Data and Personal Privacy Policy of Trionara Technologies AB 

This statement outlines how we (Trionara Technologies AB) process, retain, share, or delete the personal and medical data you provide to us while adhering to security requirements and protective laws.

Types of Personal Information:

Unique Device Identifier: A unique hardware identifier to prevent device misuse by unauthorized users.

Device Code: A user-defined code to distinguish simultaneous records of different users.

Patient's Name, Gender, and Age: Currently, these fields are stored without verification, and the user can enter any value. Only the patient's age and gender are relevant for signal analysis and interpretation.

ECG Record and Interpretation: The ECG record file is stored for analysis and interpretation and retained or deleted based on time and storage constraints. This data may be used for research, development, and improving diagnostic algorithms.

Patient's Vital Signs Parameters: Including SpO2, NIBP, and Respiration Rate. Currently, these fields are stored without verification, and the user can enter any value. If verified, this data could be used for research, development, and improving diagnostic algorithms.

Email Address: If provided, the recorded results can be sent to the user-defined email address. The responsibility for incorrect email addresses and failed deliveries lies with the user. Recipients of unwanted emails can notify the company to prevent further emails.

Legal Basis for Processing Personal Data:

Data protection laws require us to have a legal basis before processing personal data, which may include:

•  Your explicit and informed consent.

•  Compliance with a legal obligation.

•  Legitimate interests in our business.

•  Protecting your or others' vital interests.

•  Processing for a public task.

Disclosure of User Information:

We promise to keep your personal information confidential and will not sell, trade, or give it to others without your prior notice.

We may share your information with our offices, branches, or partners to assist with operations and legal compliance.

Sometimes we must disclose your information for security purposes, such as cooperating with tax authorities or preventing fraud.

We may share your information with our suppliers, distributors, or service providers if it helps us better serve our customers and visitors.

If we merge, sell our business, or undergo significant changes, we may need to share your information with others involved in the event.

Of course, we will only share your information with others if you give us permission.

Security Measures to Protect Personal Data:

Protecting your information is very important to us. Here are some security measures we use to keep your personal information secure. With these methods, we make our best effort to safeguard your information and protect it from unauthorized access or misuse:

Physical Security Measures: This includes access control, security cameras, and other precautions to ensure only authorized individuals can enter our premises.

Organizational Security Measures: We have strict policies, procedures, and training programs to help our employees understand the importance of data security and follow best practices.

Encryption: We use strong encryption to protect your information when transmitting it over the internet.

Firewalls: We have robust firewalls to block unauthorized access to our systems and data.

Data Masking: We obscure or substitute specific data elements to prevent unauthorized access or misuse.

Access Controls: We use strict access controls to ensure only authorized individuals can access your information.

Regular Audits: We regularly test and assess our security measures to ensure they are working as intended.

Transfer of Personal Information with Privacy Concerns:

If we need to transfer your personal information outside your country or region, we will ensure appropriate safeguards are in place to protect your privacy. By following these steps, we aim to minimize privacy risks associated with transferring your personal information to other countries or regions:

Secure Connections: We ensure any data transfers occur over a secure connection, such as a Virtual Private Network (VPN).

Encryption: We use strong encryption to protect your information when transmitting it over the internet.

Data Masking: We obscure or substitute specific data elements to prevent unauthorized access or misuse during the transfer process.

Compliance with Data Protection Laws: We will ensure data transfers comply with applicable data protection law requirements, including obtaining any necessary consents or agreements.

Retention of Personal Data:

We follow these practices to ensure we only retain your personal information for as long as necessary and handle it responsibly:

Retention Period: We retain your information for as long as needed to provide the services or information you requested and to fulfill the purposes for which it was collected. After the retention period, we delete or anonymize your personal information. If we need to retain your information for legal or regulatory reasons, we will do so in accordance with applicable data protection laws.

Review and Storage Periods: We may periodically review the data we retain and extend the retention period for specific data elements if necessary.

User Rights Regarding Personal Data:

We always strive to uphold your rights and help you exercise them, as it is important to us to respect your rights regarding your personal information.

Your key rights under data protection laws include:

Right of Access: You have the right to request confirmation from us whether we process your personal data and, if so, request a copy of that information.

Right to Rectification: If your personal information is inaccurate or incomplete, you have the right to request that we correct it.

Right to Erasure (Right to be forgotten): You can request that we erase or delete your personal information under certain circumstances. 

Right to Restriction of Processing: In some cases, you can request that we restrict the processing of your personal data, such as when you contest its accuracy.

Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transfer it to another controller.

Right to Object: You can object to the processing of your personal data in certain circumstances, such as when we use it for direct marketing purposes.

Contacting Us:

If you have any questions, suggestions, or concerns about this Privacy Statement or wish to update the information you have provided to us, please contact Trionara Technologies AB at Polygonvägen 21. 18766 Täby. Sweden, by phone at +46 76 4114418 or by email at info@trionara.com.