Privacy Policy

The “Ozone Medical” website, operated by “EW Medical Ltd.” (hereinafter “EWM”), its subsidiaries, and affiliated companies (hereinafter collectively, “the Company” or “we,” or “our”) place the utmost importance on user privacy, and we devote significant attention to maintaining the privacy and security of our users’ information. This privacy policy explains how we handle personal information collected from users. In this privacy policy, we want to explain transparently about the information we collect, how we use it, and how you can manage the said information.

This privacy policy applies to all users (“User”, “You”, or “Your”), both registered and unregistered, who visit or use the website www.ozon-medical.com (“the Site”) and the services provided through the Site (together with the Site, hereinafter referred to in this privacy policy as “the Service” or “EWM”).

From time to time, we are permitted to develop or offer new or additional services. If the addition of new or additional services as mentioned causes a change in the way we collect or process your personal information, we will provide you with additional information, additional terms, and additional policies. Unless otherwise specified at the time of adding new or additional services as mentioned, they will be subject to this privacy policy.

We recommend that you read this Privacy Policy as well as the Terms of Use of the website (hereinafter referred to as “(“).TOU

Note to EU residents: In order to comply with the GDPR requirements for our European users, this privacy policy outlines the basis on which we process your personal information and provide other information required by the GDPR.

This privacy policy is subject to the Privacy Protection Law, 1981 (“Privacy Protection Law”) and constitutes a notice under Section 11 of the Privacy Protection Law.

What information do we collect, how do we use it and for what purpose, and the legal basis for processing the information?

We collect personal information in several ways and for various purposes as follows:

EWM users:

Registration and account creation

You can use our service features after you register and create an account. If you chose to create an account (by registering using an email address or logging in with a social networking service account (such as Google or Facebook (“SNS”)), you need to provide us with information about yourself, including an email address or a numeric identifier of the SNS account and a scrambled password. (hashed). After you create an account, you can choose a username (usernames are unique identifiers in EWM).

We process this information for the purposes of registration and verification for account creation and user identity verification for those accessing their EWM account. You are not obligated to provide us with this information; however, if you do not provide us with the requested information, we will not be able to create your account.

The legal basis for such processing is our legitimate interest, as it is necessary to allow users to access their EWM account and to perform the verification needed to prevent unauthorized access to their account.

Profile information

When you create an account with us, you are allowed to customize your account by adding information to your EWM profile. We are authorized to collect personal information from your profile such as profile picture, phone number, date of birth, gender, nationality, previous bookings, and address.

If you choose to connect to the EWM account using an SNS account, we are entitled to collect personal information you provided in the aforementioned SNS account. For example, when you log in using your Facebook account credentials, we are allowed to collect personal information from your Facebook profile as permitted by Facebook’s terms of service – such as profile picture, gender, and date of birth. If you do not want to provide us with this information, you need to adjust the privacy settings on your SNS account.

We process information for personalization and analytics (in an aggregated manner) to improve the service and to provide you with useful information and reminders. You are not obligated to provide us with this information; however, if you do not provide us with such information, we will not be able to offer you some of the features in our service.

The legal basis for the aforementioned processing is our legitimate interest, as such processing is necessary for certain features of the services and in order to allow us to develop, personalize, or otherwise improve the service and user experience we offer to our users.

Communications and marketing messages

When you contact us or register to receive information and marketing messages (as defined below), we are entitled to collect contact information you have provided to us, including email address, mobile phone number, and the like.

We are authorized to use this information to contact you or send you from time to time via email, push notifications, messages posted on our website, text messages, chat, or in other ways through our service: (1) marketing messages and information about EWM that may interest you, such as newsletters, offers, new marketing flyers, new product/service launches, promotions, and more (“Marketing Messages”); and also to send you (2) messages related to the features of our service, changes to the terms of use or this privacy policy, and other official messages related to the service. We also use this information to respond to you when you contact us, including your requests for technical support or any other inquiries or communications you initiate (“Communications”).

Our legal basis for processing this information for marketing messages is your consent. We will request your consent through an opt-in choice, and we will send you marketing messages only if you choose to participate in receiving such messages. You can choose to opt-out of receiving marketing messages by contacting us at the email address office@ozon-medical.com, or by following the instructions included in the marketing messages sent to you (for example, an unsubscribe or opt-out mechanism that will appear at the bottom of the marketing messages or emails sent to you).

Our legal basis for processing this information for the purpose of communicating with you is our legitimate business interest in responding to your communications consistently and providing you with information about the service we offer, which we believe will interest you. For example, sending users who have joined to follow certain areas of interest, messages containing updates and information. You can control or choose to stop participating in receiving these communications by contacting us at the email address office@ozon-medical.com.

Aggregated and anonymous information

We are permitted to collect and create non-personally identifiable or anonymous information from personal data (such as gender, age, age range, product preferences) by removing identifiable components (such as your name, email address, or linkable tracking ID) that make the information personally identifiable, through obfuscation or other means.

We use this information to provide statistical and analytical data on an aggregated basis to share with our affiliates.

We are also permitted to process aggregated personal information about user searches, such as: login date, search term, or search filter for personalizing user searches.

Our legal basis for this processing is our legitimate interest, as it is necessary for our business to share such information with our affiliates so that they can enhance, develop, modify, or otherwise improve the products and services they offer to EWM users. Additionally, by promoting efficient searches and analyzing user search patterns, we can optimize users’ personal search, which is essential for improving the user experience.

Legal requirements

We will also disclose personal information: (1) in response to legal requests from the government or regulatory authorities; and (2) at our sole discretion if we believe that such disclosure is appropriate in connection with an official government investigation or an official regulatory investigation, or in response to a significant perceived threat to the health or property of an individual.

We also process your identifiable personal information in this privacy policy if it is necessary for establishing, exercising, or defending a legal claim in legal proceedings or in an administrative procedure outside of court. We do not delete personal information if it is relevant to an investigation or dispute. We will continue to store the aforementioned information until the matters are fully resolved.

The legal basis for the aforementioned processing is our legitimate interest, namely the protection and assertion of our legal rights, your legal rights, and the legal rights of others.

In addition to the specific purposes for which we process your personal information, we will also process your personal information if such processing is necessary to comply with legal obligations to which we are subject, or to protect your vital interests or the vital interests of another natural person.

Cookies

We use cookies to collect some of the information mentioned above.

How we share your personal information

Sinuses

We share your personal information with any affiliate, subsidiary, or partner of the company if it is reasonably necessary for the purposes and according to the legal basis outlined in this privacy policy.

Other circumstances

Under certain circumstances, we are legally required to share certain information we hold, including your personal information, for example, if we are involved in legal proceedings, if we must comply with legal requirements, a court order, or a government authority as further detailed in the legal requirements above.

We will disclose personal information if you explicitly agree to it.

Retention and deletion of personal information

We retain personal information only for the period necessary for the purpose for which the information was collected, held, and processed, and as permitted or required by law. For example, your personal information will be retained as long as your account is open. We retain contact information as long as we have or may have a business relationship, or for example, if you have subscribed to the newsletter and as long as you have not chosen to unsubscribe as mentioned.

Additionally, we will retain your personal information if such retention is necessary to comply with legal obligations to which we are subject, or to protect your vital interests or the vital interests of another natural person.

Any such retention shall be subject to the implementation of appropriate organizational and technical measures to protect the rights and freedoms of data subjects as required by law.

If you requested this, we will delete or anonymize (to the relevant extent) your personal information so that it no longer identifies you, unless we are legally permitted or required to retain certain personal information as further explained below regarding your rights concerning your personal information.

How do we secure your personal information?

We implement and maintain appropriate organizational and technical security measures to protect the personal information we process, to prevent unauthorized access, alteration, disclosure, loss, or destruction.

If, despite these security measures, a security breach occurs that is likely to pose a risk to the privacy of the information subject, we will notify the relevant information subjects or other affected parties, as well as the relevant authorities, when required by law, about the security breach as soon as possible.

How do we store your personal data?

We store your personal data on third-party servers operated by well-known hosting companies such as Microsoft, Google, AWS, in compliance with relevant data protection legislation.

If you are residents of the European Economic Area (EEA includes EU member states as well as Norway, Iceland, and Liechtenstein), we will store your personal information on servers located within the EEA (for example, AWS Ireland) in accordance with the General Data Protection Regulation or “GDPR”. However, according to the definition of processing under the GDPR, access to the aforementioned personal data means that the personal data in question has been “transferred.” Therefore, be aware that your personal data will be “transferred” to a country outside the EEA, (1) for which the Council of Europe has issued an “adequacy decision” regarding data protection laws in that country; or (2) through a data transfer agreement that incorporates standard contractual clauses adopted by the Council of Europe for the transfer of personal data by data controllers within the EEA to data controllers and processors in jurisdictions without adequate data protection laws. We will take all necessary steps to ensure the safe and secure handling of personal information transferred to a country outside the EEA, with the same level of protection as if it were within the EEA and in accordance with the relevant European data protection law.

Rights you have regarding your personal information

One of the main objectives of the GDPR is to protect and clarify the rights of EU residents regarding the processing of personal data. This means that if you are residents of the European Union, you have certain rights regarding your personal information even after you have provided us with such personal information. The main rights are described in more detail below:

Right to access your personal information that we hold;
Right to correct your personal information that we hold if it is inaccurate or incomplete;
Right to delete your personal information;
Right to restrict the processing of your personal data;
Right to withdraw consent;
Right to data portability (to receive a copy of your personal data for reuse in another company);
Right to object to the processing of your personal information for a specific purpose;
Right of access – You have the right to obtain confirmation as to whether we are processing your personal data or not, and if so, to access the personal data in question along with certain additional information. Additional information as mentioned includes details regarding the purposes of processing, categories of personal data involved, and recipients of the personal data. We will provide you with a copy of your personal information in accordance with GDPR requirements, provided that the rights and freedoms of others are not affected. The first copy will be provided free of charge unless your request is “clearly unfounded or excessive.” If you request additional copies of this information from us, we will charge you a reasonable administrative fee if permitted by law. We are entitled to refuse the request if it is permitted by law. If we have declined your request, we will always explain the reasons for it.

Right to rectification – You have the right to request that we correct any inaccurate or incomplete personal information we hold about you. If we have shared this personal information with third parties, we will notify them of the correction unless it is impossible or involves disproportionate effort. Where relevant, we will also inform you which third parties received inaccurate or incomplete information from us as mentioned. If we believe it is reasonable not to comply with your request, we will explain the reasons for this decision to you.

Right to deletion – Under certain circumstances, you have the right to request that we delete your personal information that we hold without undue delay unlawfully. These circumstances include: if the personal data is no longer necessary for the purposes for which it was collected or processed otherwise; you have withdrawn your consent for processing based on consent; you have objected to processing based on certain rules in the relevant data protection law; and the personal data has been processed unlawfully. However, there are exceptions to the right to delete. The general exceptions include cases where processing is necessary: for compliance with a legal obligation; or for the establishment, exercise, or defense of legal claims.

Right to restrict processing – Under certain circumstances, you have the right to restrict the processing of your personal data. These circumstances are:

If you dispute the accuracy of the personal information we process about you. In such a case, our processing of personal information of

Changes in privacy policy

We will change this privacy policy from time to time by posting an update on this page and publishing a new version on our website. If this happens, we will post a notice on our website that changes have been made to the privacy policy and we will update the “last updated date” at the top of this policy. Any such change will become binding on your first use of our website after the change date. Therefore, after such a change, we strongly recommend that you review the updated version to ensure you are satisfied with the changes.

Settings

In this privacy policy, the following terms will have the following meanings:

GDPR – means Regulation 2016/679 of the European Union on data protection, as amended, consolidated, or replaced from time to time;

“Personal information” – means any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or one or more specific factors related to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

“Processing” – means any action or set of actions performed on personal data or sets of personal data, by automated means or otherwise, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or making available in any other way, alignment or combination, restriction, erasure, or destruction.

Contact us

If you have any questions regarding this privacy policy or requests concerning your personal information, please contact us via email at office@ozon-medical.com or through the contact form.

Last updated on January 28, 2024