Privacy Policy
ONLINE HEARING CARE LIMITED (“OHC”)
PRIVACY POLICY REGARDING THE COLLECTION AND PROCESSING OF CUSTOMER INFORMATION ON CONNECTION WITH OHC ONLINE AND REMOTE HEARING TEST SERVICES
Who we are and purpose of this privacy notice
Online Hearing Care Limited, a UK company with registered number Company number 12883981 and with registered offices at 2 Trust Court Vision Park, Chivers Way, Histon, Cambridgeshire, England, CB24 9PW and website at www.onlinehearingcare.co.uk (“we”), as a Controller, respects your privacy and are committed to protecting your personal data in accordance with General Data Protection Regulation (EU) 2016/679 and the UK Data Protection Act 2018 (hereafter “Applicable Law”).
Please read this privacy notice to understand how we collect, use and protect the personal data (including g personal sensitive information) that you provide to us in the context of using our online and remote equipment hearing test services.
While using OHC online services via the OHC apps or website, for conducting hearing assessments we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you, in order to let you participate fully in the services provided, or to generate your Online Hearing Care profile in order to access and utilise our services. Certain personal information and non-personal information may be collected from or about you while using the OHC services, in order to provide you with services or advice.
This privacy policy is available for review while using OHC services. By registering or using the OHC app, website or services you are giving permission and consent for our system to recognize, collect and store information, including your medical and hearing profile, in order to report to you and our specialist advisors in order to provide hearing support services to you. Hearing profiles are stored for you and used for the provision of our services. We will not share personal information that you provide with any other party save as set out in this privacy policy and for the purposes of providing our services to you. You have the right to rectify data or withdraw consent at any time and the right to ask us to receive a copy of your data or to remove your data. Contact us via e-mail or via our website.
What are the data we collect about you
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
• Identity Data: first name, last name, age range;
• Contact Data: email address, telephone numbers;
• Technical Data: internet protocol (IP) address, browser type and version, time zone setting and location, operating system and platform;
• Usage Data: information about how you use our services.
We also collect medical and health data about you, which are considered as sensitive data, and which are necessary for using our online hearing test services. The processing of those data is possible only if you consent to. You may withdraw your consent at any time, or exercise one of your legal rights as mentioned in the section “Your legal rights”.
How your personal data are collected
We use different methods to collect data from and about you:
Direct interactions: You may give us your identity and contact information by filling in forms. This includes personal data you provide when you:
• request a hearing report to be sent to you;
• request to be called back or contacted by us.
Automated technologies or interactions: As you use our service, we will automatically collect technical data about your equipment, browsing actions and patterns, in order to ensure the proper functioning and security of the website. We collect this personal data by using cookies and server logs and other similar technologies. Please see our cookie policy for further details.
Third parties or publicly available sources: We will receive data from Google Analytics. We gather information to analyse user actions in our application and to improve our product and services. All data are anonymized/aggregated.
Why we use your personal data
We use your personal data for the following purposes:
• To analyse your hearing test results and to send the personal hearing report to your email address, to call you back if requested, based on your specific consent;
• To send you marketing information, to make suggestions and recommendations to you about goods or services that may be of interest to you, based on your specific consent;
• To use data analytics to improve our website, analysis and development of services and products, customer relationships and experience based on our legitimate interest.
Disclosure of your personal data
We may share your personal data with third parties and sub processors acting on our behalf in connection with the provision of hearing care services in case they need access to perform tasks on our behalf. Such parties are obligated not to disclose or use your data for any other purpose than those set out in the table above.
We require all third parties to respect the security of your personal data and to treat it in accordance with Applicable Law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
In addition, we may transfer your personal data in a de-identified form to our technology partners with the aim to improve services and products offered to you. The processing of personal data for these purposes will be done in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, or it will be anonymized.
Working with 3rd Parties
As part of our Services we will connect you and use the services of 3rd parties including Samplified Europe NV (trading as Clementine) which provide hearing tests on our behalf. Clementine will also collect and process your personal data as part of the hearing assessment and that data will be managed subject to Clementine’s privacy policy when you log in for the hearing test. Clementine is based in the Netherlands and is subject to compliance with GDPR and will only collect and process your data for the purposes of working with us and providing your hearing test services and products.
We will also manage, process and store your data using 3rd party service providers which are based outside of the UK and the EU (such as JaneApp). Before transferring your personal information, we ensure that appropriate safeguards are in place and that your privacy rights are protected and preserved. Such safeguards may include the existence of an EU adequacy decision, certification and adherence to EU-US Privacy Shield and Swiss-US Privacy Shield Frameworks, the Standard Contractual Clauses approved by the European Commission, binding corporate rules, or other legal mechanisms to safeguard the personal information being transferred.
International transfers
In the event your personal data are transferred outside the UK or European Union/ European Economic Area to countries not considered as providing an adequate level of protection according to the European Commission, we commit to:
• Implement adequate procedures to comply with Applicable Law, and in particular when a request for authorization from the competent supervisory authority is necessary;
• Implement appropriate organizational, technical and legal safeguards to govern the relevant transfer and to ensure the necessary and adequate level of protection under the Applicable Law;
• If necessary, implement Standard Contractual Clauses as adopted by the European Commission.
Depending on the importing third country, we undertake to adopt supplementary measures such as completing a data transfer adequacy assessment if, after evaluation of the circumstances of the transfer and after evaluation of the legislation of the third country, it is necessary for the protection of the transferred personal data.
Data security
We have adopted appropriate security measures according to Applicable Law to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. We also have adopted procedures to deal with any suspected personal data breach and will notify you and any applicable supervisory authority of a breach where we are legally required to do so.
In addition, we limit access of your personal data to those employees, agents, contractors and other third parties who have a business need-to-know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.
Data retention
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for. In some circumstances we will de-identify your personal data (so that it can no longer be associated with you) for research or . statistical purposes, in which case we may use this information indefinitely without further notice to you.
Your legal rights
Under Applicable Law, you have the right of access, rectification, restriction of processing, data portability, objection of the processing of your personal data, erasure of your personal data, and withdrawal of your consent. Please note that the exercise of such rights is not absolute and is subject to the limitations provided by Applicable Law.
If you wish to exercise one of these legal rights, we may need to request specific information from you to help us confirm your identity and ensure your request is lawful. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
Please know that If you consider that the processing of your personal data constitutes a violation of the Applicable Law, you can lodge a complaint with the UK Information Commissioners office the competent supervisory authority.
Minors’ personal data
This website and our service are not intended for children and we do not knowingly collect data relating to children.
Third-party links
Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy statement of every website you visit.
Change of purpose
We will only use your personal data for the purposes for which we collected them as set out above. Before we change the purpose of processing your personal data, we will notify you and will explain the legal basis which allows us to do so. You have the right to reject to the processing for a different purpose at any time, and we will change or delete your data according to your request according to Applicable Law.
However if you do require us to delete information about you, we may no longer be able to provide further services or support services to you in connection with our goods and services.
How to contact us
If you wish to exercise any of the rights set out above, or for any other questions, information or remarks about this privacy notice or our privacy practices, please contact us at
Online Hearing Care Limited, 2 Trust Court Vision Park, Chivers Way, Histon, Cambridgeshire, England, CB24 9PW
website at www.onlinehearingcare.co.uk
contact T: 0800 054 1138, or email [email protected]
Cookies
Cookies are files with small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device its hard drive. Like many sites, we use cookies to collect information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our apps or website.
Security
The security of your Personal Information is very important to us. We strive to use all acceptable means to protect your Personal Information. We are actively working on preventing unauthorized access to data via our internal procedures and by the usage of appropriate technology together with applying suitable safeguards with any 3rd parties or sub processors we work with. Despite our measures, we cannot guarantee total confidentiality. OHC can not be held responsible for any losses or damages suffered as a result of such unauthorized access. OHC may store data outside of your state, country or continent but will only do that on the highly secure Microsoft Azure infrastructure while remaining compliant with the applicable laws and regulations to protect your data.
March 2021