"Personal Data" means individually identifiable information, namely information that identifies an individual or may with reasonable efforts cause the identification of an individual.
"Non Personal Data" means information that does not personally identify you and does not reveal your specific identity as an individual, such as anonymized information.
"Visitor" or "User" or "you" means visitors of our Website.
"GDPR" means the General Data Protection Regulation (EU) 2016/679, as amended from time to time.
"Website" means the website available at https://healthy.io.
This Policy was originally written in English. If you are reading a translation and it conflicts with the English version, please note that the English version prevails.
PERSONAL DATA THAT YOU PROVIDE TO US
While browsing our Website, you will provide us Personal Data only if you wish us to contact you and provide more information regarding our current and future offerings. This information may include your contact details such as your email.THE PERSONAL DATA THAT WE COLLECT OR GENERATE
In addition to the categories of Personal Data described above, we will also process further anonymized information and data that is not processed by reference to a specific individual. We may collect this Non-Personal Data through the Website in the following ways:
We may use your email address you provided us to contact you when necessary, including in order to send you reminders, offers and to provide you information and notices about the Website. At any time, you may choose (opt out) whether your Personal Data is to be used for sending such marketing materials which are not an essential part of the services on the Website. You may exercise your choice by contacting us at: firstname.lastname@example.org.
We may use information that is Non Personal Data for the same purposes we use Personal Data (where applicable) and in addition in order to (i) compile anonymous or aggregate information, (ii) disclose to third party vendors, service providers, contractors or agents who perform tasks on our behalf in connection with the services provided through the Website, (iii) monitor and analyze use of the Website and for the technical administration and troubleshooting of the use of the Website, and (iv) provide us with statistical data.
We may use analytics tools. These tools help us understand users' behaviour on our Website, including by tracking page content, and click/touch, movements, scrolls and keystroke activities. The privacy practices of these tools are subject to their own policies and they may use their own cookies to provide their services. For further information about cookies, please see the ‘THE TYPES OF PERSONAL DATA THAT WE COLLECT' section in this Policy. Further information about your option to opt-out of these analytics services is available at: email@example.com.
From time to time, we may use additional or alternative analytics services. We will provide a notice of these changes on our Website.
We use anonymous, statistical or aggregated information, which may be based on extracts of your Personal Data, for legitimate business purposes including for testing, development, improvement, control and operation of the Website. We may share such information with our third party providers. It has no effect on your privacy, because there is no reasonable way to extract data from the aggregated information that can be associated with you. We will share your Personal Data only subject to the terms of this Policy, or subject to your prior informed consent.
We will only process your Personal Data where we have a legal basis to do so. The legal basis will depend on the reason or reasons we collected and need to use your Personal Data. In almost all cases the legal basis will be:
More information on the basis of processing:
It is hereby clarified that the legal bases detailed above are the legal bases for actions to process Personal Data, carried out by us in accordance with the GDPR. If processing of Personal Data is subject to other applicable laws, then the legal basis for processing Personal Data may differ according to those applicable laws.
For more information, see Section "YOUR RIGHTS" below.
We do not sell, rent or lease your Personal Data. We may share your Personal Data with service providers and other third parties, if necessary to fulfil the purposes for collecting the information, such as cloud vendors, subcontractors providing us processing services, etc., provided that any such third party will commit to protect your privacy as required under the applicable laws and this Policy.
Additionally, a merger, acquisition or any other structural change may require us to transfer your Personal Data to another entity, provided that the receiving entity will comply with this Policy.
We may need to disclose Personal Data in response to lawful requests by public authorities or law enforcement officials, including meeting national security or law enforcement requirements. We cooperate with government and law enforcement officials to enforce and comply with the law.
We may store, process or maintain information in various sites worldwide, including through cloud based service providers worldwide. Where the GDPR applies and we transfer Personal Data to another country outside the EEA, we will ensure that it is protected and transferred in a manner consistent with legal requirements. In relation to data being transferred outside of the EEA, for example, this may be done in one of the following ways:
You can obtain more details of the protection given to your Personal Data when it is transferred outside the EEA (including a copy of the standard data protection clauses which we have entered into with recipients of your Personal Data) by contacting us as described the Section "CONTACT US" below.
If you are located in a jurisdiction where transfer of your Personal Data to another jurisdiction requires your consent, then you provide us your express and unambiguous consent to such transfer or the storage, processing or maintenance of the information in other jurisdictions by using the Website.
In all of the above cases in which we collect, use or store your Personal Information, you may have the following rights and, in most cases, you can exercise them free of charge.
At any time, you may contact us at: firstname.lastname@example.org and request to know what Personal Data we keep about you. We will make good-faith efforts to locate the data that you request to access.
Under your right of access, you may obtain confirmation from us of whether we are processing Personal Data related to you, receive a copy of that data, so that you could verify its accuracy and the lawfulness of its processing, request the correction, amendment or deletion of the data if it is inaccurate, incomplete, outdated or processed in violation of applicable law.
However, we may retain certain information as deemed required by us in accordance with applicable laws, or for legitimate business reasons, for the duration as required under applicable laws.
In addition, we may delete any Personal Data pursuant to our policies, as in effect from time to time.
When you ask us to exercise any of your rights under this Policy and the applicable law, we may need to ask you to provide us certain credentials to make sure that you are who you claim you are, to avoid disclosure to you of Personal Data related to others and to ask you questions to better understand the nature and scope of data that you request to access.
We may redact from the data which we will make available to you, any Personal Data related to others.
We take the safeguarding of the Personal and Non Personal Data very seriously, and use a variety of systems, applications and procedures to protect the information from loss, theft, damage or unauthorized use or access when it is in our possession or control, including reasonable physical, technical and organizational measures which restrict access to the information. These measures provide sound industry standard security. However, although we make efforts to protect your privacy, we cannot guarantee that the Website will be immune from any wrongdoings, malfunctions, unlawful interceptions or access, or other kinds of abuse and misuse.
We also regularly monitor our systems for possible vulnerabilities and attacks, and regularly seek new ways and for further enhancing the security of our Website and protection of our Users' privacy.
You should take steps to protect against unauthorized access to your password, phone, and computer by, among other things, signing off after using a shared computer, choosing a robust password that nobody else knows or can easily guess, and keeping your log-in and password private. In addition, you should take steps to protect against unauthorized access to Personal Data stored on your premises as well as defining limited access rights to such information on a need to know basis.
If you receive an e-mail asking you to update your information with respect to the Website, do not reply and please contact us at email@example.com.
We retain different types of information for different periods, depending on the purposes for processing the data, our legitimate business purposes as well as pursuant to legal requirements under the applicable law. We may retain Personal Data for as long as necessary to support the collection and the use purposes under this Policy and for other legitimate business purposes, for example, for storing data, for documentation, for cyber-security management purposes, legal proceedings and tax issues. We may store aggregated Non Personal Data without time limit. In any case, as long as you use the Website, we will keep information about you, unless we are legally required to delete it, or if you exercise your rights to delete the information.
Our Website is not meant to be used by or for persons under 18, as such, we do not knowingly collect Personal Data from minors younger than 18. Insofar as Personal Data may be collected based on your consent, the data subject must be above the age of 16 (or above the age of 13 if this is the legal requirement in your country). If these age requirements are not met, you are required to obtain the consent of the parent or guardian to provide and process information in accordance with this Policy; lacking such consent, please do not use the Website.
If we need to adapt the Policy to legal requirements, the amended Policy will become effective immediately or as required.
Your continued use of the Website following such notice shall constitute your consent to any changes made and a waiver of any claim or demand in relation to such changes. If you do not agree to the new or different terms, you should not use and are free to discontinue using the Website.
For further information about this Policy, please contact us at firstname.lastname@example.org.
We work hard to handle your information responsibly. If you are unhappy about the way we do this, please contact us and we will make good-faith efforts to address your concerns. We are usually able to resolve privacy questions or concerns promptly and effectively. If you are not satisfied with the response you receive from us, you may escalate concerns to the applicable privacy regulator in your jurisdiction. Upon request, we will provide you with the contact information for that regulator.
Copyright © 2018, Healthy.io Ltd. All rights reserved.
Last Updated: October 31, 2018