B2B Privacy Notice.

Last updated May 10, 2024

This website is operated by Curewiki SRL, a company incorporated and registered in Belgium with company number 0786.411.860 whose registered office is at Cantersteen 12, 1000 Brussels, Belgium.

In so far as we process your Personal Data, Curewiki acts as the Data Controller. You can contact us via email: privacy@curewiki.health for any question regarding your privacy.

The protection of your Personal Data is of importance for Curewiki and we treat your privacy with utmost care.

We have established this Privacy Notice to explain to you how Curewiki treats your Personal Data. The Privacy Notice applies to the Personal Data that you provide and that we Process about you as a natural person when you visit our website.

Curewiki SRL as the Controller, hereinafter as “Curewiki”; “we” or “us”, of the personal data, has committed to comply with:

The General Data Protection Regulation N°EU 2016/679 (hereinafter, the "GDPR")
And all EU applicable laws and regulations regarding data protection.

Collectively referred as "Data Protection Laws".

With this Privacy Notice, Curewiki wants to make sure that you understand what personal information is collected about you, how your personal information is used and how it is kept safe.

Which Personal Data do we collect when you visit our website?

We Process the Personal Data that you provide to us when you interact with us via this website by signing up (i.e. registering for the CureWiki Health platform application (the “App”)) or, when signed in, interacting with the App. These Personal Data are:

a. Identification data

Business contact identification data of yourself: (name, first name, e-mail address, telephone number).
Any other information that you voluntarily give us as part of a Contribution (see Terms of Use). Please be aware that, to the extent this information contains Personal Data of others (relatives, your doctor), you should only share it with us if you have that person’s informed consent.

In the event that non-personal data is combined with personal data in such a way that it is possible to identify the persons concerned, we will treat this data as personal data until it is impossible to link it to a specific person.

c. Cookies and other tracking data

Like almost every website, our website also uses cookies. Some of these are necessary to make your website visit possible, other allow us to optimize your browsing experience or the way we interact with you. Find out more about our cookies in our cookie policy.

How do we collect your Personal Data?

We collect your personal data when you register as a B2B user of the App or whenever you visit the App.

Why do we collect your Personal Data?

We Process your Personal Data only for the following purposes:

To provide you with login credentials for access to the App;
To process your Contributions;
To contact you in the context of the provision of the App Services;
To the functioning and managing of our website;
To handle questions from yourself and authorities and manage claims.

Why are we allowed to Process your Personal Data? (legal basis)

To provide you with login credentials for access to the App (legitimate interest);
To process your Contributions (legitimate interest);
To contact you in the context of the provision of the App Services (legitimate interest);
To the functioning and managing of our website (please, see our Cookies Notice for more information).
To handle questions from yourself and authorities and manage claims (legitimate interest).

With whom do we share your Personal Data?

a. Communication to internal recipients 

We only give access to your personal data to internal persons at Curewiki whose function requires it and who are bound by confidentiality obligations. Access to your data is strictly limited to them. We regularly check these accesses and secure the information provided, as far as possible.

b. Communication to other third parties - service providers, government authorities

Curewiki will provide access to or share Personal Data on an as-needed basis with other third parties, i.e.:

trusted service providers
consultants and contractors who are granted access to Curewiki’s facilities and systems or which provide services to Curewiki
government agencies or authorities, competent courts and others as required by law or if it is necessary to fulfill your request.

Third party service providers include IT services and website hosting companies, (internet) connectivity providers, provider of data analytics (Google) and tracking services, providers of press release and newsletter distribution networks, as well as service providers that provide technical and administrative support for the Website and underlying IT systems.

These service providers provide their services from locations within and outside of the European Economic Area (“EEA”), including the USA. Curewiki will only share your Personal Data with third parties whom Curewiki has contractually restricted from using or disclosing the Personal Data except as necessary to perform services on our behalf or to comply with legal requirements.

By virtue of the laws that apply to them and their public duties, certain EU or Member State authorities and/or institutions may require Curewiki to provide them with some of your personal data. When such a case arises, it is therefore possible that Curewiki may be obliged to pass on your personal data to these “third party authorities” without asking for your prior consent. On the other hand, Curewiki commits itself to transmit to them only the data that these authorities/institutions strictly need for the exercise of their missions, and this by application of the principle of minimisation.

What if your Personal Data is transferred outside the European Economic Area (EEA)?

Curewiki may need to transfer your data to countries outside the EEA, where the privacy protection is less developed, including the USA.

Curewiki relies on available legal mechanisms to enable the legal transfer of Personal Data across borders. To the extent that Curewiki relies on the Standard Contractual Clauses (also called the Model Clauses), to authorize the transfer of Personal Data, Curewiki will comply with those requirements, including where there may be a conflict between those requirements and this Privacy Notice.

In the absence of the aforementioned appropriate safeguards, Curewiki may where permitted by applicable data protection laws (including the GDPR) rely on a deroga-tion applicable to the specific situation at hand (e.g. the data subjects’ explicit con-sent, the necessity for the performance of an agreement, the necessity for the de-fense of legal claims).

How do we secure your Personal Data?

We use reasonable and appropriate technological and operational security measures to keep your Personal Data protected against any unauthorized access or unlawful use. Such measures include:

Ensuring the physical and digital security of our equipment and devices by using appropriate password protection and encryption where necessary;

Ensuring the physical security of our offices and other sites;

Maintaining a data protection policy for, and delivering data protection training to, our employees; and

Limiting access to your Personal Data to those at Curewiki who need to use it in the course of their work.

However, due to the nature of internet communications, we cannot guarantee or warrant that the transmission of your Personal Data to us is secure.

For how long do we keep your Personal Data ?

In accordance with the principle of limited retention, the period of retention of data will be strictly for the period necessary for the fulfilment of the purposes for which the processing is justified, not beyond. Under no circumstances will your data be kept for an unlimited period.

Unless otherwise agreed or required by Law, we keep all data for as long as we have a services relationship with you based on an active registration on our website.

When data is no longer required for the purposes for which it was processed or if you withdraw your consent and no other legal basis can be proven, the data must be destroyed so that it is impossible for anyone to trace your identity.

What rights can you exercise?

Based on the applicable Belgian and European privacy legislation, and provided that you meet the requirements set by this legislation, you can contact us to exercise the following rights:

Access. You have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, information related to the processing of data and a copy of the data being processed.
Rectification. You have the right to require rectification of inaccurate or incomplete data about you.
Right to be forgotten. To obtain the deletion of your personal data under certain specified circumstances.
Restrict processing. You have the right to restrict processing of data under certain specified circumstances.
Data portability. You have the right to request for the receipt or the transfer to another organization, in a machine-readable form, of the personal data you had provides to us.
Object to processing. You have the right to object, on grounds relating to your particular situation, at any time to the processing of your data.
Right to withdraw consent. When you have given your explicit consent for the processing of your data, you can withdraw it at any time without any cost nor justification.

You can send your requests to exercise your above mentioned rights, together with evidence of your identity, by email at privacy@curewiki.com or by post to Curewiki, Data Protection Officer, Cantersteen 12, 1000 Brussels, Belgium.

We will examine the admissibility of your request based on the applicable Belgian and European privacy legislation. We will then inform you, in principle within a month.

Third party applications and websites

This Website contains links to other websites operated by third parties, including but not limited to certain social media sites such as Facebook, Twitter, Linkedin, YouTube, etc. This Policy does not apply to any website, other than this one. Third party websites are governed by their own terms and conditions. You should therefore always carefully check the privacy and cookie policies of third party websites before accepting to be redirected to them.

We also display social media buttons on our Website. When you click on any of those buttons, your personal data may be transferred to these companies and they may also set cookies or other tracking technologies on your browser. The privacy policies and terms of use of each of those companies govern the collection and use of your personal data when you click on their buttons on our Website.

Prior to installing third party cookies or enabling you to click through to a third party website, we will have requested your consent to do so. Where consent was not given, the cookies will not be installed and the click through to third party websites will only occur after a pop-up notifying you that you are leaving the Curewiki space and requesting whether you wish to continue.

Notice for parents, guardians and children

Our website is intended for visitors who are at least 18 years of age, or the age of majority in their jurisdiction of residence. Curewiki does not knowingly solicit information from or market products or services to children. If you do not meet the age requirements set out above, please do not enter your Personal Data on this website.

How may Curewiki change this Privacy Notice?

As Curewiki expands and improves its website, or as legal requirements change, we may need to update this Privacy Notice. This Privacy Notice may be modified from time to time without prior notice. We encourage you to review this Privacy Notice on a regular basis for any changes. The date of the latest version will be identified at the bottom of the Privacy Notice.

Do you have any questions?

If you have any questions about this Privacy Notice or data protection at Curewiki, you can contact our Data Protection Officer either by mail:

Data Protection Officer

Cantersteen 12, 1000 Brussels, Belgium

or by e-mail at privacy@Curewiki.com

You also have the right to lodge a complaint with the supervisory authority in the European member state of your habitual residence, your place of work or the alleged infringement of applicable data protection legislation:

In Belgium, the Supervisory Authority is:

Belgian Data Protection Authority
Rue de la Presse 35 / Drukpersstraat 35
1000 Bruxelles / 1000 Brussel

Tel. +32 2 274 48 00

Fax +32 2 274 48 35

contact@apd-gba.be
www.dataprotectionauthority.be