PRIVACY POLICY

Biocorp pays particular attention to the protection of personal data. This is an essential condition of the relationship of trust that Biocorp wishes to establish with all users of the Mallya medical device (hereafter the “MD”).

This privacy policy (the “Policy”) sets forth the practices and conditions under which Biocorp (the “Company”) processes your personal data (the “Data”).

This Policy applies when your Data is collected by the MD and the mobile application of which the Company is the editor.

1. What Data is collected?

When using the MD Mallya, the Data collected is insulin delivery data, namely:

  • Selected dose,
  • Date of issue,
  • Time of delivery.

Anonymised navigation data may also be collected by the mobile application.

For smartphones using the Android operating system, the functions for reconnection to the MD and automatic retrieval of new insulin dose injections by the mobile application, require your permission to use the location, even when the application is in the background. No geographical location coordinates are recorded, the location being used exclusively by the application for the purposes described above. The location data is therefore never used for commercial or for data-logging purposes.

2. How is your Data collected?

Data relating to insulin delivery is collected when using the Mallya MD.

3.How is your data stored and protected?

The collected data is stored in the internal memory of the MD.

The MD incorporates appropriate technical security measures to preserve the security and confidentiality of your Data in order to, amongst others, prevent it from being distorted, damaged, disclosed and accessed by unauthorized third parties.

4.Why is your Data collected and what is it used for?

Data is collected to be securely transmitted to the mobile application that you will have previously connected to the MD, so that this mobile application can allow medical monitoring.

Anonymised navigation data may also be collected for purely statistical purposes, allowing technical monitoring of the correct operation and/or possible errors in the application. Specifically, within the framework of this technical data monitoring, Biocorp also uses the services provided by Google (specifically for their Google Analytics tools; Crashlytics, Remote config.) and reserves the right to transmit the navigation data to it in its capacity as its service provider. Any transmission is made in full compliance with the applicable laws and regulations on the protection of personal data and solely for the purpose of fulfilling the described purposes.

We have concluded contracts with this company, when it is likely to use servers located outside the European Union for the processing of this navigation data, in which specifically dedicated contractual clauses are included, such as or based on those established by the European Commission, in order to provide a framework for and secure the transfer of your data to this service provider. You may request a copy of these clauses by writing to gdpr@biocorp.fr.

The location data is only used to maintain or re-establish a Bluetooth connection with the DM, enabling the uploading of insulin injection data; no other use of the location data is made.

5.How long is your Data kept for?

The MD stores the last 100 insulin deliveries.

All data collected in the internal memory of the MD is erased by resetting the MD.

6.What are your rights?

In accordance with the applicable regulations and under the conditions defined therein, you may at any time exercise your rights (access to data, data correction, data erasure, opposition, portability and limitation to data processing) by unchecking the dedicated option in the mobile application with regard to navigation data, by resetting the MD or uninstalling/deleting the mobile application from your smartphone, with regard to all other Data.

7.Changes to this Privacy Policy

Any changes by the Company to this Policy will be updated on the Company’s website: http://mallya.local

The User is invited to regularly consult this Policy in order to be aware of any update or modification.

If any provision of this Policy is declared null and void or contrary to regulations, it will be deemed cancelled but will not invalidate the other provisions of the Policy.

 

version 1.2 – January 2021