Osleria

Last updated: 07/22/2025

In compliance with Regulation (EU) 2016/679 (General Data Protection Regulation or "GDPR")

and Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights, this Privacy Policy

aims to inform users about how we collect, use, protect, and share their personal data.

What personal data do we collect?

The data we may collect includes:

• Identification data: name, surname, email address.

• Professional data: medical specialty, registration number.

• App usage data: interactions, consultation history, voice records (with prior consent).

• In case of recording/transcription: audio fragments and their automatic transcription.

We do not collect patient data directly unless the professional has obtained prior and explicit consent.

For what purpose do we process your data?

We process your data to:

• Provide you with access to our AI-based medical assistance app.

• Personalize your user experience.

• Transcribe and organize recorded consultations, if you authorize it.

• Send informational communications about service improvements or technical incidents.

• Comply with our legal obligations.

What is the legal basis for processing?

The legal bases that allow us to process your data are:

• Your explicit consent (registration, consultation recording, etc.).

• The contractual relationship when using our app.

• Legitimate interest to improve our services and ensure security.

• Compliance with legal obligations.

With whom do we share your data?

We do not share your data with third parties without your consent, except when:

• Required by law.

• Necessary to provide you with the service (for example, hosting providers or technical services, always

under confidentiality and data processing agreements).

• You have expressly authorized it.

How long do we retain your data?

Your personal data will be retained:

• As long as you are a user of the app.

• Until you revoke your consent or request its deletion.

• Once this period ends, the data will be anonymized or securely deleted.

What are your rights?

You have the right to:

• Access your personal data.

• Request its rectification or deletion.

• Object to or limit its processing.

• Request its portability.

• Withdraw your consent at any time.

You can exercise these rights by writing to: osleria.tech@gmail.com. You can also file a complaint

with the Spanish Data Protection Agency (www.aepd.es).

How do we protect your data?

We apply technical and organizational measures to guarantee the confidentiality, integrity,

and availability of your data. All access is encrypted and monitored. Staff are trained and bound by

a duty of confidentiality.