MISU

Medical Information System

Privacy Policy


The MISU system was developed in partnership with Endoclinic Medical Center, Ltd. Ukraine, Rivne.


This page is used to inform visitors about our policy on the collection and use of personal information. Data protection is carried out in accordance with the requirements of the law, and their storage takes place on secure servers.


If you choose to use MISU, you automatically agree to the terms of this Privacy Policy.


If you have any questions or suggestions regarding our Privacy Policy, you can contact us at the following e-mail address:

support@misu.in.ua



Data management


  1. When purchasing or contacting support, we use a request form that collects basic contact information, such as: e-mail address, telephone number, name of contact person, delivery address;

  2. When registering an account, we collect and store the following information: phone number, full name, date of birth;

  3. When using the system, the user can voluntarily provide access to the processing and storage of the following data: gender, photo, weight, height, indicators collected using MISU Watch or other smart bracelets (pressure, heart rate, oxygen saturation, temperature, sleep phases, number of steps) as well as information to identify the device, other data voluntarily entered by the user into the system;

  4. Personal data is processed: in

    1. accordance with the laws on personal data protection;

    2. in accordance with the implemented Privacy Policy;

    3. in the amount and purposes necessary for the proper implementation of the provided Services, in the amount and for the purpose necessary for the realization of legitimate interests (legitimate purposes);

    4. MISU does not intentionally collect any information from individuals under the age of 13. Our website and services are targeted at people who are at least 13 years old;

    5. processing does not violate the rights and freedoms of the data subject.

  5. Each user has the right to: access to their own data, their correction, deletion or restriction of processing, the right to object and the right to file a complaint.
    You can contact the person who controls the processing of personal data by e-mail:
    support@misu.in.ua

  6. We reserve the right to process data after withdrawal only to the extent necessary or if national law or EU regulations , or international law obliges us to store data;
    The system has the right to transfer personal data of the User of the platform and other data to the organizations authorized according to the current legislation (for example, law enforcement agencies);

  7. MISU does not provide personalized data to third parties or organizations that are not specified in the implemented Privacy Policy. Personal data is processed only by our authorized persons, and vulnerable data are separated from identification data and are anonymized;

Information Security


MISU does not store any personal information about you online or using cloud storage unless that organization complies with the GDPR.


  1. We use secure communication protocols (SSL);

  2. All data is password protected. Each user has a unique key-identifier that gives him access to their own data;

  3. The information in the database is encrypted, and only the main interface has access to it with a special access code. Also, vulnerable data (medical information or indicators of smart gadgets) are separated from identification data and are anonymized;

  4. The server is protected by "App Check" technology against fraud with payments and phishing;

  5. We do not request or store financial information, such as your bank account details. All staff are required to sign a confidentiality agreement;


  1. You can request information at any time about where and how data is stored, protected and used;

Cookies policy


  1. In order for this site to work properly, we sometimes place small data files, called cookies, on your device. The cookies we place do not allow you to collect any personal data or any confidential information from your device.


  1. What are cookies?
    A cookie is a small text file that a website stores on your computer or mobile device when you visit the site. This allows the website to remember your actions and settings (such as login, language, font size, and other display settings) over a period of time, so you don't have to enter them again when you return to the site or navigate from one page. to another.

  2. How do we use cookies?

    1. whether you agree (or not) to the use of cookies on this site;
      your display settings, such as color contrast settings? font size or language;

    2. information about your order, the cart is temporarily stored so that you can safely visit other pages of the website and continue shopping at any convenient time;

    3. adapt the content of the website to your platform and optimize the use of the website, and correctly display the website according to your individual needs;

    4. your authorization status in the personal account and authorization token. Maintaining the authorization status will help to use the website conveniently and eliminates the need to log in again for a while.

  3. Enabling these cookies is not required for the website to work, but it will give you a better browsing experience. You can delete or block these cookies, but if you do, some features of this site may not work properly.
    The information associated with cookies is not used to identify you personally, and the template data is completely under our control. These cookies are not used for purposes other than those described here.

  4. How to control cookies

You can control and / or delete cookies as you wish - for details, see aboutcookies.org. You can delete all cookies that are already on your computer, and you can configure most browsers to prevent them from being placed. However, if you do, you may need to manually adjust some settings each time you visit the site, and some services and features may not work.



Purposes of data processing


MISU processes user data in order to:

  1. provide answers to submitted appeals, letters, orders, objections, questions;

  2. creation of anonymized statistics and analytics for public use or other MISU needs. In this case, the data is not associated with the user's identity and it is impossible to establish any connection with the identity. Deletion of such data on request is not possible due to the inability to establish affiliation;

  3. providing the user with personalized health statistics based on the collected indicators and the information entered by the user;

  4. offering recommendations to the user to prevent critical health conditions or improve vital functions. MISU offers only safe recommendations, ie those that do not harm life or health. If a more detailed examination is required, MISU recommends that you consult a specialist of your choice. The system is not responsible for the consequences of compliance or non-compliance with the recommendations;

  5. informing about the need to pay attention to health or see a doctor;

  6. providing access to health and warnings to members of the Family Group or other users only with the permission of the user;

  7. ensuring the functioning of "Early Warning" algorithms. Such algorithms warn of the need for action before the onset and to prevent specific situations.



The right to manage personal data The


user has the right to:

  • provide access to personal data to a doctor or other members of the group in the application and only with user own voluntary permission;

  • at any time to correct or request the correction of inaccurate personal data about self;

  • at any time ask MISU to limit the processing of personal data;

  • require the deletion of personal data. The user can also delete their account data in the application or on the MISU website.



Data retention period


Personal user data obtained as a result of orders or use of the system will be processed during: the

  • period of service provision or the existence of a personal user profile in the MISU system;

  • the period necessary to protect the interests of MISU;

  • the period during which the law may require MISU to process data for a specified period (for example, the Accounting Act).



Subcontractors / Trusted Third Parties


MISU subcontractors are:

  • DigitalOcean, LLC

  • Firebase Inc.

Both companies have implemented all the necessary standards for GDPR compliance.



Consent


By using the MISU website and / or mobile application, you automatically agree to the terms of this Privacy Policy.



Changes to the Privacy Policy


This Privacy Policy may change from time to time, so review it frequently. If we materially alter the use or dissemination of personal information obtained from you through our Service, we will notify you through our Service.

Changes to the Privacy Policy will appear on this page, and changes to the Privacy Policy will be updated.


This policy is valid from: 15.11.2021


You can contact us by e-mail:

support@misu.in.ua