At ResolutionMD, we respect your privacy and are committed to protecting it. ResMD has created this Privacy Notice to describe our data practices regarding the personal information we collect about customers of ResMD and users of the ResolutionMD website available at www.resolutionmd.com. This privacy notice does not apply to any patient health information as this is covered under applicable health institution policies.
This Notice applies to the protection of personal data established by the Canada Personal Information Protection and Electronic Documents Act (PIPEDA) and the EU General Protection Regulation (GDPR) 2016/679, and also undertakes to apply to any privacy regulation that may apply to ResMD in the future.
Personal data is processed by ResolutionMD, whose head office is located at 1212 31st Avenue NE, Suite 314, Calgary, Alberta, T2E 7S8, Canada.
Information we collect
We collect personally identifiable information about you when you use our website, when you express interest in purchasing our products, and when you request assistance from us.
NOTE: We do not knowingly collect personally identifiable information from persons under 16 years of age.
Information you provide to us or to a third party
We collect the personal information you voluntarily provide to us, such as your name, contact information, company, and title, when you request information from our website and when you contact us about purchasing a product or requesting assistance.
Information collected by technologies
Cookies - ResMD uses online services, such as a support ticket system, ResMD website, etc. These tools use cookies to collect information. Cookies are small pieces of information that a website sends to your computer’s hard drive while you are viewing the website. Cookies serve a functional purpose and improve user website experience. If you decide that you no longer wish to accept cookies from a site, then you can change your browser’s settings. If you do not accept cookies, however, you may not be able to use all portions of the website.
Log files - The online services also gather certain information automatically and store it in log files. These logs contain the IP address which is automatically assigned to your computer when you get on to the internet; the type of operating system and browser you use; the time and date you visited; how you used the tool; etc. These are used to identify popular features, resolve user problems, and improve the product.
How we use you personal information
The personal data collected is used as part of the services provided by ResMD through its website and the ResMD product. Using the data minimization principle, ResMD commits to collect only the personal data necessary and are for the following purposes:
- Processing a request for information or providing product/marketing information that we think will be of use to you,
- To carry out our obligations and enforce our rights arising from our contracts entered between you and us,
- Creating and managing your user accounts,
- Product improvement updates,
- Educational and product support.
Regarding the GDPR, processing has legal bases in the context of a customer contract and regulatory compliance, and by consent for direct marketing activities.
In compliance with the regulation applicable to the use of your personal data, ResMD reserves the right to use your data for the information purposes on its products and services or for any other purpose evident and necessary to the information of the user.
In general, ResolutionMD uses your personal information to respond to your requests or to aid us in serving you better. We use personal information to perform data analysis and audits, safeguard and protect our site and product, improve the site and product, create accounts, identify usage trends, provide improvement administration of our site and product, identify you as a user in our system, send you administrative email notifications, respond to your inquiries, and to provide you the services you request.
How we share your information
ResolutionMD shares or transfers your personal information as described below and as described elsewhere in this Notice:
- ResMD may share your personal information to comply with any court order, law or legal process, including for legal, medical, or security reasons, to respond to any government or regulatory request, or in connection with a merger, financing, acquisition, or dissolution transaction.
- We will share your personal information to certain third party service providers to provide you with the services that we offer through our website or products, to conduct quality assurance testing; to facilitate creation of accounts, to provide technical support, and/or to provide other services to ResMD. In this case, all third parties are committed to follow applicable data protection regulations. This obligation is provided in contracts that bind these third parties to ResMD according to data protection rules.
Personal information is processed in the country in which it was collected and in other countries where laws regarding processing of personal information may be less stringent than the laws in your country. By providing your personal information, you consent to such transfer.
ResMD undertakes to prove that personal data transferred outside the EU will be compliant to the GDPR. Such transfers must be done on the basis of an adequacy decision, appropriate safeguards, or binding corporate rules (BCR).
How we protect your information
ResolutionMD maintains technical, administrative, and physical safeguards designed to protect against unauthorized disclosure, alteration, use or destruction of the personal information we process. ResMD implements all the measures at its disposal to create an environment for preserving the quality, security, and integrity of your personal data. See the ResolutionMD Privacy and Security Policy Manual for more information.
ResMD also employs reasonable technologies to help keep personal information secure, including encryption, firewalls, system alerts, and other information system security technologies; housing data in secure facilities that restrict physical and network access; and regular evaluation and enhancement of our information technology systems, facilities, and information collection, storage, and processing practices.
However, we cannot ensure or warrant against all risks regarding the security of that information, so there is some risk to the personal information that we store. ResMD does not guarantee that such information may not be accessed, disclosed, altered, or destroyed by breach of any of our safeguards. In addition, other services that may be accessible through ResMD have separate data and privacy practices independent of us, and we disclaim any responsibility or liability for their policies or actions.
Storage period of your personal data
ResolutionMD retains your personal data only for the duration necessary for the operations for which they were collected and in compliance with the applicable regulations. Your personal data is kept for the duration of the contract and for an additional 10 years for the purposes of regulatory compliance and commercial, without prejudice of the obligations of conservation or limitation periods. Prospective customer data is retained for a period of three (3) years from the date of the last contact with ResMD.
Upon your request, we will delete or anonymize your personal data so that you can no longer be identified, unless the law authorizes or compels us to keep certain personal data, especially in the following situations:
- If there is an unresolved issue with your account, such as an unpaid or unresolved claim or litigation, we will retain the necessary personal data until the issue is resolved;
- If we are required to retain personal data as a result of legal, auditing, or accounting obligations, we will retain the necessary personal data for the period required by the applicable law.
Individual rights
You may send us an email via our contact link to request access to, correct, or delete any personal information that you have provided to us. However, we may not accommodate a request to delete to change information if we believe it would violate any law or legal requirement. ResolutionMD will address any privacy issues within one month from the date of receipt.
Except as limited by applicable law, such as medical device regulation compliance, your individual rights are, as per the EU GDPR:
- Right to be informed and to request access to the personal data we process;
- Right to rectification: the right to ask us to update your personal data when they are inaccurate;
- Right to erasure: the right to ask us to permanently delete your personal data;
- Right to restriction of processing: the right to ask us to stop temporarily or permanently the processing of all or part of your personal data;
- Right to object: the right to refuse at any time the processing of your personal data for personal reasons or for direct marketing purposes;
- Right to data portability: the right to request a copy of your personal data in electronic format and the right to transmit such personal data for use by a third party service.
Changes to this Notice
We may revise this Notice from time to time as we add new features or modify the way in which we manage information or as laws change. If we do, we will post the changes on the website and update the last updated date. We encourage you to periodically review this Notice to see if there have been any changes that may affect you.
Contacting ResolutionMD
If you have any questions, concerns, or grievances about this Notice or our data processing practices, or if you have a request for access to your personal data that ResMD has, please contact the Privacy Officer at privacy@resolutionmd.com or at ResolutionMD, Suite 314, 1212 31st Ave NE, Calgary, AB, T2E 7S8, Canada.
ResolutionMD will address any privacy issues within one month from the date of receipt. Regarding the GDPR, you have the right to lodge a complaint with a supervisory authority in your country.