Privacy Policy

INFORMATION ON PERSONAL DATA PROTECTION FOR THE EYE SCREENING TREATMENT

Who is the data controller?

EDRYX HEALTHCARE, S.L., with registered address at Calle dels Arbres nº1, 4ª planta, 08912 Badalona (Barcelona), and Spanish Tax Code (CIF) B67357632, will be responsible for processing the personal data collected. If you have any questions about the processing of your personal data or would like to take any action regarding the processing of your data, you may contact the data controller by sending an e-mail to legal@edryx.net or writing to the postal address indicated above.

For what purpose are your personal data processed? For how long?

The personal data we collect will be processed for the purpose of improving eye disease early detection systems through registration on a web platform.

Eye Screening is a web platform that enables eye disease early detection systems to be improved. In this case, the project is based on the existence of the following technologies:

  • Presence of a chatbot - screening test, undertaken via medical diagnosis trees and questions of a varying medical nature, e.g. questions about symptoms or questions related to personal and family medical history, which are used to help users reveal possible problems associated with their eye health.
  • Furthermore, in order to expedite and improve the treatment and detection of diseases, the platform also offers a telemedicine system on which users can submit online consultations to ophthalmology professionals registered on the platform. These doctors register themselves independently using a specific section of the platform.

As the case may be, to allow those doctors who have been chosen by patients to access the necessary patient information. At any event, such access will only take place if the user has previously provided their consent. Following the ophthalmology consultation, it is possible that information resulting from the medical examination (including comments from the doctor during the face-to-face or telemedicine consultation) will be stored and added to the profile of the user on the platform.

Furthermore, your data may be processed for the purpose of responding to queries resulting from the contact form made available to the data subject.

EDRYX HEALTHCARE, S.L. will keep your personal data for as long as necessary to preserve the legal value thereof and for the indicated period in which any liability may arise with regard to the processing of personal data; i.e. for the term of the legal limitation period.

What personal data do we collect and process?

Below is a list of the personal data categories subject to processing and the type thereof:

Patient data
  • Identification data: Name and surnames, gender, post code and e-mail address.
  • Personal characteristics: date of birth, smoker, lens wearer, age,
  • Special data categories: Health data, including eye pathologies, diseases and disorders related to ophthalmological pathology (e.g. diabetes, cholesterol, etc.).

Doctor data

  • Identification data: Register code, name, surname, e-mail address
  • Employment data: Main place of work, ophthalmological sub-speciality, province, municipality, post code, telephone number.

What are the legal grounds for processing your data?

The legal grounds for processing the personal data of the data subject for the above purpose are:

  • Pursuant to Article 6.1. b) of the GDPR, the legal grounds for the processing of personal data for registration on the Eye Screening platform and completion of a screening test is the performance of a contract to which the data subject is party following acceptance of the Terms and Conditions of Use of the Eye Screening project.
  • The consent of the data subject under Article 9.2. a) of the GDPR regarding the treatment of health data.
  • The consent of the data subject under Article 6.1. a) of the GDPR regarding communication of the result from the screening test to the doctor chosen by the user.
  • The consent of the data subject under Article 6.1. a) of the GDPR for responding to queries submitted by the data subject.

What security measures have been put in place to protect your personal data?

Your personal data will be treated in absolute confidence. Furthermore, suitable technical and organisational measures have been put in place to guarantee the security thereof and prevent the destruction, loss, unlawful access or unlawful alteration thereof. Such criteria as the scope, treatment context and purposes, state of the art and existing risks were considered when defining these measures.

Are your data shared with third parties?

Your personal data will be shared with third parties whenever strictly necessary for the adoption of disciplinary measures or the undertaking of legal proceedings when so required.

Furthermore, your data may be shared with the doctors registered on the Eye Screening platform whenever the data subject has so expressly requested and consented.

What are your rights?

Below is a list of rights to which the data subjects are entitled:

  • Right to access: To consult which personal data we hold about you.
  • Right to rectification: To change the personal data we hold about you when the same are inaccurate or incomplete.
  • Right to oppose processing: To request that we do not process your personal data for any specific purpose.
  • Right to erasure: To request that we delete your personal data.
  • Right to restrict processing: To request that we restrict the processing of your personal data.
  • Right to data portability: To request that we provide the information we hold about you in an electronic format.

Furthermore, you may lodge a complaint with the competent authority to defend your rights via the website at www.aepd.es

To exercise these rights, you simply need to contact EDRYX HEALTHCARE, S.L. either by sending an e-mail to legal@edryx.net or a letter to Calle dels Arbres nº1, 4ª planta, 08912 Badalona (Barcelona), using “Data Protection” as reference.

The request should include copy of your DNI/NIE or other equivalent identity document, as well as the minimum content provided for in the applicable regulations. If your request does not meet the specified requirements, EDRYX HEALTHCARE, S.L. may require you to remedy this situation. The exercise of your rights is free, although you may be charged a fee if your request is unfounded, excessive or repetitive.