Privacy is important. These documents may not be the most exciting thing in the world, but we take them seriously. Take a few minutes to look this over, and contact us if you have any concerns about our use of your Personal Data in connection with our services to you.
Fred R. Moss MD, Inc., d/b/a Dr. FredTM and Welcome to HumanityTM (the “Company” “we” “us” or “our”), and its affiliates and subsidiaries, really respects your privacy and we are committed to protecting your Personal Data.
As an organization that cares about you, it is our desire and duty to comply with the various applicable regulations around the world that govern the collection and processing (using) of your Personal Data.
Protecting the personal rights and privacy of each individual that visits or uses our websites and APPs is at the center of our concern in our relationship with you.
So we recognize the need for appropriate safeguards and management practices in relation to the collection and use of your Personal Data. We want to ensure that you understand what information we collect about you and how we use it.
Our websites and our APPS are not intended for children and we do not knowingly collect data relating to children.
Who We Are
Fred R. Moss MD, Inc. is the legal data controller and responsible for our websites and related APPs.
THE COMPANY DATA PRIVACY CONTACT
Our full details are:
Full name of legal entity: Fred R. Moss MD, Inc.
Address: 111 Bank Street, #260, Grass Valley, CA 95945
ATTN: Legal Department.
Email address: firstname.lastname@example.org
What Personal Data We Collect and How We Collect It
“Personal Data” is defined as any information about an individual from which that person can be identified. It might include your name, mailing address, email address, telephone number, company, title, website or APP username or website or APP password. It does not include data where your identity has been removed (anonymous data).
We collect, store and process your Personal Data by different methods in connection with your use of our services, such data may include: account data, your personal profile data, your personal data that are provided in the course of the use of our services, information that you post for publication on our website or through our services, information relating to transactions, including purchases of goods and services, that you enter into with us and/or through our website or APPs, information that you provide to us for the purpose of subscribing to our email notifications and/or newsletters, and information contained in or relating to any communication that you send to us.
WHERE YOU ARE A WEBSITE OR APP USER:
When you are using our websites or APPs, which may include when you download content or contact us via our websites or APPs, here is how we generally collect your data:
- You may provide Personal Data by completing online registration forms, by applying for services via our website or APPs, or when you create or update any of your marketing preferences; and
- We may collect your data automatically via cookies, in line with your cookie consent, server logs and other similar technologies, preferences and settings in your browser;
How We Use Your Personal Data
We collect, process or disclose your Personal Data for our legitimate business purposes including:
- To provide our services to APP or web users or to fulfill our contractual obligations;
- To any member of our group of companies (this means our subsidiaries, our ultimate holding company and all its subsidiaries) insofar as reasonably necessary for the purposes, and on the legal bases, set out in this Policy.
- To market events, promotions, competitions, webinars, reports, our services, news or relevant Policy updates.
- Depending on which jurisdiction you are in, we may be required to give you an option to “opt-in” and we will always provide you with an option to “opt-out” with each marketing communication;
- As required by law or regulation;
- For our business purposes, such as data analysis, audits, fraud monitoring and prevention;
- To develop new products, services and offerings, or to enhance, improve or modify our products and services; or
- To our insurers and/or professional advisers insofar as reasonably necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, obtaining professional advice, or the establishment, exercise or defense of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.
- We may disclose your personal data where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
- On certain pages on our websites or APPs you may see ‘share’ or ‘social buttons’. These enable you to share or bookmark pages on our websites or APPs. These may include buttons for: Twitter, LinkedIn, Pinterest, Facebook, Instagram or other social media platforms. In order for us to implement these buttons on our websites or APPs and connect them to the relevant social networks and external sites, there are scripts that are executed from domains owned by third-parties and outside of our control. You should be aware that these sites are likely to be collecting information about what you are doing all around the internet, including on our websites or APPs. So if you click on any of these buttons, these sites will be registering that action and may use that information. In some cases these sites will be registering the fact that you are visiting our website, and the specific pages you are on, even if you don’t click on the button but are already or automatically logged into their services, like Google and Facebook. We recommend that you check the respective policies of each of these sites to see how exactly they use your personal information and to find out how to opt out, or delete, such personal information if you wish to.
What Is the Legal Basis for Processing Your Data
We rely on the following main grounds to process Personal Data of website and APP users, suppliers or other third parties:
- Necessary for entering into, or performing, a contract – to perform obligations that we undertake in providing a service to you, or to take steps at your request to enter into a contract with us;
- Necessary for compliance with a legal obligation – we are subject to certain legal requirements which may require us to process your Personal Data. We may also be obliged by law to disclose your Personal Data to a regulatory body or law enforcement agency;
- Necessary for the purposes of Legitimate Interests – we, or a third party, will process your Personal Data for the purposes of our (or a third party’s) Legitimate Interests, provided we have established that those interests are not overridden by your rights and freedoms, including your right to have your Personal Data protected. Our Legitimate Interests include responding to requests and enquiries from you or a third party, optimizing our websites, APPs and customer experience, informing you about our products and services and ensuring that our operations are conducted in an appropriate and efficient manner;
- Consent – in some circumstances, we may ask for your consent to process your Personal Data;
- Necessary to protect the vital interests of you the data subject or of another natural person.
CHANGE OF PURPOSE
We will only use your Personal Data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us at: email@example.com and clearly write “New Data Processing purpose Question” in the subject line of your email.
If we need to use your Personal Data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so or seek your consent, providing you with a clear, conspicuous and readily available mechanism for you to exercise your choice.
Please note that we may process your Personal Data without your knowledge or consent where this is required or permitted by law.
How We Share Your Personal Data
We will not sell or rent to anyone the Personal Data provided to us or obtained by us.
- In certain circumstances we will share your Personal Data with other parties. We share your data with other entities within the Company acting as joint controllers or processors. We do this to provide sales and marketing, IT, system administration services, product development and undertake internal reporting. We will also share your Personal Data across the Company entities to improve our customer service and to make our services more valuable to you.
We also share your Personal Data with the following third parties:
- Service providers acting as processors who provide IT and system administration services, including, for example: Amazon AWS, or other cloud service providers, etc.;
- Professional advisers acting as processors or joint controllers;
- Regulators and other authorities acting as processors or joint controllers who require reporting of processing activities in certain circumstances;
We require all third parties to respect the security of your Personal Data and to treat it in accordance with applicable laws. We do not allow our third party service providers to use your Personal Data for their own purposes and only permit them to process your Personal Data for specified purposes and in accordance with our instructions.
We also collect, use and share aggregated data such as statistical or demographic data for our legitimate business purposes. Aggregated data is not Personal Data as this data does not directly or indirectly reveal your identity.
International Transfers of Data
TRANSFERS OUT OF THE EEA
If you are located in the European Economic Area (EEA) this may involve transferring your Personal Data outside of the EEA. Whenever we transfer your Personal Data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented.
The Company uses industry-standard physical, technical, and administrative controls to protect your Personal Data by:
- Not collecting or retaining excessive amounts of data;
- Protecting Personal Data from loss, misuse, unauthorized access and disclosure. Any employees, agents, contractors or third parties who are so authorized act on our instructions are subject to a duty of confidentiality;
- Keeping Personal Data up to date;
- Storing and destroying it securely;
- Ensuring that appropriate administrative, technical and physical safeguards are in place to protect Personal Data. These measures include measures to deal with any suspected data breach; and
- Regularly reviewing our information collection, storage and processing practices, including physical security measures.
While we operate to the highest standards we are also aware that the transmission of information via the internet is not completely secure. We cannot guarantee the security of your data transmitted to our websites or APPs and any transmission is at your own risk. Where we have given you (or where you have chosen) a password which enables you to access any of our online or electronic resources, you are responsible for keeping this password confidential. We advise you not to share your password with anyone.
You should note that this website and our APPs may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their content or privacy statements. When you leave our websites or Apps, we encourage you to read the privacy notice of every website you visit.
Where we collect your Personal Data, the length of time for which we retain it depends on the type of data, the purpose for which we use that data and our accounting, regulatory and legal data retention obligations. We do not retain Personal Data in an identifiable format for longer than is necessary.
To determine the appropriate retention period for Personal Data, we consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal requirements.
We will retain your Personal Data on our systems unless we have not had any meaningful contact with you (or, where appropriate, the company you are working for or with) for two or more years (or for such longer period as we believe in good faith that the law, statute or relevant regulators require us to preserve your data). After this period, it is likely your data will no longer be relevant for the purposes for which it was collected and we will delete or destroy it.
In some circumstances we may anonymize your Personal Data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
As noted above, our websites and Apps and all related services are not directed to or intended for use by minors. Consistent with the requirements of the US Children’s Online Privacy Protection Act, if we learn that we have received information directly from a child under age 13 without his or her parent or legal guardian’s verified consent, we will use that information only to respond directly to that child (or his or her parent or legal guardian) to inform the child that he or she cannot use our websites and Apps and any related services. Subsequently, we will make commercially reasonable efforts to delete such information.
Your Legal Rights
Under certain circumstances, by you have the right to:
- Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it;
- Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected;
- Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request;
- Object to processing of your personal information where we are relying on a Legitimate Interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes;
- Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it; and/or
- Request the transfer of your personal information to another party. If you want to review, verify, correct or request erasure of your personal information, object to the processing of your Personal Data, or request that we transfer a copy of your personal information to another party, please contact us by email at: firstname.lastname@example.org and clearly write “Personal Data Request” in the subject line of your email.
NO FEE USUALLY REQUIRED
You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
WHAT WE MAY NEED FROM YOU
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.
RIGHT TO WITHDRAW CONSENT
In the limited circumstances where you may have provided your consent to the collection, processing, and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please send us an email at: email@example.com – and write “Personal Data Consent Withdrawal” clearly written on the subject line of your email. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to without undue delay, unless we have another legitimate legal basis for doing so.
OUR RESPONSE TIMES
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is incomplete and we need to write to you for more information or is particularly complex or you have made several requests. In these cases, we will notify you and keep you updated.
IN THE EU, THE RIGHT TO COMPLAIN TO A SUPERVISORY AUTHORITY
In the EU, if you consider that our processing of your personal information infringes data protection laws, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection. You may do so in the EU member state of your principle residence, your place of work or the place of the alleged infringement.
Please see “How to make a complaint” below.
How to Make a Complaint
Data privacy laws are constantly evolving and we endeavor to maintain best practices. However, we recognize that we may not always get it right and if you are not satisfied in the way we handle your Personal Data or you wish to discuss our processes then we would like to hear from you.
THE COMPANY COMPLAINT PROCESS
If you believe that there is something which we have not done correctly with your Personal Data then we would appreciate the chance to deal with your concerns before you approach a Supervisory Authority, so please contact us in the first instance at: firstname.lastname@example.org and please clearly write “Data Complaint” in the subject line of your email.
Definitions of Terms used in this Policy
Consent means your agreement which must be freely given, specific, informed, and be an unambiguous indication of you, the Data Subject’s wishes, by which you, by a statement or by a clear positive action, signifies agreement to the Processing of Personal Data relating to you.
Data Controller means the person or organization that determines when, why and how to process your Personal Data. It is responsible for establishing practices and policies in line with the GDPR. For example, we are the Data Controller of all Personal Data relating to our Company Personnel and Personal Data used in our business for our own commercial purposes.
Data Subject means a living, identified or identifiable individual about whom we hold Personal Data. Data Subjects may be nationals or residents of any country and may have various legal rights regarding their Personal Data.
EEA means the 28 countries in the EU, and Iceland, Liechtenstein and Norway.
Explicit Consent means consent which requires a very clear and specific statement (that is, not just action).
General Data Protection Regulation (GDPR) means the European Union General Data Protection Regulation ((EU) 2016/679). Applicable Personal Data is subject to the legal safeguards specified in the GDPR.
Legitimate Interest means the interest of our business in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your Personal Data for our legitimate interests. We do not use your Personal Data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
Personal Data means any information identifying a Data Subject or information relating to a Data Subject that we can identify (directly or indirectly) from that data alone or in combination with other identifiers we possess or can reasonably access. Personal Data includes Special Category (Sensitive) Personal Data and pseudonymized Personal Data but excludes anonymous data or data that has had the identity of an individual permanently removed. Personal Data can be factual (for example, a name, email address, location or date of birth) or an opinion about that person’s actions or behavior.
Processing or Process means any activity that involves the use of your Personal Data. It includes obtaining, recording or holding the data, or carrying out any operation or set of operations on the data including organizing, amending, retrieving, using, disclosing, erasing or destroying it. Processing also includes transmitting or transferring Personal Data to third parties.
Special Category or Sensitive Personal Data: information revealing racial or ethnic origin, political opinions, religious or similar beliefs, trade union membership, physical or mental health conditions, sexual life, sexual orientation, biometric or genetic data, and Personal Data relating to criminal offences and convictions.
Thanks for taking the time to review our Policy!