1. Introduction
Aptar Digital Health, LLC and its affiliates Voluntis SAS (hereinafter “ADH,” “our” “we” or “us”) own or control Allergy Buddy, a mobile application (the “App”) designed for people with nasal allergies (allergic rhinitis).
To use this app, you must be at least 16 years old and a resident of the United States. If you're using medication, prescription or over-the-counter, for nasal allergy symptoms, Allergy Buddy can help you track it. Medication tracking is optional and not required to use the App's other features, including symptom tracking, weather and pollen tracking, reminders for medication, the Allergy Meter, and educational content.
Please read this privacy policy carefully as it explains how your personal data are used and how to exercise your rights. This privacy policy supplements any documents or notices that may refer to this privacy policy (i.e.: Terms of Use which users are required to accept at the time of their first login to the App or Dashboards).
You cannot use Allergy Buddy without consenting to the use of your personal information described in this Policy.
Should you have any questions, you may directly contact ADH by sending an email to informationgovernance@aptardigitalhealth.com.
2. Who is the Data Controller of your personal data?
ADH is the data controller of your personal data to the extent that it determines the purposes of the processing related to Allergy Buddy’s services.
ADH also acts as the data controller of your personal data:
when it operates personal data processing in order to comply with its legal and regulatory obligations, in particular regarding the vigilance obligations; and
when it operates personal data processing in order to improve the App, and/or its services.
3. What does our Privacy Policy include?
This Policy describes how ADH collects, uses and shares information about you through Allergy Buddy. Please read this Policy carefully to understand what we do. If you do not understand any aspects of our Privacy Policy, please feel free to contact us as described at the top of this Policy. This Privacy Policy applies only to information we collect through the App.
Allergy Buddy also contains links to third party sites that are not owned or controlled by ADH. We are not responsible for the privacy practices of such other sites. ADH does not share Personal Information (defined below) with those sites. We encourage you to be aware when you leave Allergy Buddy and to read the privacy statements of each and every website that collects personal information.
4. What information does ADH collect?
ADH collects two types of information: (1) information received from you, and (2) information received from others (i.e.: Apple Health or Google Health depending on your device and your authorization).
Find below the detailed list of all personal data provided by you via Allergy Buddy, or collected from other applications, or generated by Allergy Buddy:
| Type of Data | Examples of Data |
|---|---|
| Identification data | First name, last name, date of birth, gender, ethnicity |
| Contact details | Email address |
| Health data | Symptoms, Medication: type, dates, times |
| Exchanges with ADH | Date, hour, and subject of your exchanges with ADH |
| Electronic network activity information (1) (Traffic data) | Date and time of the visit, viewed pages and files, amount of time spent on particular pages, IP address, device type, language, operating system, system configuration data, referring URLs, carrier and country location, hardware and processor information. |
| Information from cookies and trackers | Use of the Platform, compile reports on activity, demographic data, analyze performance metrics, Services usage |
| Other personal information | Environmental conditions, triggers, geolocational information, tagging data, favorites, preferences, session lengths |
| Usage data | Session duration, frequency of use, feature interaction logs, navigation patterns. |
| Feedback | App satisfaction, user needs & expectation, behavioral insights, improvement ideas |
(1) These data are necessary for the proper functioning of Allergy Buddy, as well as internal analytics purposes.
5. For what purposes does ADH use your personal data?
As data controller, ADH processes your personal data for the following purposes:
| Purposes | Examples of use of your Personal Data | Legal Bases |
|---|---|---|
| Creating and managing your Allergy Buddy’s account |
|
Performance of the contract |
| Providing Allergy Buddy’s services |
|
Performance of the contract |
| Managing support service (call support) |
|
Performance of the contract |
| Compliance with legal and regulatory obligations |
|
Legal and regulatory obligations to which ADH is subject as data processor |
ADH may also process your personal data for as the following purposes:
| Purposes | Examples of use of your Personal Data | Legal Bases |
|---|---|---|
| Improving Allergy Buddy’s services |
|
Legitimate interest of ADH to improve Allergy Buddy and the user’s experience |
| Pre-litigation or litigation management |
|
Legitimate interest of ADH in defending its rights and interests |
| Sending monthly newsletters |
|
Legitimate interest of ADH in engaging and maintaining contact with users |
| Collecting your feedback about the App |
|
Legitimate interest of ADH to improve the app and better understand user needs |
6. Who can access your Personal Data?
Your personal data may be transmitted to the following recipients when you use Allergy Buddy and the services it provides:
| Recipients | Purposes |
|---|---|
| ADH and its duly authorized employees | Exclusively for the purposes detailed in the Section 5 of this privacy policy |
| Companies of the ADH Group and their duly authorized employees | Exclusively for administrative, operational and technical purposes related to the management of Allergy Buddy and its services |
| ADH’s service providers (hosting provider, IT service providers, etc.) | Exclusively for operational and technical purposes related to the management of Allergy Buddy and its services |
| Administrative or judiciary authorities | Exclusively in the case of an express and justified request or in case of an alleged violation of legal or regulatory provisions |
| Lawyers and all interested parties | Exclusively in the case of the management of possible disputes and other legal matters where appropriate |
| Other third parties | Following or during a restructuring, reconstitution, acquisition, debt financing, merger, sale of assets of ADH or a similar transaction, as well as in case of insolvency, bankruptcy or receivership where personal data are transferred to one or more third parties as assets of ADH |
| Third-party survey platform | Exclusively for the purpose of collecting potential agreements to additional services, and analyzing user feedback and satisfaction data |
ADH will not sell or rent your Personal Data. However, ADH may generate and share aggregated and/or pseudo-anonymized data reports with its customers. These reports do not contain any information that directly identifies you. They may be used for legitimate purposes such as, but not limited to improving products and services, conducting market research, analyzing usage trends, and supporting co-development initiatives.
7. What are your rights regarding your Personal Data?
If you have any questions or wish to exercise your rights, you may directly contact ADH by sending an email to informationgovernance@aptardigitalhealth.com
you can request the access to your personal data in order to obtain clear, transparent and understandable information on how ADH processes your personal data and on your rights (as provided in this policy), as well as a copy of your personal data (you can access certain information relating to your account (name, contact information and preferences) by signing into your account and going to the Account or Profile section of the App).
you can request the rectification of your personal data in order to obtain the modification of your personal data if they are obsolete, inaccurate or incomplete.
you can request the closure of your online account. If you close your account, we will no longer use your online Personal Information or share it with third parties. ADH may, however, retain a copy of the information for legal purposes and to avoid identity theft or fraud.
you have a right to ask to get an Accounting of Disclosures of when and why your health information was shared.
you may decide if you want to give your authorization before your health information may be used or shared for certain purposes, such as for marketing.
you have the right to receive your health information in a confidential manner.
you have a right to restrict who receives your information.
Under certain circumstances, ADH may ask you for specific information in order to confirm your identity and ensure the exercise of your rights. This is another appropriate security measure to ensure that personal data is not disclosed to an individual who does not have the right to receive it.
If needed (fraud, scams, rip-off, bogus product, etc.), you may also report a complaint to your national data protection agency, the Federal Trade Commission ‘FTC’.
To do so, you may:
directly use the FTC complaint form available on their website: www.ftc.gov/complaint
or call 1-877-FTC-HELP
8. How is your Personal Data protected?
ADH has implemented technical and organizational measures in order to protect your personal data, in particular against potential data breaches likely to cause, either by accident or unlawfully, the destruction, loss, modification, unauthorized access or divulgation of your personal data. These measures will guarantee a level of security adapted to the data and will take into account the state of the art and the cost of implementation in relation to the risks and nature of the data to be protected.
ADH also guarantees that all members of its personnel and any other person processing your personal data will respect the internal rules and procedures related to the processing of personal data, including the technical and organizational security measures put in place to protect your personal data. In this context, ADH reviews and updates its practices regularly to enhance your privacy and ensure that its internal policies are followed.
However, even with these safeguards, ADH cannot guarantee, ensure, or warrant the security of any information you transmit to us. There is no guarantee that information may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards. It is your responsibility to protect the security of your login information. Please note that e-mails and other communications you send to informationgovernance@aptardigitalhealth.com are not encrypted, and we strongly advise you not to communicate any confidential information through these means.
If you have found a vulnerability or would like to report a security incident, you may send an email to informationgovernance@aptardigitalhealth.com or use the dedicated message service available through the App or contact your national data protection agency FTC (as described in section 7).
9. Where and how long will your Personal Data be maintained?
Allergy Buddy mobile and dashboards are hosted and managed on servers located in Europe. By using and accessing Allergy Buddy, you agree and consent to the transfer to and processing of Personal Information on servers located in Europe, even when you travel outside the United States and you recognize that the protection of such information may be different than required under the laws of any location that you visit.
As a general rule, your personal data will only be retained as long as you use the App, or as necessary to fulfill legal or regulatory obligations.
In the absence of applicable exceptions, your traffic data will be kept for a period of thirteen (13) months from the connection date.
10. How will you know if this Policy changes?
This Privacy Policy may be amended from time to time, in particular to reflect the changes in the services provided by Allergy Buddy or the applicable regulations. Any revised version of the Privacy Policy will be posted on this page and at other places deemed appropriate.
11. How can you contact ADH if you have questions?
If you have any questions, concerns, complaints or suggestions regarding our Privacy Policy or otherwise need to contact us, please email our Data Protection Officer at informationgovernance@aptardigitalhealth.com.
In the event of any fraud or scams, you may report a complaint to your national data protection agency (the FTC) as described in section 7.