At DigitalRX.io, we connect Health providers and Patients to improve Telehealth and remote patient monitoring. Our platform provides care coordination tools to enhance health management for hospitals, healthcare providers, employers, and health advocates. When it comes to your health, the security of your data is of great importance. Your data protection is a crucial part of our values. Here, you can learn about the personal data we collect, why we use it, and your data protection rights, so you can feel safe and informed. Your contact person If you have any questions about this data protection declaration or how data protection is handled at DigitalRx.io, our data protection team will be happy to help you. Please contact the team if you would like information about your data or if you would like your data to be deleted. You can reach our data protection team at support@DigitalRx.io your request will be forwarded immediately and processed by our data protection team. Zibew Ecommerce PTE LTD Bayshore Road, #31-02 Bayshore Park, Singapore - 469983 abubakr@zibew.com What is personal data? According to Art. 4 lit. 1 of the General Data Protection Regulation (GDPR), personal data is “Any information relating to an identified or identifiable natural person.” These are, for example, names, address data, telephone numbers, mobile numbers, bank details, or insurance numbers. A subgroup of personal data is a special category of personal data according to Art. 9 of the GDPR. These include e.g. B. Information about health, sex life, and sexual orientation. Health data that can be generated by an online clinic such as DigitalRx.IO also belongs to the special category of personal data. What data does DigitalRX.io process? At DigitalRX.io, we offer a range of health-related services that you can access by contacting us online, by phone, or by mail. Whenever you use our services or get in touch with us, we collect different types of data. When you sign up with DigitalRX.io, we ask for your name, your email address, or sometimes your phone number. Additionally, technical information about your device and how you use our services is automatically recorded. We also analyze this data to improve our services and tailor them to your needs. Informational use Even if you don't log in or register on our website, we still collect and process some information when you visit DigitalRX.io. This includes details like your computer's IP address, the date and time of your visit, the name and URL of the page you viewed, the browser you used, the amount of data transferred, and your session ID. What is the personal data used for? We process personal data in various areas to deliver efficient, personalized, and secure telehealth services, benefiting both patients and healthcare providers. At DigitalRx.IO, we want to be transparent about how we use your personal data and who else may have access to it. We work with specific service providers and use various analysis tools from different companies to improve our services. You have the right to object to data processing and prevent your data from being collected. In some cases, we may not have control over data processed by third-party providers. In such cases, you may need to take action yourself or contact the respective provider. We've gathered all the information and addresses you may need in the respective chapter section. User Registration When healthcare providers and their patients sign up or register for our telehealth platform, they provide personal information such as their name, email address, contact number, and date of birth. This data is used to create user accounts and to facilitate effective communication between healthcare providers and their patients. Legal basis: GDPR Article 6(1)(a) - Lawfulness of processing (consent) Telehealth Consultations During telehealth consultations, healthcare providers collect personal data from their patients, including their health history, symptoms, medical records, and other health-related information. This data is necessary for diagnosing conditions, providing medical advice, and offering appropriate treatment options. Legal Basis: GDPR Article 9(2)(h) - Processing of special categories of personal data for health care purposes Appointment Scheduling Personal data, such as the patient's name, contact information, and preferred appointment time, is used to schedule telehealth appointments efficiently and ensure a seamless experience for patients. Legal basis: GDPR Article 6(1)(b) - Lawfulness of processing (contract performance) Payment Processing For billing and payment purposes, personal data like credit card details or other payment information may be collected to process transactions securely and facilitate payments for healthcare services. Legal Basis: GDPR Article 6(1)(b) - Lawfulness of processing (contract performance) Health Records DigitalRX.io allows healthcare providers to maintain health records for their patients. These health records contain comprehensive personal and health-related information, enabling healthcare providers to access patient history, monitor progress, and ensure continuity of care. Legal Basis: GDPR Article 9(2)(h) - Processing of special categories of personal data for health care purposes Communication and Notifications Personal data, such as email addresses and phone numbers, may be used to send appointment reminders, follow-up messages, and other important notifications to patients and healthcare providers. Effective communication enhances the telehealth experience and improves patient engagement. Legal Basis: GDPR Article 6(1)(b) - Lawfulness of processing (contract performance) User Support Personal data collected during user interactions with the platform can assist in providing better customer support to healthcare providers and their patients. Prompt resolution of any issues or inquiries ensures a positive telehealth experience. Legal Basis: GDPR Article 6(1)(f) - Lawfulness of processing (legitimate interests) Analytics and Improvements Aggregated and anonymized personal data can be used for internal analysis and data-driven improvements to enhance the overall user experience for both healthcare providers and patients. Insights gained from analytics help optimize the telehealth platform's performance and usability. Legal basis: GDPR Article 6(1)(f) - Lawfulness of processing (legitimate interests) Compliance and Legal Obligations Personal data may be used to fulfill legal requirements, such as compliance with healthcare regulations, privacy laws, and reporting obligations. We ensure that our telehealth platform adheres to relevant data protection laws, such as HIPAA (Health Insurance Portability and Accountability Act) in the United States or GDPR (General Data Protection Regulation) in the European Union, to safeguard patients' sensitive information and maintain trust with users. Legal Basis: GDPR Article 6(1)(c) - Lawfulness of processing (legal obligation) Marketing and Communications With user consent, we may use personal data to provide relevant information, such as newsletters, product updates, or new service offerings, to healthcare providers and patients. Consent-based marketing efforts ensure that users receive content of interest and relevance to them. Legal Basis: GDPR Article 6(1)(a) - Lawfulness of processing (consent) Who will my data be passed on to? We value transparency and want our users to be aware of who we may pass on their personal data. Here is a list of recipients: Healthcare Providers Personal data, including health-related information, may be shared with healthcare professionals to facilitate telehealth consultations and provide medical care. Selected Service Providers We work with specific service providers to enhance our services. Relevant data may be shared with them to support their roles in the platform. Third-Party Partners If you choose to connect with third-party partners through our platform, certain data may be shared to facilitate interactions and services. Internal Analysis Aggregated and anonymized data may be used for internal analysis and improvements, ensuring a better user experience for both healthcare providers and patients. Compliance and Legal Obligations Personal data may be shared to fulfill legal requirements, such as compliance with healthcare regulations, privacy laws, and reporting obligations. We take data privacy seriously and handle personal data responsibly in accordance with relevant data protection laws. How is my data protected? At DigitalRX.io, your safety and security are of utmost importance to us. That's why we have implemented a range of measures to ensure both legal compliance and the highest standards of data protection. Technical and organizational measures We prioritize your online safety. Our company employs comprehensive technical and organizational security measures (TOMs) to safeguard the data we manage from any accidental or intentional manipulation, loss, destruction, or unauthorized access. Our team members undergo regular training to stay vigilant about the latest IT security practices and ensure your data remains protected. Cookies We use cookies on our website to enhance your browsing experience. Cookies are small text files stored on your device by your browser. They enable smooth navigation, improve website effectiveness, and ensure security. Some cookies are temporary (session cookies), while others remain longer (persistent cookies) to remember your settings and preferences. These cookies also help us analyze website usage to provide better services. You have control over cookies through your browser settings. If you have any questions about cookies, feel free to contact us. (Legal basis: GDPR Article 6(1)(f) - Legitimate interests) What data protection rights do I have? You have the following statutory data protection rights: Right to information (Article 15 GDPR) You have the right to know what data is collected, how it is used, how long it is stored, and whether it is shared with third parties. Right to erasure (Article 17 GDPR) You can request that we delete your data in certain circumstances, e.g. if the data is no longer required, the data has been processed unlawfully or the data no longer correspond to the lawful reason for which they were collected. This also applies if you revoke your consent. Right to rectification (Article 16 GDPR) If you find that the information we hold about you is incorrect or incomplete, you can request an update of the data. As with the right to access, we will process the request within one month. RRight to restriction of processing (Article 18 GDPR)) You can request that we restrict the use of your personal information. This is possible if you contest the accuracy of your personal data or if DigitalRx.IO is currently unable to delete the data to establish, exercise or defend a legal claim. Right to data portability (Article 22 GDPR) You have the right to receive and reuse your personal data for your own purposes or to request transmission to another service provider. This right only applies to personal data that you, as the data controller, have provided to us under a contract or consent. Right of appeal to a data protection supervisory authority (Article 77 GDPR) You have the right to complain to a data protection supervisory authority about alleged data protection violations. The competent authority of the DigitalRx.IO can be found in the "your contact person" section. Right to revoke consent (Article 7 paragraph 3 GDPR) You have the right to object to certain data processing measures (Article 21 GDPR): You can object to the processing of your personal data that is collected on the basis of legitimate interests or the performance of a task in the interest of exercising public authority. If you want to assert your rights, you can get in touch with our contact person.