Controller means the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data. The controller for the data processing on this website is:
Profound Medical GmbH
Data Protection Officer – Contact Details
You may at any time contact our Data Protection Officer regarding all questions and comments concerning data protection and the processing of your personal data. Our Data Protection Officer can be reached under firstname.lastname@example.org
Processing of Personal Data and Purpose of Processing
Your personal data is being processed, depending on the function of the website. This may be the case if you get in touch with us or participate on the website.
If you submit a request to us via the contact form, you are asked to submit the following personal data: your e-mail address (mandatory), your name (optional) and other personal data you chose to share, such as health data (e.g. details of your diagnosis) (optional).
We process this data for the purpose of answering your request (art. 6 (1) 1 (b) GDPR). However, if you choose to provide details regarding your health status, we will ask you for your consent (art. 6 (1) 1 (a) GDPR). The processing of personal data you provided in the contact form, may involve the transfer of data to treatment centers, i.e. health care institutions that provide the TULSA procedure, in order to response to your request. An up-to-date list of treatment centres can be found under https://tulsatreatment.com/treatment-centres/.
This processing is necessary in order to perform the contract between you and us. There is no statutory requirement for you to provide personal data. However, non-provision of personal data might prevent us from answering your request.The data will be deleted after answering the request if it is no longer needed.
When you communicate with Profound Medical by e-mail, we collect the following personal data:
- your e-mail address and
- any information you choose to provide, which may include personal data.
We process this data for the purpose of answering your request (art. 6 (1) 1 (b) GDPR). This processing may involve the transfer of data to treatment centers, i.e. health care institutions that provide the TULSA procedure. An up-to-date list of treatment centres can be found under https://tulsatreatment.com/treatment-centres/
This processing is necessary in order to perform the contract between you and us. There is no statutory requirement for you to provide personal data. However, non-provision of personal data might prevent us from answering your request. The data will be deleted after answering the request if it is no longer needed.
Use of the website
If you visit our website, there is certain information that we collect automatically as the result of your use. We use this data to develop our website and improve our online services (art. 6 (1) 1 (f) GDPR). Please see the next section on cookies for more information on this processing activity.
Cookies are alphanumerical information files that your web browser automatically stores on the hard drive of your computer when you visit our Internet site. Cookies do not harm the hard drive on your computer. Session Cookies are temporary cookies that automatically expire and are deleted from the hard drive of your device as soon as you end a session and close your browser, provided that you adjusted your browser settings accordingly.
Tracking Tools and Third-Party Technologies
We use Snazzymaps (www.snazzymaps.com), whereas Snazzymaps is a product of Atmis ,10940 – 166A Street NW, Unit 201, Edmonton, AB T5P 3V5, Canada. The cookie from Snazzymaps uses a cookie in order to distribute traffic to the website on several servers in order to optimise respond times. Snazzymaps stores the data on servers in the United States.
Sharing your information
We use service providers, some of who may be located outside of the European Economic Area (“EEA”), to provide services to us or to our users on our behalf. These service providers have access to your information solely to perform these tasks on our behalf, and are contractually bound to implement appropriate organizational and technical security measures to protect against unauthorized disclosure of personal data, and only to process personal data in accordance with our instructions and to the extent necessary to provide their services to us. If you want to get more information about our service providers, please contact us and we will provide you with a list of service providers we engage.
We may transfer data you have provided to us to transfer centres located inside the EEA. An up-to-date list of treatment centres can be found under https://tulsatreatment.com/treatment-centres/. Treatment centres receive information only if, and solely to the extent that this transferal of data is necessary to process a request that you lodged with us via e-mail or via the contact form on the website.
International Data Transfers
Profound Medical may transfer your personal data to countries outside of the EEA. In this course, we may transfer your personal data to countries where the European Commission has decided that this country ensures an adequate level of protection, e.g. Canada. In the absence of such a decision, we will implement appropriate organizational and technical security measures to ensure an adequate level of data protection such as the Standard Contractual Clauses, issued by the European Commission.
Exercising Your Rights
You have the following rights regarding your personal data:
- Data Access and Portability: You may be entitled to request copies of your personal information held by us. You may also be entitled to request copies of personal information you have provided to us in machine-readable format.
- Change or Correct Data: You have the right to ask us to correct change, update or rectify your data.
- Data Retention and Deletion: We only retain data for as long as necessary to fulfil the purpose set out above. You have the right to ask us to delete all or some of the personal data we hold about you.
- Restriction of Processing: Under certain circumstances, you may have the right to limit the ways in which we use your personal information.
- Withdrawing Consent: Where you provide consent to the processing of your personal information by Profound Medical, you may withdraw your consent at any time. Please note that the withdrawal of your consent does not affect the lawfulness of any processing activities based on such consent before its withdrawal.
Right to object:
If you object to such processing Profound Medical will no longer process your personal information for these purposes unless we can demonstrate compelling legitimate grounds for such processing or such processing is required for the establishment, exercise or defence of legal claims or obligations.
You have the right to lodge complaints about the data processing activities carried out by Profound Medical before a competent data protection authority.