{"id":391665,"date":"2024-09-12T14:22:24","date_gmt":"2024-09-12T12:22:24","guid":{"rendered":"https:\/\/www.fim-medical.com\/?page_id=391665"},"modified":"2024-09-13T09:46:43","modified_gmt":"2024-09-13T07:46:43","slug":"gcu-visiowin","status":"publish","type":"page","link":"https:\/\/fim-medical.com\/en\/gcu-visiowin\/","title":{"rendered":"General Terms of Use (GTU) of the VisioWin\u00ae Software"},"content":{"rendered":"

General Terms of Use (GTU) of the VisioWin\u00ae Software<\/strong><\/h1>\n

1.Purpose<\/h3>\n

The purpose of these General Terms of Use (GTU) is to define the terms of use of the VisioWin\u00ae software (hereinafter referred to as “the software”) intended for healthcare professionals for the screening of visual disorders. The use of the software implies the unconditional acceptance of these GTU by the user.<\/p>\n

2.Definitions<\/h3>\n

Data Controller:<\/strong> A legal (such as a joint company) or natural person who determines the purposes and means of processing, that is, the objective and the way to achieve it. In this case, the data controller is the legal entity using the software.<\/p>\n

Personal Data: Any information that identifies or makes a person identifiable.<\/p>\n

Health Data: A particular type of personal data related to a person’s health.<\/p>\n

EMR (Electronic Medical Record) Software: An application that enables healthcare professionals to manage and access patient records in digital form, facilitating the documentation, monitoring, and secure sharing of health data.<\/p>\n

Processor:<\/strong> A natural or legal person (company or public body) that processes data on behalf of another organization (the data controller) as part of a service or provision. In this case, the processor is FIM Medical.<\/p>\n

User:<\/strong> The user is the data controller (the legal entity using the software).<\/p>\n

3.Use of the Software<\/h3>\n

The software is intended to be used by healthcare professionals for the screening of visual disorders. It collects and analyzes data related to the exploration of patients’ visual functions. The purpose of using this data is at the exclusive discretion of the data controller.<\/p>\n

4.Collection and Use of Personal Data<\/h3>\n

In accordance with Regulation (EU) 2016\/679 of the European Parliament and Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data, and repealing Directive 95\/46\/EC (GDPR), and Law No. 78-17 of 6 January 1978 on data processing, files, and freedoms, as amended (Data Protection Act), the software may collect and store personal data relating to patients, such as identification information, health data, and screening results. This data is stored in a local database under the responsibility of the user in compliance with the aforementioned regulations.<\/p>\n

5.User Responsibility<\/h3>\n

The user is fully responsible for the security and confidentiality of the data stored in the local database. The user commits to taking all necessary measures to protect personal data from unauthorized access, alteration, disclosure, or destruction.<\/p>\n

Furthermore, the user is responsible for managing the software access credentials. This includes creating, maintaining, and protecting these credentials to prevent unauthorized access to the software. The user is responsible for ensuring that these credentials are not shared or disclosed to unauthorized third parties.<\/p>\n

The data controller must ensure compliance with local recommendations regarding password length and complexity.<\/p>\n

6.Use from Third-party Software (EMR)<\/h3>\n

If the software is interoperable with third-party software such as EMR (Electronic Medical Record) or an electronic patient record system (DPI), the security and confidentiality of data exchanges between the software and the third-party software are the exclusive responsibility of the data controller. The latter must ensure that the third-party software complies with all applicable legal and regulatory obligations, including those related to the protection of personal data.<\/p>\n

The software allows data to be exported in formats whose security level is left to the discretion of the data controller. The controller is fully responsible for the security of exported data in terms of availability, integrity, or confidentiality.<\/p>\n

The data controller must ensure the proper integration of data imported by third-party software.<\/p>\n

7.Patient Information<\/h3>\n

In accordance with GDPR requirements, the user must inform patients clearly and precisely about the collection and use of their personal data. This information must include, but is not limited to:<\/p>\n