1. General information

CANKADO GmbH takes the protection of personal data very seriously and aligns the data processing with the aim of collecting, processing or using only the personal data necessary for a meaningful use of the offer. Cankado has taken technical and organizational measures to ensure compliance with data protection regulations.

2 . Responsible party

2.1 The responsible party within the meaning of the data protection laws is:
CANKADO GmbH
Kyivstraße 9
81735 Munich
Germany
If you, as a user, have questions or suggestions regarding data protection or wish to exercise rights regarding the processing of personal data, you can contact us by e-mail at [email protected].

3 . Subject matter of data protection

3.1 The subject of data protection is personal data. Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is considered to be identifiable, directly or indirectly, in particular by assigning it to an identifier such as a name, identification number, location data, an online identifier; or can be identified to one or more special features that express the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

4 . Legal basis for data processing

4.1 Cankado processes the personal data arising from the use of the services provided by Cankado either with the consent of the user (Art. 6 para. 1 lit. a) DSGVO), as far as necessary for the performance described in accordance with the data protection declaration (Art. 6 para. 1 lit. b) DSGVO), or on the basis of a balance of interests to safeguard the legitimate interests of Cankado (Art. 6 para. 1 lit. f) DSGVO). If Cankado processes personal data for the purpose of safeguarding legitimate interests (Art. 6 para. 1 lit. f) DSGVO), a legitimate interest may also lie in the continuous improvement of the security and user-friendliness of Cankado’s services.

5 . Rights of the User

5.1 The user has the following rights in relation to his personal data: (a) The right to information (Art. 15 DSGVO) (b) The right to rectification (Art. 16 DSGVO) (c) The right to erasure (Art. 17 DSGVO) (d) The right to restriction of processing (Art. 18 DSGVO) (e) The right to object to processing (Art. 21 DSGVO) (f) The right to data portability (Art. 20 DSGVO) These rights shall be exercised against the responsible body as described in 2.1. 5.2 It should be noted that the rights mentioned in (b), (c), (d), (e) and (f) above depend on further legal requirements. 5.3 The user has the right to lodge a complaint with a data protection supervisory authority against the processing of his personal data.

6 . Automated data collection

6.1 When using the secured area and the associated apps (hereinafter referred to as “APP”), the user’s device, e.g. a smartphone, automatically transfers the following data to Cankado:        – Date and time of access, – Operating system used, – terminal device used, – the amount of data sent, – IP address. The processing of this data is carried out in order to enable the user to use the APP technically. With the exception of the IP address, this data is evaluated for statistical purposes and for the improvement of the APP. Depending on the setting, the user’s device may also transmit location information to Cankado.

7 . Downloading the APP

7.1 When downloading the APP, certain information necessary for this purpose is transferred to the respective App Store. Cankado has no influence on this data collection and is not responsible for it.

8 . Creation of a user account

8.1 A valid user account must be created in order to use the APP. 8.2 The following data is collected by the user in order to be able to provide the user account and the associated functions. For the use of a physician account:        – last name – First name – E-mail address – Uniform training number (EFN) – Workplace information, e. g. practice names When using the APP by a nurse, Cankado also collects a declaration of consent from the physician responsible for the nurse. For the use of a patient account:        – E-mail address For patient accounts created by a physician or an authorized nurse, no personal data is required for creation. The account receives a pseudonymized ID. 8.3 Cookies and other technologies — Cankado uses technologies such as cookies to provide, improve and protect the services described. In the browser, the user can decide whether or not to accept cookies, but Cankado may not be able to provide the described services in full without cookies.

9 . Data entered by a user

9.1 With a patient account, a therapy plan can be stored in the APP and the corresponding course of therapy can be documented. Users can, among other things, enter the following data:        – General data (e. g. gender and year of birth) – Data on treatment (e.g. name and sample of medication to be taken as well as other routines for additional therapy components) – Medication intake – Upload documents, e.g. a physician’s letter – Cankado offers users the possibility to personalize a user account, e.g. with a username and a photo. There is no obligation to personalize the user account. This is done solely on a voluntary basis. 9.2 If users share their account with their attending physician or their account has been created by a physician or a nurse as part of a study or support program, the following additional data may be collected:        – Measurements (e.g. blood pressure and weight) – Health status data (e.g. name, frequency and manifestation of symptoms/complaints) 9.3 Internet access is required for the use of the APP. Once the device is connected to the internet, the stored data is transmitted encrypted to Cankado. The data will be processed by Cankado for the purposes of providing the functions of the APP and for backup purposes. 9.4 All data is stored on ISO 27001 certified servers in Germany. 9.5 By agreeing to this privacy policy, the user agrees that Cankado may collect, store and use the personal health data entered by him in order to provide the described functions of the APP. 9.6 The user is the owner of his personal health data and these are not used by Cankado for any other purpose and will not be disclosed to third parties. 9.7 The user can revoke the consent in accordance with clause 2.9.5 at any time with effect for the future.If the user wishes to assert his right to withdraw his consent, he can contact the responsible party at any time, as described under 2.1. It should be noted that the possibility of using the APP may be restricted or excluded after the revocation of consent.

10 . Sharing user data with other users

10.1 Where appropriate, Cankado will provide the user with the opportunity to connect with other users via the APP and to give them access to their health data. 10.2 Networking with other users takes place via an invitation, which the user can generate via the APP and send by e-mail to a contact. If the contact is also a user of the APP, this contact can view or edit the shared data if the user has granted this right. 10.3 The user decides for himself whether and to what extent he wishes to use the above-mentioned functionality. There is no obligation to connect your user account to another user account. This is done solely on a voluntary basis. The user account should only be connected to people the user trusts. The user can disconnect the network with another user at any time.

11 . Use of analysis tools

11.1 For the analysis of the use of the APP, Cankado collects anonymous statistical usage data using the analysis tools mentioned in the following paragraphs. This anonymous usage data helps improve the APP and cannot be assigned to the user at any time. Collected usage data can be, for example, crash reports if the APP crashes during use. 11.2 Cankado uses app analysis services from Apple Inc. and Google Inc. With this tool, for example, data regarding download and usage of the APP is processed. Cankado does not receive any personal data stored about the user from Apple Inc. or Google Inc. The usage analysis only takes place if the user has given his prior consent. Further information can be found in the data protection menu of the respective device.

12 . Changes to the Privacy Policy

12.1 Cankado reserves the right to change this privacy policy. The current version of the Privacy Policy can be found on the website (cankado.ai).This reservation of change does not apply to the data protection consent according to clause 9.5, which was granted with consent to this data protection declaration.