Privacy Notice

Thank you for using Permobil Store to order and customize advanced mobility and seating & positioning medical devices. This Privacy Notice explains how we process data related to Medical Device Users (Consumers), Customers (rehabilitation centers, clinics, or similar entities), and the staff who interact with Permobil Store, as well as data collected from general website visitors. For general information see Privacy Notice and Data Processing Terms and Conditions of the Permobil General Terms of Sale  (https://www.permobil.com/this-is-permobil/general-terms-of-sale).

Roles listed in the general Privacy Notice page applies, as well as the following roles specific for the Permobil Store:

• Customer: Acts as the data controller, collecting Medical Device User data, securing
  the necessary consents, and ensuring compliance with applicable privacy regulations.
• Medical Device User/Consumer: The individual whose data is processed for Medical
  Device customization.

Data Provided About the Medical Device Users (Consumers)

The Customer submits a variety of information related to the medical Device User for the purpose of product customization and order fulfillment. These data categories might include but are not limited to:

Personal Identification Data

• Full name (first and last name).
• Contact details (address, phone number, and email).
• Date of birth or age range.
• Unique identifiers (e.g., order ID, patient number assigned by the Customer).

Health and Sensitive Data

To enable highly specialized customization, the following health-related and sensitive data
may be processed:

• Physical Measurements: Height, weight, body dimensions, and posture details.
• Clinical Details: Diagnoses, conditions, or limitations impacting mobility or seating
  (e.g., muscular dystrophy, scoliosis, or other orthopedic or neurological conditions).
• Functional Requirements: Range of motion, pressure sensitivity, or specific
  therapeutic goals (e.g., prevention of pressure sores, support for specific anatomical
  areas).
• Medical Assessments: Documentation of physical or functional status provided by
  healthcare professionals, such as rehabilitation reports or evaluations.

Photos, Videos, or Scans

If required for device customization, the following types of visual data may be submitted:

• Photos: Images depicting posture, body alignment, or other customization-related
  details.
• Videos: Clips illustrating mobility challenges or seating preferences.
• Scans or Blueprints: Digital files, such as 3D scans of body contours or CAD files of
  prior configurations.

Usage Preferences and Feedback

To ensure optimal customization, the following preference-related data may be collected:

• Device Usage Context: Information about typical environments or activities (e.g.,
  indoor vs. outdoor use, sports participation, etc.).
• Specific Functional Needs: Details on features such as recline angles, support
  padding, or weight-bearing capacity.
• User Feedback: Experiences with previous devices, satisfaction levels, and areas for
  improvement.

Data Related to Customer Staff (Permobil Store Users)

When using the Permobil Store we may collect and process the following data about
Customer staff:

• Contact Details: Name, email address, phone number, and job title.
• Authentication Data: Login credentials, user account details, and roles within
  Permobil Store.
• Order Management Details: Activities performed within Permobil Store, such as
  placing orders, managing accounts, and generating reports.
• Credit Card Payments: Your crredit cart payment details.
• Communication Data: Any information shared during support inquiries or other
  communications.

Data Collected from Website Visitors

For general visitors to the Permobil Store we collect:

• Technical Data: IP address, browser type and version, operating system, and Medical
  Device details.
• Usage Data: Pages viewed, time spent on the website, and navigation paths.
• Cookies and Similar Technologies: Information for analytics, website functionality, and enhancing user experience. You can manage your cookie preferences via our Cookie Setting Platform.

By submitting Medical Device User data to the webstore platform, the Customer confirms:

1. Consent and Notification:
   • Necessary consent has been obtained from the Medical Device User (where
     required by law).
   • The Medical Device User has been informed of Permobil's role as a data
     processor and the purposes of data sharing.
2. Data Quality: All submitted data is accurate, complete, and up-to-date.
3. Authorization: The Customer is authorized to share the data with Permobil for the
   purposes described.

Data is stored electronically in secure servers and services provided by the following vendors, within subscriptions owned and managed by Permobil. The service agreements of the subscriptions regulate the data in these subscriptions to be owned by Permobil.

Microsoft Azure - Data center located in Dublin, Ireland.

Okta - Data center located in USA.

Cybersource / Visa - Credit card and payment information is managed in by Visa in Visa datacenters.

Permobil is using trusted third-party service providers (sub-processors) as part of the service offering. These service providers are integrated into the website and we share parts of the Personal Identification Data with these services in order to provide the functionality these third-party services offer. Some of these services can be managed through the Cookie Setting Platform.

Microsoft Azure

Microsoft Azure is used to host the service and to process and store most of the information of the service. Statics about user activity of the website is collected. See https://www.microsoft.com/en-gb/privacy/privacystatement

Microsoft Azure AI Bot

We use Microsoft Azure AI Chatbot to process. Any information entered into the chatbot are processed throught the Azure hosted chatbot services. Your data is not shared with any other party or used to train the chatbot. See https://www.microsoft.com/en-gb/privacy/privacystatement

CookieScript

CookiesCript is the Cookie Setting Platform used to store the user's cookie consent state for the current domain. See https://cookie-script.com/legal/privacy-policy 

Cybersource/Visa

Cybersource is used to process credit card payments. See https://usa.visa.com/legal/global-privacy-notice.html and https://www.visa.se/legal/global-privacy-notice.html .

Okta

Manages the user account for Customer authentication to the service. User details as well as logging of user authentication activity is collected. See https://www.okta.com/privacy-policy/