your photo obtained from the database of the State Population Register of the Police of the Republic of Armenia, which is available in the eHealth system. By taking photos of your face for additional authentication, you consent to the Operator viewing your photo in the eHealth system.
  • In the additional authentication process, the Application uses the camera of your device exclusively to take photos of your face and submit them to the eHealth system, and does not access, collect, store, transmit or use in any way any personal or other data on your device.
  • The information you provide during registration and the additional authentication process, including the photos of your face, is automatically stored in the eHealth system and is used to identify you, and may also be used in the future at the request of authorities or at your request to verify the authentication process.
  • The phone number you provide is used to validate your account, and may be used in the future for actions that require validation. The phone number you provide may also be used to send you notifications.
  • By providing a phone number, you warrant that it belongs to you, and you are responsible for its validity and availability.
  • The Provider and the Operator shall not be liable for any damages you have suffered as a result of the invalidity or unavailability of the phone number you have provided, or as a result of third parties having gained access to the information sent to that phone number.
  • To access certain Addition Services, you will need to allow the Application access to your device’s location information; such as to identify the nearest medical facility that provides the services you need, to notify the doctor upon your arrival.
    The Application will not store your phone’s location information, it will not access, collect, store, transmit or use in any way any personal or other data on your device.
  • You may select and change the language for the Application. Information about the selected language is stored for as long as you continue to use the Application.

Card Payment Rules

  • You can pay for medical services through the Application. The payment service is provided by a partner bank (hereinafter, the Bank).
  • To pay for medical services through the Application, you will need to fill in your Visa, MasterCard/Maestro or ArCa card information.
  • To pay for medical services through the Application, you can also add a Visa, MasterCard/Maestro or ArCa card to your personal page by filling in the required fields. If you add a card, you can use it to make further payments without having to fill in card information before each payment.
  • For security reasons, when you add a card to the Application, 10 AMD will be charged to the card in order to validate the card information. This amount will be reversed immediately.
  • You can delete a card added to the Application at any time and add another card.
  • The card information you enter in the Application is stored only in the processing center of the Bank, and the data storage complies with PCI DSS requirements.
  • The information entered into the Application, or received automatically, that is required for a payment is transferred to the Bank in order for the latter to carry out the payment.
  • No information containing medical secrets will be transferred to the Bank.
  • For clarifications and questions about payments done through the Application and card transactions, you/the payer should contact the issuing bank.
  • You must keep your Application username and password, and the card information that you use, confidential. You must never disclose this information to any third party.
  • The payment information made for services provided to you will be stored in the eHealth system, and will be available to you and the medical facility, which has provided those services.
  • If you make a payment through the Application, you are obliged to fill in the required information correctly, completely and properly. You shall be liable for filling in incorrect or false data, for filling in card information without the card-holder's consent, for payments made with that card, and for resulting damages.
  • When you make a payment through the Application, you will not be charged any additional fee on the transaction.
  • The Supplier, the Operator and the Bank shall not be liable for any payment made in violation of the terms and conditions of use of the card set by the issuing bank, and for resulting damages.
  • By taking steps to make a payment through the Application, you give your consent to the Bank, in accordance with the procedure defined by the Law of the Republic of Armenia on Personal Data Protection, to process and use (regardless of the method, including automated, using any technical means or without these) the personal data you provide through the Application in order to make a payment. You may submit a corresponding request to the Bank, in which case the Bank will correct or destroy your personal data that it has stored, or terminate their processing, cancel the above-mentioned consent, or take other actions related to data processing, unless otherwise provided for by the Armenian legislation and/or internal legal acts of the Bank.

Entry into Force and Amendments

  • This document enters into force when you confirm that you accept it.
  • The Provider may make changes and additions to this document by publishing a new, updated edition (version).
  • New versions shall enter into force when you confirm that you accept them.

Miscellaneous

  • Issues not regulated by this document are regulated by the General Terms of Use and Privacy Policy of the eHealth system and the legislation of the Republic of Armenia.
  • This document, the relationship between you and the Provider, and the relationship between you and the Operator, are governed by, and interpreted in accordance with, the legislation of the Republic of Armenia.
  • Disputes arising out of this document or in relation to your use of the Application shall be exclusively submitted to the competent courts of the Republic of Armenia.
  • This document may also be published in languages other than Armenian. In case of discrepancies between the texts, the Armenian shall prevail, regardless of the language in which you have read and accepted the document.

Customer Service

  • The Provider and the Operator provide customer service for the Application and Additional Services, respectively.
  • For questions, suggestions, and complaints about the Application and Additional Services, please contact: 1/2 Area, 14/1, Hr. Nersisyan Str., Yerevan, Republic of Armenia, tel. +37411202033, e-mail: contact@armed.am