Privacy policy

Here we inform you about the type, scope and purpose of the collection and use of personal data.

1. Personal data and its use

a) When you participate in a check-up

When you participate in a check-up, we collect information about you, your lifestyle and your health. We store all data in encrypted form on the servers of our highly secure Azure data centers in Germany, Frankfurt. Medical data is also encrypted end-to-end.

We retain your data in accordance with the legally prescribed periods. It is not permissible to delete data from medical examinations immediately after the examinations. In principle, the legally prescribed retention period is 10 years. The legal basis for data processing is art. 6 para. 1 p. 1 lit. b GDPR.

b) When downloading the app

When downloading the app, information is transmitted to Apple as operator of the App Store or to Google as operator of the Play Store, i.e. in particular user name, e-mail address and customer number of your Apple or Android account, time of download, payment information and the individual device ID number.

We have no influence on this data collection and are not responsible for it. We process the data only to the extent necessary for downloading the mobile app to your mobile device.

c) When setting up the app

When setting up the app, we collect the following personal data to enable the use of the functions: Gender, date of birth, first and last name and e-mail address resp. mobile phone number. Optionally, you have the possibility to store a profile picture and a display name. The legal basis for data processing is art. 6 para. 1 p. 1 lit. b GDPR.

d) In your profile

If you participate in the lifestyle survey in our app, we will ask you health questions with the aim of determining your personal lifestyle score and subsequently helping you to improve and maintain your health. You can view the lifestyle data you have collected and, if you wish, start a new survey.

If you have participated in a health check and decide to transfer the results to the app, you can also view the health and lifestyle data from your health check.The legal basis for data processing is art. 6 para. 1 p. 1 lit. b GDPR.

e) When participating in competitions and challenges

If you connect a data source in our app, for example Apple Health, Google Fit, Fitbit or Garmin, and participate in competitions or challenges, we collect the following data from you: number of steps, floors, active minutes or kilometers per day (if available in the data source), time of last synchronization, device or pedometer, display name, profile picture (optional) and for competitions team membership.

Your steps, floors, active minutes or kilometers are displayed to participants with the time of the last synchronization, display name, optional profile picture and for competitions team membership. The legal basis for the data processing is art. 6 para. 1 p. 1 lit. b GDPR.

f) When booking an appointment

When booking an appointment in our app or on our website, we transmit the data you entered as part of the appointment booking to the entity that carries out the appointment. The legal basis for the data processing is art. 6 para. 1 p. 1 lit. b GDPR.

g) Tracking

While using our app, we record selected actions that you perform within the app. With this measure, we want to ensure a needs-based design and the ongoing optimization of our app. The legal basis for the data processing is art. 6 para. 1 p. 1 lit. f GDPR.

h) Upon termination of use

If you do not use the app, your data will remain stored so that you can easily access your previous activities when you use it again. However, you can delete your data yourself at any time by using the corresponding function in the account area. You can also inform us that you no longer wish to use the app. In this case, we will delete your data immediately.

If we are informed that you are no longer an employee of the company that licensed the app, or if the company stops licensing the app, your use of the app will also end. Your data will then be deleted by us.

i) When accessing our website

When you access our website hanako-health.com, the following information is automatically sent to the server of our website by your browser and temporarily stored in a log file: IP address of the requesting computer, date and time of access, name and URL of the retrieved file, website from which access is made (referrer URL), browser used and, if applicable, the operating system of your computer and the name of your access provider.

We use the aforementioned data to ensure a smooth connection of the website, to ensure a comfortable use of our website, to evaluate the system security and system stability and for other administrative purposes. The legal basis for data processing is art. 6 para. 1 p. 1 lit. f GDPR.

We exclusively use technically necessary cookies for the operation of our website. These are only stored for the course of your visit. A data transfer to third parties does not take place.

We do not use social media plug-ins on our website. Pages of our website with links to social media websites (e.g. Facebook, LinkedIn or XING) do not establish a connection with the servers of the respective operators. You will only be redirected to the website of the respective operator after clicking on them.

j) When using our contact form

For questions of any kind, you can contact us via a form provided on our website. This requires the provision of your name and a valid e-mail address, so that we know from whom the inquiry originates and are able to answer it. The legal basis for the data processing is art. 6 para. 1 p. 1 lit. a GDPR.

k) App news

If you subscribe to our app, you are likely to receive an e-mail with lifestyle and health information ("app news") every one or two weeks. You can unsubscribe from the app news at any time by clicking on "Unsubscribe app news". The legal basis for data processing is Art. 6 para. 1 p. 1 lit. b GDPR.

2. Data disclosure

Your personal data will not be disclosed to your employer. We only pass on summarized statistics from which no conclusions can be drawn about the data of individual persons.

We will transmit your personal data to third parties only if this is necessary for the use of the app, if you have given us your explicit consent or if we are legally obliged to do so.

The basis for this is as follows:

a) The fulfillment of the usage contract (according to art. 6 para. 1 p. 1 lit. b GDPR), for example: If you participate in a step competition, the other participants can see the number of your steps - for data protection this is a data transfer to third parties.

b) The granting of your explicit consent (in accordance with art. 6 para. 1 S. 1 lit. a GDPR), for example: In the future we plan to have personal coaches provide support. For this purpose, you will be able to consent to a coach having access to your lifestyle data. Of course, you can revoke such consent at any time.

c) A legal obligation (according to art. 6 para. 1 p. 1 lit. c GDPR) and the protection of legitimate business interests (according to art. 6 para. 1 p. 1 lit. f GDPR).

We employ IT service providers for the technical operation. They will only act on our instructions and have been obligated to comply with data protection regulations in accordance with Art. 28 GDPR. No data is transferred to countries outside the EU.

3. Your rights

You have the right to be informed about the personal data concerning you. You can download the data stored by Hanako yourself or request that it be provided to you through our support team. You may also request that incorrect data be corrected. Furthermore, under certain conditions you have the right to delete data, the right to restrict data processing and the right to data transferability.

You also have the right to complain to the competent supervisory authority for data protection if you believe that your personal data is being processed unlawfully.

If you have given us your consent to data processing, you can revoke this consent at any time.

4. Responsibility

Responsible for the data processing is:

Hanako GmbH

Moosacher Straße 70

80809 Munich

E-mail: info@hanako-health.com

Phone: 089 1250 1858 0

Do you have any questions? Then contact our data protection officer at dsb@hanako-health.com.