Note that our Website is completely separate from our Platform.
PERSONAL DATA PROCESSED
We act in different roles for different types of data. We are the data controller for the Inquiry Information and Contact and Account Information described below. We are the data controller for this data because we use this data to operate the Platform and our business. Separately, we are the data processor for the Platform Information described below, because we only process this data for and on behalf of the Business, and not for our own purposes.
We process information you provide us with when you submit an inquiry on our Website. When you visit our Website, you can submit an inquiry or request a demo through our online contact form or via our online chat-bot. When you contact us, you will be asked to provide information such as your name, email address, phone number, company name, job title, and the subject of your inquiry. We refer to this entire data as “Inquiry Information”.
We collect and process your contact information when you engage us to use our Platform. When a representative of an existing or prospective Business wishes to use, or uses, our Platform, we collect that representative’s contact and account details such as name, email, phone number, position and company, and information relating to the engagement between us and the Business which is made with the involvement of the representative. We refer to this information as “Contact and Account Information”.
You do not have a legal obligation to provide us with your Inquiry Information or Contact Information. However, if you choose not to share this information with us, we may not be able to respond to your inquiry or provide you with more information about our Services.
We may receive your information from third parties. We may also receive your Contact Information from third parties to whom you have provided your information and authorized them to transfer your information to us such as LinkedIn, Google, Twitter, Facebook, and others. Such information will include your name, email address, phone number, job title, industry, company name, and country.
The Platform we provide involves processing information on the Business’s data subjects. To provide the Platform to a Business, we process personal information of the Business’s data subjects. We do this as a data processor (also known as a service provider under the CCPA, or business associate under HIPAA) on behalf of the Business and under the Business’s instructions.
Subject to the Business’s discretion, the personal data processed by the Platform can include, for example information from a medical sensor that a patient uses.
We refer to this type of data as “Platform Information”.
If you are a data subject of the Platform Information (i.e., you are a Business’s data subject), and would like to obtain more information on the collection and processing of your personal data, please contact the Business which is the data controller of your personal data.
We also collect analytics information about your use of our Website. When you visit our Website, we record and collect certain information about your interaction with our Website, including the IP address from which you access our Website, time and date of access, type of browser used, language used, links clicked, and actions taken while using our Website ("Analytics Information").
HOW WE PROCESS PERSONAL DATA
To respond to and handle your inquiry. We process your Inquiry Information to contact you about your inquiry and handle your inquiry.
To send you administrative communications and respond to Platform support inquiries. We process your Contact and Account Information to send you communications and administrative emails regarding the administration of the Platform, and to respond to Platform support inquiries you may have.
To contact you with marketing communications, subject to your consent. We process your Inquiry Information and Contact Information to send you marketing communication emails and text messages (SMS) and to call you with our marketing offers. These communications will provide you with further information and updates about our products and technology. We will only do this subject to your explicit consent to receive such communications from us. You can withdraw your consent at any time via the “unsubscribe” link enclosed in each marketing communication in written form that you receive from us.
To provide and maintain our Website and Platform. We process your Analytics Information and Contact and Account Information to provide, maintain and improve your user experience when accessing our Website or when using our Platform. We will also use Analytics Information for quality assurance and for development and enhancement of the Platform and our Website, to understand the market in which we operate and for managerial reporting and business planning.
WHO WE SHARE YOUR DATA WITH
We will not share your information with third parties, except in the events listed below or when you provide us with your explicit and informed consent.
We will process information with our service providers helping us to operate our business. We will process personal information with the assistance of our service providers who assist us with the internal operations of our Website, the Platform, and our business. These companies are authorized to use your personal information in this context only as necessary to provide these services to us and not for their own promotional purposes.
We will share information with competent authorities, if you abuse your right to use our Website, or violate any applicable law. If you have abused your rights to use our Website, or if you violated any applicable law, we will share information with competent authorities and with third parties (such as legal counsels and advisors), for the purpose of handling of the violation or breach.
We will share your information if we are legally required to do so. We will share information if we are required to do so by a judicial, governmental, or regulatory authority.
We will share your Information with third parties in any event of change in our structure. If the operation of our Website is organized within a different framework, or through another legal structure or entity (such as due to a merger or acquisition), we will share information only as required to enable the structural change in the operation of the business.
What are cookies? Cookies are text files, comprised of small amounts of data, that are saved on your computer or other device (e.g. smartphone, tablet, etc.) when you use the internet and visit various websites.
The information that the cookies maintain is read by our website you visit, during the session of your visit to our website (these are called ‘session’ cookies), and when you return to visit it again (these are called ‘persistent’ cookies).
Necessary. Cookies that are strictly necessary for the functioning of our Website. Our Website cannot operate properly without these cookies. You can set your browser to block or alert you about these cookies, but some parts of our Website may not function properly.
Statistics. Analytics cookies that help us understand how you and other users interact with our Website by collecting data that does not directly identify you.
Marketing. Cookies that track your use of our Website and allow online advertisers to tailor ads that they believe are more relevant to you.
You can always delete or disable cookies. You can always delete the cookies saved on your device through the settings of your computer browser or device. You can also disable cookies for future use through the settings of your computer browser or device.
SECURITY AND DATA RETENTION
We will retain the information for as long as we need it for business purposes, and thereafter as needed for record-keeping matters. We will retain your information for the duration needed to support our ordinary business activities operating our Website and the Platform. Thereafter, we will still retain it as necessary to comply with our legal obligations, resolve disputes, establish, and defend legal claims and enforce our agreements.
We will retain the Platform Information in accordance with the Business’s instructions and only while the Business uses the Platform. We will retain Platform Information pursuant to the Business instructions, and only for the duration needed to provide the Platform to the Business. Upontermination of the agreement between us and the Platform for the provision of the Platform, we will return or delete the Business Information, unless we are required to retain such information under applicable law.
We implement measures to secure your Information. We implement measures to reduce the risks of damage, loss of information and unauthorized access or use of information. However, these measures do not provide absolute information security. Therefore, although efforts are made to secure personal information, it is not guaranteed, and you cannot expect that our Website will be immune from information security risks.
INTERNATIONAL DATA TRANSFERS
We will internationally transfer information in accordance with applicable data protection laws. If we transfer your personal data for processing at locations outside your jurisdiction, we will abide by data transfer rules applicable to these situations.
If you are an EU resident and we transfer your information from the EU to other jurisdictions outside the EU, we will do so using adequate safeguards determined by the EU Commission.
ADDITIONAL INFORMATION FOR INDIVIDUALS IN THE UK and EU
BioT is the data controller of the Inquiry Information, Contact Information and Analytics Information. Here is BioT’s full legal name and contact information:
BioT Healthcare Ltd.
2 Granit street, Petach Tikva, Israel, 4951623, +972-74-702-4735
Legal basis under EU law for processing your personal data. The legal basis under EU law for processing your Analytics Information and Contact and Account Information is our legitimate interest in providing, maintaining, developing, and enhancing our Website and the Platform.
The legal basis for collecting and processing your Inquiry Information is our legitimate interest in responding to your inquiry.
The legal basis for processing your Contact and Account Information and Inquiry Information for the purpose of administering the operation of the Platform is our legitimate interests in maintaining the Platform.
The legal basis for processing your Inquiry Information and Contact Information for the purpose of contacting you with marketing communications is your explicit consent.
The legal basis under EU law for processing your data for the purpose of handling instances of abusive use of our Website is our legitimate interests in defending and enforcing against violations and breaches that are harmful to our business.
The legal basis under EU law for processing your data where we are legally required to share it, is our legitimate interests in complying with mandatory legal requirements imposed on us.
The legal basis under EU law for us processing your data in the event of a change in our corporate structure is our legitimate interests in our business continuity.
You have certain rights to access, update or delete your information, obtain a copy of your information, withdraw your consent, and object or restrict certain data processing activities. If you are in the EU, you have the following rights under the GDPR:
Right to Access your personal data that we process and receive a copy of it.
Right to withdraw the consent you’ve given to processing your contact information for the purpose of contacting you with marketing communications.
Right to Rectify inaccurate personal data we have concerning you and to have incomplete personal data completed.
Right to Data Portability, that is, to receive the personal data that you provided to us, in a structured, commonly used, and machine-readable format. You have the right to transmit this data to another service provider. Where technically feasible, you have the right that your personal data be transmitted directly from us to the service provider you designate.
Right to Object, based on your particular situation, to using your personal data on the basis of our legitimate interest. However, we may override the objection if we demonstrate compelling legitimate grounds, or for the establishment, exercise of defense of legal claims.
Right to Restrict the processing of your personal data (except for storing it) in the following cases. First, if you contest the accuracy of your personal data, for a period enabling us to verify its accuracy. Second, if you believe that the processing is unlawful and you oppose the erasure of the personal data and request instead to restrict its use. Third, if we no longer need the personal data for the purposes outlined in this Policy, but you nevertheless require the data to establish, exercise or defend against relating to legal claims, or if you object to processing, pending the verification whether our legitimate grounds for processing override yours.
Right to be Forgotten. Under certain circumstances, such as when you object to us processing your data and we have no compelling legitimate grounds to override your objection, you have the right to ask us to erase your personal data. However, we may still process your personal data if it is necessary to comply with a legal obligation that we are subject to under laws in the UK or EU Member States or for the establishment, exercise, or defense of legal claims.
If you wish to exercise any of these rights, contact us at Info@biot-med.com .
We reserve the right to ask for reasonable evidence to verify your identity before we provide you with information. Where we are not able to provide you with information that you have asked for, we will explain the reason for this.
You have a right to submit a complaint to the relevant supervisory data protection authority. Subject to applicable law, you have the right to lodge a complaint with your local data protection authority. If you are in the UK or EU, then according to Article 77 of the GDPR, you can lodge a complaint to the supervisory authority, in the Member State of your residence, place of work or place of alleged infringement of the GDPR.
In the United Kingdom, this is the Information Commissioner’s Office (ICO)
Water Lane, Wycliffe House, Wilmslow - Cheshire SK9 5AF
Tel. 0303 123 1113.
For a list of national supervisory authorities in the member states of the European Economic Area and their contact information, click here: https://edpb.europa.eu/about-edpb/about-edpb/members_en.
CHANGES TO THIS PRIVACY NOTICE
Last Update: January 1, 2024.