Privacy notice

MedQore ApS (CVR 43979019), TechStation, Ryvangs Allé 81-83, 2900 Hellerup, Denmark, is the data controller for the processing described in this notice. Write to noreply@medqore.ai with any question about this notice or your personal data.

This notice covers the website medqore.ai and contact with MedQore through it. MedQore’s software for hospitals and clinics is covered by the agreements with those organisations, not by this notice.

The website sets no cookies, uses no analytics, advertising or tracking, and loads nothing from other companies. Like every website, it needs your device’s IP address and some technical information to send you its pages. If you write to us, we use what you send to answer you.

To send a page to your device, our server necessarily receives your IP address and the technical information your browser sends with every request: the address of the page, the time, the type and version of your browser and operating system, your preferred language and, if your browser sends it, the page you came from.

We use this information only to deliver the website, keep it working and protect it against misuse and attacks. The legal basis is our legitimate interest in providing a secure, working website (GDPR Article 6(1)(f)). We do not use it to identify you, to build profiles or to follow you across websites.

Our servers keep technical logs to detect faults and attacks. Where these record an IP address or the pages requested, they are used only for operation and security, are available only to the people who run the servers, and are deleted after at most 14 days.

We do not produce visitor statistics. If we start to, using our own server logs, we will update this notice before we do.

The website does not use cookies, local storage or similar technologies to store or read information on your device. It uses no analytics, advertising pixels, session recording, fingerprinting or tracking across websites, and it loads no scripts, fonts, images or videos from other companies.

Your browser may keep copies of the website’s own files, such as images and style sheets, in its cache so that pages load faster. This is part of delivering the website you have asked to see, and you can clear the cache in your browser at any time.

For these reasons the website does not ask for cookie consent. Before we use any technology that requires consent under the Danish rules on cookies and similar technologies, we will ask for it.

We collect what you enter: your name, work email, organisation, type of organisation and country, and, if you give them, your organisation’s size, its EHR system, its number of locations, the products you would like to see and your message. We also record when you sent the request, the language you used and that you acknowledged this notice, with its version.

We use these details to answer your request, arrange and hold the demonstration, and follow up on it. The legal basis is steps taken at your request before entering into a contract (GDPR Article 6(1)(b)) and our legitimate interest in answering enquiries from healthcare organisations (Article 6(1)(f)). We do not use them for newsletters or marketing lists, and we make no automated decisions about you.

To stop automated abuse of the form, the address a request comes from is turned into a one-way code that cannot be read back, and kept for 24 hours.

The form is not meant for patient or health information. Please don’t include any.

Only the people at MedQore who need it to answer you or to run the website.

Our providers process personal data on our behalf and only on our instructions: Hetzner Online GmbH (Germany) hosts the website and stores requests on servers in its data centre in Helsinki, Finland, and Google provides our email (Google Workspace), which also sends the emails about your request.

We disclose personal data to public authorities only where the law requires it.

The website links to other websites, such as our Trust Center, which is hosted by Vanta, and our integration partner XMedicus. When you visit them, they are responsible for their own processing.

The website and the requests are hosted in the EU. Google may process email data outside the EU/EEA, including in the United States. Where it does, the transfer is based on the European Commission’s adequacy decision for the EU–US Data Privacy Framework or on the EU Standard Contractual Clauses in Google’s data processing terms.

Technical logs: at most 14 days. One-way codes against abuse of the form: 24 hours.

Demonstration requests and email correspondence: 24 months after our last contact with you. If your organisation becomes a customer, what is needed for that relationship is kept under the customer agreement instead, and where the law requires us to keep something longer, for example as accounting records, we keep it for that period.

Under the GDPR you have the right to access the personal data we hold about you, to have it corrected or erased, to have its processing restricted and to receive it in a portable format. You can object at any time to processing based on our legitimate interests (Article 21).

Write to noreply@medqore.ai. We answer within one month; if a request is complex we may extend this by up to two further months, and we will tell you why. We may ask you to confirm your identity. Exercising your rights is free of charge.

Giving us personal data is voluntary. You can visit the website without telling us who you are, and you share your contact details only if you choose to write to us.

If you disagree with how we process your personal data, please contact us first. You can also complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, dt@datatilsynet.dk, www.datatilsynet.dk, or to the data protection authority where you live or work.

The website is served only over encrypted connections (HTTPS, with HTTP Strict Transport Security), uses a strict content security policy and runs no third-party code. Access to the servers is limited to the people who operate them, and we collect only what we need. Our Trust Center describes how MedQore approaches security.

We update this notice when our processing changes. The version above shows which one you are reading.