Privacy Policy

GENERAL TERMS of USE and PRIVACY POLICY of the eHealth System of the Republic of Armenia

Version 1.05

The present document (hereinafter: General Terms) sets out the rules and conditions of use, information security, privacy policy and liability for the Integrated Health Information System of the Republic of Armenia (hereinafter: eHealth System or System), which apply to all Users of the System.

Definitions

eHealth System or System: An aggregate of infrastructure and information that ensures the entry, processing, storage, archiving and use of each person’s health data in an electronic environment.

App: The System’s mobile application.

Subscriber A healthcare provider licensed in the Republic of Armenia, an insurance company providing health insurance, or a state body or organization that has the right to access health data.

Authorized state body: Ministry of Health of the Republic of Armenia

Operator: National eHealth Operator CJSC

User: A Patient using the System, a medical worker or other employee of a Subscriber or the Authorized state body or representative of an employer using the System for the purpose of carrying out their functions (administrative, supervisory, monitoring, etc.).

Patient: an individual using the System for non-professional purposes.

General Terms

The data entered into the System may be used to obtain detailed medical information about an individual, to provide health services, and to reimburse those services, and the de-identified data – for studies, analyses, and monitoring.
The infrastructure of the System and the de-identified data contained in its database are the property of the Republic of Armenia.
The system is managed, maintained and continuously improved by the Operator, which operates within the framework of its rights and obligations set out in the concession agreement entered into with the Government of the Republic of Armenia.
The System operates on the basis of the following principles:

The information contained in the System is personally identifiable, except for the cases provided for by law.
The database is centralized for all participants of the System.
The information is available at any time to all authorized Users within the scope of their permissions.
The information is confidential and protected.

Every person who has a public service number or a certificate on not receiving a public service number in the Republic of Armenia, as well all every person who has neither an Armenian public service number nor a certificate but whose information has been entered into the system by a medial institution, has a personal page in the System. The personal pages of minors under 16 years of age, and those of totally or partially incapacitated persons, can be managed by their legal guardians.
The System software, the System’s mobile application and their components are the intellectual property of the Republic of Armenia represented by the Government of the Republic of Armenia, of Ericsson Nikola Tesla d.d., Sylex SA or Maysis Apahov LLC.
As a User, a perpetual, royalty-free, non-exclusive and revocable license is granted to you to use the System software in the territory of the Republic of Armenia.
All Users, except patients, are assigned roles in the System with specific sets of permissions (Subscriber administrator, doctor, nurse, etc.).
Using the System is free-of-charge for all Users.
You may not transfer the right of use granted to you to another person.
You may not duplicate, re-develop, reproduce, distribute, modify, or use the System software in any unauthorized manner.

Information Security and Liability

The data contained in the System is stored in a data centre located in the territory of the Republic of Armenia, on hardware manufactured by leading manufacturers. The connection with the System is protected and encrypted, which guarantees the protection and security of the data.
The System is protected from unauthorized access and attacks with the best tools used in the industry.
The System is regularly updated and upgraded, taking into account the latest technological developments.
Users access the System using strong identification mechanisms, i.e. they register in the System with an ID card or Mobile ID, except for Patients. For Patients, access to the System is provided through the App, using Mobile ID or facial recognition for registration. After their initial registration, a User may also log into the System with a username and password. For security reasons, a verification code may be required at each login.
To have full access to the System, you must meet the following conditions:

You must have a stable internet connection.
You must use an up-to-date browser.
The device you use to access the System must be in good condition, free of viruses and other malicious programs. Its operating system must have the latest security updates and an antivirus software.

If you are a medical worker, as such you may have limited access to the System and be able to use some features through the App.
You must:

Use the System in accordance with the legislation of the Republic of Armenia, these General Terms and other terms and conditions that may be set by the Operator.
Properly protect your ID card, your PIN/PUK codes, the SIM card and passcode you use for your Mobile ID, and your username and password, and take measures to prevent their unauthorized use by third parties.
Not give third parties access to your device while you are logged into your personal page or the App

If you are a medical worker or other employee of a Subscriber or the Authorized state body, you must use the permissions given to you in the System solely for the purpose of performing your functions and job responsibilities
You may not:

Use the System in any way that may affect the safe and uninterrupted operation of the System.
Use the System with any unauthorized or unlawful purpose.
Take actions to gain unauthorized access to the System or any part thereof, including by using another person’s login information.
Disable, damage or bypass the security firewalls in the System in any manner whatsoever.
Collect and export/extract data from the System in any manner, including by using automated tools, unless exporting/extracting data is permitted and provided for within the scope of your permissions in the System.

For security reasons, every action performed in the System is automatically logged and stored for an indefinite period.
You are responsible for all actions performed using your ID card, codes, SIM card you use for your Mobile ID, login name or passwords.
The Authorized state body and the Operator shall not be liable for any damage caused by circumstances beyond their control.
You shall be liable, in accordance with the legislation of the Republic of Armenia, for damages caused to the Republic of Armenia, the Operator or third parties that result from your use of the System in violation of the legislation of the Republic of Armenia or these General Terms.
The Operator shall make every effort to ensure the continuous availability of the System.
The Operator periodically updates and upgrades the System. You may be required to perform certain actions regarding the updates or upgrades.
The System may be unavailable during pre-planned updates or upgrades; you will be informed about such updates and upgrades through armed.am
For System failures, the Operator is liable directly to the Authorized state body.
The Operator shall not be liable for System failures, if these are caused by circumstances beyond its control, such as, without limitation, force-major situations.
The Operator shall not be liable for any damage caused to you or third parties as a result of the unlawful disclosure or use of personal data or other information received from the System, any person’s illegal access to the System or its unauthorized use or misuse, but commits to using the best tools in the industry to prevent any unauthorized access or data tampering.
Should you become aware of any breach of these General Terms, or circumstances or situations that pose a threat or may potentially pose a threat to the security of the System or the personal data stored therein, you shall immediate inform the Operator.

Personal Data Privacy Policy

The procedure for processing personal data through the System, the rules for viewing a patient's data stored in the System, the list of people, who may view a patient’s records with the patient's (or their legal guardians) consent, and the scope of their permissions in the System, the procedure for accessing and viewing personal data in a patient’s electronic medical records, are defined by the legislation of the Republic of Armenia.
With regard to the System, Subscribers and the Government of the Republic of Armenia are data processors (data controller, according to GDPR (EU) 2016/679). The Operator – an authorized entity (data processor, according to GDPR (EU) 2016/679) - processes the personal data on behalf of the Government of the Republic of Armenia.
In compliance with the provisions of the Law of the Republic of Armenia "On Personal Data Protection", a Subscriber ensures that the data in the System is updated, and all data concerning patient visits, services provided, medical interventions, diagnoses, prescriptions, personal health and medical data provided for by the law are entered into the System, in accordance with the procedure defined by the Authorized state body.
All patient personal data and medical secrets stored in the System are protected under the law.
Personal data and medical secret entered into the System are kept for an indefinite period of time, unless otherwise provided for by the legislation of the Republic of Armenia.
In order to register in the System or the App, you may be required to provide your email address, phone number or other data, as well as to create a password or passcode. All the information you provide during registration and your encrypted password and passcode are stored and used to identify you during future logins. The email address you provide and your phone number will be used to verify your registration, as well as during other actions in the future that require verification. Your email address and phone number may also be used to send you notifications. You can change your phone number at any time on your personal page or the App.
You are responsible for the validity and availability of the email address and phone number you provide. The Operator shall not be liable for any damage you suffer as a result of the invalidity or unavailability of the phone number or email address you have provided, or as a result of a third party having gained access to the information sent to that phone number or email address.
In order to register you in and provide you services through the System or the App, the System is interconnected with a number of databases owned by state bodies of the Republic of Armenia, and receives information necessary to identify you and perform other actions, in accordance with the legislation of the Republic of Armenia.
The following data received during your registration are stored and used to identify you in the future: name, surname, date of birth, public service number.
Users may view their own medical data stored in the System, as well as the personal data of minors under 16 years of age and totally or partially incapacitated persons under their care, if the System contains information about their relation.
Apart from you, your personal data in the System is only visible to the medical workers involved in the provision of the relevant medical services, and to the state body or organization or insurance company financing those services, in accordance with and to the extent provided for by the legislation of the Republic of Armenia.
Your health records can only be viewed by doctors with your consent, or in emergency cases, in the manner and scope defined by RA legislation.
If you are a medical worker, you must keep confidential any and all patient personal data and medical secret that be-come known to you during the performance of your job responsibilities, and you must use them solely in the manner and to the extent necessary for the performance your job responsibilities. In case of violation of this clause or reasonable suspicion thereof, the Operator has the right to immediate-ly suspend your permissions in the System and notify the competent authorities.
The Authorized state body and the Operator do not have access to patients’ personal data or any medical secret stored in the System.
The Authorized state body may receive statistics and deidentified reports from the System, with-out the right to process the personal data in the System.

User Service

The Operator has a service centre that handles letters and complaints in writing or via email to the following addresses, as well as calls to the following number:
333, 4 Adonts street, Yerevan, Republic of Armenia, +374 11 20 20 33, contact@armed.am
Letters and complaints in writing or via email are processed within 10 business days.
The service centre serves medical workers, and Patients who have technical questions or issues related to the System or the App.
For questions about the entries or data in your medical records, you should contact the organization that provided you with medical care and services.

Entry into Force and Amendments

These General Terms enter into force when you confirm that you accept them.
These General Terms may be amended at any time by publishing a new, updated edition (version) on armed.am․ New versions shall enter into force when you confirm that you accept them.

Miscellaneous

Issues not regulated by these General Terms shall be regulated by the legislation of the Republic of Armenia.
These General Terms are governed by, and interpreted in accordance with, the legislation of the Republic of Armenia. Disputes arising out of these General Terms shall be exclusively submitted to the competent courts of the Republic of Armenia.
These General Terms may also be published in languages other than Armenian. In case of discrepancies between the texts, the Armenian shall prevail, regardless of the language in which you have read and accepted the General Terms.

ARMED eHealth mobile application terms of use and privacy policy

Version 1.09

This document sets out the terms of use and data privacy policy for ARMED eHealth mobile application (the Application).

This document also governs the general terms for the provision of services accessible through the Application.

The Application is interconnected with and gives you access to the Integrated eHealth Information System of the Republic of Armenia (hereinafter, eHealth system). Therefore, in order to use the Application you must also read and accept the General Terms of Use and Privacy Policy of the eHealth system.

By signing into the Application and accepting this document, you confirm that you have also read the General Terms of Use and Privacy Policy of the eHealth system and accept its terms and conditions without reservation.

Services, Intellectual Property and User License

The Application gives you access to your personal page in the eHealth System, it allows you to view your visits and medical records; via the Application you can grant consent to view your medical records based on a doctor's request, manage your profile and medical records’ settings, book and cancel appointments, choose a family doctor, receive telemedicine services, and use other available services and tools that may change from time to time. If you are a medical worker, the Application also provides access to tools designed for performing your professional functions.
To use telemedicine and certain other services available through the Application, you may be required to consent to specific terms and conditions for those services, which are considered a supplemental part of this document. By taking actions to use these services, you confirm that you have read and accept said terms.
The Application will allow you access to the personal pages of individuals of whom you are the legal representative, provided the eHealth system contains information regarding your affiliation.
SYLEX SA and/or the National eHealth Operator CJSC (hereinafter Operator) hold all intellectual property rights in or licenses to use the Application and its components.
A perpetual, royalty-free, non-exclusive and revocable license is granted to you to use the Application in the territory of the Republic of Armenia.
The Application is not sold to you, and no intellectual property right therein is transferred to you.
You may not copy, reproduce or modify the Application, create derivative software or applications, or use the Application in any other unauthorized manner.

Information Security

To download and use the Application, your device must meet at least the following conditions:

it must have a stable internet connection
it must be in a good working condition, and must not have viruses, malware and/or incompatible software or applications.

You are responsible for all use of the Application from your device. Any action performed through the Application installed on your device will be considered to have been performed by you.
You must:

Use the Application in accordance with the legislation of the Republic of Armenia, this document and other terms and conditions set by the Operator, and without infringing on the rights and interests of third parties;
Use the Application solely for the purpose for which usage rights are granted to you;
Not make your device available to third parties once you have signed into the Application

It is prohibited to:

Use the Application in any manner that may affect the safe and uninterrupted operation of the eHealth System and/or the Application;
Use the Application for any unlawful or unauthorized purpose;
Try to obtain unauthorized access to the eHealth System and/or the Application or any of their components;
destroy, damage or bypass any security firewall contained in the Application․

For security reasons, every action performed through the Application is automatically logged and stored.
To improve the Application, new updates may be released from time to time.

Liability

The Operator provides no warranty that the Application or the services and tools available through it will be error-free or uninterrupted, but commits to making reasonable efforts to rectify any such deficiencies or issues.
You shall be liable, in accordance with the legislation of the Republic of Armenia, for damages caused to the Operator or third parties that result from your use of the Application in violation of the legislation of the Republic of Armenia, the Terms of Use of the eHealth System or this document.
The Operator shall not be liable for any damage that you incur as a result of unlawful actions of third parties, their illegal access to the Application, its unauthorized use or misuse, but commits to using the best tools in the industry to prevent any unauthorized access or data tampering.
The Operator shall not be liabile for interruptions in the Application or the services and tools available through it arising from circumstances beyond its control.

Personal Data Privacy Policy

Personal data is processed through the eHealth System in accordance with the legislation of the Republic of Armenia and the Term of Use of the system.
Registration in the Application is possible via Mobile ID or through facial identification. To register in the Application using facial identification, you may be required to provide your name, surname, date of birth, or public services number, as well as your phone number, which are used to identify you and establish a connection with your personal page in the eHealth system.
The information provided during registration or automatically retrieved from other information databases during registration via Mobile ID, is automatically stored in the eHealth system and is used to identify you, and may also be used in the future at the request of authorities or at your request to verify the authentication process.
The phone number you provide is used to validate your account, and may be used in the future for actions that require validation. The phone number you provide may also be used to send you notifications.
By providing a phone number, you warrant that it belongs to you, and you are responsible for its validity and availability.
The Operator shall not be liable for any damages you have suffered as a result of the invalidity or unavailability of the phone number you have provided, or as a result of third parties having gained access to the information sent to that phone number.
Facial identification is performed by capturing your facial image through the Application.
Facial identification is performed automatically or by the Operator's staff, who compare your facial image with your photo obtained from the database of the State Population Register of the Police of the Republic of Armenia, which is available in the eHealth system. By capturing your facial image for facial identification, you consent to the Operator viewing your photo in the eHealth system.
In the facial identification process, the Application will need your consent to use the camera of your device. The camera is used exclusively to capture your facial image while you are passing facial identification, and does not access, collect, store, transmit or use in any way any personal or other data on your device.
The Application will need your consent to collect location data to verify your arrival at the medical facility and enable you to check-in. Check-in information is used to notify the doctor of your arrival. The Application collects and uses your location data solely at the time of your check-in, and does not access, collect, store, transmit or use in any way any personal or other data on your device.
You may select and change the language for the Application. Information about the selected language is stored for as long as you continue to use the Application.
For the Online consultation service, the Application will need your consent to use the camera and audio of your device. The camera and audio will be used exclusively to organize video calls for online consultation. The Application does not – through the camera or otherwise – access, collect, store, transmit or use in any way any personal or other data on your device.

Card Payment Rules

You can pay for medical services through the Application. The payment service is provided by a partner bank (hereinafter, the Bank).
To pay for medical services through the Application, you will need to fill in your Visa, MasterCard/Maestro or ArCa card information.
To pay for medical services through the Application, you can also add a Visa, MasterCard/Maestro or ArCa card to your personal page by filling in the required fields. If you add a card, you can use it to make further payments without having to fill in card information before each payment.
For security reasons, when you add a card to the Application, 10 AMD will be charged to the card in order to validate the card information. This amount will be reversed immediately.
You can delete a card added to the Application at any time and add another card.
The card information you enter in the Application is stored only in the processing center of the Bank, and the data storage complies with PCI DSS requirements.
The information entered into the Application, or received automatically, that is required for a payment is transferred to the Bank in order for the latter to carry out the payment.
No information containing medical secrets will be transferred to the Bank.
For clarifications and questions about payments done through the Application and card transactions, you/the payer should contact the issuing bank.
You must keep your Application username and password, Mobile ID passcode, and the card information that you use, confidential. You must never disclose this information to any third party.
The payment information made for services provided to you will be stored in the eHealth system, and will be available to you and the medical facility, which has provided those services.
If you make a payment through the Application, you are obliged to fill in the required information correctly, completely and properly. You shall be liable for filling in incorrect or false data, for filling in card information without the card-holder's consent, for payments made with that card, and for resulting damages.
When you make a payment through the Application, you will not be charged any additional fee on the transaction.
The Supplier, the Operator and the Bank shall not be liable for any payment made in violation of the terms and conditions of use of the card set by the issuing bank, and for resulting damages.
By taking steps to make a payment through the Application, you give your consent to the Bank, in accordance with the procedure defined by the Law of the Republic of Armenia on Personal Data Protection, to process and use (regardless of the method, including automated, using any technical means or without these) the personal data you provide through the Application in order to make a payment. You may submit a corresponding request to the Bank, in which case the Bank will correct or destroy your personal data that it has stored, or terminate their processing, cancel the above-mentioned consent, or take other actions related to data processing, unless otherwise provided for by the Armenian legislation and/or internal legal acts of the Bank.

Entry into Force and Amendments

This document enters into force when you confirm that you accept it, and shall remain in effect (including any subsequent amendments and supplements) for as long as you use the Application.
This document may be amended at any time by publishing a new, updated edition (version).
New versions shall enter into force when you confirm that you accept them.

Miscellaneous

Issues not regulated by this document are regulated by the General Terms of Use and Privacy Policy of the eHealth system and the legislation of the Republic of Armenia.
This document is governed by, and interpreted in accordance with, the legislation of the Republic of Armenia.
Disputes arising out of this document or in relation to your use of the Application shall be exclusively submitted to the competent courts of the Republic of Armenia.
This document may also be published in languages other than Armenian. In case of discrepancies between the texts, the Armenian shall prevail, regardless of the language in which you have read and accepted the document.

Customer Service

For questions, suggestions, or complaints regarding the Application, you may contact the Operator by sending a letter to 333, 4 N. Adonts St., Yerevan, RA, by emailing contact@armed.am, or by calling +374 11 202033.