GDPR

PERSONAL DATA PROCESSING AGREEMENT

INTRODUCTION:

Revelio Medical (hereinafter referred to as “the platform,” “Revelio Medical,” “the Company,” or “we”) is an online medical platform that specializes in providing personalized health mentoring, medical advice, and preventive care. Our platform facilitates access to health services and offers personalized recommendations to meet the needs of its users efficiently and promptly.

This Personal Data Processing Agreement (the “Agreement”) informs you about how your personal data will be processed in compliance with the relevant laws.

By using the platform, you agree to this Agreement, and it is important to read and understand it fully.

OUR CONTACT INFORMATION:

Company Name: Relive Care SRL
Email: info@reveliomedical.com
Registered Address: Lamaitei 4, Giroc, Timis, Romania
Data Protection Officer (DPO): Anca Kulcsar
Contact Email: anca@reveliomedical.com

PERSONAL DATA PROCESSED:

To provide our services, we process the following types of personal data:

• Personal and Contact Information: Name, email, phone number, address, date of birth, etc.
• Lifestyle Data: Medical history, symptoms, treatments, and any data related to your lifestyle profile.
• Financial Data: Information needed for billing purposes (e.g., bank account, IBAN, card details).
• Workplace Information: If applicable (in case of workplace health programs).
• Geolocation Data: Collected during your use of the platform.
• Interaction Data: Information about how you interact with the platform and the quality of those interactions.

PURPOSES OF DATA PROCESSING:

We process your data only for the purposes specified:

• Medical Counselling: To provide health advices, personalize preventive care, create a medical history, and generate health reports.
• Legal Obligations: To comply with regulatory requirements.
• Financial: To issue invoices, process payments, and handle any financial matters.
• Conflict Resolution: For addressing disputes with public authorities or other entities.
• Quality Assurance: To evaluate the quality of our services and interactions.

LEGAL GROUNDS FOR DATA PROCESSING:

Your data is processed under the following legal bases:

• Contractual Necessity: Data is processed for the performance of services you have requested, in accordance with [Article 6(1)(b)] of Regulation (EU) 679/2016.
• Medical Care: Data related to preventive and curative medical services is processed under [Article 9(2)(h)] of the same regulation.
• Legitimate Interest: In some cases, data is processed for the Company’s legitimate interest in providing healthcare services under [Article 6(1)(f)].

If you do not provide consent to process your personal data, we may not be able to provide certain services.

DATA RECIPIENTS:

We will not disclose your personal data to other companies or individuals unless necessary for service delivery or as required by law. Recipients may include:

• Public Authorities: As required by law.
• Legal and Professional Advisors: Under confidentiality agreements.
• Medical Service Providers: For facilitating consultations or health services.
• IT and Service Providers: Assisting with platform functionality.

DATA STORAGE DURATION:

• Medical Data: Stored for up to 100 years as required by law.
• Financial Data: Stored for 10 years, in compliance with financial regulations.
• Other Data: Stored as long as necessary for the intended purpose.

We archive user data after the termination of services, but it remains available for reactivation if needed.

YOUR RIGHTS REGARDING DATA PROCESSING:

You have the following rights concerning your personal data:

• Right to Information: Be informed about data processing activities.
• Right of Access: Access your data at any time.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Deletion: Request deletion of your data under certain conditions.
• Right to Restriction: Request limited data processing.
• Right to Portability: Transfer your data to another provider.
• Right to Object: Object to specific data processing activities.
• Right to Withdraw Consent: Withdraw your consent for data processing, where applicable.

SECURITY OF YOUR DATA:

We implement technical and organizational measures to ensure your data is processed securely. However, in the unlikely event of a security breach, we will take immediate steps to mitigate any risks and notify relevant authorities and affected individuals as required by law.

COMPLAINTS AND REQUESTS REGARDING DATA PROCESSING:

For any questions or requests concerning your personal data, please contact us at: info@reveliomedical.com.