1. Recitals
The protection of individuals regarding the processing of their Personal Data (as defined below) is a fundamental right that DigiDxDoc Health Solutions Private Limited ("DigiDxDoc") takes very seriously.
DigiDxDoc processes Personal Data as part of its relations with its visitors, prospects, partners, clients, employees, job applicants, contacts, investors, service providers, patients, contractors, and any users of its website: www.digidxdoc.com (the “Website”) (collectively referred to as the “Individuals”).
DigiDxDoc is firmly committed to conducting its business in accordance with applicable data protection regulations and, particularly, the General Data Protection Regulation (EU) 2016/679 of April 27th, 2016 (“GDPR”), which aims to protect individuals’ rights regarding the collection, use, retention, transfer, disclosure, and destruction of their Personal Data.
The purpose of this privacy policy (“Privacy Policy”) is to set forth the types of Personal Data DigiDxDoc may receive from Individuals’ interactions with DigiDxDoc, notably through its media platforms.
DigiDxDoc strives to ensure adequate protection of Individuals’ Personal Data, preserve the protection and security of Individuals’ Personal Data, and inform and uphold Individuals’ rights.
What Personal Data is DigiDxDoc collecting and processing about Individuals? Why is DigiDxDoc processing Individuals’ Personal Data? What are the legal bases that entitle DigiDxDoc to do so? From what sources does DigiDxDoc collect Individuals’ Personal Data? Who are the authorized parties allowed to process Individuals’ Personal Data by DigiDxDoc? How does DigiDxDoc ensure the security and protection of Individuals’ Personal Data? How long will DigiDxDoc keep Individuals’ Personal Data? What are Individuals’ rights regarding the processing made by DigiDxDoc on Individuals’ Personal Data? How can Individuals exercise their rights?
- Data Controller(s): DigiDxDoc Health Solutions Private Limited.
- Data Processor(s): Natural person or legal entity who processes Personal Data on behalf of DigiDxDoc.
- Data Recipient(s): Individual or legal entity who receives Personal Data from DigiDxDoc. Data Recipients may therefore also be employees of DigiDxDoc or external entities (e.g. partners such as healthcare organizations or professionals, suppliers, service providers, clients, exhibitors, banks, agents, etc.).
- Data Subject(s): the Individuals.
- Personal Data: refers to any information or pieces of information that can directly or indirectly identify a Data Subject, such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that individual.
2. Objective
The purpose of this Privacy Policy is to meet the information obligation of DigiDxDoc under the GDPR (Article 12 to 14) and to document the rights of the Individuals regarding the processing of their Personal Data.
3. Scope
This Privacy Policy applies to all processing of Individuals’ Personal Data by DigiDxDoc Health Solutions Private Limited. DigiDxDoc makes every effort to ensure that Personal Data is processed within the framework of strict internal governance. However, this Privacy Policy only covers Personal Data for which DigiDxDoc is the Data Controller and does not extend to processing performed outside of DigiDxDoc's specified governance framework. Personal Data may be processed directly by DigiDxDoc or via designated Data Processors. Specific privacy notices and consent forms will be provided to Individuals as necessary for specific processing activities.
4. Purposes
DigiDxDoc processes Personal Data for various purposes including:
- ✔ Business and contractual relationships, including management of agreements with academic and non-academic partners, invoicing, and accounting
- ✔ Research and development activities, including scientific studies and projects involving data from partners or biobanks
- ✔ Compliance with legal, regulatory, and ethical obligations, such as industry standards and data protection laws
- ✔ Marketing purposes, such as campaigns, newsletters, targeted advertising, and events
- ✔ Recruitment management
- ✔ Website management
- ✔ Protection of DigiDxDoc's rights and interests, including investigation and litigation
Any new use or modification of existing processing will be communicated through updates to this Privacy Policy.
5. Lawfulness of Processing
DigiDxDoc processes Personal Data based on the following legal bases:
- ✔ Legitimate interests of DigiDxDoc or third parties, ensuring balance with Data Subjects' rights
- ✔ Compliance with applicable legislation
- ✔ Consent of the Data Subject for specific purposes
- ✔ Performance of a contract with the Data Subject or their employer
- ✔ Public interest where applicable
6. Types of Personal Data Processed
Personal Data processed by DigiDxDoc may include:
- ✔ Non-technical data: Identity, contact details, professional data, bank details, etc.
- ✔ Technical data: Browsing history, device information, etc.
- ✔ Sensitive Personal Data as defined by GDPR Article 9, with appropriate measures taken to ensure protection and confidentiality
Specific notices and consent forms will be provided for processing involving sensitive data.
7. Children's Personal Data
DigiDxDoc’s Website is not intended for children under thirteen (13) years old. DigiDxDoc does not knowingly process Personal Data from children under thirteen (13) years old through its Website. Parents or guardians discovering their child has provided Personal Data to DigiDxDoc should promptly contact DigiDxDoc's Data Protection Officer to request deletion of the data in accordance with applicable data protection laws.
8. Personal Data Recipients
DigiDxDoc ensures that Personal Data is accessible only to authorized internal and external recipients necessary for the intended purposes. Internal recipients may include various departments responsible for business operations, while external recipients may include partners, legal or administrative authorities, or potential acquirers. All recipients are bound by confidentiality obligations, and DigiDxDoc determines access rights through contracts or internal policies. DigiDxDoc does not sell Personal Data to third parties.
9. Transfer Of Personal Data To Third Countries Or International Organizations
In cases where DigiDxDoc needs to transfer Personal Data from the European Economic Area (EEA) to recipients outside the EEA, adequate safeguards are implemented as required by the GDPR, such as ensuring adequacy decisions from the European Commission or implementing Standard Contractual Clauses.
10. Retention Period
The retention period for Personal Data is defined by DigiDxDoc in compliance with legal and contractual obligations. Retention periods vary depending on the purpose of processing, such as contractual relations, job applications, or contact information. After the specified retention period, Personal Data is either deleted or anonymized, subject to statutory retention or legal obligations.