HealthVisionAI

I. Introduction

The protection of personal data and information security have always been prioritized in the operations of HealthVisionAI Sp. z o.o., based in Wrocław. As a responsible organization, aware that information has a specific value and constitutes a resource requiring proper protection, we are committed to informing you appropriately about matters related to the processing of personal data, especially in light of the new regulations on data protection, including Regulation (EU) 2016/679 of the European Parliament and Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("GDPR"). Therefore, in this document, we present key information about the legal bases for personal data processing, the ways in which data is collected and used, and the rights of data subjects in this regard.

 

II. When does this Privacy Policy apply?

This privacy policy applies to all cases where HealthVisionAI Sp. z o.o. is the data controller and processes personal data. This includes both situations where we process personal data collected directly from the data subject and cases where personal data has been obtained from other sources. HealthVisionAI fulfills its informational obligations in both of the above-mentioned cases, as specified in Articles 13 and 14 of the GDPR, in accordance with these regulations. Below, we provide the full details of the company: HealthVisionAI Sp. z o.o., with its registered office in Wrocław (50-256) at ul. Śrutowa 4/5 (REGON: 8982309564, NIP: 898 230 95 64, KRS: 0001114309).

 

III. Contact Point

The person responsible for responding to your inquiries regarding the processing of personal data is the Data Protection Officer. You can contact them via email at: info@healthvisionai.com.

 

IV. Scope, Methods, Purposes, Legal Bases, and Data Processing Periods

In order to maintain transparency regarding the methods and legal bases for processing personal data, the purposes for which we process this data, as well as the periods of processing, we present below a summary of operations under which we process personal data. At the same time, we want to ensure that whenever we process personal data based on the legitimate interest of the data controller, we aim to analyze and balance our interest with the potential impact on the data subject (both positive and negative) and the rights of that individual. We do not process personal data if we find that the processing would be overridden by the rights and freedoms of the data subject.

the conclusion that the impact on the data subject would outweigh our interests, unless we have another legal basis for processing, such as appropriate consent or where required or permitted by law.

IV.1. Processing of Personal Data of Individuals Visiting Websites Operated by HealthVisionAI or Using Electronic Services

General Information
Individuals visiting our websites or using services provided electronically by us have control over the personal data they provide. We ensure that the collection and use of information about users is limited to the minimum necessary to provide the services at the expected level.

Online Inquiries and Forms
Our website offers various ways for you to contact us. We assure you that the data provided is processed only within the scope and for the purpose for which it was given, and with your explicit consent. The legal basis for processing in this case is your consent given by sending an inquiry via email (Article 6(1)(a) GDPR).

Newsletter
The company may process your data because you have consented to the processing of personal data for the purpose of subscribing to our newsletter (Article 6(1)(a) GDPR). Your personal data will be processed for as long as you do not withdraw your consent. You can withdraw your consent by contacting us at: info@healthvisionai.com.

IV.2. Processing of Personal Data of Individuals Contacting HealthVisionAI
In order to obtain information about our offerings or share feedback regarding our services, as well as to initiate the conclusion of a contract, we collect the following personal data: name, email address, and phone number. In particular, individuals may send us an email through our website. Such messages may include additional information that the user wishes to include in the message.

We kindly ask that you refrain from submitting information through our websites that contains special categories of personal data as referred to in Article 9(1) of the GDPR (such as information on racial or ethnic origin, political opinions, religious or philosophical beliefs, membership in trade unions, data concerning health, genetic or biometric data, information about sexual life, sexual orientation, or criminal records).
If such data is provided, we will consider it as explicit consent to process it in accordance with the rules set forth in this document or according to the information provided at the place of disclosure.

System Logs
During each visit to our website, we automatically collect certain technical data from the user's system. The collected information includes:
• the type and version of the browser,
• the operating system,
• the IP address (in anonymized form),
• the date and time of the visit,
• the pages from which the user came to our website (the so-called referrer),
• pages visited within our website.
This data is stored in system logs solely for the purpose of ensuring the functionality of the service, analyzing errors, statistics, and ensuring the security of IT systems. The collected information does not allow for the identification of users, as IP addresses are masked.

Cookies
We use cookies on our website to improve the functionality of the service and tailor it to the needs of users. Cookies are small files stored on the user's device that store information about visits and activities on the service. We distinguish three main types of cookies:
• Session cookies – stored temporarily until the browser is closed,
• Persistent cookies – stored for a specified period or until deleted by the user,
• Third-party cookies – used by third parties, e.g., to adjust advertising content.
Cookies can be disabled or blocked in the browser settings. Detailed information on configuration can be found in the instructions of software manufacturers, such as Firefox, Chrome, Safari, Opera, or Edge.

Google Analytics
We use Google Analytics, which helps analyze traffic on our website. The data is collected in an anonymized form, which means that the user's IP address is truncated before being sent to Google's servers. This information is used to generate reports and improve the functionality of the website.

Processing of Personal Data
We process personal data of users for purposes such as fulfilling contracts, meeting legal obligations, customer satisfaction analysis, or direct marketing. The data is stored in accordance with applicable regulations, and the processing period depends on the legal basis and purpose of processing.

In connection with the use of IP anonymization, your IP address is shortened before being sent to Google's server in the USA – this process takes place within the countries belonging to the European Union or other countries that are parties to the agreement on the European Economic Area. The exception is situations beyond our control, when the full IP address is transferred to Google's server in the USA and shortened there. Google, acting on our behalf, uses this information to analyze how our website is used, generate reports on user activity, and provide additional services related to the functioning of the site and the internet. The IP address transmitted by your browser within Google Analytics is not linked to any other Google data.

User Rights
Each user has the right to:
• access their data,
• rectify, delete, or restrict the processing of their data,
• withdraw consent,
• object to the processing of their data,
• transfer their data,
• lodge a complaint with the President of the Personal Data Protection Office.
We encourage you to contact us if you have any questions or to exercise your rights related to data processing.

Changes to the Privacy Policy
This document may be updated in connection with the introduction of new legal regulations, technological changes, or modifications to our data processing processes. All changes will be published on this page.

IV.3. Processing of Personal Data of Customers and Potential Customers
HealthVisionAI Sp. z o.o. processes personal data for the following reasons:

1. Performance of a Contract or Actions Preceding its Conclusion
   Data is processed for the purpose of fulfilling the contract with you or taking steps to enter into the contract in response to your interest in our offer. This also includes obtaining feedback on the quality of our services and products, as well as conducting customer satisfaction surveys, which we carry out by contacting you after providing a service or delivering a product (Art. 6(1)(b) GDPR).

2. Compliance with Legal Obligations
   Data processing is necessary to fulfill legal obligations imposed on the controller (Art. 6(1)(c) GDPR).

3. Legitimate Interests of the Data Controller
   Data is processed for the purpose of legitimate interests pursued by the controller (Art. 6(1)(f) GDPR). These include, but are not limited to:

• the pursuit of claims (by either party),

• conducting customer satisfaction analysis and research,

• evaluating the quality of our products,

• direct marketing.

1. Consent for Data Processing
   Data is processed upon your consent (Art. 6(1)(a) GDPR).
   Additionally, in some cases, legal regulations may require us to process data for tax and accounting purposes.

Retention Period for Personal Data
The duration of data processing depends on the purpose for which the data is processed:
a) Data processed for the purpose of entering into a contract
If the contract is not concluded, data will be stored for the duration of negotiations and until the end of the calendar year following the last contact regarding the matter.
b) Data related to a concluded contract
Data will be stored until it is possible to pursue any claims.
c) Data processed based on consent
In the case of data processed based on consent, data will be stored until the consent is withdrawn.
d) Data processed based on the legitimate interests of the data controller
Data will be processed until an objection is raised, taking into account the supremacy of the interests, rights, and freedoms of the data subjects and the interests of the Data Controller.

​

​

V. Data Recipients
Your personal data is shared solely in accordance with applicable legal regulations or to fulfill the intended purposes for which the data was entrusted to us. We emphasize that we only cooperate with trusted partners who are well-known in the local market and guarantee the security of the entrusted data. In the agreements related to the processing of personal data, we define the required protective measures to ensure the confidentiality, integrity, and availability of the transferred information.
Personal data may be shared with our business partners who provide services on our behalf, for example, for:
• providing technical support,
• evaluating website usability for marketing purposes,
• providing other services related to the operation of the website.
Additionally, data may be shared with entities providing services such as:
• debt collection,
• tax,
• legal,
• accounting services.
Your personal data is only transferred when necessary for the provision of services you have ordered or authorized, as well as to protect your and our rights, property, or safety. We may also disclose data if required by applicable law, court rulings, administrative regulations, or if disclosure is necessary to support legal or criminal proceedings.
Access to personal data is also restricted to authorized employees of our company.

VI. Rights of Individuals Regarding the Processing of Personal Data
Individuals whose personal data is processed by HealthVisionAI Sp. z o.o. have certain rights arising from applicable laws. Our company, as the data controller, is committed to fulfilling these rights. Any questions, requests, or demands related to your rights can be directed to the person indicated in section III. We reserve the right to fulfill the request after positively verifying the identity of the person making the request.

Your rights include:

1. Right to Withdraw Consent – If data processing is based on your consent, you may withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing that occurred before its withdrawal.

2. Right to Access Personal Data – You have the right to confirm whether we process your data and, if so, to obtain access to it.

3. Right to Rectify Data – If your data is inaccurate or incomplete, you can request its correction or supplementation.

4. Right to Delete Data – In certain situations, you have the right to request the deletion of your data, e.g., when processing is no longer necessary for the purposes for which the data was collected.

5. Right to Restrict Processing – You can request the restriction of processing your data, e.g., in case of disputing its accuracy or objecting to its processing.

6. Right to Object – You may object to the processing of your data at any time, particularly for direct marketing purposes. In the case of processing based on legitimate interest the objection can be raised due to your specific situation. After the objection is submitted, we will cease processing the data unless we can demonstrate the existence of overriding legitimate grounds or the necessity of processing for the establishment or defense of legal claims

7. Right to Data Portability – You have the right to receive your personal data in a structured, commonly used, machine-readable format. You may also request that this data be transmitted to another data controller, provided it is technically feasible. This right applies solely to data processed based on consent or a contract.

8. Right to Lodge a Complaint – If you believe we are processing your data in violation of applicable laws, you have the right to lodge a complaint with the supervisory authority, which in Poland is the President of the Personal Data Protection Office (UODO).

We encourage you to contact us to address any concerns or to exercise your rights regarding personal data protection.

VII. Privacy Policy Update
Our Privacy Policy is subject to regular reviews and may be updated as necessary. This includes, in particular, situations arising from:
• the introduction of new legal regulations,
• the publication of new guidelines by data protection supervisory authorities,
• the adoption of new standards and best practices in data protection.

Additionally, we reserve the right to update the Privacy Policy due to:
• technological changes affecting the way personal data is processed,
• modifications to the purposes, legal bases, or methods of processing personal data.

Any changes to the Privacy Policy will be implemented in accordance with applicable regulations and communicated accordingly.