EEA, United Kingdom, and Switzerland

International privacy addendum

Cardiology Insights is currently designed for participating cardiovascular organizations in the United States. This addendum applies only where European data-protection law applies to a specific processing activity.

No general European offering. The ability to open a public webpage does not mean Cardiology Insights intentionally offers healthcare access in the EEA, United Kingdom, or Switzerland. A formal international deployment requires approved contracts, lawful bases, health-data grounds, transfer safeguards, subprocessors, risk assessment, and local operational review.

Controller and processor roles

Cardiology Insights may act as controller for its corporate website, demonstration requests, support, account administration, security, and privacy-request management. When processing information for a participating medical organization under that organization’s instructions, Cardiology Insights may act as processor. Roles depend on the actual purposes, decisions, and contractual arrangement, not merely on labels.

Legal bases and health data

Where GDPR or equivalent law applies, ordinary personal data must have a lawful basis, such as consent, contract, legal obligation, vital interests, public interest, or legitimate interests. Health and other special-category data requires an additional lawful condition and safeguards. The applicable basis is determined for the specific deployment and purpose; this addendum does not create a legal basis by itself.

Rights

Where applicable, individuals may have rights to information, access, correction, erasure, restriction, portability, objection, withdrawal of consent, and human review of qualifying automated decisions. Individuals may also complain to the relevant supervisory authority.

Use Your Privacy Rights to submit a request. Cardiology Insights may need to route the request to the participating medical organization acting as controller.

International transfers

Information processed by Cardiology Insights is generally hosted and handled in the United States. Before an intentional European deployment, the parties must establish an approved transfer mechanism and supplementary measures where required, such as an adequacy decision or approved contractual clauses.

Automated support and human involvement

The assessment and routing tools provide educational and operational support. They do not make a definitive diagnosis or final treatment decision. Participating-organization personnel review verified requests and determine final clinical, physician, location, and scheduling steps.