PRIVACY POLICY

1. Data controller

CareWave Health

Operating in Spain

Contact email: contact@carewavehealth.com

2. Purposes of processing

A. SaaS users

• Account management and platform access
• User or patient follow-up
• Symptom logging and user-provided information
• Report generation
• Reminders (medication, follow-ups, etc.)
• Service improvement, quality and security

B. B2B organizations

• Professional contact
• Demos and pilots
• Commercial relationship and support
• Service-related communications

3. Data categories

SaaS users

• Identifying data
• Usage data
• User-provided data
• Follow-up data

If health data is processed, it is treated as a special category of data under Art. 9 GDPR and requires explicit consent.

B2B

• Name
• Professional email
• Organization
• Job title

4. Legal basis

• Consent
• Performance of contract and service delivery
• Legitimate interest (security, fraud prevention and service improvement)
• Health data: explicit consent

5. Recipients

• Authorized internal team at CareWave Health
• Technology providers acting as processors

6. International transfers

We may use providers located outside the EEA. In those cases, appropriate safeguards apply, including EU Standard Contractual Clauses (SCCs).

7. Retention

• During the active relationship with users or organizations
• For legally required periods

8. Data subject rights

You can exercise the rights of access, rectification, erasure, objection, restriction and portability.

To exercise your rights, contact contact@carewavehealth.com

9. Security

• Data encryption
• Access controls
• Appropriate technical and organizational measures
• Least privilege principle

10. Key clarification

CareWave Health provides a technology support tool and does not deliver medical services. It does not make medical diagnoses and does not replace healthcare professionals.