The MedApp Dynamics Group consists of multiple legal entities, the details of which can be found in the MedApp Dynamics Group trading companies. This privacy notice is issued on behalf of the MedApp Dynamics Group. References to “MedApps,” “we,” “us,” or “our” in this notice refer to the relevant company within the group responsible for processing your data. MedApp Dynamics Limited is the data controller for this website.

MedApp Dynamics is committed to protecting your privacy, ensuring the responsible use of your information, safeguarding client and visitor data, and complying with privacy legislation. MedApps ensures that the data you provide to MedApps Health Cloud is processed lawfully, fairly, and with the utmost care. We take our responsibility regarding your personal data seriously.

This privacy policy outlines how we collect and process personal information through this website, including information you may provide when:

• Joining our marketing list
• Applying for a role with us
• Registering for an event
• Downloading content
• Requesting information about our services
• Sending us a request for proposal
• Completing a survey

This website is not intended for children, and we do not knowingly collect data from or about children.

Please read this privacy notice alongside any other privacy or fair processing notices we provide on specific occasions to ensure you fully understand how and why we use your data.

Our external data privacy team oversees any questions related to this notice. For inquiries or requests to exercise your legal rights, please contact the team at privacy@medappdynamics.com.

To maintain the accuracy of your personal data, please inform us of any changes during your relationship with us.

If you have concerns, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection (www.ico.org.uk). However, we encourage you to contact us first to address your concerns.

Third-Party Links

This website may include links to third-party websites, plug-ins, applications, and embedded content, such as podcasts or YouTube videos. Clicking these links or enabling such content may allow third parties to collect or share your data.

We do not control these third-party websites and are not responsible for their privacy policies. When you leave our website, we recommend reviewing the privacy notices of the websites you visit.

Personal data (or personal information) refers to any information that identifies an individual. It does not include data where the identity has been removed, such as anonymous data.

We may collect, use, store, and transfer various types of personal data, categorized as follows:

• Contact Data: Includes your email address, phone number, postal address, or other details provided in CVs.
• Identity Data: Includes your first name, last name, photo, or other information in CVs.
• Marketing and Communications Data: Includes your contact details for sending marketing communications.
• Profile Data: Includes your username and password for MedApps Health Cloud.
• Technical Data: Includes your IP address, browser type and version, time zone setting, location, browser plug-in types and versions, operating system, platform, and other technology on the devices used to access this website.
• Usage Data: Includes information about how you interact with and use our website.

We may also collect, use, and share Aggregated Data (e.g., statistical or demographic data) for any purpose. Aggregated Data is derived from your personal data but is not considered personal data under the law, as it does not directly or indirectly identify you.

Special Categories of Personal Data: We do not collect sensitive personal data, such as:

• Race or ethnicity
• Religious or philosophical beliefs
• Sexual orientation or sex life
• Political opinions or trade union membership
• Information about health, genetic, or biometric data
• Criminal convictions or offenses

We collect data about you using the following methods:

A. Direct Interactions

You may provide Identity and Contact Data by:

• Subscribing to our services, events, or publications
• Requesting marketing materials
• Sending a request for a proposal
• Contacting us regarding business, media, supplier, or career inquiries
• Applying for a role with MedApps or related platforms
• Providing feedback

B. Automated Technologies or Interactions

As you interact with our website, we may automatically collect Technical Data about your device, browsing actions, and usage patterns through:

• Cookies
• Server logs
• Similar technologies

For more details, please refer to our Cookie Policy.

C. Third Parties or Publicly Available Sources

We may receive personal data about you from analytics providers or other publicly accessible sources.

We will only use your personal data when permitted by law. Common scenarios include:

• To perform a contract: When it is necessary to fulfill a contract we are entering into or have already entered into with you.
• For legitimate interests: When it is necessary for our legitimate business interests (or those of a third party) provided your fundamental rights do not override these interests.
• To comply with legal obligations: When processing is required to fulfill legal or regulatory obligations.
• For recruitment purposes: To match your details with job vacancies and engage with you during the recruitment process.

For more details on the lawful basis for processing your data, please refer to Section 5.

We generally do not rely on consent as the primary legal basis for processing your personal data. However, you have the right to opt out of marketing communications or events at any time by:

• Clicking the unsubscribe link in any email you receive from us
• Contacting us directly

The table below outlines how we use your personal data, the legal bases for doing so, and, where applicable, our legitimate interests. Note that the same data may be processed for multiple lawful purposes depending on the activity. Contact us for further details regarding specific legal grounds.

Marketing

We may use your Identity, Contact, Technical, Usage, and Profile Data to determine services or offers that might interest you. You will receive marketing communications from us if you:

• Requested information or purchased services
• Shared contact details at a MedApps event, conference, or meeting
• Hold a MedApps Job Search account

You can opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any email
• Contacting us directly

Even after opting out, we may retain your data for purposes related to transactions, service history, or legal compliance.

Change of Purpose

We will only use your personal data for its original purpose unless another purpose arises that is compatible with it. If processing is required for unrelated purposes, we will notify you and explain the legal basis.

In certain cases, your data may be processed without your knowledge or consent, as permitted by law.

We may need to share your personal data with the following parties for the purposes outlined in Section 4:

• Internal Third Parties: Defined in the Glossary, these include other entities within the MedApp Dynamics Group.
• External Third Parties: Defined in the Glossary, these include service providers and professional advisers.
• Business Transactions: In cases of a sale, transfer, or merger of parts of our business or assets, your personal data may be shared with the new owners to continue providing services as described in this privacy notice.

We require all third parties to respect the security of your personal data and process it in compliance with the law. Third-party service providers are only permitted to process your data for specified purposes and must adhere to our instructions.

We will not share your personal data beyond these scenarios unless:

• You have provided explicit authorization
• We are legally required to do so

If legal obligations mandate disclosure, MedApps will comply fully with relevant authorities while ensuring the lawful handling of your data.

We share your personal data within the MedApp Dynamics Group, which may involve transferring your data outside the European Economic Area (EEA).

Whenever we transfer your personal data outside the EEA, we ensure that it is afforded a similar level of protection by implementing at least one of the following safeguards:

• Use of Model Contracts: When working with certain service providers, we may use specific contracts approved by the European Commission that provide personal data with the same protection as within Europe. For more details, see the European Commission's Model Contracts for the transfer of personal data to third countries.
• US Providers and the Privacy Shield: If we transfer data to providers based in the United States, this is done under either Model Contracts or the Privacy Shield framework, which requires them to provide similar levels of protection for personal data as those provided within the EEA. For more details, see the European Commission's EU-US Privacy Shield.

If you would like more information on the specific mechanisms we use for transferring your personal data outside the EEA, please contact us.

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, accessed, used, altered, or disclosed without authorization. Additionally, we limit access to your personal data to employees, agents, contractors, and other third parties who have a legitimate business need to access it. These individuals or entities will process your personal data only in accordance with our instructions and are bound by a duty of confidentiality.

In the event of a suspected data breach, we have procedures in place to manage the incident. Where required by law, we will notify you and any relevant regulatory authorities about the breach.

How long will we use your personal data?

We will retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including to meet legal, accounting, or reporting requirements.

To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the risk of harm from unauthorized use or disclosure, the purposes of processing, whether those purposes can be achieved by other means, and any applicable legal requirements.

By law, we retain basic customer information (such as Contact, Identity, Financial, and Transaction Data) for six years after the end of a customer relationship for tax purposes. However, retention periods may vary by country to reflect national legislation.

In certain cases, we may anonymize your personal data (so that it can no longer be linked to you) for research or statistical purposes. Anonymized data may be used indefinitely without further notice.

Under certain circumstances, you have rights under data protection laws regarding your personal data. Click on the links below to learn more about these rights:

• Request access to your personal data
• Request correction of your personal data
• Object to the processing of your personal data
• Request restriction of processing your personal data

If you wish to exercise any of the rights mentioned above, please contact us.

No Fee Usually Required

You will not typically need to pay a fee to access your personal data or exercise your rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request under these circumstances.

What We May Need From You

We may request specific information to verify your identity and ensure your right to access your personal data (or exercise any other rights). This is a security measure to ensure that personal data is not disclosed to unauthorized individuals. We may also contact you for further details about your request to expedite our response.

Time Limit to Respond

We aim to respond to all legitimate requests within one month. Occasionally, we may require more time if your request is particularly complex or if you have submitted multiple requests. In such cases, we will notify you and keep you updated on the progress.

Lawful Basis

• Legitimate Interest: Refers to MedApp Dynamics’ interest in managing your details to provide you with the best possible service, product, and secure experience.
• Performance of Contract: Refers to processing your data when it is necessary to fulfill a contract to which you are a party.
• Compliance with a Legal or Regulatory Obligation: Refers to processing your personal data when it is required to comply with a legal or regulatory obligation.

Third Parties

• Internal Third Parties: Other companies within the MedApp Dynamics Group located in the EU, US, Qatar, United Arab Emirates, and India.
• External Third Parties:
  • Service Providers: Entities providing IT and system administration services.
  • Professional Advisers: Marketing professionals, lawyers, bankers, auditors, and insurers providing consultancy, banking, legal, insurance, and accounting services.

Your Legal Rights

• Request Access: Make a "data subject access request" to receive a copy of the personal data we hold about you.
• Request Correction: Request correction of incomplete or inaccurate personal data.
• Object to Processing: Object to processing your personal data based on legitimate interests or for direct marketing purposes.
• Request Restriction of Processing: Suspend processing of your personal data in certain circumstances.

Cookie List

A cookie is a small piece of data (a text file) that a website, when visited by a user, asks your browser to store on your device. This allows the website to remember information about you, such as your language preferences or login details. Cookies set by us are called first-party cookies, while third-party cookies are those set by domains different from the website you are visiting, often for advertising and marketing purposes.

We use cookies and other tracking technologies for the following purposes:

Strictly Necessary Cookies

• These cookies are essential for the website to function properly and cannot be turned off in our systems. They are typically set in response to your actions, such as:
• Setting your privacy preferences.
• Logging in to your account.
• Filling in forms.

You can configure your browser to block or notify you about these cookies. However, blocking them may affect the website’s functionality, and some parts of the site may not work as intended. Importantly, these cookies do not store any information that can personally identify you.