Privacy Policy.

You are fully responsible for any third-party personal data shared through the Website. Please ensure you have proper permission to share that data and that your sharing does not violate third parties’ rights to it.

The Data is processed at our operating offices and in any other places where the parties involved in the processing are located. Depending on your location, data transfers may involve international transfers of personal data. We do it transparently, and you can find out more information in the relevant sections below.

Unless otherwise specified in this Policy, collected personal data shall be processed and retained for as long as required by the purpose they have been collected for, and may be retained for longer due to applicable legal obligation or based on the users’ consent.

Therefore, the time of retention of the data depends on the basis of data processing:

• Personal data collected for purposes related to the performance of a contract or other agreement between the website user and us shall be retained until such contract (agreement) has been entirely performed.
• Personal data collected for our legitimate interests shall be retained for as long as necessary to fulfill those interests. You may find specific information regarding the legitimate interests in the relevant sections of this Policy or by contacting us.
• Retaining personal data may be permitted for an extended period if the website user has given consent to such processing, as long as this consent is not withdrawn. Furthermore, we may be obliged to retain personal data for a longer period to fulfill a legal obligation or upon order of an authority.

Once the retention period expires, personal data shall be deleted. Therefore, your right of access, to erasure, to rectification, and the right to data portability cannot be enforced after expiration of the retention period.

• Right to be informed: You may obtain information about the processing of your personal data. Please use our contact information above.
• Right of access: You have the right to learn if personal data is being processed by us, obtain disclosure regarding certain aspects of the processing, and obtain a copy of the personal data undergoing processing.
• Right to rectification: You can ask for the verification of the accuracy of your data. If the personal data is incorrect, inaccurate, or incomplete, you have the right to have this data corrected.
• Right to erasure: You can request that personal data be erased when it’s no longer needed or if processing it is unlawful.
• Right to restriction of processing: You can request the restriction of the processing of your personal data in specific cases. In this case, we will not process the data for any purpose other than storing it.
• Right to data portability: You may receive your personal data in a structured, commonly used, and machine-readable format and, if technically feasible, have it transmitted to another controller without any hindrance.
• Right to object: You can object to the processing of your personal data for marketing purposes or on grounds relating to your particular situation. You have the right to withdraw previously given consent to the processing of your personal data.
• Rights in relation to automated decision-making and profiling: You can request that decisions based on your personal data and that significantly affect you are made by natural persons, not only by computers.

You can object to the processing of your personal data for direct marketing purposes at any time, free of charge, and without providing justification. Upon objection, personal data will no longer be processed for such purposes.

Where Personal Data is processed for a public interest, in the exercise of an official authority vested in us, or for the purposes of the legitimate interests pursued by us, you may object to such processing by providing a ground related to your particular situation to justify the objection.

Any user has the right to bring a claim before their national competent data protection authority. You can find more info at www.edpb.europa.eu.

You are also entitled to learn about the legal basis for data transfers abroad, including to any international organization governed by public international law or established by two or more countries, and about the security measures taken by us to safeguard your data.

Any requests to exercise your rights can be directed to us through the contact details provided above. Such requests are free of charge and will be answered as early as possible and always within one month. We always provide website users with the information required by law in our answers. Any rectification or erasure of personal data or restriction of processing will be communicated to each recipient, if any, to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort. At your request, we will inform you about those recipients.

Please review the Policy above to learn what data we collect from you and the legal bases for our data collection, and to find out what we do with your data.

We will not:

• Sell or rent your data to third parties
• Share your data with third parties for marketing purposes

We will share your data if we are required to do so by law — for example, by court order, or to prevent fraud or other crime.

Please review the Policy above to find out how long we keep your data and where we process and store it.

How we protect your data and keep it secure

We are committed to doing everything possible to keep your data secure. To prevent unauthorized access or disclosure, we have implemented technical and organizational procedures to secure the data we collect about you. We also ensure that any third parties with whom we deal have an obligation to keep all personal data they process on our behalf secure. We evaluate their practices carefully before using their services.

Children’s privacy protection

We recognize the importance of protecting children’s online privacy. Our services are not designed for, nor are they intentionally targeted at, children under 13 years. It is not our policy to intentionally collect or maintain data about anyone under the age of 13.

What are your rights?

You have the right to request:

• Information about how your personal data is processed
• A copy of your personal data (in a structured, commonly used, and machine-readable format)
• To correct immediately any inaccuracies in your personal data.

You can also:

• Raise an objection about how your personal data is processed.
• Request that your personal data be erased if there is no longer a justification for it.
• Ask for the restriction of the processing of your personal data in certain circumstances.

Questions and complaints

Contact us with the contact details provided above if you have questions about this document or the information provided, or questions or requests about your personal data. If you have a complaint, you may contact the Information Commissioner’s Office (ICO) — an independent regulator set up to uphold information rights.

This section applies to website users in the state of California and supersedes any other possibly divergent or conflicting information contained in the Policy for such users.

You can find details regarding the categories of data processed, the purposes of processing, the categories of recipients of the personal data, if any, the retention period, and further information about personal data in the respective sections of this Policy.

The rights according to CCPA and CPRA

• The right to opt out of the sale or sharing of your personal information: You can opt out of the sale or sharing of your personal data to third parties by sending a request to healthtech@onix-systems.com.
• The right to access personal information: You can request a copy of the personal information we hold about you.
• The right to request the deletion of your personal information: You can request that we delete your personal information, subject to certain exceptions.
• The right to correct inaccurate personal information: If your information is inaccurate, you have the right to request correction.
• The right to non-discrimination: You will not face discrimination for exercising any of your rights.

How to exercise these rights

To exercise your rights under the CCPA, please submit a verifiable request to healthtech@onix-systems.com. Please include the following information to help us process your request:

• Your full name
• The specific request (e.g., to access or delete personal information)

Necessary

This Website uses so-called “technical” Cookies and other similar Trackers to carry out activities that are strictly necessary for the operation.

Users can set or update their preferences via the relevant privacy choices panel available on Website.

With regard to any third-party Trackers, users can manage their preferences via the related opt-out link (where provided), by using the means indicated in the third party’s privacy policy, or by contacting the third party.

Users may use their own browser settings to:

• See what Cookies or other similar technologies have been set on the device;
• Block Cookies or similar technologies;
• Clear Cookies or similar technologies from the browser.

The browser settings, however, do not allow granular control of consent by category.

You can find information about how to manage Cookies in the most commonly used browsers (Google Chrome, Mozilla Firefox, Apple Safari, Microsoft Edge, Opera) via each browser’s official documentation.

Users may also manage certain categories of Trackers used on mobile apps by opting out through relevant device settings, such as the device advertising settings for mobile devices, or tracking settings in general (relevant settings may be found in the device settings).

Notwithstanding the above, Website users may follow the instructions provided by YourOnlineChoices (EU and UK), the Network Advertising Initiative (USA), or other similar services. Such initiatives enable users to select their tracking preferences for most advertising tools to control interest-based advertising on mobile apps.

Users are free to decide whether or not to allow the use of Trackers. However, please note that Trackers help this Website to provide a better experience and advanced functionalities to users (in line with the purposes outlined in this document). Therefore, if the user chooses to block the use of Trackers, some features will not be provided.

Given the complex nature of tracking technologies, you are encouraged to contact us if you require any additional information on the use of such technologies by this Website.