Privacy
Privacy Policy
Data Controller
The controller of the data collected via this site is MEDS-LINK Ltd, publisher of Elysium Care (Elysium MedTech brand), a company incorporated under Cypriot law with registration number HE 379510, whose registered office is at Agias Zonis, 30A, Fantaros Court, 3rd floor, Flat/Office 302, 3027 Limassol, Cyprus. Being established in the European Union, MEDS-LINK Ltd is directly subject to the GDPR as a data controller.
Email: contact@elysiumcare.ai
Data Protection Officer (DPO)
For any question regarding the protection of your data, you may contact our Data Protection Officer, Dr Yasmine Maazouzi, by email at dryasminemaazouzi@gmail.com, or at contact@elysiumcare.ai.
Data Collected
On the marketing site (www.elysiumcare.ai): contact details submitted via the demo form (name, professional email, specialty, message), and technical browsing data (cookies, see below).
On the health platform (app.elysiumcare.ai): account data of healthcare professionals and patient health data, processed within a dedicated framework and hosted on HDS-certified infrastructure.
Purposes of Processing
- Responding to demo and contact requests;
- Managing the commercial relationship and access to the platform;
- Improving the site and measuring its audience (subject to consent);
- Providing medical follow-up via the platform, on behalf of healthcare professionals.
Legal Basis
- Consent, for contact requests and non-essential cookies;
- Performance of a contract or pre-contractual measures, for the commercial relationship;
- Legitimate interest, for the security and improvement of the service;
- Legal obligation, for health data (Article L.1111-8 of the French Public Health Code).
Retention Periods
Contact data is retained for 3 years from the last contact. Account data is retained for the duration of the contractual relationship. Health data is retained in accordance with the legal durations applicable to health data.
Recipients and Processors
Data is never sold. It may be shared with our technical sub-processors strictly necessary for the operation of the service (hosting, email delivery), bound by contract in accordance with Article 28 of the GDPR, notably Vercel Inc. (website hosting) and Scalingo (HDS hosting of the health platform).
HDS Hosting in France
Health data is hosted in France by an approved HDS (Health Data Host) provider, in accordance with Article L.1111-8 of the French Public Health Code. It is end-to-end encrypted.
Transfers Outside the EU
Health data is stored in France. Some technical data from the marketing site may transit through providers established outside the European Union (e.g. Vercel Inc., USA). Such transfers are governed by appropriate safeguards within the meaning of the GDPR (standard contractual clauses).
Security
We implement appropriate technical and organisational measures: end-to-end encryption, HDS hosting, access control and GDPR compliance.
Your Rights (GDPR)
In accordance with the GDPR, you have the following rights:
- Right of access to your data;
- Right to rectification;
- Right to erasure;
- Right to restriction of processing;
- Right to data portability;
- Right to object.
To exercise these rights: contact@elysiumcare.ai.
Cookies
The site uses cookies. To learn more and manage your preferences, see our cookie policy.
Complaint to a Supervisory Authority
As MEDS-LINK Ltd is established in Cyprus, its lead supervisory authority is the Office of the Commissioner for Personal Data Protection (Cyprus), www.dataprotection.gov.cy. If you consider that the processing of your data is not compliant, you may also lodge a complaint with the supervisory authority of your country of residence — in France, the CNIL (French Data Protection Authority), www.cnil.fr.