Privacy information
1. What this notice covers
This page explains the categories of information OphTrack expects to collect and the choices available to people who use or contact the service. It will be completed after the service records and retention schedule have been formally reviewed.
2. Information that may be collected
- Account information, such as an email address and optional profile information.
- Access-request information, such as the email address used to request access.
- Authentication and security information needed to sign in, prevent abuse, and protect accounts.
- Structured training-log information entered by the account holder.
- Messages sent to the contact address and information needed to respond.
- Limited technical information needed to operate, secure, and troubleshoot the service.
3. Why information is used
Information may be used to process access, provide the requested service, secure accounts, prevent abuse, answer requests, comply with legal obligations, and protect the rights and safety of users. No patient-identifying information is required for the training-log purpose.
4. Data minimisation
Only information needed for a stated purpose should be provided. The service is designed around structured training information. If identifying patient information is entered accidentally, stop using the affected entry and contact contact@ophtrack.com without repeating the information in the message.
5. Sharing and transfers
The final notice will list the service providers and any transfers outside the European Economic Area, together with the applicable safeguards. Information is not intended to be sold or used for advertising.
6. Retention
Information will be kept only for as long as needed for the relevant purpose or as required by law. The precise schedule is being completed and will be published before general availability.
7. Security
OphTrack will apply appropriate organisational and technical measures to protect information. No online service can promise absolute security. Suspected privacy or security incidents should be reported promptly to contact@ophtrack.com.
8. Rights
Depending on the applicable rules and circumstances, people may have rights of access, rectification, erasure, restriction, objection, and portability. See the GDPR & data rights page for the current request process.
9. Contact and complaints
Privacy and DPO-related requests may be sent directly to contact@ophtrack.com. A complaint may also be submitted to the competent supervisory authority, including the CNIL in France.