Processing of personal data
HealthVisionAI Sp. z o. o.
NIP: 898-230-95-64
with headquarters at ul. Śrutowa 4/5, 50-256 Wrocław
Personal Data Administrator and Data Protection Officer
The personal data administrator is HealthVisionAI Sp. z o.o., based in Wrocław (50-256), at Śrutowa 4/5, email: info@healthvision.com. In this document, we will refer to the company as the "Administrator" or "We."
The Administrator has appointed a Data Protection Officer (DPO), who can be contacted regarding any matters related to the processing and protection of personal data by sending an email to: info@healthvision.com.
Source of Data and Categories of Data
Your personal data, including: first name, last name, email address, phone number, company name, and position, have been provided to us by the User (e.g., your contractor or employer), who sent you the document to sign, initial, observe, or download.
Purposes and Legal Bases for Data Processing
We process your personal data for the purpose of providing trust services, which include:
a. Electronic identification of individuals to whom documents are directed for signing, initialing, or downloading,
b. Enabling the submission of an electronic signature or initial on the document, as well as the refusal to sign (if applicable),
c. Verifying the correctness of submitted initials and electronic signatures (if applicable),
d. Ensuring the integrity of the document's content and the authenticity of its origin.
The legal basis for processing your data is our legitimate interest (Article 6(1)(f) GDPR), related to the provision of trust services in accordance with the HealthVisionAI Platform Terms and Conditions and the User's instruction to send the document for signing, initialing, or downloading.
Your personal data may also be processed for the purpose of asserting or defending claims, which constitutes our legitimate interest based on Article 6(1)(f) GDPR.
Recipients of Data
Recipients of your personal data may include entities providing IT services (e.g., software maintenance, server hosting), legal, advisory services, under appropriate contracts, and entities authorized to receive them under applicable laws.
Data Retention Period
Your personal data will be stored for the period necessary to fulfill the processing purposes, but no shorter than the limitation period for claims.
Rights of Data Subjects
In accordance with the GDPR, you have the right to:
a) Access your personal data and obtain a copy (Article 15 GDPR),
b) Rectify your personal data (Article 16 GDPR),
c) Erase your data (Article 17 GDPR),
d) Restrict the processing of your data (Article 18 GDPR),
e) Object to the processing of personal data based on legitimate interest (Article 21 GDPR).
To exercise your rights, contact the Administrator or the Data Protection Officer by sending an email to the addresses provided in points 1 and 2 or by postal mail to the Administrator’s registered office address.
You also have the right to file a complaint with the President of the Personal Data Protection Office if you believe that the processing of your personal data violates the provisions of the GDPR.
Information on Lack of Profiling and Data Transfer Outside the EEA
Your personal data will not be subject to automated decision-making, including profiling, nor will it be transferred outside the European Economic Area.