Privacy Notice

At Marina Health Denmark ApS, one of our main priorities is the privacy of the users of our applications and technology. This privacy notice outlines the information that is collected, processed, and used by Marina Health Denmark ApS.

Navigate this privacy notice to understand:

1. Who we are and how to contact us
2. What data we process
3. AI product improvement
4. Third-party services relied on and intended international transfers of your data
5. Data Security
6. Exercising your rights

1. Who we are and how to contact us

Responsible for your personal data is:

If you have additional questions or require more information about our privacy policy, do not hesitate to contact us directly at support@marinahealth.eu.

2. What data we process

2.1. Data processed when contacting us

2.1.1. Sales/leads funnel

We process your personal data for the purpose of communicating with parties who may be interested in our product. For this purpose, we gather the following personal data:

• Names
• Email address
• Phone number(s)
• Company details
• Communication records (email, call notes)

We process this personal data in accordance with Art. 6.1(b) of the GDPR, for the performance of a contract or taking steps necessary to initiate a contract with you and retain this information for 3 years following the end of our contractual relationship. If no contract is concluded with the lead, the data is retained by Marina Health for one year after the last contact.

2.2. Data processed when using Maritime Medical Assistant

2.2.1 Respond to and addressing client issues with the product

Marina Health Denmark ApS is a processor when it comes to the processing of personal data related to the use of the Marina Maritime Medical Assistant tool. Therefore, most processing activities are carried out on behalf of its customers, and pursuant to their privacy notice. However, Marina Health Denmark might process personal data of individuals if the controller sends specific personal information in order to address a product issue. As a result, Marina Health processes personal data for the purpose of communicating with customers about and solving issues with the product.

For this, the following personal data may be included:

• Name of contact person
• Email address of contact person
• Personal data included in screenshots/communication sent by the contact person (input from customers cannot be guaranteed)

We process this personal data in accordance with Art. 6.1(b) of the GDPR, for the performance of a contract and retain the personal data for the duration of the issue.

3. AI-product improvement

We do not process or use any personal data for the purpose of improving our product or training our AI models. Improvements to our product are done with the use of anonymised reports from the customer. Anonymisation is carried out through APIs, and Marina Health Denmark ApS is not able to access any versions of the report prior to anonymisation carried out for the client.

4. Third-party services and intended international transfers

Categories of providers we share your information with

We rely on Google Workspace as a third party tool in order to communicate with our customers and address issues with the product. Any transfers outside of the European Union as a result of the use of this tool is governed by a Service Contract and Data Protection Agreement, including the relevant Chapter V GDPR safeguards, between us and Google.

5. Data Security

All data stored by us, or any order processors are protected against unauthorised access, loss and modification using the current security standards. For this purpose, extensive technical and organisational security precautions are applied, including but not limited to:

• Personal name anonymization before storage/export
• Anonymized records stored separately from raw conversations
• TLS 1.2 / TLS 1.3 via Nginx with Let's Encrypt certificates and automatic renewal
• HTTP to HTTPS redirect enforced at the Nginx layer
• SQL injection prevention
• Nginx rate limiting
• Network isolation between Docker services

6. How can you exercise your rights?

You have the following rights with respect to us regarding your personal data:

• Right to information about your stored personal data, its origin and possible recipients and the purpose of the data processing (Art. 15 GDPR)
• Right to rectification of inaccurate data (Art. 16 GDPR)
• Right to erasure of processed personal data, unless processed to fulfill a legal obligation or public interest (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to withdraw your consent only when the processing is carried out on the basis of consent. We will then no longer continue the processing based on this consent for the future. The lawfulness of the processing carried out on the basis of the consent until the revocation is not affected by the revocation. (Art. 7 GDPR)
• Right to data portability but only in instances where data is processed on the basis of consent or performance of a contract (Art. 20 GDPR)
• Right to object if the data processing by us is based on legitimate interests. You may object to the processing of your data for direct marketing purposes at any time, even without giving reasons (Art. 21 GDPR)

Contacting us

To exercise any of the above-mentioned rights, you may contact us directly at support@marinahealth.eu.

Contacting a data protection authority of your choosing

The applicable supervisory authority based on our jurisdiction is the Danish Data Protection Agency (Datatilsynet), located in Carl Jacobsens Vej 35, DK-2500 Valby, Denmark. They also provide a website at the following link: https://www.datatilsynet.dk/english

Should we fail to respond within thirty days or should you not find our response satisfactory, you may place a complaint with the supervisory authority of your choice.

https://edpb.europa.eu/about-edpb/about-edpb/members_en