-
Address: Street Name, NY 38954
-
Phone: +49 178 7447250
Privacy Policy
This Privacy Policy explains how MySlimCare collects, uses, stores and protects personal information when you visit our website, contact us, use our services, complete a consultation or purchase products.
MySlimCare recognises that health and consultation information can be particularly sensitive. We aim to handle personal information responsibly, transparently and in accordance with applicable European data protection requirements.
Who We Are & Data Controller
This Privacy Policy applies to personal information processed in connection with the MySlimCare website and services.
For the purposes of applicable data protection law, the organisation that determines why and how your personal information is processed is generally known as the data controller.
Legal company name
Trading name: MySlimCare
Registered address
Germany
Company registration details
Privacy contact email
Data Protection Officer details, where applicable
Depending on how healthcare services are structured, healthcare professionals, pharmacies or other healthcare providers involved in your care may also act as independent or joint controllers for particular processing activities. Relevant information should be provided where applicable.
Scope of This Privacy Policy
This policy explains the processing of personal information when you interact with MySlimCare, including when you:
- visit the MySlimCare website;
- create or use an account;
- complete a weight management or health consultation;
- request information about treatment;
- purchase products or services;
- contact customer support;
- subscribe to permitted marketing communications; or
- otherwise interact with MySlimCare.
Personal Information We May Collect
The information collected depends on how you use MySlimCare. Categories may include:
Identity Information
- full name;
- date of birth;
- age;
- gender or sex where relevant to healthcare services;
- identity verification information where required; and
- account identifiers.
Contact Information
- email address;
- telephone number;
- billing address;
- delivery address; and
- country of residence.
Transaction Information
- products or services purchased;
- order numbers;
- transaction status;
- refund information;
- delivery information; and
- payment-related records.
Account Information
- account username;
- encrypted authentication credentials;
- account preferences; and
- account activity.
Technical Information
- IP address;
- browser type;
- device information;
- operating system;
- website activity;
- cookie identifiers; and
- security and server logs.
Communication Information
We may retain messages, customer-support correspondence, complaints, enquiries and other communications you send to us.
Health & Special Category Personal Data
When you use consultation or treatment-related services, MySlimCare or healthcare providers involved in the service may need to process information concerning your health.
This could include information about:
- height and weight;
- body mass index (BMI);
- weight management history;
- medical conditions;
- medical history;
- current and previous medicines;
- allergies;
- previous treatments;
- treatment responses;
- side effects;
- contraindications or risk factors;
- consultation responses; and
- other health information relevant to assessing treatment.
Information concerning health is treated as a special category of personal data under the GDPR. Where such information is processed, an appropriate legal basis under Article 6 and a relevant condition under Article 9 of the GDPR must apply.
How We Collect Personal Information
Information may be collected:
- directly from you;
- through consultation questionnaires;
- when you create an account;
- when you place an order;
- through contact and support forms;
- when you communicate with our team;
- automatically through website technologies;
- from payment and delivery providers;
- from healthcare professionals involved in your service where lawful; and
- from other authorised sources where permitted by law.
How We Use Personal Information
Depending on the service and applicable legal basis, personal information may be processed to:
- provide and administer MySlimCare services;
- manage customer accounts;
- process consultation information;
- facilitate appropriate clinical assessment;
- support treatment and prescription processes where applicable;
- process and manage orders;
- arrange payment and delivery;
- provide customer support;
- respond to complaints and enquiries;
- maintain appropriate business and healthcare records;
- detect and prevent fraud or misuse;
- maintain website and information security;
- meet regulatory and legal obligations;
- establish, exercise or defend legal claims; and
- improve our services where lawfully permitted.
Legal Bases for Processing
Under the GDPR, processing of personal information requires a lawful basis. Depending on the circumstances, MySlimCare may rely on one or more of the following:
Processing necessary to enter into or perform a contract with you, such as managing eligible purchases or services.
Processing required to comply with applicable legal, tax, regulatory or other obligations.
Processing necessary for legitimate business interests where those interests are not overridden by your rights and freedoms.
Where processing is based on consent, you may withdraw that consent subject to applicable law.
Legal Conditions for Processing Health Data
Health information cannot be processed merely because an ordinary Article 6 GDPR lawful basis exists. An applicable Article 9 condition must also be identified.
Depending on the actual healthcare relationship and processing activity, relevant conditions may include processing necessary for purposes such as medical diagnosis, provision of health treatment or management of healthcare services where the applicable legal requirements are satisfied.
In other circumstances, explicit consent or another legally recognised condition may apply.
MySlimCare should confirm the exact Article 6 and Article 9 bases used for each consultation and healthcare workflow with its healthcare and data-protection advisers before publishing the final policy.
Payment Information
Payments may be processed through third-party payment service providers. Depending on the payment method, those providers may collect information necessary to authorise and process the transaction.
MySlimCare should not unnecessarily store complete payment-card details where payments are securely handled by an authorised payment provider.
Payment providers may process information under their own privacy policies and regulatory obligations.
Delivery & Logistics Providers
Where products are delivered, relevant information may be shared with delivery or logistics providers to complete the delivery.
This may include:
- recipient name;
- delivery address;
- telephone number;
- email address;
- delivery instructions; and
- other information necessary to complete delivery.
Only information reasonably necessary for delivery should be shared with the relevant provider.
Marketing Communications
Where legally permitted, MySlimCare may send marketing communications concerning relevant services, products, information or offers.
Where consent is required, marketing will only be sent after the necessary consent has been obtained.
You can withdraw marketing consent or unsubscribe from electronic marketing using the unsubscribe mechanism provided in the communication or by contacting us.
Opting out of marketing does not prevent us from sending necessary service, security, consultation, transaction or order communications.
International Data Transfers
Some service providers may process personal information outside Germany or the European Economic Area.
Where personal information is transferred internationally, MySlimCare should ensure that an appropriate transfer mechanism or safeguard is used where required by data protection law.
Depending on the destination and circumstances, this may include an adequacy decision, appropriate contractual safeguards or another transfer mechanism recognised under the GDPR.
How Long We Keep Personal Information
Personal information should only be retained for as long as necessary for the purpose for which it was collected and to satisfy applicable legal, regulatory, healthcare, accounting, tax, dispute-resolution and record-keeping requirements.
Different retention periods may therefore apply to different categories of information.
When information is no longer required, it should be securely deleted or anonymised where appropriate and legally permissible.
How We Protect Personal Information
MySlimCare should maintain appropriate technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
Measures may include, where appropriate:
- encrypted communications;
- access controls;
- authentication safeguards;
- restricted access to health information;
- secure hosting;
- system monitoring;
- backup and recovery procedures;
- staff confidentiality requirements; and
- security reviews and updates.
No internet-based system can be guaranteed to be completely secure. Users should also take reasonable steps to protect account credentials and devices.
Your Data Protection Rights
Subject to the conditions and exceptions contained in the GDPR, you may have rights relating to your personal information.
Request information about whether your data is being processed and obtain a copy where applicable.
Request correction of inaccurate or incomplete personal information.
Request deletion of information in circumstances where the GDPR provides this right.
Request restriction of processing in certain circumstances.
Receive certain personal information in a structured, commonly used and machine-readable format where applicable.
Object to certain processing based on legitimate interests and to direct marketing.
Withdraw consent at any time where processing relies upon consent, without affecting prior lawful processing.
Exercise applicable rights relating to certain solely automated decisions producing legal or similarly significant effects.
Some rights are not absolute. For example, information may need to be retained where this is required by healthcare, regulatory, tax, legal or other obligations.
Automated Decision-Making & Profiling
If MySlimCare uses solely automated decision-making that produces legal effects or similarly significantly affects individuals, information about that processing and the applicable safeguards should be provided as required by law.
An online questionnaire or software-assisted assessment does not necessarily constitute prohibited automated decision-making. The actual process, degree of human involvement and effect of the decision must be considered.
Children's Privacy
MySlimCare services intended for adults should not knowingly be used by children or individuals who do not meet the applicable minimum age requirements for the relevant service.
Where age restrictions apply to consultations, medicines or other services, eligibility may be verified before the service is provided.
External Websites & Privacy Resources
The website may contain links to independent third-party websites. MySlimCare is not responsible for the privacy practices of websites it does not operate.
You should review the privacy information of any third-party website or service before providing personal information.
Questions, Requests & Complaints
If you have a concern about how your personal information is being processed, please contact MySlimCare so that the matter can be investigated.
You also have the right to lodge a complaint with the competent data protection supervisory authority where applicable.
The appropriate authority may depend on the location and legal establishment of the relevant data controller.
Changes to This Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes to MySlimCare services, data-processing activities, technology or applicable legal and regulatory requirements.
The latest version will be made available on this page and the "Last updated" date will be revised accordingly.
Where required, significant changes may also be communicated through other appropriate means.
Contact MySlimCare About Your Privacy
If you have questions about this Privacy Policy or wish to exercise a data protection right, please contact MySlimCare using the appropriate privacy contact details.