Privacy Policy
Last updated: February 2026
PRIVACY POLICY
1. Data Controller
Cynalys
Email: contact@doctoGyn.com
2. Categories of Data Collected
2.1 Account Data
- Name
- Phone number
- Professional information
- Billing data
2.2 Patient Data (Processed on Behalf of Users)
- Medical history
- Clinical notes
- Diagnostic results
- Imaging data
- Prescriptions
2.3 Technical Data
- IP address
- Login logs
- Device/browser information
- Usage activity
3. Legal Basis for Processing
Processing is based on:
- Contractual necessity
- Legal obligations
- Legitimate interests
- Explicit consent where required
- Article 9 GDPR (processing of health data)
4. Data Processors and Service Providers
We may engage third-party service providers for:
- Cloud hosting
- Payment processing
- Technical maintenance
Such providers are contractually bound by confidentiality and security obligations.
5. International Data Transfers
Where data is transferred outside the European Union, appropriate safeguards are implemented (Standard Contractual Clauses or equivalent mechanisms).
6. Data Retention
Data is retained:
- For the duration of the subscription
- As required by applicable law
- Until deletion is lawfully requested
Deleted data cannot be recovered.
7. Data Subject Rights
Under GDPR and applicable law, individuals have the right to:
- Access their data
- Rectify inaccurate data
- Request erasure
- Restrict processing
- Request data portability
- Object to processing
- Withdraw consent
Requests may be submitted to:
contact@doctoGyn.com
8. Anonymized Data
Aggregated and anonymized data may be used for:
- Statistical analysis
- Scientific research
- Service improvement
- Technology development
No identifiable data is used without lawful basis.
9. Security Measures
Cynalys implements appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, or loss.