Privacy Policy

This Privacy Policy constitutes an agreement between yourself as a registered user of the MyHealthAvatar Platform (the Platform) and MyHealthAvatar (www.myhealthavatar.eu). The Platform was developed as part of a European research project within the 7th Framework Programme of European Commission and ended by February 2016. The project, named 4D MyHealthAvatar, focused on research and demonstration actions, through which the achievability of an innovative representation of the health status of citizens, was explored. The intention from the beginning was that the Platform and the MyHealthAvatar app (the App) should remain a usable and useful resource for users after the project end, too. The former projects lead partner, University of Bedfordshire, England, has assumed responsibility for the Platform and is the first contact point for users now. Questions and comments may be addressed to the former MyHealthAvatar project coordinator Professor Feng Dong (mha@ccgv.org.uk).

I. General Information

This Privacy Policy describes

This Privacy Policy is necessary because the use of the MyHealthAvatar platform entails the submission of personal data. Any data submitted will be processed by the Platform for the purposes of offering and presenting you with information relevant to your health and lifestyle as described in the functionalities section of the associated MyHealthAvatar Terms and Conditions.

Consequently, the registration process entails giving your consent to the processing of your data by the operator of MyHealthAvatar, as specified in the General Terms and Conditions.

Other information that will be collected to help operate and improve the service refers to how you interact with our services, including the browser that you're using, your IP address, location, cookies or other unique IDs, the pages that you visit and features that you use. We combine this with other users' information to get an overall view of how the service is used.

Your data will not be processed for any other purposes than mentioned in the Policy and to which you consent to.

You may withdraw your consent at any time without any disadvantages. In this case, any and all data that you uploaded to the platform will be permanently deleted as laid out in Sections VI and VII.

For your records, a copy of this Privacy Policy will be sent to your e-mail address. 

II. Registration

The registration process requires your name or a pseudonym, and your email address. All such data may in principle fake or made-up (e.g. if you are interested in first exploring and testing the functionalities of the Platform in a general rather than individualised way).
However, we recommend using a real email address, so we can send you a copy of the General Terms and Conditions, this Privacy Policy and the consent form and can ask for re-consent in case of any updates of the General Terms and Conditions and/or Privacy Policy.

 

III. Sharing your personal data via MyHealthAvatar Platform

You will be able to share your collected steps with other users of the Platform by the MyHealthAvatar app.

Other users of the Platform will only be able to access your data after you connect with them as friends. You can create groups with your friends and share the selected data you would like to share within the created group, but also share the selected data with a single friend. You can dissolve friends as well as delete groups created by you at any time.

IV. Security measures to protect your data

We are aware that the data you choose to upload can be highly sensitive. State-of-the-art security measures are incorporated into the Platform to protect your data against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access or any other misuse.

At the moment, unless you opt to share your data with other users of the Platform, the technical institutions (BED, FORTH, ICCS, ANS; TEI-C, LIN) that have participated in the MyHealthAvatar project are the only entities that have access to your uploaded data. Other users of the Platform will only be able to access your data after you connect with them as friends by the App and only after you have selected the data you would like to share.

All data that you collect and store in the Platform may be currently used by the technical institutions that have participated in the MyHealthAvatar project. The addresses and further details of these each institutions may be found on the project website (www.myhealthavatar.eu) . As noted in the Terms and Conditions, the data will be stored in the public cloud server Linode, based in London and rented by ANS.

 V. Your rights regarding the processing of your personal data

You retain at all times your full rights as a data subject under the EU Data Protection Directive (as implemented into UK law by the Data Protection Act 1998), as follows. You may contact the former coordinator of the MyHealthAvatar project, Prof. Feng Dong, in order to exercise any of your rights: mha@ccgv.org.uk.

1. Right to information

You have the right to inform yourself about the identity of the data controller and of the controllers representatives, if any.

The data controller is the University of Bedfordshire, represented by Prof. Feng Dong, the coordinator of the MyHealthAvatar project.

You have the right to inform yourself about the purposes of the processing and about the recipients of the data.

2. Right of access, rectification, erasure or blocking

At any time, you may check your data stored and request that corrections be made if the data are incorrect or outdated. Furthermore, you can demand to block or delete your data according to the conditions set out in Sections VI and VII of this Privacy Policy.

3. Right to object

You have the right to object to the processing of your data at any time. In this case we will delete your data as soon as reasonably practicable from the Platform and/or other MyHealthAvatar Services according to the conditions laid down in Sections VI and VII of this Privacy Policy.

An exception may occasionally have to be made when the data is collected in order to comply with a legal obligation to which the data controller is subject, or when it is necessary for the performance of the user agreement between you and MyHealthAvatar.

VI. Deleting your account

You can delete your account by emailing the request to mha@ccgv.org.uk and supplying your username.  Other users that you have granted viewing access to your profile will no longer be able to see the data. We will give you the opportunity to download your selected and stored profile data as a PDF file. After deleting your account, your information will not be erased until a period of 30 days has passed in order to help avoid accidental or malicious removal of your health information. Afterwards, your avatar and the stored information will be permanently deleted.

VII. Deleting health information

When you delete a piece of health or lifestyle information, but retain your overall account, this information is archived. Other users with whom the archived health information has been shared with will no longer be able to see the deleted items. However, permanent deletion of health and lifestyle information can only happen by deleting your overall account.

VIII. Demo App Developers and Third parties

Where you opt to use one of the apps offered through the platform, you will be asked to read and agree to the separate terms and privacy policy of the app developer. Application connections with products from providers external to the project, including Fitbit, Withings, Moves, and Twitter are subject to their own privacy rules that MyHealthAvatar has no control over. However, these Third Parties will not have any access to your data in the Platform.

IX. Changes to Privacy Policy

If this Privacy Policy is to be changed, we will inform you and ask you to give fresh consent.

In case you do not consent to the changed Privacy Policy, your account will be deleted according to the rules laid down in paragraph VI. In such a case, we will first give you the opportunity to download your selected and stored profile data as a PDF file.

 X. Disclaimer

MyHealthAvatar is aware of the high sensitivity of the stored data. The platform features state-of-the-art security measures to protect your data against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access or any other misuse.

Absolute security, however, is technically not possible. There is always a small risk that an unauthorised third party, might be able to gain access to your data. In such cases, the liability of the data controller is limited to breaches of security that could have been reasonably foreseen and/or were contributed by the controllers failure to take due care.

You are aware that you have the responsibility of keeping your login credentials safe and secure. MyHealthAvatar is not liable for any data breaches caused by the access and misuse of unsafely held credentials by third parties.

XI. Applicable national law

UK law applies with regard to the processing by the MyHealthAvatar consortium of the users personal data within the Platform.