Privacy policy

Status:January 2023

We are pleased about your visit! Since the protection of your personal data is particularly important to us, you will find below information about what data we collect during your visit to our website and when using the eLina app (hereinafter "CureCurve Medical AI offers") and how and for what purpose we process it.

Personal data means any information relating to an identified or identifiable natural person.

We collect, process and use personal data in accordance with the following principles and in compliance with the applicable legal provisions on data protection.

You can access this privacy policy at any time under the item "Privacy Policy" within the app.

1. Person responsible and data protection officer

1.1 The CureCurve Medical AI offerings are provided by the

CureCurve Medical AI GmbH

Jungbuschstraße 18

68159 Mannheim

represented by Tiziano Bruno and Denis Skrijelj

(hereinafter "CureCurve" or "we")

as the responsible party within the meaning of the applicable data protection law.

1.2 Our data protection officer can be reached at the following contact details:

Prof. Dr. Hans-Hermann Dirksen

LIEBENSTEIN CONFIDENTIAL GmbH

Eschersheimer Landstrasse 351

60320 Frankfurt am Main

Tel: + 49 69 2729 5921

FAX: +49 69 2729 5923

Email: mail@liebenstein-confidential.de.

2. information on the processing of your data

Certain information is already processed automatically as soon as you use the app. We have listed below exactly which personal data is processed:

2.1 Information collected during download

When downloading the app, certain required information is transmitted to the corresponding app store (e.g. Google Play or Apple App Store), in particular the user name, the e-mail address, the time of the download, payment information and the individual device identification number may be processed. The processing of this data is carried out exclusively by the respective app store and is beyond our control.

2.2 Information that is collected automatically

As part of your use of the App, we automatically collect certain data that is required to use the App. This includes:

- Date and time of access

- The operating system

- the smartphone type

- the amount of data transmitted, and

- the IP address.

This data is automatically transmitted to us, but not stored, (1) to provide you with the Service and related features; (2) to improve the features and functionality of the App; and (3) to prevent and remedy misuse and malfunction.

This data processing is justified by the fact that (1) the processing is necessary for the performance of the contract between you as a data subject and us pursuant to Art. 6 (1) lit. b DSGVO for the use of the App, or (2) we have a legitimate interest in ensuring the functionality and error-free operation of the App and in being able to offer a service that is in line with the market and interests, which here outweighs your rights and interests in the protection of your personal data within the meaning of Art. 6 (1) lit. f DSGVO.

The processing of the data described above is mandatory for the operation of the app.

2.3 Creation of a user account (registration) and login

To use the eLina app, you must register for a user account. When you create a user account or log in, we use your access data (email address and password) to grant you access to and manage your user account ("Mandatory Information"). If you do not provide this information, you will not be able to create a user account.

We use the mandatory information to authenticate you when you log in and to follow up on requests to reset your password. The information you provide during registration or login is processed and used by us (1) to verify your authorization to manage the User Account; (2) to enforce the App's Terms of Use and any rights and obligations associated therewith; and (3) to contact you to send you technical or legal notices, updates, security messages, or other communications relating to, for example, the management of the User Account.

Before using the services (free or paid) on our platform for the first time, we ask you to fill out a questionnaire. Your answers to the questions in this questionnaire may contain data related to your heart health, quality of life and well-being. Completion of this questionnaire is required to use the Offerings on the Platform, as the design of the Offerings is influenced by the results of these questions.

This data processing is justified by the fact that (1) the processing is necessary for the fulfillment of the contract between you as the data subject and us pursuant to Art. 6 (1) lit. b DSGVO for the use of the app and, insofar as health data are processed for this purpose, on the basis of the consent given by you during registration pursuant to Art. 6 (1) lit. a, Art. 9 (2) lit. a DSGVO. The consent is required for the use of the app.

2.4 Use of the app

Within the app, you can enter, manage and edit various information, tasks and activities. This information includes, in particular, data about the management and documentation of your treatment, especially:

- Disease history information,

- Personal data and medications,

- Measurements like blood pressure,

- Findings and symptoms,

- Age and gender.

The app also requires the following permissions:

- Internet access: This is required to use the eLina app.

- Camera access: This is required to scan medications.

The processing and use of usage data is carried out for the provision of the service. This data processing is justified by the fact that the processing is necessary for the performance of the contract between you as the data subject and us pursuant to Art. 6 (1) lit. b DSGVO for the use of the app.

Insofar as the processed data is health data, the processing is based on the consent given by you during registration in accordance with Art. 6 para. 1 lit. a, Art. 9 para. 2 lit. a DSGVO. The consent is required for the use of the app. You can revoke your consent at any time with effect for the future (see right of objection).

2.5 Push notifications

With the consent of users, we may send users so-called "push notifications". These are messages that are displayed on the end devices or in browsers of the users, even if our service is not actively used at the moment.

To sign up for the push messages, users must confirm their end device's request to receive the push messages. This consent process is documented and stored. The storage is necessary to recognize whether users have agreed to receive the push messages.

The processing and use of this data is carried out to provide our offer and to improve the user-friendliness.

The legal basis for the processing is their consent according to Art. 6 para. 1 p. 1 lit. a) DSGVO.

You can revoke your consent to the storage and use of your personal data to receive our push notifications at any time with effect for the future.

2.6 Analysis of usage behavior

To further develop the eLina app, we analyze usage behavior with the help of anonymized data.

The processing and use of this data is for the provision and improvement of the service. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. The legitimate interest here is the named optimization of the service.

2.7 Evaluation of the offer

If you use our free services, we ask you to rate the services you use in the form of surveys, interviews and/or other forms. The evaluation is voluntary. When evaluating, it is necessary to state the (user) name, the offer used and the content of the evaluation.

We use your rating to evaluate, optimize and further develop our offers. The data will not be passed on to third parties. If evaluations are shared with mentors, this is done on an anonymous basis.

The legal basis for the processing of evaluation data is Art. 6. para. 1 lit. f DSGVO. The data will be deleted in accordance with the statutory provisions as soon as the evaluation of the respective offers has been completed.

3. Cookies

We use cookies on our website. We use cookies. Cookies are small text files that are stored on your terminal device when you call up the page. They cannot transfer viruses or malware to your computer, but they do contain information that allows the user to be identified.

3.1 The use of cookies serves on the one hand to make the use of our offer more pleasant for you. We use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

3.2 In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your end device for a certain fixed period of time. If you visit our site again, it is automatically recognized that you have already been with us and which entries and settings you have made so that you do not have to enter them again.

3.3 On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. These cookies enable us to automatically recognize that you have already been to our site when you visit it again. These cookies are automatically deleted after a defined period of time.

The legal basis for the processing of personal data using technically necessary cookies is our legitimate interest pursuant to Art. 6 para. 1 lit. f) DSGVO. The legal basis for the processing of personal data using cookies for analysis purposes, for ad control or evaluation and for tracking technologies used by us is Section 25 (1) of the Telecommunications and Telemedia Data Protection Act (TTDSG) or Art. 6 (1) f) DSGVO.

4. disclosure and transmission of data

In addition to the cases explicitly mentioned in this data protection declaration, your personal data will only be passed on without your express prior consent if this is permitted or required by law.

4.1 The data you provide during registration will be shared within our company for internal administrative purposes, including joint customer support, to the extent necessary.

Any disclosure of personal data is justified by the fact that we have a legitimate interest in disclosing the data for administrative purposes within our company and that your rights and interests in the protection of your personal data within the meaning of Art. 6 (1) lit. f DSGVO are not overridden.

4.2 If it is necessary to clarify illegal or abusive use of the app or for legal prosecution, personal data will be forwarded to law enforcement agencies or other authorities and, if necessary, to injured third parties or legal advisors. However, this only happens if there are indications of unlawful or abusive behavior. A transfer may also take place if this serves the enforcement of terms of use or other legal claims. We are also legally obligated to provide information to certain public authorities upon request. These are law enforcement agencies, authorities that prosecute administrative offenses subject to fines, and the tax authorities.

Any disclosure of the personal data is justified by the fact that (1) the processing is necessary for compliance with a legal obligation to which we are subject pursuant to Art. 6 para. 1 lit. f DSGVO in conjunction with. national legal requirements to disclose data to law enforcement authorities, or (2) we have a legitimate interest in disclosing the data to the aforementioned third parties if there are indications of abusive behavior or to enforce our terms of use, other conditions or legal claims, and your rights and interests in the protection of your personal data within the meaning of Art. 6 para. 1 lit. f DSGVO do not override.

4.3 We may rely on contractually affiliated third-party companies and external service providers to provide the functionalities of the eLina app.

Should data be passed on to service providers within the framework of so-called order processing, this is done on the basis of Art. 28 DSGVO. Our processors are carefully selected, are bound by our instructions and are regularly monitored by us. We only commission processors who offer sufficient guarantees that appropriate technical and organizational measures are taken in such a way that the processing is carried out in accordance with the requirements of DSGVO and BDSG-neu and ensures the protection of your rights.

4.4 As our business evolves, we may change the structure of our business by changing its legal form, establishing, buying or selling subsidiaries, divisions or components. In such transactions, customer information may be transferred along with the part of the company being transferred. For any transfer of personal information to third parties to the extent described above, we will ensure that it is done in accordance with this Privacy Policy and applicable data protection law.

Any disclosure of personal data is justified by the fact that we have a legitimate interest in adapting our corporate form to the economic and legal circumstances as necessary and that your rights and interests in the protection of your personal data within the meaning of Art. 6 (1) lit. f DSGVO are not overridden.