Privacy information

Under construction. This is preliminary information, not the final privacy notice. The final notice will identify the responsible parties, purposes, legal bases, recipients, transfers, retention periods, and contact process before general availability.
Never enter patient identifiers. Do not enter names, initials, contact details, dates of birth, addresses, record numbers, hospital identifiers, photographs, documents, or identifiable narratives.

1. What this notice covers

This page explains the categories of information OphTrack expects to collect and the choices available to people who use or contact the service. It will be completed after the service records and retention schedule have been formally reviewed.

2. Information that may be collected

  • Account information, such as an email address and optional profile information.
  • Access-request information, such as the email address used to request access.
  • Authentication and security information needed to sign in, prevent abuse, and protect accounts.
  • Structured training-log information entered by the account holder.
  • Messages sent to the contact address and information needed to respond.
  • Limited technical information needed to operate, secure, and troubleshoot the service.

3. Why information is used

Information may be used to process access, provide the requested service, secure accounts, prevent abuse, answer requests, comply with legal obligations, and protect the rights and safety of users. No patient-identifying information is required for the training-log purpose.

4. Data minimisation

Only information needed for a stated purpose should be provided. The service is designed around structured training information. If identifying patient information is entered accidentally, stop using the affected entry and contact contact@ophtrack.com without repeating the information in the message.

5. Sharing and transfers

The final notice will list the service providers and any transfers outside the European Economic Area, together with the applicable safeguards. Information is not intended to be sold or used for advertising.

6. Retention

Information will be kept only for as long as needed for the relevant purpose or as required by law. The precise schedule is being completed and will be published before general availability.

7. Security

OphTrack will apply appropriate organisational and technical measures to protect information. No online service can promise absolute security. Suspected privacy or security incidents should be reported promptly to contact@ophtrack.com.

8. Rights

Depending on the applicable rules and circumstances, people may have rights of access, rectification, erasure, restriction, objection, and portability. See the GDPR & data rights page for the current request process.

9. Contact and complaints

Privacy and DPO-related requests may be sent directly to contact@ophtrack.com. A complaint may also be submitted to the competent supervisory authority, including the CNIL in France.