Source: https://biimultrasound.com/privacy-policy/
Timestamp: 2020-01-25 12:27:35
Document Index: 22467198

Matched Legal Cases: ['Art. 6', 'Art. 9', 'Art. 6', 'Art. 15', 'Art. 15', 'Art. 16', 'Art. 17', 'Art. 6', 'Art. 9', 'Art. 21', 'Art. 21', 'Art. 18', 'Art. 21', 'Art. 21', 'Art. 6', 'Art 77']

Biimultrasound | Biim Ultrasound AS Privacy Policy
Biim Ultrasound AS Privacy Policy
This Privacy Policy describes how Biim Ultrasound AS (“Biim Ultrasound AS,” “we,” “our,” or “us”) process personal data. Our full contact details are set out in section 8 below. By accessing or using our website(s) (the “Site”), ultrasound probes (“Product”), mobile application(s) (“App” or “Application”), you agree to have read and understood Biim Ultrasound AS’ Privacy Policy. Collectively, the Site, and App are referred to herein as the “Services”.
IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, PLEASE DO NOT USE THE PRODUCT OR SERVICES. This Privacy Policy covers:
How we Use the Information we Collect and the legal basis for our processing;
How we collect, and store information depends on your relationship with us (e.g., whether you visit the Site only, or whether use the Product and Services). Several categories of information are collected from you, as described below.
We may collect information about you during your use of the Product, including your name, organization, medical specialty, username, password, email address, postal address, phone number, mobile phone number, payment information, device model and serial number, and other information you enter, provide us, or allow us to access when you do certain things (collectively, “User Information”), such as:
Connect with the Services or otherwise allow us to access certain information about you via a social networking service.
When you use the Product and our App, you can enter patient health information of patients you are examining (“Patient Information”). Securing and preserving the confidentiality of Patient Information you entrust to us is a top priority for Biim Ultrasound AS Patient Information is stored securely when it is in the App. We will not collect, use or disclose any Patient Information other than as permitted by you pursuant to terms specified in the separate Product terms and conditions you agreed to when acquiring the Product (e.g., purchase, rental, or trial terms), this Privacy Policy, as required by law, or in accordance with additional applicable written agreements (e.g., for U.S. users, a Business Associate Agreement (BAA) as specified in the Health Insurance Portability and Accountability Act (HIPAA) or for E.U. users, a similar agreement constituting a Data Protection Addendum) that govern our use and disclosure of Patient Information. In the event of any inconsistency between the terms of any applicable written agreement such as the BAA and those in this Privacy Policy, the terms of the written agreement will prevail.
When you use the Product and our App, examination information (e.g., ultrasound images, cineloops, measurements, findings, annotations, statistics, examinations, calculations, impressions, indications) will be generated (“Examination Information”). Examination Information is stored initially in the App and may be exported or securely uploaded to your internal system.
Product Usage Data. We collect certain analytics information about your use of the Product and App (such as models, types or settings of the Products used, workflows used, indications selected, log files, buttons pressed, boot logs, temperature information, usage statistics, or support requests and results). We collect and use most of this information solely in anonymous and aggregate form but maintain log files in identifiable form for a period of time for troubleshooting and other purposes. This information helps us improve our Product and Services, troubleshoot bugs, and analyze device errors.
We use “cookies” and similar technologies, such as web beacons, to help us improve your user experience, optimize our Services, increase security, analyze use and effectiveness of our Services, and serve and measure online marketing. Cookies are alphanumeric identifiers that are placed on your computing devices. Third-parties may also place cookies and similar technologies on the Services. You can control cookies through your browser settings and other tools. Most browsers tell you how to do so in their “help” section. By accessing and using the Services, you consent to the placement of cookies and beacons in your browser and HTML-based emails in accordance with this Privacy Policy.
To help us make emails more relevant to you, we (may) receive a confirmation when you open e-mail from Biim Ultrasound AS if your computer supports such capabilities. This is based you consenting to send us such confirmations through accepting this in your e-mail program.
When purchasing our Services we may send you marketing e-mails about our products and services. You always have the option to decline to receive such e-mails.
2. How we Use the Information we Collect and the legal basis for our processing.
If you have provided us your consent, send you marketing communications (e.g., via mail, e-mail, text message, telephone, push notifications, or other means to which you have consented) about Biim Ultrasound AS products, software updates, (e.g., in digest form), and third-party products, software, and services that we believe may be of interest to you. If you do not wish to receive direct marketing, you may choose to opt-out pursuant to the instructions in Section 7 below;
Legal basis for processing (for residents of the European Union):
If you are a resident of the European Union (EU), we collect and process information about you only where we have legal basis for doing so under applicable EU laws. The legal basis depend on the Services you use and how you use them. This means we collect and use your information only where:
We need it to provide you the Product and Services, including to operate the Services and provide customer support and personalized features. The legal basis is our agreement with you (Art. 6 (1) (b) GDPR). For health data being special categories of data as defined in the GDPR, we process such data on the basis of your prior consent, Art. 9(2)(a) GDPR.
It satisfies a legitimate interest (which is not overridden by your data protection interests), such as for research and development, to protect the safety and security of the Product and Services and to market and promote the Product and Services and to protect our legal rights and interests. The legal basis is our legitimate interest Art. 6 (1) (f) GDPR, and our legitimate interest is to improve and develop our Services;
If you have consented to our use of information about you for a specific purpose, you have the right to change your mind at any time, but this will not affect the legality of any processing that has already taken place. Where we are using your information because we or a third party (e.g. your employer or medical facility) have a legitimate interest to do so, you have the right to object to that use though, in some cases, this may mean no longer using the Product or Services.
Third-Party Service Providers: We may share the collected information with our service providers who use the collected information on our behalf to assist in business activities such as delivering certain features or services, order fulfillment, payment processing, marketing, and other similar services. For example, a company such as FedEx may ship parcels on our behalf and we may provide them with your User Information. These companies may have access to personal information needed to perform their functions, but they are only provided the limited amount of information required to perform their service. When engaging these parties, we require them to safeguard personal information using strict security and privacy protections, in accordance with the law. Where Third Party Service providers are our data processors, we ensure to enter into data processing agreements in accordance with GDPR.
Merger or Acquisition: As we continue to develop our business, we may sell, buy, merge or partner with other companies or businesses, or sell some or all of our assets. In such transactions, the collected information may be among the transferred assets. Our legal basis is our legitimate interest to conduct such corporate reorganizations and Our disclosure is limited to situations where we are permitted to do so under applicable European and national data protection laws and regulations.
Each operating system, iOS for Apple devices, Android for Android devices, and Windows for Microsoft devices provides its own instructions on how to prevent the delivery of tailored in-application marketing content. You may review the support materials and/or the privacy settings for the respective operating systems in order to opt-out of tailored in-application marketing. For any other devices and/or operating systems, please visit the privacy settings for the applicable device or contact the applicable platform operator.
You have the following rights:◦ Right of access to your Personal Data (Art. 15 GDPR): You have the right to ask us for confirmation on whether we are processing your Personal Data, and access to the Personal Data and related information on that processing (e.g., the purposes of the processing, or the categories of Personal Data involved).
Right to access (Art. 15 GDPR): You have the right to request a copy of the data that we hold about you.
Right to rectification (Art. 16 GDPR): You have the right to have your Personal Data corrected. You may email us to correct or change any collected information by using the contact information below in the “How to Contact Us” section.
Right to erasure (Art. 17 GDPR): You have the right to ask us to delete your Personal Data. This right may be exercised for example: (i) when your Personal Data is no longer necessary for the purposes for which it was collected or otherwise processed; (ii) when you withdraw consent on which processing is based according to Art. 6 (1) (a) or Art. 9 (2) (a) GDPR and where there is no other legal ground for processing; (iii) when you object to processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or when you object to the processing pursuant to Art. 21 (2) GDPR; or, (iv) when your Personal Data has been unlawfully processed.
Right to restriction of processing (Art. 18 GDPR): You have the right to request the limiting of our processing, including: when you contest the accuracy of your Personal Data; when the processing is unlawful and you oppose the erasure of your Personal Data and request the restriction of the use of your Personal Data instead; or when you have objected to processing pursuant to Art. 21 (1) GDPR pending the verification whether our legitimate grounds for our processing override your grounds.
Right to object (Art. 21 GDPR): You have the right to object to our processing of your Personal Data. This right is limited to processing based on Art. 6 (1) (e) or (f) GDPR, and includes profiling based on those provisions, and processing for direct marketing purposes.
Right to lodge a complaint with the supervisory authority (Art 77 GDPR/ 15.2 d).
The applicable supervisory authority for us is Datatilsynet:
If you are a EU citizen you may also lodge a complaint with the data protection authorities at where you have your habitual residence, place of work or place of the alleged infringement.
Our Products are intended for use by medical facilities. Where the Services are made available to you through an medical facility, that medical facility is the administrator of the Services and is responsible for the accounts and/or Services over which it has control. If this is the case, please direct your data privacy questions to your medical facilities’s administrator, as your use of the Services is subject to that medical facilities's policies. We are not responsible for the privacy or security practices of an administrator's medical facility, which may be different than this policy.
We are committed to protecting the online privacy of children. Our Product and Services are intended for individuals who are trained and certified to use the Product, and not geared towards children. In order to protect the privacy of children, children under 17 years of age are not permitted to provide any personal information to us and any users of our Product and Services are to ensure that any information of a minor (including any Patient Information and/or Examination Information) is only be provided to us with parental consent. Please email us at the contact information noted below if you believe we may have collected information from your child without proper consent and we will work to delete it.
If you have any questions, comments, or concerns regarding our Privacy Policy or practices, please send an email to support@biimultrasound.com to the attention of our Privacy Officer, and we will attempt to resolve them quickly.