Hello NuvoAir user! NuvoAir product and services are designed to monitor vital respiratory parameters, and we are proud to contribute to our users’ health. This policy explains the “nuts and bolts” of the information we collect when you visit our website or use our products and services (the “Services”). It also explains the specific ways we use and disclose that information. The Date of this Privacy Policy is 18/5, 2018.
This Privacy Policy supersedes any prior agreements or earlier versions of this Privacy Policy between you and NuvoAir for the use of the Services.
In order to offer our Services at NuvoAir and to provide you with the best experience of our Services, we need to collect and process your personal data. Please be aware that you transfer data to us when:
We collect certain data when you use our website or when you take part in our questionnaires, write a comment on our website, share a page on a social network, order a product, etc. Certain information is collected even if you do not have a NuvoAir account. The key data that you may communicate to us by visiting and using our sites is:
Creating a NuvoAir user account allows you to use our devices and applications. You will therefore need to provide us with certain data to identify yourself. Your NuvoAir user account is the most important component of our Services. It allows you to access and control your personal data. Data is collected and used during account and/or user profile creation, when logging on to your account, ordering a product from your account, etc. The key data that you may communicate to us in creating a NuvoAir account is:
Your NuvoAir account allows you to use NuvoAir applications. Interacting with these applications allows you to access NuvoAir Services and product features. In these interactions, certain data is communicated to us when you download, install and use features of the application. This is for instance the case when you create a profile either for yourself of any other person that you manage through your account, take a spirometry test, respond to questionnaires or complete a field in the application, etc.
Here is the data that you may communicate to us by using our applications (e.g, by creating a profile) in addition to the data provided when creating your account:
When you contact NuvoAir’s customer service department, you provide us with information that allows us to identify you. The information shared with us remains confidential when you contact us through our website or support line.
For the purposes of responding to your support request, some of your data may be temporarily communicated to our teams until the problem is solved. We ensure that our teams comply strictly with our confidentiality policy and local laws governing data handling.
Here is the data that you may communicate to us by contacting our customer service department:
The data produced are displayed through our applications. Data may be indicated as raw data or after processing. Some function or Services you may want to use do request specific data processing. As an example, we might need to process your lung function data to describe the level of constriction you have. This processing of personal data is necessary for the performance of the agreement (the Services).
In order to improve our products and Services and ensure the availability of our platform, in accordance with best practices and local laws, we retain a record of operations conducted in log form. We never work with your data when it identifies you unless you have given us your consent, for example in order to resolve a problem that you have pointed out to us when you contact our customer service department.
We may, based on legitimate interest, use certain data in order to offer surveys, competitions, discount coupons or events in which you are free to participate. The same medium shall also be used to provide you information on our products, such as features, sales offers from NuvoAir or our Partners, or to announce new products. You may opt out of such communications at any time by clicking the “unsubscribe” link found within NuvoAir email updates.
We undertake not to sell your personal data without your prior consent. We believe that data can serve the collective interest. We may produce statistics and analyses using collected data. They would first be anonymized and/or aggregated beforehand to assure your privacy to be protected. Data anonymized in this way, which do not longer constitute personal data, are used in particular to:
Improve NuvoAir’s products and services in order to:
Demonstrate the effectiveness of connected objects:
Make the general public or private companies aware of health issues:
We may share your personal information if necessary for compliance with a legal obligation, e.g. in connection with court orders, valid discovery requests, valid subpoenas, and other legal mechanisms.
Processing of location data, cookies, special categories of personal data and any sharing/transfers of personal data to Partners will be based on consent that we will ask you to provide through the website and/or app. You are able to withdraw your consent at any time by deleting your account or by contacting NuvoAir. However, the withdrawal of your consent will not affect the lawfulness of the processing of your data that was carried out before the withdrawal.
At NuvoAir, we believe that you should always be empowered to protect your privacy when you use our Services. To allow that, we guarantee you the following rights:
Your personal data is and shall remain easily accessible. NuvoAir Services will empower you to export your personal data in an open format, so that you can easily access, keep and transfer your information to another data controller.
At any time, you may amend, delete or update the personal data produced by an active measurement on your part. This may be performed directly in NuvoAir’s platform or at your request.
You may for legitimate reasons object to your personal data being processed by contacting our customer service department. However, be aware that this action might limit the scope of the Services.
NuvoAir’s Services follow several procedures to safeguard your data. Firstly, your data is held in a password-protected account. Secondly that same data is encrypted at all times using the latest techniques and industry best practices.
NuvoAir has designed and developed a dashboard that clearly shows you with whom you have consented to share your personal data. This tool has been conceived to allow you to be in control of your personal data sharing with our Partners or with other users.
You always have the right to remove data that identifies you directly and indirectly by deleting your account. However, be aware that this action will limit the scope of the Services.
We will only process your personal data as long as necessary to perform the Services, i.e. as long as you have an active account with NuvoAir. If you have not logged into your account in two years, your account and all your personal data will be removed. If you choose to delete your account, all personal data will be removed as soon as it has been confirmed that the account was not deleted by mistake.
A user may also create multiple user profiles managed under the same NuvoAir account (”Master Account”). The Master Account can be managed for example by a healthcare provider who is managing multiple patients in their healthcare account or a parent who is managing his children. The healthcare provider (or parent) will then be the data controller in relation to the patients’ personal data processed in the Master Account and NuvoAir will be the data processor. The healthcare provider (or parent) shall follow this privacy policy and relevant local laws and legislation for how the data and information may be processed and shared for a specific profile contained in the Master Account.
You can choose to exchange your NuvoAir health data with third party partners such as physicians, health providers, hospitals, medical companies, and insurers (“Partners”). With your prior consent, NuvoAir may also receive certain data that you had previously communicated to a Partner. The data exchange might be done via our API exchange system, or via Apple HealthKit’s API:
Data will be stored and processed in Germany.
Your data will not be transferred outside the countries listed above without explicit consent from you.
NuvoAir is committed to protecting the security of your information and has technical and organizational security measures in place to protect your personal data. If a security breach causes an unauthorized intrusion into our system that materially affects you, then NuvoAir will notify you as soon as possible and later report the action we took in response. However, rest assured, we use the latest security standards and best practices to ensure your data is protected.
We use the latest security standards and best practices. We use industry standard encryption to protect your data in transit. This is commonly referred to as transport layer security (“TLS”).
Encryption at rest is implemented by using a number of security technologies, including secure key storage systems, encrypted networks, and cryptographic APIs. Systems that decrypt and process data have to communicate with systems that manage keys.
NuvoAir uses cookies, or similar technologies like single-pixel gifs and web beacons, to record log data, such as Mixpanel and fabric.io. We use both session-based and persistent cookies. Cookies are small text files sent by us to your computer/app and from your computer/app to us, each time you visit our website. They are unique to your NuvoAir account or your browser. Session-based cookies last only while your browser is open and are automatically deleted when you close your browser. Persistent cookies last until you or your browser delete them or until they expire.
Some cookies are associated with your NuvoAir account and personal information in order to remember that you are logged in. Other cookies are not tied to your NuvoAir account but are unique and allow us to do site analytics and customization, among other similar things. You can set your browser to not accept cookies, but this may limit your ability to use our Services.
NuvoAir sets and accesses our own cookies on our company-owned domains. In addition, we use third parties, like Google Analytics, for website analytics. You may opt-out of third party cookies from Google Analytics on its respective website.
We may change this Privacy Policy at any time and from time to time. The most recent version of the Privacy Policy is reflected by the version date located at the bottom of this Privacy Policy. All updates and amendments are effective immediately upon notice, which we may give by any means, including, but not limited to, by posting a revised version of this Privacy Policy or other notice on the Website. We encourage you to review this Privacy Policy often to stay informed of changes that may affect you.
The data controller for the personal data provided by individuals and processed by NuvoAir AB, reg. no. 556924-7686. Have questions or concerns about NuvoAir, our Services and privacy? Please do not hesitate to contact us by e-mail: privacy@nuvoair.com, or by post: Riddargatan 17 D, 3 tr., 114 57 Stockholm, Sweden.
Please also be informed that you have a right to lodge a complaint with the relevant supervisory authority in your jurisdiction if you have any comments or issues regarding NuvoAir’s processing of your personal data.