PRIVACY AND DATA PROTECTION POLICY
1. Overview
The website, www.doctorecosystem.com (hereinafter referred to as “doctorecosystem”), is managed by ACRIBIO, with its registered headquarters in Nicosia, Cyprus under registration number EE 44700. ACRIBIO acts as the data controller for the personal information gathered when you access our website and use the services offered. This refers to all data that can either directly or indirectly identify you.
Doctorecosystem places a high level of importance on safeguarding your privacy and personal data and has implemented all necessary measures to ensure the security and confidentiality of information related to the website's visitors and users.
We kindly request that you carefully review this Privacy and Data Protection Policy (hereinafter referred to as the “Policy”) to familiarize yourself with the types of data we collect when you visit our website and use its online services, how this data is used, and your associated rights.
This Policy serves as a notification to individuals whose data is involved, in accordance with Articles 13 and 14 of the European Union General Data Protection Regulation (GDPR), specifically EU Regulation 679/2016. If you have inquiries regarding this Policy and the manner in which doctorecosystem generally collects and processes your personal data, please reach out to the Data Protection Officer of doctorecosystem via the following contact information: Telephone number: +357 99941810, Email address: [email protected].
Please note that this Policy applies exclusively to doctorecosystem. It is important for visitors and users to recognize that our website may feature links to other websites, and it is essential to be aware that doctorecosystem does not assume responsibility for the practices, terms of use, personal data protection policies, and/or content of these external websites.
2. Data collection
Doctorecosystem is a website through which a visitor can view healthcare professionals’ and medical tourism agencies’ profiles and review their credentials, enabling them to make an informed selection from a network of doctors, dentists and other paramedical staff cooperating with doctorecosystem. Moreover, it allows healthcare professionals, medical students and medical tourism agencies to register to the website in order to be added to the network of doctorecosystem associates and maintain a profile on the website.
For the abovementioned services to be used by healthcare professionals, medical students and medical tourism agencies, the creation of a user account on doctorecosystem is required, which involves entering certain personal data. In case of visitors who solely navigate the website without engaging in account creation, doctorecosystem does not collect nor process any information that can directly or indirectly identify you, other than what may be automatically collected during website navigation.
2.1. Data collected automatically when one visits and interacts with our website.
When visitors use the online services by simply navigating the website, the visitor is not required to provide/enter any personal data. Nevertheless, certain information that can directly or indirectly identify you may be automatically collected during website interaction, such as:
- Your computer's internet protocol (IP) address.
- The web browser and software you use.
- The websites you visit immediately before and after accessing our website.
- Your connection speed and information about installed software programs on your computer.
- Basic server connection data.
- Data collected through HTML cookies, Flash cookies, web beacons, and similar technologies (please refer to our Cookies Policy).
2.2. Data provided directly by you.
2.2.1. “Healthcare professionals” personal data
Healthcare professionals who wish to register to use the online services of doctorecosystem and, in particular, maintain a profile that will allow them to by viewed by users and visitors, who they will then see their credentials, are called to fill in the corresponding registration form. Once said form is submitted, doctorecosystem will collect and process the healthcare professionals’ following personal data:
- Title
- Additional Title
- First Name
- Middle Name
- Last Name
- Specialization
- Sub-specialization
- Address
- Phone number
- Email address
- Country
- City
- Academic studies
- Training and Specialization
- Professional Positions
- Number of publications
- Awards
- Research experience
- Personal message
- Personal interview
- Photo & Video
- Website
- Languages
- Working hours
- Clinical trials and studies experience
In order to create a doctorecosystem account, “users/healthcare professionals” are required to accept the Terms and Conditions and this Policy and if they so wish, they may give their consent to receive newsletter from doctorecosystem by selecting the relevant field.
Once a healthcare professional registers to the doctorecosystem network, their online profile is created, in which all of the above information is entered and is publicly visible in order to serve users and visitors.
2.2.2. “Medical Students” personal data
Medical students who wish to register to use the online services of doctorecosystem and, in particular, maintain a profile that will allow them to by viewed by users and visitors, who they will then see their credentials, are called to fill in the corresponding registration form. Once said form is submitted, doctorecosystem will collect and process the medical students’ following personal data:
- Title
- Additional Title
- First name
- Middle name
- Last Name
- Address
- Contact number
- Email address
- Country
- City
- Academic studies
- Professional Positions
- Awards
- Languages
Once a medical student registers to the doctorecosystem network, their online profile is created, in which all of the above information is entered and is publicly visible in order to serve users and visitors.
2.2.3. “Medical Tourism Agencies” personal data
Medical tourism agencies who wish to register to use the online services of doctorecosystem and, in particular, maintain a profile that will allow them to by viewed by users and visitors, who they will then see their credentials, are called to fill in the corresponding registration form. Once said form is submitted, doctorecosystem will collect and process the medical tourism agencies’ following personal data:
- Country
- Region
- Institution Name
- Main areas of treatment
- Languages
- Pre-plan your treatment in advance: Yes/No
- Private nurse available: Yes/No
- Electronic medical record: Yes/No
- Financing available: Yes/No
- Visa arrangement: Yes/No
- Flight arrangement: Yes/No
- Accommodation arrangement: Yes/No
- Offer transportation: Yes/No
- Logo
- Photo
- Website
- Contact details
In order to create a doctorecosystem account, medical tourism agencies are required to accept the Terms and Conditions and this Policy and if they so wish, they may give their consent to receive newsletter from doctorecosystem by selecting the relevant field.
Once a medical tourism agency registers to the doctorecosystem network, their online profile is created, in which all of the above information is entered and is publicly visible in order to serve users and visitors.
3. Personal data collected from visitors when the contact form of our website is filled in:
Visitors who wish to contact us for any matter are called to fill in the relevant contact form. Once said form is submitted, doctorecosystem will collect and process the following data:
- Full Name
- Email address
- Phone number
- Subject
- Message (free text)
4. Minors
We are committed to ensuring the privacy and protection of all individuals who visit our website. As part of our dedication to ethical data practices, we explicitly state that we do not knowingly collect personal information from minors under the age of 16. If we become aware that we have inadvertently collected personal information from a minor without parental consent, we will take prompt steps to delete such information from our records in accordance with the provisions of Article 8 of the General Data Protection Regulation (GDPR). We strongly encourage parents and guardians to monitor and guide their children's online activities to ensure a safe and secure digital environment. If you have any concerns or believe that we may have collected information from a minor under the age of 16, please contact the Data Protection Officer of doctorecosystem at: [email protected] or at the telephone number +357 99941810 immediately, and we will address the issue promptly and thoroughly.
5. Data Usage
Doctorecosystem uses the personal data it collects from its users for the following purposes:
- To enable healthcare professionals (doctors, dentists, and other paramedical staff, such as physical therapists, etc) to register as users and enhance the visibility of their profiles and credentials within the doctorecosystem network.
- To enable medical tourism agencies to register as users and enhance the visibility of their profiles within the doctorecosystem network, by including essential information about each institution’s credentials and specialities.
- To provide a platform for medical students, facilitating connections with healthcare professionals and companies for internship opportunities, medical practice, and related educational experiences.
- To enable visitors to review the credentials and profiles of collaborating healthcare professionals.
- To communicate with visitors and users based on their specific requests.
- To deliver personalized information material to visitors and users based on their individual needs.
- For statistical purposes, the analysis of collected data is conducted to improve user profiles, monitor and assess website usage, enhance functionality, and optimize content and design.
- To disseminate general information to the public on medical matters.
- To adhere to legal requirements and pursue legal interests, information collected may be used and disclosed to prevent illegal activities, enforce compliance with the website’s Terms and Conditions, and safeguard the rights of both doctorecosystem and its users.
6. Data Retention Period
Doctorecosystem shall retain the personal data it collects, in electronic and/or print form, for the period necessary to fulfil the purposes for which it was originally collected and thereafter as required or permitted by law or as is necessary for doctorecosystem to be able to defend, respond to or conduct prospective or actual legal claims or proceedings.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
7. Third-Party Data Sharing and Disclosure
Doctorecosystem does not sell your personal data. However, there may be occasions when your data is shared with third parties exclusively for the purposes outlined in this Policy and to provide its online services. These third-party entities may include, but are not limited to, payment processors, hosting providers, analytics services, and other service providers that aid in the operation of the website.
Doctorecosystem selects third-party partners carefully and only shares your data to the extent necessary for them to carry out their specific tasks on its behalf. These third parties are contractually required to take all necessary measures to maintain the security and confidentiality of the personal data processed.
Doctorecosystem might also disclose information about you under various circumstances, such as investigating, preventing, or addressing illegal activities, suspected fraud, potential threats to physical safety or other rights and interests, violations of our website's Terms and Conditions, legal requirements, or when it is genuinely believed, in good faith, that sharing such information is necessary.
Furthermore, we may share your information in response to judicial summons, search warrants, legal proceedings, orders, or law enforcement measures from competent authorities, including the Office of the Commissioner for Personal Data Protection and Data Protection Supervisory Authorities of other EU member-states. This sharing may also occur to protect and defend our legal rights or counter any claims against us.
Your personal data is never shared for marketing or advertising purposes without your explicit consent.
8. Consent
By using doctorecosystem and its services, you hereby consent to the practices outlined in this Policy. You agree to the collection, use, and sharing of your personal data as described herein. You are free to withdraw your consent at any moment by addressing your request to the Data Protection Officer of doctorecosystem at: [email protected] or at the telephone number +357 99941810. Additionally, if you have consented to receiving newsletters by doctorecosystem, you have the option to unsubscribe at any time by selecting the relevant field at the end of such communications. If you do not wish for the collection and processing of any data collected automatically while navigating doctorecosystem, we kindly request that you refrain from using the website and the services it provides.
Withdrawing your consent does not negate the legality of the processing of your personal data this far.
9. Security
Doctorecosystem has implemented information security policies, rules and technical measures to safeguard and protect your personal data against accidental or deliberate destruction, loss, unauthorized modification, disclosure, or access, and against any other unlawful processing of the personal data it manages, which it checks regularly. However, despite all possible and in good faith efforts made by doctorecosystem to store its users’ personal data in a secure operational environment that is not open to the public, it should be noted that there is no such thing as complete or perfect security, and doctorecosystem cannot guarantee that there will be no accidental disclosure of your personal data. Users must immediately notify doctorecosystem or the Data Protection Officer of doctorecosystem in case their contact information is lost, stolen, or used without their authorization. In any such case, we will delete your contact information from your account and update our records accordingly.
Personal data may be kept on our personal data technology systems.
10. Your Rights
In relation to the personal data we hold about you, you have rights under the data protection laws. If you would like to exercise, or discuss, any of these rights, please do contact us using the details set out below. At our discretion we may require that you prove your identity before providing the requested information.
- Right to access: upon your request, we will provide confirmation as to whether or not your personal data are being processed and where that is the case, access to the personal data. This enables you to receive a copy of the personal data we hold about you. If you require multiple copies of your personal data, we may charge a reasonable administration fee.
- Right to rectification: you have the right to require that any incomplete or inaccurate personal data that we process about you is amended.
- Right to erasure (‘right to be forgotten’): you are entitled to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing, where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. There are also certain exceptions where we may not always be able to comply with your request for erasure, for specific legal reasons which will be notified to you, if applicable, at the time of your request. One example is where the personal data is required for compliance with law or in connection with claims.
- Right to restriction of processing: you have the right to request that we restrict the processing of your personal data in certain circumstances, such as where you believe such data to be inaccurate, our processing is unlawful or we no longer need to process such data for a particular purpose, but there may be instances where we are unable to fulfil your request for restriction, such as when the processing is necessary due to a legal or other obligation.
- Right to data portability: you have the right to request that we transmit your personal data to another data controller.
- Right to object to processing: you have the right to object to processing where we are processing your personal data based on legitimate interests (or those of a third-party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. However, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms. You also have the right to object where we are processing your personal information for direct marketing purposes.
- Right to withdraw consent: if you have consented to our processing of your personal data, you have the right to withdraw you consent at any time, free of charge.
- Right to lodge a complaint: if you are concerned about any aspect of our privacy practices, including the way we have handled your personal information, you have the right to lodge a complaint with the supervisory authority in Cyprus, the Office of the Commissioner for Personal Data Protection, at the following postal and email address:
Office address: Kypranoros 15, 1061 Nicosia, Cyprus
Postal address: P.O.Box 23378, 1682 Nicosia, Cyprus
Tel: +357 22818456
Fax: +357 22304565
Email: [email protected]
In order to exercise your rights, please send a relevant written request to the Data Protection Officer of doctorecosystem at the e-mail address: [email protected] or contact by telephone at: +357 99941810.
11. Cookies
Doctorecosystem uses cookies to improve the site and deliver a personalised service.
For more information about the cookies used, please see our Cookies Policy.
12. Policy Updates
Doctorecosystem reserves the right to update and change this Policy at any time. These changes will be made public by posting an updated version on the website. Visitors and users are responsible for checking for potential modifications when they visit the website, and if they choose to continue using its services, it is unequivocally assumed that they agree to and accept the revised terms. If visitors and/or users do not agree with said changes, they should refrain from visiting doctorecosystem and/or using its services. Any updated version will become effective as soon as it is posted on doctorecosystem.