Privacy Policy
Aimedis is committed to protecting your personal data in accordance with GDPR and applicable privacy laws worldwide.
Table of Contents
- 01Controller
- 02Scope of this Privacy Policy
- 03Personal Data We Collect
- 04How We Collect Personal Data
- 05Purposes of Processing
- 06Legal Bases for Processing
- 07Cookies and Similar Technologies
- 08Hosting and Technical Infrastructure
- 09Contact Requests
- 10Accounts and Registration
- 11Newsletter and Marketing Communications
- 12Healthcare and Consultation Services
- 13Payments
- 14Forms, Upload Tools, and File Submissions
- 15Customer Support and Communication Tools
- 16Analytics and Advertising
- 17Social Media and Third-Party Content
- 18Online Meetings and Communications
- 19Data Sharing and Recipients
- 20International Data Transfers
- 21Retention
- 22Data Security
- 23Your Privacy Rights
- 24Children's Privacy
- 25Automated Decision-Making
- 26U.S. State Privacy Rights
- 27Changes to this Privacy Policy
- 28Contact
01Controller
The controller responsible for data processing described in this Privacy Policy is:
02Scope of this Privacy Policy
This Privacy Policy applies to personal data collected through:
- our websites and related domains
- contact requests and customer support communications
- account registration and use of our services
- newsletters and marketing communications
- online forms, uploads, and customer interactions
- online meetings, consultations, and related communications
03Personal Data We Collect
Depending on how you interact with us, we may collect the following categories of personal data:
a. Identity and contact data
- first and last name
- title, role, or organization
- postal address
- email address
b. Account and profile data
- login details
- account preferences
- communication history
- customer number or account identifier
c. Usage and device data
- IP address
- browser type and version
- operating system
- language settings
- date and time of access
- pages visited
- referring website
- device identifiers
- log files
d. Content you provide
- messages submitted through forms
- emails and support requests
- uploaded files
- survey or form responses
- chat communications
e. Payment and transaction data
- billing address
- transaction amount
- payment status
- limited payment-related information required for payment processing
f. Health-related or special category data
Where you use healthcare or consultation features, we may process health-related information you submit, such as:
- symptoms and medical descriptions
- photographs or image uploads
- date of birth
- sex or gender information
- insurance information where relevant
- treatment-related communications
We process this data only where permitted by law and, where required, based on your explicit consent or another valid legal basis.
04How We Collect Personal Data
We collect personal data:
- directly from you, when you contact us, register, make a payment, subscribe, upload content, or use our services
- automatically, through cookies, server logs, analytics tools, and similar technologies
- from service providers and partners involved in delivering our services
- from healthcare professionals engaged through our platform where relevant to the service provided
05Purposes of Processing
We may process personal data for the following purposes:
- to provide and operate our website and services
- to create and manage user accounts
- to respond to inquiries and provide customer support
- to process payments and manage contracts
- to provide consultation or related healthcare services
- to send service-related communications
- to send newsletters and marketing communications where permitted
- to improve website functionality, performance, and security
- to analyze usage trends and optimize our offerings
- to comply with legal, regulatory, and contractual obligations
- to establish, exercise, or defend legal claims
- to prevent fraud, abuse, and unauthorized access
06Legal Bases for Processing
Where GDPR applies, we process personal data on one or more of the following legal bases:
- Consent under Art. 6(1)(a) GDPR, including explicit consent where required for special category data under Art. 9(2)(a) GDPR
- Performance of a contract or steps prior to entering into a contract under Art. 6(1)(b) GDPR
- Compliance with legal obligations under Art. 6(1)(c) GDPR
- Legitimate interests under Art. 6(1)(f) GDPR, such as operating, securing, and improving our services, provided those interests are not overridden by your rights
- other lawful bases applicable to healthcare-related processing where relevant under Art. 9 GDPR and applicable local law
Where U.S. privacy laws apply, we process personal data in accordance with applicable notice, transparency, and consumer rights requirements.
08Hosting and Technical Infrastructure
We use third-party providers to host, maintain, secure, and support our website and systems. These providers may process technical and usage data such as IP addresses, server logs, device information, and similar metadata on our behalf for hosting, security, and operational purposes.
Where required by law, we enter into appropriate data processing agreements with such providers.
09Contact Requests
If you contact us by email, contact form, chat, or other communication channels, we process the information you provide to respond to your request and manage the communication.
This may include:
- name
- email address
- message contents
- any additional information you choose to provide
We retain this information for as long as necessary to handle your request and comply with legal obligations.
10Accounts and Registration
If you create an account, we process the data necessary to register and maintain your account, authenticate you, provide requested features, and communicate important service updates.
Required registration fields must be completed in order to create and maintain an account.
12Healthcare and Consultation Services
Where you use healthcare-related or consultation services through our platform, we may process additional data necessary to provide those services.
This may include:
- identity and contact data
- demographic information
- health information you submit
- image uploads
- payment and billing data
- records needed to facilitate communication with participating healthcare professionals
Where applicable, Aimedis and the healthcare professional involved may act as independent controllers or joint controllers depending on the service configuration and applicable law.
Special category data, including health data, will only be processed where a valid legal basis applies, including explicit consent where required.
13Payments
If you purchase services or pay fees, payment processing may be handled by third-party payment providers.
Payment-related data may include:
- name
- billing address
- email address
- payment method details
- transaction amount
- transaction time and status
We do not store full payment card details unless necessary and legally permitted. Payment providers process payment data under their own privacy terms and applicable legal obligations.
14Forms, Upload Tools, and File Submissions
We may provide online forms, upload features, or document submission tools. Data submitted through such tools may be processed to manage requests, support service delivery, or receive documents and other information from users.
15Customer Support and Communication Tools
We may use internal or third-party systems to manage inquiries, support communications, appointments, and customer records.
These systems may process:
- contact details
- conversation content
- account identifiers
- technical metadata
- support history
We use these systems to provide efficient support, improve service quality, and maintain service records where appropriate.
16Analytics and Advertising
We may use analytics and marketing technologies to understand website usage, measure campaign performance, improve our services, and deliver more relevant communications.
Where required by law, such technologies are used only with your consent. Information collected may include:
- IP address
- device and browser data
- pages visited
- interactions on the website
- referral information
- conversion and campaign data
18Online Meetings and Communications
We may use online communication tools to conduct meetings, consultations, support sessions, or other communications.
When you participate in such interactions, relevant data may include:
- name and contact details
- meeting metadata
- device and connection data
- audio, video, chat, and shared files
- recordings where enabled and lawfully disclosed
20International Data Transfers
Because we operate internationally and may use global service providers, personal data may be transferred to and processed in countries outside your country of residence, including outside the European Economic Area.
Where required, we use appropriate safeguards for international transfers, including:
- adequacy decisions
- Standard Contractual Clauses
- supplementary contractual, technical, and organizational measures
- other lawful transfer mechanisms recognized under applicable law
21Retention
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, including to:
- provide services
- maintain business records
- comply with legal, tax, accounting, and regulatory requirements
- resolve disputes
- enforce agreements
Retention periods may vary depending on the nature of the data and applicable legal requirements.
22Data Security
We use appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.
These measures may include:
- encryption in transit
- access controls
- authentication procedures
- logging and monitoring
- secure hosting environments
- internal confidentiality and security procedures
No method of internet transmission or electronic storage is completely secure, but we take reasonable steps to protect personal data.
23Your Privacy Rights
Depending on your location and applicable law, you may have the right to:
- access your personal data
- request correction of inaccurate data
- request deletion of your data
- restrict or object to certain processing
- withdraw consent at any time where processing is based on consent
- receive data portability where applicable
- opt out of direct marketing communications
- opt out of certain profiling or targeted advertising practices where applicable under U.S. law
- lodge a complaint with a supervisory authority or regulator
To exercise your rights, contact us at contact@aimedis.com.
We may need to verify your identity before responding to your request.
24Children's Privacy
Our services are not directed to children unless expressly stated as part of a lawful healthcare or related service. We do not knowingly collect personal data from children except where permitted by law and appropriate consent or authorization has been obtained.
25Automated Decision-Making
We do not make solely automated decisions that produce legal or similarly significant effects on individuals unless expressly disclosed and permitted by law. If this changes, we will provide the notices and rights required by applicable law.
26U.S. State Privacy Rights
If you are a resident of a U.S. state with specific privacy rights, you may have additional rights regarding access, deletion, correction, and opting out of certain uses of personal data. We will honor such rights where applicable.
27Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect legal, technical, or business developments. The updated version will be posted on this page with a revised effective date.
28Contact
If you have questions about this Privacy Policy or our privacy practices, contact:
Questions about this Privacy Policy? Contact us or email contact@aimedis.com
17Social Media and Third-Party Content
Our website may include links to social media services or embedded third-party content and features. If you interact with such services or content, the relevant provider may receive technical data such as your IP address, browser information, and information about your visit to our website.
If you are logged in to a third-party platform, that provider may associate your interaction with your account on that platform.