Version 1.0.0 – 2024-05-27
FAQIR considers it important that you know what happens to your (Personal) Data when you use the Qwenda application. That is why we have created this clear privacy statement. It describes who has access to your Personal Data, how it is stored, modified or deleted and how your Personal Data is handled in a secure manner, in compliance with Belgian and European law applicable to Qwenda.
Your journey as a user of Qwenda is of primary importance to us. That is why we want to inform you, so that it is clear to you how we process your Personal Data and what rights you have in that respect.
This brief summary of our privacy statement will get you up to speed in no time on how we process your Personal Data. Want to know more? Then we invite you to read our full privacy statement below, which explains everything in detail.
We ask you to share the following Personal Data when using Qwenda:
Your identification and contact information so that we can identify and contact you in connection with the functionalities of Qwenda, if necessary;
Your date of birth so that we can verify that you have reached the age of 16;
Personal data concerning your health and health-related data, so that we can identify your needs and wishes concerning your health in accordance with the health modules available in Qwenda;
Personal data regarding the use of medication so that we can monitor administration through Qwenda;
Your choice of language so that we can customize the language of Qwenda to your needs.
After the creation of your account, your consent and the Personal Data you have entered will be kept. By setting up a password known only to you, we ensure that only you can access your account and the data it contains.
Only you will have access to your Personal Data. FAQIR does not have access to your Personal Data or to your account.
By giving consent by accepting this privacy statement, you agree that FAQIR will have access to anonymous data. This means that FAQIR will have access to all anonymous data entered by each person who created an account, without being able to identify that person. Your account will therefore not be able to be directly linked to your person by FAQIR.
At FAQIR we work with technical service providers, but your Personal Data will not be made available to them or third parties without your knowledge or consent.
You may withdraw your consent at any time, without having to account for it. However, if you withdraw your consent, you will no longer be able to use Qwenda, the health vault and the health modules.
At any time, you have the option to modify or delete your Personal Data within Qwenda. Additionally, you can also request us to change or remove your Personal Data at any time. To do so, simply send an e-mail to support@faqir.eu following the steps outlined in article 5 of the full privacy statement below.
You may ask us at any time to receive a copy of all your Personal Data that we have collected. To do so simply send an email to support@faqir.eu following the steps outlined in article 5 of our full privacy statement below.
You may contact us at any time with complaints, questions or concerns regarding the management and use of your Personal Data you may have. To do so, simply send an e-mail to privacy@faqir.eu .
Your Personal Data is stored on a secure server in Germany and processed only in Belgium;
We provide technical and organizational appropriate measures to process your Personal Data in a secure manner consistent with the GDPR.
We invite you to read our full privacy statement, which explains everything in detail.
This document concerns the privacy statement for Qwenda of:
FAQIR Foundation, a non-profit association under Belgian law, with its registered office at Volderrede 58, 9070 Destelbergen and registered in the Crossroads Bank for Enterprises under enterprise number 0789.225.256;
and
FAQIR Institute, a limited liability company under Belgian law, with its registered office at Koutergatstraat 2, 1703 Dilbeek and registered in the Crossroads Bank for Enterprises under enterprise number 0786.609.226;
Both of which are acting as independent controllers of processing under the terms of this Privacy Statement, and are collectively referred to in the Privacy Statement as "FAQIR."
The collection and processing of Personal Data is subject to strict conditions. FAQIR acts in accordance with:
FAQIR Foundation is the data controller for the processing of your Personal Data in relation to the use of the health vault as a storage and data exchange system . FAQIR Institute is the controller for the processing of your Personal Data relating to the creation of your account as well as the use of all functionalities in the health modules in Qwenda.
FAQIR may collect Personal Data provided by you to the extent necessary or useful for the functioning of Qwenda and all modalities contained therein.
On the one hand, your Personal Data are collected for the creation of the FAQIR health vault. In addition, additional Personal Data are collected in the specific health modules available in Qwenda.
| Data | Details | Context | |
|---|---|---|---|
| Category 1 | your identification and contact information | Data concerning your identity, such as your full name, your gender, your date of birth, your phone number and email address, your language preference. | By providing this information when creating your account. |
| Category 2 | your health and health-related data | Data regarding your health status and other health-related info, such as: your height and weight. | By providing this information when creating your account or when using the FAQIR health vault |
| Data | Details | Context | |
|---|---|---|---|
| Category 2 | your health and health-related data | Data regarding your health status and other health-related info, such as: your medical conditions, your treatments and medication use and answers to specific health questions. | By completing this information when activating and using a health module. |
| Data | Legal Basis | Purpose | |
|---|---|---|---|
| Category 1 | your identification and contact information | Performance of a contract (Art. 6.1, b GDPR) | - To create your account on Qwenda; - To create your health vault within Qwenda; - To contact and identify you during your use of Qwenda. |
| Category 2 | your health and health-related data | Performance of a contract (Art. 6.1, b GDPR) and Explicit consent (art. 9.2, a GDPR) |
To create your health vault within Qwenda. |
| Data | Legal Basis | Purpose | |
|---|---|---|---|
| Category 2 | your health and health-related data | Performance of a contract (Art. 6.1, b GDPR) and Explicit consent (art. 9.2, a GDPR) | -To record your health and treatment of certain conditions in Qwenda; -To record and monitor the use of medications as part of the treatment of certain conditions; -To improve Qwenda and ensure that you can make the best use of Qwenda. |
Your Personal Data will be retained and processed by FAQIR for the period we are required to do so by law or for as long as it is essential for the purposes of the processing or for the contractual relationship between you and FAQIR.
If FAQIR should become unable to retain your Personal Data, you will be notified and given the option to download your Personal Data.
If you do not exercise your right to erasure, your Personal Data will be retained for the following period:
| Personal data | Retention period | |
|---|---|---|
| Category 1 | your identification and contact information | Your Personal Data contained in Category 1 will be retained for five (5) years after the deletion of your account on Qwenda. Additionally, FAQIR requires you to make use of Qwenda at least once every five (5) years. Failing to do so will result in the deletion of your Personal Data contained in Category 1. |
| Category 2 | your health and health-related data | Your Personal Data contained in Category 2 will be retained for five (5) years after the deletion of your account on Qwenda. Additionally, FAQIR requires you to make use of Qwenda at least once every five (5) years. Failing to do so will result in the deletion of your Personal Data contained in Category 2. |
You have the right to be informed about your Personal Data and the purpose of the processing of your Personal Data by FAQIR at any time.
You are free to share or not share certain Personal Data with FAQIR.
You always have the right to request us to rectify your Personal Data. That being said, you can rectify your Personal Data yourself at any time.
You may also request that the processing of your Personal Data be restricted if you believe that your Personal Data is inaccurate, and you notify us thereof accordingly.
In addition, you have the right to request FAQIR to delete your Personal Data to the extent we are not in a position to make it anonymous.
If you refuse to share certain Personal Data with FAQIR or ask us to delete it, we may no longer be able to provide our services in an optimal manner.
You also have a right to object to the processing of your Personal Data when you have serious and legitimate reasons for doing so.
You also have the right to oppose the use of your Personal Data for direct marketing purposes. In this case, no specific justification will be requested.
You have the right to obtain your Personal Data processed by FAQIR in a structured, common and readable form and/or to transfer it to another data controller.
You have the right to withdraw your consent at any time, without having to provide justification. The withdrawal of your consent does not affect your continued medical care in any way.
You have the right to ask us not to make a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you.
The processing of your Personal Data by FAQIR will not be subject to automated processing or profiling without your explicit consent.
You can exercise the aforementioned rights by contacting us through the designated method in Qwenda or by sending a written request via email to support@faqir.eu. Please include sufficient identification data to be uniquely identified in Qwenda, and omit any irrelevant information
If you are or were resident in the EU at the time your Personal Data was processed by us, and you do not feel happy about the way we handled your requests, you can always lodge a complaint with the Belgian Data Protection Authority, FAQIR's supervisory authority. However, we request that you first report your complaint to us at privacy@faqir.eu. That way we can come to an amicable solution by mutual agreement.
If after your notification you are still not satisfied with the processing of your Personal Data by FAQIR, you can still file a complaint with the Belgian Data Protection Authority:
Data Protection Authority
Rue de la Presse/Drukpersstraat 35,
1000 Brussels
Belgium
+32 (0)2 274 48 00
contact@apd-gba.be
If you are from an EU member state other than Belgium, you can also file a complaint with your national data protection authority (you can find a list of all data protection authorities within the European Union at https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm). This is without prejudice to a remedy before a civil court.
If you would suffer damages as a result of the processing of your Personal Data, you may bring a claim for compensation.
FAQIR has implemented appropriate security measures at technical, administrative and organizational levels to avoid the destruction, loss, corruption, alteration, unauthorized access or erroneous disclosure to third parties of your Personal Data, as well as any unauthorized processing of that Personal Data. However, in the event that - notwithstanding the measures taken by us - this would occur, and your Personal Data would be affected, FAQIR will inform you about the breach, including a description of the potential impact and a recommendation to mitigate the possible negative consequences of the breach.
In no event shall FAQIR be held liable for any direct or indirect damages resulting from an erroneous or unlawful use of your Personal Data by a third party.
You bear sole responsibility for maintaining the privacy and security of Qwenda, for example, by not allowing a third person to access the Personal Data you enter into Qwenda.
You alone are responsible for the use of Qwenda, for your IP address and identification data, as well as for their confidentiality. In any case you must immediately notify FAQIR of any unauthorized use of your account. You do this by sending an email to support@faqir.eu.
This Privacy Statement shall be governed, construed and enforced in accordance with Belgian law, which is exclusively applicable.
The courts of Ghent shall have exclusive jurisdiction to hear any dispute that may arise from the interpretation or implementation of this privacy statement.
In case you have any questions or concerns regarding this privacy statement, please send us an e-mail to privacy@faqir.eu. We will make every effort to answer your questions.
Other contact information:
FAQIR Foundation
Attn: Data Protection Officer
Volderrede 58
9070 Destelbergen
Belgium
dpo@faqir.org
FAQIR Institute
Attn: Data Protection Officer
Koutergatstraat 2
1703 Dilbeek
Belgium
dpo@faqir.eu