Privacy Policy

We will use your:

• Personal identifying information: name, last name, email address, IP address, ID number and password.
• Physical details: height, weight.
• Lifestyle: quality of life (questionnaire).
• Health data: type of disease, symptoms reported on a scale, type of treatment, wellbeing, goal setting.
• Usage data: log data.
• Other data: knowledge assessment (quiz).

Provision of the services — providing you with the tool, allowing you to assess your knowledge on specific topics, and providing you with statistics. Categories: personal identifying information, physical details, health data, lifestyle, other data. Legal basis: performance of the contract and your explicit consent for the processing of special data (health data). Required: yes — without these data and consent we cannot provide the services. Retention: for the duration of the service and for a maximum of 24 months after your last access; the data will then be anonymised.

Statistical results — number of logins, app usage and functions that are used, without detailed access to personal data which remains private to the user. Legal basis: your consent. Required: no — providing your data and consent is always optional. Retention: 24 months after the usage of the App, then anonymised.

Security of the system — IP address, log data. Legal basis: our legitimate interest in keeping our system secure. Required: yes — this data is automatically collected when you use the application. Retention: 6 months.

Cookies are small text files that are placed on your computer by websites that you visit. They are widely used to make websites work, or work more efficiently, as well as to provide information to the owners of the site.

When you use our application we use a third-party cookie, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. This information is processed in a way that does not directly identify anyone. We use the information to get aggregated statistics on visitor activities.

This information is collected only with your consent. We have measures to protect the information collected, including: limiting the amount of data collected (we do not share IP addresses with Google), setting a retention schedule, restricting access to our Google Analytics data, and regularly reviewing our use of analytics.

We keep analytics data for 14 months from a visitor's last visit.

My Lungs is an App which allows you to improve your knowledge about specific topics and to help you deal with your disease. We are also interested in understanding how much our users know about these topics and in obtaining statistical results.

Therefore, we will use only information about the usage of our app, properly anonymised, to obtain statistical results in an aggregated and anonymised form which we may share with third parties.

Your data will be communicated to our hosting providers, suppliers of IT services and application software and consultants, who act as our data processors.

We will share with third parties only anonymous and aggregated data about the statistical results we obtain from the usage of our services.

We are based in Europe and your data is stored in the European Union. Some of our suppliers (IT services, hosting provider) operate outside of the European Union, such as in the US, and your data may therefore be accessed from the US. We inform you that any data transfer will take place only in presence of adequate safeguards, such as an Adequacy decision or the Standard Contractual Clauses provided by the European Commission. For further information about the data transfer you can contact our DPO at the email address indicated below.

You can access, correct and obtain the erasure of your personal data. You also have the right to restrict the processing of your personal data.

You can withdraw your consent at any time.

Moreover, you can receive a copy of your personal data or ask us to transmit that data to another controller, where technically feasible.

You can lodge a complaint with the supervisory authority of your country if you think that your rights have been breached.

On grounds relating to your particular situation you also have the right to object to processing of personal data which is based on the controller's legitimate interest.

If you wish to exercise one of these rights, you can contact our DPO at dpo@esperity.com.