Privacy Policy

PREAMBLE - DEFINITIONS

“Applicable Data Protection Laws”: shall Regulation (EU) 2016/679 of the European Parliament and of the Council of April, 27th 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the GDPR), and the UAE Federal law No. 45 of 2021 on Protection of Personal Data (hereinafter the UAE PDPL).

“Data Controller”: ELITE SANTE HEALTH CONSULTANCY, sole establishment, whose head office is located at R118 - OF204, Al Suq Al Kabeer, Dubaï (UNITED ARAB EMIRATES), registered with the Dubaï Department of economic Development under License reference number 1390467.

“Data Processing”: shall mean any operation or set of operations performed or not by automated processing and applied to data or datasets of Personal Data, such as, for example, the collection, recording, organization, structuring, preservation, communication by transmission, dissemination, retrieval, consultation of Personal Data and defined by the GDPR and the UAE PDPL.

“Personal Data”: shall mean any information relating to an identified or identifiable natural person, as defined by the GDPR and the UAE PDPL.

“Third Party Countries”: shall mean country that does not belong to the European Union and does not have an adequate legislation regarding the processing of Personal Data as decided by the European Commission.

“Visitors”: Each natural person who agree to provide Personal Data to ELITE SANTE HEALTH CONSULTANCY.

The Data Controller agrees to comply with the legal and regulatory provisions in force relating to data processing, files and freedoms, and in particular to the General European Regulation on the Protection of data (EU) No. 2016/679 (GDPR) and the UAE Federal law No. 45 of 2021 on Protection of Personal Data (hereinafter the UAE PDPL).

Personal Data are processed lawfully, fairly and transparently.

The data collected is adequate, relevant and limited to what is strictly necessary in relation to the Purposes of Processing.

1. Purpose of the data processing

ELITE SANTE HEALTH CONSULTANCY collects Personal Data to:

• Carry out operations relating to management of the contractual relationship with the Professional and monitoring commercial relationship,
• Carry out operations relating to marketing,
• Manage and optimise use of the Platform and the Associated Services,
• Manage requests for the right of access, rectification and to object,
• Manage outstanding payments and disputes.
• Send communications

2. Data collected

All Visitors expressly agree to provide the following data by the dedicated email address:

• Gender,
• Language,
• First name,
• Surname,
• Nationality,
• Country of residence,
• Email address,
• Phone number,
• Bank details and card information,
• Professional profile with medical specialty, years of experience, work experience in Middle East, availability date, license or eligibility letter.

3. Duration of the retention period

The Data Controller will keep data during the maximum legal period applicable accordingly to the purpose of the data processing.

4. Data Controller’s obligations

The Data Controller is committed to:

• process the data solely for the purposes described above,
• process the data in accordance with the General Data Protection Regulation and the UAE PDPL,
• inform without delay the customer in case of data transfer to a third country or an international organization,
• ensure the confidentiality of the personal data processed,
• ensure that persons authorized to process personal data undertake to respect confidentiality or respect an appropriate legal obligation of confidentiality and receive the necessary training in the protection of personal data,
• consider, with respect to its tools, products, applications or services, the principles of data protection from the design stage and the protection of data by default,
• consider all the measures required by the GDPR and the UAE PDPL more generally take all necessary precautions to preserve the security and confidentiality of the personal data processed,
• establish (a) physical security measures to prevent access to personal data by unauthorized persons, (b) identity and access checks via an authentication system as well as a password policy, (c) an authorization management system and (d) processes and devices to trace all the actions performed on its information system and to perform in accordance with the regulations in force, reporting actions in the event of an incident impacting personal data.

ELITE SANTE HEALTH CONSULTANCY will not be liable for security incidents related to the use of the Internet, in case of loss, alteration, destruction, disclosure or unauthorized access to data or information of the Visitors.

5. Subcontracting

The Visitors agree that Personal data are communicated by ELITE SANTE HEALTH CONSULTANCY to its Subcontractors/Providers. These third parties undertake to respect the same rules defined in the GDPR, the UAE PDPL, and laws.

This information is kept by these third parties, according to legal conditions.

ELITE SANTE HEALTH CONSULTANCY shall not be liable for their lack of compliance with the GDPR and applicable laws.

6. Exercise of rights and collection of consent

The Visitors consents to the data collection and processing.

The Visitors is aware that if he refuses to transmit their data to ELITE SANTE HEALTH CONSULTANCY the Visitors will not be able to contact ELITE SANTE HEALTH CONSULTANCY, and the request will not be processed.

The following rights are guaranteed by the Data Controller: right of access, rectification, deletion and opposition, limitation, right to portability, right not to do the subject of an automated individual decision (including profiling).

The Visitors may obtain a copy of the Personal Data processed, upon written request and addressed to the Data Controller.

By sending a written request, and at any time, the Visitors may obtain a correction or a deletion of the Personal Data.

All requests must be sent to ELITE SANTE HEALTH CONSULTANCY in writing to the following address: contact@medingulf.com.

At any time, the Visitor may transmit a claim to a national data protection authority to which it reports.

7. Security and privacy of Personal Data – Notification

The Data Controller agrees to set up:

1. Physical security measures to prevent access to Personal Data by unauthorized persons,
2. Identity and access control via an authentication system and a password policy,
3. Processes and devices to trace all the actions carried out on its information system and to perform, in accordance with the regulations, reporting actions in case of an incident concerning Personal Data.

Concerning the computer security, the Data Controller must implement the recommendations made by the French National Commission for Computing and Freedoms (CNIL) or UAE Data Authority in this case: password policy with a second authentication, regular change of passwords.

The Data Controller notifies the Visitor and the competent supervisory authority of any violation of Personal Data within seventy-two (72) hours after having read it by email.

This notification is accompanied by all relevant documentation.

8. Documentation

The Data Controller sets up and maintains the necessary documentation to demonstrate compliance with all its obligations under the Regulations and to enable audits, including inspections, by any auditor and to contribute to these audits.

9. Transfer of Personal Data

In case of transfer of all or part of the Personal Data subject of the Processing to a third country, located outside the European Union, the United Arab Emirates or not having a level of protection recognized as adequate within the meaning of the Regulations, or to an international organization, the Data Controller undertakes to provide the appropriate guarantees provided for in the Regulations and to have them respected by its Subcontractors.

Under no circumstances does the Data Controller sell, rent, or use otherwise than for the specified Purposes, the Personal Data of which it is intended. The disclosure of the Personal Data to third parties is done by the Data Controller only for the purposes of executing the Purposes and to third parties acting as Subcontractors under the conditions referred to herein.

10. Update

The Data Processing periodically updates this Privacy Policy which is available upon first request from any Visitor and remains available on the app.

Any Visitor of the site may request disclosure of the Privacy Policy and / or withdraw his consent at any time by notifying such withdrawal to the Processing Manager at the following address: contact@medingulf.com.

11. Contact us

By postal notification:

ELITE SANTE HEALTH CONSULTANCY, R118 - OF204, Al Suq Al Kabeer, Dubaï (UNITED ARAB EMIRATES).

By email:

contact@medingulf.com