Skip to main content
QMSQMS
QMS
  • Welcome to your QMS
  • Quality Manual
  • Procedures
    • GP-001 Control of documents
    • GP-002 Quality planning
    • GP-003 Audits
    • GP-004 Vigilance system
    • GP-005 Human Resources and Training
    • GP-006 Non-conformity, Corrective and Preventive actions
    • GP-007 Post-market surveillance
    • GP-008 Product requirements
    • GP-009 Sales
    • GP-010 Purchases and suppliers evaluation
    • GP-011 Provision of service
    • GP-012 Design, Redesign and Development
    • GP-013 Risk management
    • GP-014 Feedback and complaints
    • GP-015 Clinical evaluation
    • GP-016 Traceability and identification
    • GP-017 Technical assistance service
    • GP-018 Infrastructure and facilities
    • GP-019 Software validation plan
    • GP-020 QMS Data analysis
    • GP-021 Communications
    • GP-022 Document translation
    • GP-023 Change control management
    • GP-024 Cybersecurity
    • GP-025 Corporate Governance
    • GP-050 Data Protection
      • Templates
        • Standard clauses
          • Annex 2 First layer of information in digital environments
          • Information clause on the processing of personal data in contracts
          • Information clause on the processing of personal data in contracts
          • Employee data modification
          • Employee recruitment
          • Footer for email
          • Email footer for advertising purposes
          • Privacy policy
          • Release of image rights
        • T-050-001 Record of Processing activities (ROPA)
        • T-050-003 Data access key
      • Specific procedures
    • GP-051 Security violations
    • GP-052 Data Privacy Impact Assessment (DPIA)
    • GP-100 Business Continuity (BCP) and Disaster Recovery plans (DRP)
    • GP-101 Information security
  • Records
  • TF_Legit.Health_Plus
  • Licenses and accreditations
  • External documentation
  • Procedures
  • Records
  • Procedures
  • GP-050 Data Protection
  • Templates
  • Standard clauses
  • Privacy policy

Privacy policy

How to use

Copy everything below and paste it into a new document that contains only this content. Then, make it available through a link in the footer of your website.

When to use

The privacy policy is the most important document for GDPR compliance. Anyone should be able to find your privacy policy easily.

Privacy policy​

Purpose​

This document regulates the collection and processing of personal data that users provide us when they access the website, contract services or request product demonstrations.

In other words, it refers to the data we collect as a result of browsing the website or the customer service process, and excludes the data provided during the use of our application with artificial intelligence. Therefore, this Privacy Policy excludes data generated through the use of the application, such as clinical questionnaires or photographs. This is because it is the Medical Center that decides how the data is processed, as explained by the Medical Center in the Privacy Policy that it has made available to you.

Responsible for the treatment​

The person responsible for processing the data collected is AI LABS GROUP SL with NIF B95988127 (hereinafter Legit) and address at Urquijo s/n, 2º, 48013, Bilbao, Bizkaia, owner of the Legit.Health® Software and the Website https: //legitimate.health/.

Collection of data, purposes, basis of legitimacy and retention periods​

In the following paragraphs, we list the purposes for which we need to collect user data.

Contact​

The User can get in touch through the forms established for this purpose on the Website. You must provide your identification data and the data that is marked as required. We will use this data to process the query and contact you so that you can assess the contracting of the services.

The legal basis for the processing of such data is based on the User's consent.

The term of conservation of the data for this purpose will be one year, unless other terms are applicable.

Registration on the platform and contracting of services​

To register on the platform and make use of its functionalities, it is necessary to previously contract the service. To do this, you must provide identification data, as well as payment data and other data normally required. In some cases, we may offer free trials so that you can test the functionalities of the services, although this only happens in exceptional cases.

The legal basis for the processing of such data is based on the contractual relationship maintained between the parties.

The term of conservation of the data will be adequate to comply with the contractual obligations and, in any case, up to five more years for tax procedures and to cover possible responsibilities, unless other terms are applicable.

Cookies​

The Website has technology for the implantation of files called cookies in the equipment used to access and browse the Website. Cookies can be blocked or disabled at any time through the browser configuration options. If you want more information you can consult our Cookies policy.

The legal basis for the processing of such data is based on the User's consent.

Advertising​

If the User expressly authorizes it, Legit.Health may send advertising for the services and/or promotions available on the Website, such as news and/or discounts, among others. The legal basis for the processing of such data is based on the User's consent. You may revoke such consent at any time.

The term of conservation of the data will be the time that it remains registered in our system for the sending of publicity and has not revoked its consent.

Exercise of rights​

You can revoke consent for treatment by exercising your rights of access, rectification, deletion, portability, opposition and limitation to treatment. To do this, you just need to send an email addressed to legal@legit.health. We recommend that you put the phrase: 'Data Protection' as the subject of the email. For security reasons, we may have to ask you to prove your identity through an official document to prevent access to your data by third parties.

Finally, you may communicate any modification in writing or request cancellation, indicating it at any of the addresses provided.

At any time, the User may file a claim with the Spanish Data Protection Agency to enforce their rights.

Modification of the Privacy Policy​

We reserve the right to modify this document at any time, respecting current legislation and communicating said modification.

Language applicable to this privacy policy​

The language applicable to this writing is Spanish. On occasion, we will try to translate it into various languages ​​for your convenience, but these translations are for illustrative purposes only.

In case of contradiction between the Privacy Policy in any language and its version in Spanish, the version in Spanish will prevail.

Document signature meaning​

  • Author: JD-003 Taig Mac Carthy
  • Review: JD-005 Alfonso Medela / JD-004 María Diez
  • Approval: JD-001 Andy Aguilar
Previous
Email footer for advertising purposes
Next
Release of image rights
  • Privacy policy
    • Purpose
    • Responsible for the treatment
    • Collection of data, purposes, basis of legitimacy and retention periods
      • Contact
      • Registration on the platform and contracting of services
      • Cookies
      • Advertising
    • Exercise of rights
    • Modification of the Privacy Policy
    • Language applicable to this privacy policy
  • Document signature meaning
All the information contained in this QMS is confidential. The recipient agrees not to transmit or reproduce the information, neither by himself nor by third parties, through whichever means, without obtaining the prior written permission of Legit.Health (AI LABS GROUP S.L.)