TO WHOM ARE WE LIKELY TO DISCLOSE YOUR PERSONAL DATA?
With service providers. We share information with vendors and subcontractors who help us provide, maintain and improve the Services, such as cloud hosting providers (Google Firebase), technology partners, customer support providers and communication services. If you choose to enable Annie AI, we may also share certain Health Information with third-party AI technology providers to generate AI-based responses. When shared, Health Information is limited to what is reasonably necessary to provide the feature and, where possible, is anonymized.
With partners for research and development. We may share your information with third-party partners who help us develop and improve the Services. Information shared for this purpose will be anonymized and the third parties with whom we share this information will be subject to non-disclosure obligations.
With third parties at your request. We may share your information with third parties with your consent or at your request, or as part of a transaction you make through the Services.
As required by law. We may share your information with the relevant authorities if we believe that their disclosure is consistent with or required by any applicable law, including legal requests from public authorities to meet national security or law enforcement requirements.
In corporate transactions. In the event of financing, reorganization, merger or sale of the Company, we may transfer your personal information to the relevant third parties involved in the transaction. These recipients will be required to protect your information under a non-disclosure agreement or comparable confidentiality obligation.
For legal proceedings and protection. We may disclose your information to comply with any law, regulation, legal process, governmental request or when we believe in good faith that it is reasonably necessary to protect our rights, property or safety or those of others, in connection with claims or litigation, or to protect users from fraudulent, abusive or illegal use of our Services.
DATA PROCESSING AND TRANSFER OUTSIDE THE EUROPEAN UNION (EU/EEA)
If your data is transferred to third countries, such as the United States, we ensure that legal requirements in accordance with Art. 44 et seq. of the GDPR are met, in particular:
Guarantees: We generally use what are known as the EU Standard Contractual Clauses (SCC) that we conclude with the concerned provider. These contractual measures aim to ensure an adequate level of protection for your Data.
Impact Analysis (Post-CJEU): We proceed with an analysis of the risks and impacts on your rights and freedoms. This assessment, required after the so-called "Schrems II" ruling of the Court of Justice of the European Union (CJEU), allows us to guarantee that, even in case of transfer to a third country, your Data is processed in accordance with European standards.
Copy of Guarantees: A copy of these guarantees can be sent to you upon request to the DPO.
