Effective date: [DOPLNIŤ DÁTUM]. Last updated: [DOPLNIŤ DÁTUM].
MadeTOmyBODY s.r.o., with registered office at Vlčkova 43, 811 06 Bratislava, Slovakia, Registration No. (IČO) 57 685 347, VAT No. SK2122883268, (“MadeTOmyBODY”, “we”, “us”) is the data controller for personal data processed through this website and our connected medical aid products, unless stated otherwise.
Contact for privacy matters: info@made2mybody.com or +421 905 362711. MadeTOmyBODY has not appointed a separate Data Protection Officer; privacy requests are handled directly by the above contact.
Depending on how you interact with us, we may collect:
Contact and enquiry data — name, email, organization, message content, submitted through the Contact form.
Device and usage data — sensor and telemetry data generated by connected orthotics, insoles, mobility, seating and bed products (e.g. pressure, gait, temperature, humidity, speed, acceleration), where you or your clinical provider have enrolled a device.
Clinical and health-related data — where relevant to pilots, BDCP fittings or clinical collaboration, processed under a specific legal basis and, where applicable, a data processing agreement with the clinical partner.
Technical data — IP address, browser type and basic analytics collected via cookies (see our Cookie Policy).
We process personal data on the basis of: your consent (e.g. contact form submissions, optional analytics); performance of a contract or pre-contractual steps (e.g. product fitting, BDCP services); legitimate interest (e.g. improving product safety and performance); and legal obligation (e.g. medical-device vigilance and regulatory reporting). Special-category health data is processed only where an explicit legal basis under Art. 9 GDPR applies, such as explicit consent or provision of healthcare.
To respond to enquiries and manage partnerships, pilots and BDCP relationships; to provide, monitor and improve connected medical aid products and the underlying data platform; to meet medical-device regulatory and safety obligations; and to communicate updates where you have opted in.
We do not sell personal data. We may share data with hosting and cloud infrastructure providers, clinical and BDCP partners involved in your care or pilot, and regulators where legally required. [DOPLNIŤ ZOZNAM SPRACOVATEĽOV.] Where data is transferred outside the EEA, we rely on appropriate safeguards such as EU Standard Contractual Clauses.
We retain personal and clinical data only as long as necessary for the purposes above and to meet medical-device and accounting record-keeping obligations. [DOPLNIŤ KONKRÉTNE LEHOTY.]
Under GDPR you have the right to access, correct, delete, restrict or object to processing of your data, and to data portability. You may withdraw consent at any time without affecting prior processing. To exercise these rights, contact info@made2mybody.com. You also have the right to lodge a complaint with your national data protection authority.
We apply technical and organizational measures appropriate to the sensitivity of connected medical device and health data, including encryption in transit, access controls and regular review of our data platform.
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date above.