Your privacy is a top priority. We are dedicated to protecting your personal information and ensuring transparency about how we collect, use, and store your data. Please read this privacy policy carefully which ensures you remain informed and in control of your personal data every step of the way.
By creating an account and using the Service, you consent to collection and processing of your personal data including health data, as set out in this privacy policy. Please also read our terms and conditions which also apply to the use of the Service (including Biowatch WorkCare, Freeage and OneHealth).
Capitalised terms used but not defined in this privacy policy shall have the meaning as set out in the terms and conditions, unless the context requires otherwise. We use your personal data to send you email and SMS notifications regarding your account and the service we provide. We also use your personal data for developing and improving the Service and our webpages.
Depending on the type of service we provide to you, you consent to having your personal data shared with the health experts specified in your onboarding for individualised recommendation. You also consent to having the collected biological samples of your blood, feces and saliva shared for biomarker analysing or genetic sequencing with our partner laboratories within the EU. We will not share your name or identity with these laboratory partners. If we provide the Freeage service or epigenetic testing (e.g. concerning biological age) to you, you consent to having your result of your sequencing in the form of binary data ("0' and 1s") and your your birth year, month, gender and ethnicity shared with our partners in the US and Switzerland. We will not share your name, identity or any biological samples with these partners.
You can at any time withdraw your consents by requesting an account deletion by submitting such request to deleteme@biowatch.me or, if relevant, by unsubscribing to emails or notifications by writing to support@biwatch.me.
Please read full details in our privacy policy below and in our terms and conditions which also include the terms of use.
. ------------
The purpose of the collection of data is to provide the Service in accordance with the agreement. The Service is a browser-accessed platform enabling “self-empowerment” based on a range of different data points such as user-input, data from wearables and laboratory tests and recommendations. We structure and process your data in the Service to support and improve the quality of the dialog between you and our health experts.
The Service provides you with a tool to document the development in your optimisation and correction of lifestyle related imbalances.
We continually improve the Service by analysing your use and the content you provide. The purpose also includes support services should you have trouble with the Service, including to contact you if we experience problems in connection with lost or failed kits or tracking of kits under delivery or shipment.
No individual personal data in the form of your name, adresse or email will be shared with our partners as we are purely interested in general insights based on data analysis. In this way, your use of the Service will help improve optimisation and proactive prevention for others. Any use of your personal data will always be done in a way to ensure that you are anonymised.
You have the option to receive messages and notifications via SMS, when your test results are ready. No test results will be shared by SMS. You can change your settings for notifications in the system (opt-in or opt-out), but some of the functions might not deliver you full value without notifications enabled. You are always welcome to contact us for enquiries about your account by contacting us at support@biowatch.me.
As part of the Service, some functions of the system offer you the possibility to share personal data with prequalified and carefully selected health experts. Sharing your personal data will only take place if you choose to activate or use the different functions in the Service.
As we are located in the EU, the General Data Protection Regulation (GDPR) applies to the collection of personal data irrespective of where the data subject is located. The basis for our collection and processing are:
As we are a service for tracking your health data, a potential partner in research and development projects and an online community, we collect the personal data you continually provide using the Service.
Collected personal data could include your name, private email and mobile number, birth date, gender and information in relation to workplace and habits (if the Service is offered under an employee scheme or WorkCare). We collect personal data related to physical tests (e.g. weight, height, grip-strength, VO2-max) and biological samples (e.g. samples of your blood, feces and saliva) and results based on laboratory analysis of such samples. Finally we may collect data related to your lifestyle e.g., your physical activity, diet, habits, supplements, medicine and information concerning your mental well-being and data from wearables you wear if such data is provided by you.
Moreover, we also collect technical data from the devices you are using.
Recipients of anonymised personal data might include: healthcare experts, researchers, hospitals, laboratories, clinics, etc., third-party digital content provides for our platform and other end-users.
The biological samples we collect from you (e.g. blood, faces, saliva) will be destroyed by the laboratory following the completion of analysing the samples.
Finally, we may disclose encrypted personal data to our IT service providers (data processors).
No personal data collected in the EU is transferred outside the EU/EEA. If we provide the Freeage services to you or the epigenetic testing (e.g. of your biological age), the result of your sequencing in the form of binary data ("0s" and "1s") and your birth year and month, gender and ethnicity will be shared with our partners in the US and Switzerland. We will not share your name, identity or biological samples with these partners.
When a user requests an account deletion or deletion of personal data by contacting us at deleteme@biowatch.me, a deletion and anonymisation process is activated.
The process includes assessing if we are obligated to store some or all the personal data for a longer period of time according to the GDPR and the applicable local laws. If we are not obligated to store the personal data and we have no other lawful grounds for further processing, we delete or anonymise the personal data. If the user is inactive for 24 months, the anonymisation process is activated.
The personal data have been obtained during the onboarding process in the system and collected in connection with your use of the Service.
We only collect personal data based on direct consent from you. You have no obligation to provide us with personal data. If you do not provide us with the personal data necessary for providing the purpose of the Service, we are not able to provide you with the full services or functions of the Service.
We do not base any automated decision-making, including profiling, on personal data from users as set out in Article 22(1) and (4) of the General Data Protection Regulation . Thus, no decision is based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects concerning the user.
As we are bound by the GDPR due to our location in Denmark, you have the following rights:
The rights are limited in scope and application. Moreover, the rights are applied on a case-by-case basis to each data subject request.
Please be aware that in some instances we are joint controllers with one or more parties regarding your personal data. This might be the case where you have consented to giving us access to personal data you have shared with a third party, e.g., Oura Ring. If your request concerns personal data that is covered by a joint controllership, we might refer you to the third party for further resolving of your request.
You are not required to pay any charge for exercising your rights.
If you make a request, we must provide information on action taken without undue delay and in any event within one month of receipt of the request. That period may be extended by two further months where necessary, taking into account the complexity and number of the requests. In that case, we will inform you of any such extension within one month of receipt of the request, together with the reasons for the delay.
Please contact us on support@biowatch.me if you wish to make a request. When you make the request, please specify your request as best you can. This will help us process your request more quickly.
You can lodge a complaint with your local Supervisory Authority in the EU:
https://edpb.europa.eu/about-edpb/board/members_en
If you live outside the EU, please contact the Danish Data Protection Agency (check current coordinates on the website listed above).
Denmark Datatilsynet Carl Jacobsens Vej 35 2500 Valby Tel. +45 33 1932 00 email: dt@datatilsynet.dk Website: http://www.datatilsynet.dk/
Before you do, we hope you will contact us, the data controller, directly to give us a chance to solve the matter.
The name and contact details of the organisation (data controller)
Biowatch ApS Aurehøjvej 12 2900 Hellerup Business reg. no. (VAT): DK-38576496