Privacy Policy
INTRODUCTION Pour le francais cliquer ici
We designed this privacy policy because we, like you, care about the use of the information we provide when using websites.
First of all, your exchanges in any form with your health specialist are strictly confidential. In no way are they accessible to Santhepro managers or to anyone other than you and your healthcare specialist. We would like to remind you that all our health specialists, without exception, have had the obligation to provide us with supporting documents for their training and they have formally undertaken, in their service contract, to respect this life protection policy with us. private.
You send us different types of information when you do business with us to be put in touch with your health specialist:
If the Professional or the Client does not want their personal data to be collected and processed under the conditions established by this privacy notice, they must refrain from using the Services offered by the Company.
ARTICLE 1: OBJECT
The Company has developed a SaaS (Software as a Service) solution to manage and book appointments and reservations for patients and clients (the “Client”) online, as well as to manage client files (the “Services”). ) for professionals of different professions (the “Professional”).
ARTICLE 2. RESPONSIBLE AND SUBCONTRACTOR
The entity responsible for processing the personal data of the Professional and its Customers is the Company. The person responsible for personal data is the Professional, the Company having, in the latter case, the quality of "service provider".
ARTICLE 3. COLLECTION OF PERSONAL DATA
The Company collects personal data directly from Professionals and their Customers via the Services offered on its website, its applications or any other means.
Personal data may also be collected from third-party applications used by Professionals to perform their functions. These third-party applications can be connected to the Company's application to collect the personal data required in order to be able to offer the Company's Services to Professionals and their Customers. Once this external personal data has been entered into the Company's application, it is therefore subject to this privacy notice. For more information on the processing of personal data by these third-party applications, Professionals and Customers should consult the various privacy policies of these third parties.
ARTICLE 4. PROCESSING OF PERSONAL DATA
The Company processes and stores the personal data provided by Professionals and their Customers only for the strict execution and use of the Services it offers. The Company will not collect any other personal data without the explicit consent of the Professional or its Customers. The Company informs its Professionals and Customers that all personal data is generally stored and processed in Canada, but that certain specific third-party services may process and store personal data in other countries, including the United States.
ARTICLE 5. COMPLIANCE
The Company, concerned about the personal data of the Professional and its Customers, undertakes to ensure the compliance of processes, people and technology, respectively in its role of subcontractor and service provider, according to the Conditions of use, in accordance with applicable privacy laws, including PIPEDA (Personal Information Protection and Electronic Documents Act, Canada), PHIPA (Personal Health Information Protection Act, Ontario), and the GDPR (General Data Protection Regulation, Europe). To do this, the Company has implemented strict internal policies in terms of confidentiality and security, in order to guarantee an optimal level of protection of the personal data collected by the Professional.
ARTICLE 6. PERSONAL PROFESSIONAL DATA
To benefit from the Services offered by the Company, the Professional must connect to the SanthePro website by creating an account. When registering, the Professional must communicate certain information which, in certain jurisdictions, may be considered as personal data, in particular: surname and first name, email address, profession, name of the Professional's company, professional address of the Professional and telephone number. Professional's phone.
All answers are required, including at the time of account activation, in order to allow the strict performance of the Company's Services. The Professional undertakes to communicate exact, complete and up-to-date data concerning his identity and his personal information.
The Professional is informed that the Company uses a payment provider (the “Payment Provider”) to process all financial transactions related to the Services. The Company does not collect, process, store or host personal banking data. This data is collected, processed and hosted directly and only by the Payment Provider on behalf of the Company. The Professional is informed that the current Payment Provider is Square and /or Paypal, a company located in San Francisco, United States. The Company has ensured that the Payment Provider complies with the applicable confidentiality requirements.
ARTICLE 7. PERSONAL DATA OF CUSTOMERS
To make an appointment with a Listed Professional, the Client must visit the SanthePro website or interact with a web interface ("Booking Widget") hosted on a third party website and communicate certain personal data, including name, email, telephone number, date of birth and any other personal data that the Professional may need to perform his duties. The Professional can also collect personal data directly from his Client during an appointment or by telephone.
In his capacity as the main data controller, the Professional undertakes to collect from the Client only the personal data necessary to carry out his professional activity.
As data controller, the Professional undertakes to comply with all applicable laws and regulations regarding confidentiality concerning personal data and, in particular, to allow his clients to exercise their rights of access, rectification, opposition, restriction, portability and deletion or anonymization of data concerning them, at any time. The Company will help the Professional, to the best of its ability, to fulfill the requests of the Professional's Customers.
ARTICLE 8. CONSENT
Since the Professional's data collection and the Company's data processing may include information relating to health, that is to say, sensitive personal data, explicit consent is required, both by the Professional and its Customers, before the collection and processing of personal data.
This consent to the collection and processing of personal data can be revoked at any time by the Professional, temporarily by requesting a suspension of his account, or definitively by closing his account with the Company.
Customers can revoke their consent to the collection and processing of personal data by contacting their Professional directly.
ARTICLE 9. WITNESSES AND SIMILAR TECHNOLOGIES
A cookie is a small text file, subject to the choice of the Professional and the Customer, placed on their computer or other device when visiting a web page. Its purpose is to collect information relating to navigation on the site, in order to send appropriate services to their device (computer, cell phone or tablet).
The Company informs the Professional and its Customers that it uses cookies or similar technologies to track and collect certain data, in particular the IP (Internet Protocol) address, the version of the browser of the device used and the data. site navigation. The purpose of processing the data collected via cookies and their management is to provide the service and improve the content of the website and the experience of the Professional and its Customers. Cookies can be used to identify Professionals or Customers in order to manage sessions. The Company also uses cookies or similar technologies in order to measure the website audience by calculating statistics on the pages visited by the Professional and the Customers in order to determine the most used Services.
Our website may use cookies and similar technologies so that you are recognized when you visit other websites where our third party ad providers may show you interest-based advertising based on your visit to our website. There are different ways to disable or block online interest-based advertising, you can find this information by searching the internet.
In addition, the Professional and the Client may, at any time, modify their consent to receive cookies by configuring their browser to receive a notification, when sending a cookie, or to refuse specific cookies or in general. Please be aware that some features of the Services may not work if you block cookies.
ARTICLE 10. PROTECTION OF PERSONAL DATA
The Company, as a subcontractor and supplier of Services, in accordance with the applicable laws and regulations on confidentiality, undertakes to implement appropriate technical and organizational measures to guarantee the security and confidentiality of the Professional's personal data. and the Client, in a reasonable manner. More specifically, the Company and all of its staff undertake to comply with the following obligations:
- Only process personal data in accordance with the current privacy notice;
- To respect the confidentiality of the personal data collected;
- To limit access to personal data only to persons duly authorized to perform their tasks;
- Not to make any copies of the personal data collected, except to ensure the backup and continuity of the Services;
- Not to use or process the personal data collected for purposes other than for the main objective identified above, including access to the personal data of the Professional and his Customers to help the professional with a platform problem specific, following the Professional's request or for account diagnostic purposes;
- Not to disclose personal data to an unauthorized third party;
- To adopt all the necessary measures to avoid the abusive or fraudulent use of personal data collected via the Services;
- Take all security measures to ensure the confidentiality, integrity and availability of data collected and processed via the Services;
- Provide the Professional with all the assistance and information necessary to prove compliance with his confidentiality obligations;
- To keep a register of all modifications made to personal data made on the application;
- To raise awareness and train internal staff on confidentiality and personal data protection requirements.
ARTICLE 11. SHARING OF PERSONAL DATA
The Company, in order to provide the Services to Professionals and their Customers, may share their personal data with its Service Providers. Before sharing personal data with these third parties, we make sure that they have the appropriate safeguards and that they comply with the Company's privacy notice and applicable privacy laws.
At the Professional's request, the Company may also share personal data with third-party applications used by Professionals to perform their functions. These third-party applications can be connected to the Company's application to receive the personal data required in order to offer their own services to Professionals and their Customers. Once this personal data has been shared with the third party application, the shared data is subject to the third party's privacy notice. For more information on how personal data is processed by these third-party applications, Professionals and Customers can consult the privacy policies of these third parties.
The Company may share the Professional's personal data, if these are already publicly available through the Company's website and Services, as well as aggregated and anonymous Client personal data with partners to promote their services or services. of the Professional. In this case, the Company will ensure that none of the data it shares can be used to identify the Professional's Customers.
To help the development and improvement of its Services, and for research and analysis purposes, the Company may share aggregated and anonymous personal data of its Professionals and their Customers with third parties. In this case, the Company will ensure that none of the data it shares can be used to identify its Professionals and their Customers.
ARTICLE 12. DISCLOSURE OF PERSONAL DATA
The Company may transfer personal data, without the consent of the person, in the context of a merger, reorganization or sale, involving all or part of its activities, including transfers made in the part of insolvency or bankruptcy proceedings.
The Company may also disclose personal data without consent, with or without notification to the Professional or the Client, in the event of a legal summons or other legal requirement, issued by a court or any other competent person, having the power to compel disclosure, or if the personal data is urgently needed to avoid serious bodily injury or serious property damage.
ARTICLE 13. BREACH OF PERSONAL DATA
The Professional undertakes to immediately inform the Company in the event of unauthorized or malicious use of his connection to his account by a third party.
If the Company becomes a victim of a personal data breach, the Company will inform the Professionals concerned of (i) the nature of the breach, (ii) its probable consequences, and (iii) the measures proposed to remedy the breach, by respecting the deadlines prescribed by applicable confidentiality laws. A violation presenting a significant risk of prejudice to Professionals and Customers will be communicated to the competent authorities. The Company will also provide the Professional with the assistance required to inform its Customers, taking into account the risk of damage, and respecting the deadlines prescribed by the applicable laws on confidentiality.
ARTICLE 14. STORAGE OF PERSONAL DATA
The retention period of your personal data depends on the type of data and the purpose for which we process the data. We will retain your personal information for the period necessary to fulfill the purposes described in this privacy notice, unless a longer retention period is required by law.
Customers who wish their personal data to be deleted can directly contact their Professional. Clients should however keep in mind that certain professional orders may require their Professionals to keep their patient or client files for a certain number of years.
ARTICLE 15. CHANGES TO THIS PRIVACY NOTICE
Any changes to this privacy notice, which may have an impact on the personal data of Professionals or their Clients or their privacy rights, will be communicated by email and on our website for Professionals and via our website for their Clients. If a change requires your consent, Professionals and their Customers will be informed accordingly.
Copyright © 2021 SanthePro - All rights reserved - Francais