Privacy Policy
1. Introduction
This privacy policy explains how Medial EarlySign (“we”, “us”, or “our”) collects, uses, shares, and protects personal data in compliance with the EU General Data Protection Regulation (GDPR) and ISO 27001:2022 standards. This policy applies to all personal data processed by us, whether in electronic or paper format.
2. Data Controller and Privacy Officer
Medial EarlySign is the data controller for the personal data we process. Our Data Privacy Officer can be contacted at: privacy@earlysign.com
3. Personal Data We Collect
Under the GDPR, personal data is defined as any information relating to an identified or identifiable natural person. We may collect the following types of personal data:
- Name
- Contact information (email address, phone number, mailing address)
- Online identifiers (IP address, cookie data)
In terms of being contacted for additional marketing purposes beyond the contact request purposes Medial EarlySign would contact you for additional consent.
4. Legal Basis for Processing
We process personal data on the following legal bases:
- Consent: Where you have given explicit consent for specific processing activities.
- Contractual necessity: To fulfill our contractual obligations to you.
- Legitimate interests: Where processing is necessary for our legitimate interests, provided these interests do not override your fundamental rights and freedoms.
- Legal obligation: To comply with applicable laws and regulations.
5. How We Use Your Personal Data
We use your personal data for the following purposes:
- To provide you with information, publications, or updates you have requested
- To respond to your inquiries
- To improve our products and services
We will not use your personal data for purposes other than those for which it was collected, except with your consent or as required by law.
6. Data Sharing and Third-Party Processors
We may share your personal data with third-party service providers who perform services on our behalf. These providers are obligated to protect your data and use it only for the specific services they provide to us. We ensure that all third-party processors comply with GDPR and our data protection standards.
7. International Data Transfers
We may transfer your personal data to countries outside your own, including but not limited to the United States and other countries that may have different data protection regulations. These transfers are necessary for our business operations and to fulfill our contractual obligations to you.
8. Data Subject Rights
Under GDPR, you have the following rights:
- Right to access your personal data
- Right to rectification of inaccurate or incomplete data
- Right to erasure (‘right to be forgotten’)
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Rights related to automated decision-making and profiling
To exercise these rights, please contact our Privacy Officer using the contact information provided above.
9. Data Retention
10. Data Security Measures
We have implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
- Encryption of personal data
- Regular testing and evaluation of the effectiveness of security measures
- Access controls and authentication procedures
Regular security awareness training for staff
11. Data Breach Notification
In the event of a personal data breach, we will notify the relevant supervisory authority. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you without undue delay.
12. Changes to This Privacy Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with a revised effective date. We encourage you to review this policy periodically.
13. Complaints
If you have concerns about our processing of your personal data, please contact our Privacy Officer. You also have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.
What forms of ID will I need to provide in order to access your personal data?
Medial EarlySign accepts the following forms of ID when information on your personal data is requested: Passport, driving license, birth certificate, National Identity Card.
14. Contact Us
For any questions or concerns regarding this privacy policy or our data practices, please contact our DO at privacy@earlysign.com.
Under what circumstances will Medial EarlySign contact me?
Our aim is not to be intrusive, and we undertake not to ask irrelevant or unnecessary questions. Moreover, the information you provide will be subject to rigorous measures and procedures to minimize the risk of unauthorized access or disclosure.
Last updated: 31-Mar-2025
