Privacy Policy

 DoctorVIT is the data controller for personal data collected through our websites and services. We collect only what is needed to operate and secure DoctorVIT. In clinical deployments, we may process health information supplied by your healthcare organisation; for that clinical data we act as a processor and your organisation remains the controller. We use personal data to provide and improve the service, we do not sell personal data.

Our legal bases include contract (to provide the service), legitimate interests (for security, fraud prevention, and service improvement balanced against your rights), legal obligations, and consent (for optional communications). Special-category data used in clinical contexts is processed under appropriate GDPR conditions and safeguards. We share data only with vetted service providers acting on our instructions, with your organisation when it administers access, and when required by law. If data is transferred outside the EEA/UK, we rely on Standard Contractual Clauses and implement additional safeguards. We retain personal data only as long as necessary for the purposes described and protect it with technical and organisational security measures. DoctorVIT does not make decisions with legal or similarly significant effects solely by automated means without human involvement.

You have GDPR rights to access, rectify, erase, restrict, and port your data, and to object to processing or withdraw consent at any time without affecting prior lawful processing. You can exercise these rights or raise questions by emailing privacy@doctorvit.eu. You also have the right to lodge a complaint with your local supervisory authority. We may update this notice to reflect changes to our practices; material changes will be communicated appropriately.