Albatross App - Privacy Statement
Albatross Care SA (hereinafter also referred to as “Albatross”, “us” or “we”) take the protection of your personal data very seriously. Personal Data is any information which may lead to your identification. This Privacy Statement explains what data we collect and how we use and protect the data collected. This Privacy Statement applies to any Personal Data that we process.
The constant development of the internet requires occasional adjustments to this Privacy Statement. We retain the right to make changes when necessary.
Information about Albatross
Owner of www.albatross.care is:
Albatross SA
Dreikönigstrasse 34
8002 Zurich
Terms
‘Personal Data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
‘Controller’ means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
‘Processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Data Controller and Contact Details
The Controller of your Personal Data is Albatross SA.
Please contact Albatross SA with any problems, questions or suggestions that you may have.
Contact Information:
Albatross Care SA
Dreikoenigstrasse 34
8002 Zurich
T: +41 44 552 52 11
E-Mail: hello@albatross.care
Collection of Data
You need to create a personal profile to begin collecting data for your personal report to track the treatment success with medical cannabis. If you decide to test the app and don't register, no data is stored on our system. If you decide to register, our goal is to keep the data footprint as small as possible during the data collection period.
Mandatory information that needs to be provided to create a user profile:
- Your name, birth date and email address
- Size and weight
- Reason for using cannabis
During data collection period, we will collect the following data:
- Questionnaires on individual health on daily / bi-weekly basis
- Step count to calculate activity levels
At the end of the data collection period, we will need to collect the following information to finalize your personal report:
- Your health insurances name, address, and health insurance number
- Your full address
- Gender
- Your HCP in charge of your therapy, including email address
- Cost of cannabis medication
To collect activity levels (in our case: Step Count), we are using Google Health Connect on Android phones. The use of information received from Health Connect will adhere to the Health Connect Permissions Policy, including the Limited Use requirements.
Processing of Personal Data / Transfer of Personal Data
The processing of your Personal Data is generally carried out by the Controller through automated systems hosted at the following providers:
· Microsoft Switzerland (authentication, processing and storage). Data is processed and stored in Switzerland and backed up into a geographically separate facility in the European Union. Data is encrypted at rest.
· Cloudflare (application firewall)
· Google (analytics, opt-in only)
Your data will be visible to your healthcare professional if you are using an invite code.
Albatross employs the third-party providers listed above to operate the product. The third-party providers provide services such as technical services, mail carriers, hosting and IT infrastructure. These third-party providers are, as necessary, appointed as data processors by the Controller. An updated list of these parties may be requested from the Data Controller at any time.
We will retain control of and responsibility for the use of any Personal Data processed by us. Some of this data may be stored or processed on computers located in other jurisdictions, such as the United States, whose data protection laws may differ from the jurisdiction in which you live. In such cases, we will ensure that appropriate protections are in place to require the data processor in that country to maintain protections on your Personal Data that are equivalent to those that apply in the country in which you live. In case you have questions relating to your Personal Data and potential transfers of your Personal Data and the protections taken connected to such transfers please do not hesitate to send an e-mail to the Controller as mentioned in section 3.
Your Personal Data will not be passed on by us or by our agents/data processors for use by third parties in any form whatsoever, unless for purposes listed in this document, for which we have obtained your consent or are legally obliged/entitled to do so.
Purposes of Use
The Personal Data that you actively provide us with will only be used for the purpose for which you provide such data. This means that the app will collect all data described in “Collection of Data” to create the reimbursement report and facilitate communication with your healthcare provider.
Security
Albatross uses technical and organizational security precautions to protect your Personal Data from manipulation, loss, destruction or access by unauthorized persons. Our security procedures are continuously revised based on new technological developments.
Children
Albatross is not intended to be used with patients below 18 years of age.
Rights
You have the right to request from the Controller (1) access to and (2) rectification or (3) erasure of your Personal Data or (4) restriction of processing of your Personal Data as well as you can (5) object to the processing of your Personal Data. In addition, you have (6) a right to data portability. Just send an e-mail to the Controller of your Personal Data as mentioned in section 3.
Right to Withdraw Consent at Any Time
You have the right to withdraw your consent to the processing of your Personal Data at any time. Such withdrawal will, however, not affect the lawfulness of processing based on consent before its withdrawal. Again, just send an e-mail to the Controller of your Personal Data as mentioned in section 3.
Data Retention
We only retain Personal Data for as long as is necessary for us to render the service you have requested or to which you have given your consent, or to fulfill the purposes as set out in this document and the Cookie Notice except where otherwise provided by law (e.g., in connection with a pending litigation). You have at any time the right to request the Data Controller to suspend or remove your Personal Data. Again, just send an e-mail to the Controller as mentioned in section 3.
Right to Lodge a Complaint with a Supervisory Authority
If you are based in the EU, you have the additional right to lodge a complaint with a supervisory authority if you do not agree with the processing of your Personal Data.
Changes to this Privacy Statement
Albatross reserves the right to make changes to this Privacy Statement at any time. It is strongly recommended to check this page often and consider the date of the last modification listed at the bottom of this document. If you disagree with the use of your Personal Data set out in this Privacy Statement, you should quit using our website and can send a request to the Data Controller to suspend or remove your Personal Data. Just send an e-mail to the Controller of your Personal Data as mentioned in section 3.
BY PROVIDING PERSONAL DATA TO US AND BY USING OUR WEBSITE, YOU CONSENT TO THE COLLECTION AND USE OF YOUR PERSONAL DATA IN ACCORDANCE WITH THIS PRIVACY STATEMENT.
Last updated: 2023-09-21