Provisional content · the structure is final; the legal text must be drafted and validated by a lawyer (GDPR and applicable Cameroonian law).
Data controller
The data controller is [MedBridges Global company name], a [legal form] with a share capital of [amount], registered under number [RCCM / number], whose registered office is at [address, Douala, Cameroon].
Contact: [dpo@… to be confirmed].
Data we collect
- Identification and contact data: surname, first name, email, phone, country.
- Health data, only in your secure file: medical reports, test results, prescriptions, information needed for your care.
- Travel data: passport, dates, companion, for the visa and logistics.
- Technical data: connection logs and audience measurement, according to your cookie choices.
Why we use it
- To review your file and refer you to a suitable hospital.
- To prepare your quote and arrange the visa, travel and accommodation.
- To support you, keep you informed of progress and follow up after your return.
- To answer the messages you send through the contact form.
Legal basis
[Explicit consent for health data, performance of the contract, legitimate interest — to be validated by a lawyer under the GDPR and the Cameroonian law applicable to personal data protection.]
Who can access it
- Our team and our coordinators, within the limits of their role.
- The partner hospital chosen for your care, and that hospital only.
- Our technical providers (hosting, email delivery), bound by contract.
- We never sell your data.
Transfers to India
Your medical file is sent to the partner hospital in India, with your consent, so that it can treat you. [Contractual safeguards to be specified.]
Retention period
[Periods to be specified for each category of data: medical file, account data, contact messages, technical logs.]
Your rights
- You can access your data, correct it, export it or ask for it to be deleted, directly from your space or by writing to us.
- You can withdraw your consent at any time and lodge a complaint with the competent data protection authority. [Authority to be specified by a lawyer.]
Security
Your documents are encrypted in transit, stored on secure infrastructure, and access is limited to authorised people. [Detailed measures to be validated.]