vitalera Privacy Policy

LAST UPDATE: 03/05/2024

First of all, and as part of our privacy policy we want to inform you that data protection and information security is very important to vitalera. That is why in the following lines we want to share with you what we do with your personal data. It is important that you read it carefully.

The guarantee of confidentiality of the personal data of the users of our platform is crucial for us. Thus, the data collected by vitalera are treated confidentially and in accordance with current legal provisions: EU General Data Protection Regulation 2016/679 /RGPD); Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), as well as with the rest of the applicable legislation on privacy and data protection and under the indications and mandate granted in the signed commission contracts with those responsible for the treatment, be it a Hospital, a Clinic or other type of Clients.

vitalera reserves the right to modify the Privacy Policy unilaterally, as well as to change the security and data protection measures whenever technical development requires it, so we recommend that you consult the Privacy Policy regularly to so you can always be up to date on your terms.

This Privacy Policy applies to all users of the vitalera platform, regardless of their territorial location, that is, it applies to all users from the moment they use our web platform or mobile application, regardless of where they are located.

The use of the services provided by vitalera is conditioned not only to the reading and acceptance of this Privacy Policy but also, where applicable, to the express consent given by the user at the beginning of the provision of the service, which must be obtained by the person responsible for the treatment.

Responsible. Who is responsible for the processing of your data?

The person responsible for the treatment is FOLLOWHEALTH, SL with registered office at calle Arístides Maillol, 17 9-4, (08028) Barcelona, Spain with NIF B-67197384. Whose contact details are as follows: dpo@vitalera.io.

Likewise, in compliance with its obligations, vitalera has appointed INÉS COSTA RODRÍGUEZ as Data Protection Delegate before the Spanish Data Protection Agency. To contact DPD you can contact: dpo@vitalera.io

FOLLOWHEALTH, SL has developed a digital platform: vitalera capable of remotely monitoring a patient and their vital parameters. Through a mobile application and different interconnected devices, we can carry out intelligent monitoring in a fully automated and remote way. All your information is received in real time by healthcare professionals on their web platform.

vitalera is, therefore, a platform that manages the capture and processing of your health data so that medical professionals can check the evolution of your health status. It is very important to note that this tool does not offer medical advice. It is for informational purposes only for healthcare professionals. Do not use it as a substitute for professional medical advice, diagnosis or treatment.

Personal information. What information do we collect?

Privacy Policy for Patients	Privacy Policy for HCP
vitalera collects all the necessary data to manage your login to our application. In this regard, vitalera obtains through the Application identifying data such as personal names, passwords, or other access data to the App.
In a second layer based on an incremental processing of their data, in relation to the data we obtain through the Application related to the user's health status and those communicated by them through responses to questionnaires, only medical teams and researchers with the right to access the data source (medical history) and responsible for processing, will be able to relate the data collected with the patient's medical history. The identity of the users is not available to anyone else under any circumstances except in the case of a legal requirement. For the platform to function correctly, it is necessary for the user to connect certain devices via Bluetooth while taking measurements (they can disconnect after the values have been recorded). The Bluetooth connection needs to detect the location to identify the device it should pair with and thus operate efficiently, only for the purpose of pairing the smartphone with the devices via Bluetooth. That is the reason why, although we do not collect data about the location, permission to use it is still required during measurements. Only in the event that you expressly agree to provide your contact details, these will be requested by vitalera to provide you with technical support; the data will only be used to provide you with that service.	-

vitalera collects all the necessary data to manage your login to our application. In this regard, vitalera obtains through the Application identifying data such as personal names, passwords, or other access data to the App.

In a second layer based on an incremental processing of their data, in relation to the data we obtain through the Application related to the user's health status and those communicated by them through responses to questionnaires, only medical teams and researchers with the right to access the data source (medical history) and responsible for processing, will be able to relate the data collected with the patient's medical history. The identity of the users is not available to anyone else under any circumstances except in the case of a legal requirement.

For the platform to function correctly, it is necessary for the user to connect certain devices via Bluetooth while taking measurements (they can disconnect after the values have been recorded). The Bluetooth connection needs to detect the location to identify the device it should pair with and thus operate efficiently, only for the purpose of pairing the smartphone with the devices via Bluetooth.

That is the reason why, although we do not collect data about the location, permission to use it is still required during measurements.

Only in the event that you expressly agree to provide your contact details, these will be requested by vitalera to provide you with technical support; the data will only be used to provide you with that service.

Purpose. For what purpose will we process your personal data?

Privacy Policy for Patients	Privacy Policy for HCP
vitalera collects all necessary data in order to manage your subscription to the application and to be able to provide you with our services.
In a second layer based on an incremental processing of your data, in relation to the data that we obtain through the Application related to the user's health status, vitalera processes and analyzes the data with the sole and main purpose of providing it to health professionals in a simple and understandable way and with the corresponding alerts to be able to study the evolution of the user's health conditions so that they can act accordingly according to their professional criteria in case any complication appears.	-

vitalera collects all necessary data in order to manage your subscription to the application and to be able to provide you with our services.

In a second layer based on an incremental processing of your data, in relation to the data that we obtain through the Application related to the user's health status, vitalera processes and analyzes the data with the sole and main purpose of providing it to health professionals in a simple and understandable way and with the corresponding alerts to be able to study the evolution of the user's health conditions so that they can act accordingly according to their professional criteria in case any complication appears.

‍

Legitimation. What legitimizes us to process your data?

The legitimate basis for the processing of your personal data lies in the provision of the requested service and, therefore, in the execution of a contract in which the controller and interested party are part.

In your case, for the eventual transfer of your data to public organizations, the legitimacy lies in compliance with legal obligations that may be applicable.

Data retention period. How long will we keep your data?

Personal data may be kept for different periods of time depending on its legal nature, what is established in the commission contracts, the duration of the contractual relationship or the requirements of the clinical study.

In general, personal data is retained for the duration of the project/study and as long as the purpose for which it was captured is maintained, and as determined by the data controller, it may also be retained encrypted and securely archived for the period legally permitted. It is authorized by the AEPD (“Spanish Data Protection Agency”).

Recipients. To which recipients will your data be communicated?

Your data will not be transferred to third parties, except to public organizations and authorities (administrative or judicial), as long as they are required in accordance with legal and regulatory provisions.

As a result of the indications and mandate granted in the commission contracts signed with those responsible for the treatment, be it a Hospital, a Clinic or other type of Clients, your data could be transferred to the latter.

Rights. What are your rights when you provide us with your data?

You have the right to obtain confirmation as to whether or not vitalera is processing personal data that concerns you.

Likewise, you have the right to access your personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, you may request the limitation of the processing of your data, in which case we will only retain it for the exercise or defense of claims.

For reasons related to your particular situation, you may object to the processing of your data.

vitalera will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.

Likewise, you can exercise the right to data portability, as well as withdraw the consents provided at any time, without affecting the legality of the processing based on the consent prior to its withdrawal.

If you wish to exercise any of your rights, or contact the person responsible for the treatment, you can send a written communication to our offices at Calle de Sant Antoni Maria Claret, 167, Recinte Modernista Sant Pau, Pavelló Sant Manel, (08025) Barcelona, Spain or through email to: dpo@vitalera.io.

For the purposes of verifying your identity, we may request a copy of the official document that identifies you (DNI or accreditation document), to be able to exercise any of your rights. If you wish, you can go to the Spanish Data Protection Agency at www.aepd.es for any claim arising from the processing of your personal data.

Security

Our workers and external service providers are subject to confidentiality obligations, as well as to comply with legal provisions on data protection.

vitalera takes all necessary technical and organizational measures to ensure an adequate level of protection for the data we process, especially with regard to the risks of accidental or unlawful destruction, manipulation, loss, alteration, disclosure or unauthorized access.

Our security measures are constantly improved and kept up to date with technological advances, and our processes also comply with the requirements of the ISO 27001 Standard.