INFORMATION AND CONSENT NOTICE
The user is invited to read this information notice carefully and to give their express prior consent to any registration for the services offered by AFRIQCARE.
AFRIQCARE SASU registered under number B.00295 at the RCCM of Conakry, Republic of Guinea, with its head office located within the Bleuzone of Dixinn-Conakry Guinea.
AFRIQCARE is particularly concerned about respecting the privacy of individuals and ensures that their personal data is processed in accordance with good confidentiality practices and the applicable legislation on the protection of personal data, in particular the Union Convention . African Conference on Cybersecurity and Personal Data Protection of June 27, 2014.
The purpose of this Information Notice relating to the processing of personal data (hereinafter the “Notice”) is to communicate the commitments made by AFRIQCARE for the protection of personal data processed via the site www.afriqcare.com (hereinafter the “Website” or the “AFRIQCARE Website”) as part of its Services, and to inform you of your rights in this regard.
This Notice is an integral part of the General Conditions of Use and the General Conditions of Subscription of the Website.
WHAT IS THE ROLE OF AFRIQCARE?
AFRIQCARE is responsible for the processing of personal data, within the meaning of the African Union Convention on cybersecurity and the protection of personal data of June 27, 2014, the purpose of which is the management of the services provided by AFRIQCARE to Users, and in particular the service for making appointments, the digital health booklet (Find out more: www.afriqcare.com ).
Personal health data is hosted by AWS Healthcare, a host that has received HADS approval (Approved Health Data host) in France.
PURPOSE OF THIS INFORMATION NOTICE
AFRIQCARE would like to inform you through this notice of the way in which we protect your personal data processed via the site www.afriqcare.com or via the “AFRIQCARE” application available on mobile.
This notice describes the way in which AFRIQCARE and health professionals subscribing to its services process the personal data of visitors and users (hereinafter the “User(s)”) when browsing the site www .afriqcare.com (hereinafter the “Site”) and their use of AFRIQCARE services or its mobile application “Afriqcare”)
Certain Personal Data of the User must be considered as personal health data, and are hereinafter referred to as “Personal Health Data”. This notice may be modified, supplemented or updated in order to comply with any legal, regulatory, jurisprudential and technical developments. However, the User's Personal Data will always be processed in accordance with the notice in force at the time of their collection, unless a mandatory legal requirement provides otherwise and would apply retroactively.
This policy is an integral part of the General Conditions of Use of the Site.
DATA MANAGER
For Personal Health Data collected by the User when making an appointment directly via the Site or the Application or by the Health Professional in their AFRIQCARE calendar. Each healthcare professional is considered responsible for processing. AFRIQCARE is a subcontractor: it acts on the specific instructions of each Health Professional.
Whether it is a data controller or subcontractor, AFRIQCARE takes appropriate measures to ensure the protection and confidentiality of the personal information it holds or processes in compliance with the provisions of law L-2016-037- AN “relating to cybersecurity and the protection of personal data in Guinea. For more information regarding the services offered by AFRIQCARE you can refer to the General Conditions of Use here .
COLLECTION AND ORIGIN OF DATA
All data concerning Users is collected directly from them, by AFRIQCARE or the Health professional.
AFRIQCARE undertakes to obtain the consent of its Users and/or allow them to object to the use of their data for certain purposes, as soon as this is necessary.
When browsing the AFRIQCARE site, Users are informed of the purposes for which their data is collected via the various online data collection forms and via the cookies policy.
PURPOSE AND OBJECTIVES
1. Objectives.
When making an appointment online with a healthcare professional, the User communicates certain Personal Data. If the User does not wish to communicate the information requested, the User may not be able to access certain parts of the Site or the Application, and AFRIQCARE may be unable to respond to his or her request. request.
2. Purposes
The legal basis for collecting your Personal Data is:
- AFRIQCARE's legitimate interest in ensuring the best quality of its services, in providing its Users with the best possible monitoring of their appointments and care pathways, and in improving the operation of its Site and Application;
- AFRIQCARE's legitimate interest in producing statistical data relating to the impact of AFRIQCARE on the activity of healthcare professionals in order to communicate about its tool and improve its services;
- AFRIQCARE's legitimate interest in carrying out optional satisfaction surveys on its services with a view to improving them;
- The consent of its Users when this is required by current regulations, particularly with regard to commercial prospecting and cookies.
AFRIQCARE User data is mainly processed for:
- allow their navigation on the Site and allow their use of the Application put them in touch with a Health Professional allow them to view and manage their care pathways, both for appointments made directly on the Site, and appointments provided directly by their Healthcare Professionals.
- allow them to manage their loved ones’ appointments and their care pathways
- allow them to be optimally cared for by the Health Professional
You will find more details on the management of cookies allowing us to achieve this purpose in our general conditions for cookies.
TYPES OF DATA PROCESSED
AFRIQCARE may process, as a Subcontractor, to enable appointment making, management of appointments and the care pathway, all or part of the following data:
- Name (and birth name), first name, date of birth
- Telephone number, email address, postal address (possibly digital code)
- Password
- Reason for appointment with the practitioner, specialty of the practitioner, frequency of appointments
- Attending and referring physician
- Appointment history
- Data belonging to the electronic health record that the practitioner wishes to share with you
- These same data concerning relatives for whom the User could make an appointment
NON-COMMUNICATION OF PERSONAL DATA
The User's Personal Data will not be transmitted to commercial or advertising players.
The User's Personal Data may be processed by AFRIQCARE and subcontractors (service providers), in absolute compliance with the principle stated above, exclusively in order to achieve the purposes of this policy.
Within the limits of their respective responsibilities and for the purposes mentioned above, the main people likely to have access to User data (excluding Health Data) of AFRIQCARE are mainly our customer service agents.
In addition, in order to comply with the provisions of the law on cybercrime and the protection of personal data in Guinea, AFRIQCARE uses Health Data Hosts (known as "HDS" benefiting from certification or approval validated by the ministry of French health.
AFRIQCARE also uses services provided by several specialized companies (mailing, audience analysis), the list of which can be communicated to the persons concerned on request addressed to contact@afriqcare.com . No Personal Health Data is communicated to them.
DATA RETENTION DURATION
We keep your data only as long as necessary for the purposes pursued, in accordance with legal requirements.
USER RIGHTS
Each time AFRIQCARE processes Personal Data, AFRIQCARE takes all reasonable measures to ensure the accuracy and relevance of the Personal Data with regard to the purposes for which AFRIQCARE processes it.
In accordance with the African Union Convention on Cybercrime and the Protection of Personal Data and Law L-2016-037-AN “relating to cyber security and the protection of personal data in Guinea, Users of AFRIQCARE have the following rights:
- right of access (article 30 of the CSPDCP law) and rectification of User data.
- the possibility of refusing the processing of personal data of Users (article 30 of the CSPDCP law).
- right to information allowing you to know and contest the processing of personal data (article 31 of the CSPDCP law).
- right to object for legitimate reasons based on their particular situation, at their request and free of charge, to the processing of Users' personal data (article 32 of the CSPDCP law).
- right to rectify, update, block or delete personal data of Users (article 33 of the CSPDCP law).
- right to define the fate of Users' data after death and to choose to whom AFRIQCARE will communicate (or not) their data to a third party that they have previously designated (article 34 of the CSPDCP law).
As soon as AFRIQCARE becomes aware of the death of a User and in the absence of instructions from them, AFRIQCARE undertakes to destroy their data, unless their retention proves necessary for evidentiary purposes or to meet a legal obligation ( such as keeping patient records).
If the User wishes to know how AFRIQCARE uses their Personal Data, ask to rectify them or oppose their processing, the User can contact AFRIQCARE in writing at the following address: Almamya, Commune of Kaloum, Conakry, Republic of Guinea and or by email to contact@afriqcare.com . In this case, the User must indicate the Personal Data that he would like AFRIQCARE to correct, update or delete, by identifying himself precisely with a copy of an identity document (identity card or passport). Requests for deletion of Personal Data will be subject to the obligations imposed on AFRIQCARE by law, particularly with regard to data retention. Finally, AFRIQCARE Users can file a complaint with the Authority in charge of Personal Data Protection.
SOCIAL NETWORKS
The AFRIQCARE User can click on the icons dedicated to the social networks Facebook, Linkedin, Instagram and Google Plus appearing on the Site or in the AFRIQCARE Application.
Social networks make it possible to improve the user-friendliness of the Site and help with its promotion through sharing. When the User clicks on these buttons, AFRIQCARE may have access to personal information that the User has indicated as public and accessible from their Facebook, Linkedin, Instagram and Google plus profiles. However, AFRIQCARE does not create or use any database independent of Facebook, Linkedin, Instagram and Google Plus from the personal information that the User may publish there and AFRIQCARE will not process any data relating to their private life through this means.
If the User does not wish AFRIQCARE to have access to personal information published in the public area of their profiles or social accounts, the User must then use the means made available to them by Facebook, Linkedin, Instagram and Google Plus in order to limit access to its data.
SECURITY
AFRIQCARE implements all technical and organizational measures to ensure the security of the processing of personal data and the confidentiality of Personal Data.
As such, AFRIQCARE takes all necessary precautions, taking into account the nature of the data and the risks presented by the processing, in order to preserve the security of the data and, in particular, to prevent them from being distorted, damaged, or unauthorized third parties have access to it (physical protection of premises, authentication processes with personal and secure access via confidential identifiers and passwords, logging of connections, encryption of certain data, etc.).
PERSONAL INFORMATION AND MINORS
In principle, the Site and the Application are aimed at adults capable of contracting obligations in accordance with the legislation of the country in which the User is located.
Users who are minors under 16 years of age or incapable must obtain prior consent from their legal guardian before entering their data on the Site and the Application. Unless there is a legal obligation of confidentiality or related to medical confidentiality, AFRIQCARE may directly inform this manager (i) of the specific categories of Personal Data collected from the minor (ii) of the possibility of opposing the collection, use or the conservation of these.