PRODUCTS SERVICES APPLICATIONS ABOUT US CONTACT US ADVANCED BRAIN MONITORING Privacy Policy Your privacy is important to us. This privacy policy explains how we collect and use the information that you share with us. Company Privacy Policy EU-US, Swiss-US Privacy Shield Policy Company Privacy Policy Advanced Brain Monitoring, Inc. (ABM) is a neuro-diagnostics device company internationally recognized for its innovative technologies. Our products are used by individuals, clinicians, researchers, and in clinical trials to interpret brain and physiological function as they relate to chronic diseases and early stage neurodegeneration, as well as to improve sleep quality and enhance performance. ABM is an ISO 13485 and FDA device manufacturer. We have a global distribution network established in the EU, Asia, and Australia. ABM is based in Carlsbad, CA with a European office in Belgrade, Serbia. PRIVACY COMMITMENT STATEMENT ABM is committed to protecting your privacy and developing technology that gives you the most powerful and safe online experience. Consistent with this commitment, ABM maintains compliance with several regulatory programs. We are dedicated to ensuring compliance with all of our products and services, as well as the underlying processing of personal data on behalf of our customers. Health Insurance Portability and Availability Act of 1996 (HIPAA) Health Information Technology for Economic and Clinical Health Act of 2009 (HITECH) The European Union (EU) General Data Protection Regulation (GDPR) EU-US and Swiss-US Privacy Shield Frameworks (Privacy Shield) ABM is HIPAA compliant. HIPAA establishes standards for the security of electronic protected health information. We perform periodic technical and non-technical evaluations that establish the extent to which our security policies and procedures meet the HIPAA security requirements. The U.S. Department of Health and Human Services (HSS) does not currently offer HIPAA certification. Please visit the HHS website to learn more about HIPAA. ABM is HITECH compliant. HITECH promotes the adoption and meaningful use of health information technology, as well as privacy and security concerns associated with the electronic transmission of health information. HHS does not currently offer HITECH certification. Please visit the HSS website to learn more about HITECH. ABM maintains Privacy Shield certifications for the EU-US and Swiss-US Frameworks as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the EU and Switzerland to the U.S., respectively. Please visit the Privacy Shield Framework website to view our certification and learn more about Privacy Shield. Compliance with GDPR, which is effective as of May 25, 2018, is an active process and will continue up to and after the enforcement date. The GDPR provides a set of standardized data protection laws across all EU member countries, and is applicable to any organization collecting information from an individual residing in the EU regardless of where the organization is located. The European Commission does not currently offer GDPR certification. Please visit the European Commission website to learn more about GDPR. INDIVIDUAL RIGHTS Individuals have personal data rights to the following: Be informed if personal data is being used Get copies of personal data Get personal data corrected Get personal data deleted Limit how organizations use personal data Portability of personal data Object to the use of personal data Decisions being made about an individual without human involvement Access information from a public body Raise a concern PERSONAL INFORMATION VOLUNTARILY SUBMITTED This statement of privacy applies to the ABM website and governs data collection and usage. If you choose to provide ABM with personal information by completing a “Contact Us” form, we may use that information to respond to your message and/or help us get you the information or services you requested. Submitting personal information (name, address, telephone number, email address, etc.) is voluntary and is not required to access information on our website. All information included on the Contact Form is sent to Zoho, AMB’s third party customer relationship management (CRM) provider. Zoho initiates an email to ABM and an ABM representative reaches out to the individual requesting information. Once patient inquiries/requests have been satisfied, personal data is deleted from Zoho. ABM considers medical and research providers business to business (B2B) contacts. B2B contact information is saved in Zoho for further business development. For more information, please review Zoho’s Privacy Policy. Occasionally, ABM will reach out to B2B contacts through a targeted marketing campaign to inform contacts regarding items such as new products or services, scientific findings, or press releases for FDA clearance. WEB TOOLS Google Adwords ABM occasionally uses Google AdWords to provide online advertisement delivery and tracking. This data is used to deliver customized content and advertising to customers whose behavior indicates that they are interest in a particular subject area. To implement these tools, ABM and third-party vendors, including Google, use first-party cookies and third- party cookies together to inform, optimize, and serve ads based on past visits to ABM’s website. For more information, please review Google’s Privacy Policy. Google Analytics ABM may employ tools provided by Google Analytics to keep track of the website and pages our customers visit in order to determine what ABM services are the most popular. To implement these tools, ABM and third-party vendors, including Google, use first-party cookies and third-party cookies together to inform, optimize, and serve ads based on past visits to ABM’s website. For more information, please review Google’s Privacy Policy. COOKIES ABM’s website uses cookies. Cookies are small text files that can be used by websites to personalize a user’s online experience and make the experience more efficient. Cookies are uniquely assigned to you and can only be read by a web server in the domain that issued the cookie to you. Cookies cannot be used to run programs or deliver viruses to your computer. GDPR regulations state that we can store cookies on a user’s device if they are strictly necessary for the operation of our site. However, for all other types of cookies we need your permission. ABM employs Cookiebot service to help facilitate obtaining consent for the use of cookies. Cookiebot itself automatically sets up cookies in the user’s web browser when the user visits our website: The first-party cookie, “CookieConsent” which stores the user’s consent, expire automatically for renewal after 12 months from the date of the user’s consent. A user may withdraw a consent at any time by deleting the “CookieConsent” cookie. A user consent is logged and documented by registration of the user’s anonymized IP number, browser user agent, website URL, date and time of consent and a unique, encrypted key that is stored in a data center with Cybot’s cloud vendor, Microsoft Ireland Operations Ltd in Dublin, Ireland. THIRD PARTY LINKS AND FEATURES The ABM website may contain links to third-party websites (such as social media sites) and may contain third-party plug-ins (such as the YouTube videos) and functionalities. If you choose to use these sites or features, you may disclose your information not just to those third parties, but also to their users and the public more generally depending on how their services function. ABM is not responsible for the content or practices of those websites or services. The collection, use, and disclosure of your information will be subject to the privacy policies of the third party websites or services, and not ABM’s privacy policy. We urge you to read the privacy and security policies of these third parties. SECURITY ABM is committed to ensuring that personal information is secure. We have physical, electronic, and procedural safeguards that comply with regulations to protect personal information. ABM uses industry-standard encryption technology to protect privacy. We limit access of personal information to employees who we believe reasonably need to come into contact with such information to provide products or services in order to do their jobs. For site security purposes and to ensure that this service remains available to all users, we use software programs to monitor traffic to identify unauthorized attempts to upload or change information or otherwise cause damage. In the event of law enforcement investigations and as part of any required legal process, information from these sources may be used to help identify an individual. DISCLOSURE ABM does not sell, distribute, or lease personal information to third parties, ever. ABM will disclose your personal information, without notice, if required to do so by law or in the good faith belief that such action is necessary to: (a) conform to the edicts of the law or comply with legal process served on ABM or the site; (b) protect and define the rights or property of ABM; and (c) act under exigent circumstances to protect the personal safety of ABM website users, or the public. RETENTION AND STORAGE ABM retains personal information for no longer than necessary for the purpose for which it is processed. The length of time for which we retain information depends on the purposes for which we collected and use it. All information is stored on secured servers owned and operated by ABM. We use third party vendors to support our services, which includes an IT Security Consultant. We store backups off site with third party storage provider to ensure data security in case of an emergency or catastrophe. All IT services are governed by a written contract. ASSIGNMENT If ABM is acquired by or merges with another entity, our assets, including all proprietary intellectual property and information embedded in our services and any personal information stored in our databases, will likely be transferred to the new entity. By utilizing our services you acknowledge and agree that ABM may assign assets and any information stored therein in the event of such a transaction. CONTACT US In addition to understanding what information we collect, how we use it, with whom we share it, and how long we retain it, as detailed above, individuals have other rights as identified in the “Individual Rights” section. Should you desire to exercise one of these rights, or have any questions regarding our privacy policy, please use the Privacy Contact page to submit a request. Please note: ABM does not have the right to copy, correct, delete, limit, or transmit any personal data without first obtaining identity verification. Should you submit a data request via the Privacy Contact page, an ABM representative will contact you to begin the process of identity verification before any action can be taken. ‍ Privacy Notice F-ADMN-007 Rev 1 Get in touch CONTACT US Products Newsletter Signup Sleep Profiler Sleep Profiler PSG2 B-Alert X-Series EEG Stat X-Series Wireless EEG Night Shift Sleep Positioner Apnea Guard PoSAS Resources Email Applications Publications Privacy Policy Terms of Use Career Opportunities 2237 Faraday Ave, Suite 100 Carlsbad, CA, 92008 Phone: (866) 677-2737 Fax: (760) 476-362 © 2020 Advanced Brain Monitoring, Inc. All Rights Reserved