The protection of your personal data is a priority for CARDIOID TECHNOLOGIES, which is why, under Regulation No. 2016/679 of the European Parliament and its Council, of 27 April 2016 (General Data Protection Regulation), we are pleased to introduce you to our Privacy Policy for the ECG Biometrics App, to keep you informed on the rules applicable to the processing of your personal data, rights, as well as to inform you on how to manage the respective consents.
The rules provided for in this Privacy Policy complement the provisions on the protection and processing of personal data that are provided for in the contracts celebrated with CARDIOID TECHNOLOGIES. This Privacy Policy applies exclusively to the collection and processing of personal data carried out by CARDIOID TECHNOLOGIES, whenever this takes place.
WHO ARE WE?
Your data will be processed by CARDIOID TECHNOLOGIES Lda, a private limited company with headquarters in Av. D. Afonso Henriques, 1825, 4450-017 Matosinhos, Portugal, NIPC 513 077 634 (hereinafter referred to as CARDIOID).
CARDIOID, through its DPO (DATA PROTECTION OFFICER) is responsible for the processing of your personal data within the meaning of the General Data Protection Regulation (hereinafter referred to as GDPR).
WHAT IS PERSONAL DATA?
Personal data is any information, of any nature and regardless of its support, including sound and image, relating to an identified or identifiable natural person. An identifiable person is considered to be a person who can be identified directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, electronic identifiers or to one or more specific elements of the identity physical, physiological, genetic, mental, economic, cultural or social of that natural person.
WHAT KIND OF PERSONAL DATA DO WE COLLECT?
The ECG Biometrics App (hereinafter referred to as APP) is a mobile application intended to connect to and acquire cardiac signals from CARDIOID devices. These signals may include electrocardiogram, photoplethysmogram, or heart rate signals.
There are three main working modes of the APP.
In the ECG Acquisition mode, the APP connects to a device to acquire and display cardiac signals. Collected data are stored in files on the mobile device and may be deleted at the user’s discretion. No data is uploaded to CARDIOID and no further processing is performed by the app.
In the GPS Acquisition mode, the APP connects to a device to acquire and display cardiac signals, as well as the geographical location of the mobilie device through GPS coordinates. Collected data are stored in files on the mobile device and may be deleted at the user’s discretion. No data is uploaded to CARDIOID and no further processing is performed by the app.
In the Biometrics mode, the APP uses CARDIOID’s patented technology to perform identity recognition using electrocardiographic signals. For this, the APP connects to a device to acquire the cardiac signals and then uploads them to CARDIOID’s cloud services for automatic processing. This functionality is only available to authorized users through a login account mechanism (email and password). The email address is used to send password reset requests and verifications. The user account can be optionally set with a name and a picture.
HOW LONG DO WE KEEP YOUR INFORMATION?
In the ECG Acquisition and GPS Acquisition modes of the APP, CARDIOID does not store any of the collected data. Files stored on the mobile device may be deleted at the user’s discretion.
In the Biometrics mode of the APP, the collected signals are stored by CARDIOID for as long as the user has an active login account.
TO WHOM CAN WE TRANSMIT YOUR PERSONAL DATA?
CARDIOID does not share any data collected by the APP. In the Biometrics mode of the APP, CARDIOID’s cloud services are hosted by a GDPR-compliant provider.
CONFIDENTIALITY
We are committed to keeping your data safe, so we apply appropriate technical and organizational measures to ensure a level of security that is adequate for the risk of keeping your personal data on file.
We also respect the confidentiality of your information. As such, we do not sell, distribute or otherwise commercially make your information available to any third party. In light of the above, CARDIOID undertakes to keep your information confidential in accordance with this Privacy Policy and applicable legislation.
EXERCISE OF RIGHTS
If you still have any doubts regarding the processing of your personal data, or wish to exercise any of your rights, please contact us:
Email: [email protected]
Address: Rua Conselheiro Emídio Navarro 1, Room E.06
1959-007 Lisbon, Portugal
Please note that, from time to time, CARDIOID TECHNOLOGIES may update this Privacy
Policy, and we advise you to periodically review it to stay up to date.
Revision 2.0, May 13, 2024