Privacy Policy
Through this Privacy Policy, and in compliance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights, Doole Health SL (hereinafter, “Doole”) informs users about the conditions under which personal data are processed.
I. Definitions
Application: The Doole mobile application.
Personal Data: Any information relating to an identified or identifiable natural person.
Data Controller: The entity that determines the purposes and means of the processing of personal data.
Data Processor: The entity that processes personal data on behalf of the Controller.
III. Information Common to All Processing Activities
1. Identification
Doole Health S.L. (Tax ID B67450478) Ctra. del Canyet s/n, Hospital Germans Trias i Pujol, Edificio Maternal 2nd Floor 08916 – Badalona (Barcelona)
2. Your Rights
You may exercise your rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent by writing to: info@doolehealth.com
The supervisory authority is the Spanish Data Protection Agency (AEPD).
When Doole Acts as Data Controller
Purpose of Processing
- Provision of requested services
- Management of contractual relationship
- Commercial communications (where applicable)
- Clinical studies (with prior anonymisation)
Data Categories
- Identification and contact data
- Health and wellbeing data
- Fitness and usage data
- Technical and cookie data
Retention
Data will be retained for the duration of the contractual relationship and subsequently for legally required periods (up to 15 years in certain cases).
When Doole Acts as Data Processor
When you use the Application as a patient of a healthcare provider that is a Doole client, Doole acts as Data Processor and the healthcare provider acts as Data Controller.
- Application maintenance and support
- Performance monitoring
- Technical issue prevention
- Regulatory compliance
Security Measures
- TLS encrypted connections (AES-256)
- Encrypted passwords
- Encrypted backups
- Access logging for sensitive data
- High-Level certification under Spain’s National Security Framework (ENS)
While we apply advanced security measures, no digital system is entirely invulnerable.
Validity
This policy enters into force upon publication. Updates may be made periodically and will be published on this page.