Privacy Policy

Data Controller

[Company Name]
[Address]
[Contact Information]

1. Data Collection and Processing

We collect and process personal data in accordance with GDPR Article 9, specifically for health data processing. This includes:

• Personal identification information
• Organization details
• Aggregated health risk assessment data

2. Legal Basis

We process your data based on your explicit consent (GDPR Article 9(2)(a)) for health-related data processing. You have the right to withdraw this consent at any time.

3. Data Retention

Your data will be retained for 2 years or until you request deletion, whichever comes first.

4. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure (right to be forgotten)
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent

5. Data Security

We implement appropriate technical and organizational measures to ensure data security and protect against unauthorized access.

6. Contact

For any questions or to exercise your rights, please contact our Data Protection Officer at: [DPO Contact Information]