Privacy Policy
1. Controller
The controller of the personal data is „22 Венчърс" ЕООД (22 Ventures EOOD), UIC 208012960, 19 Hadzhi Dimitar Street, Sredets district, 1000 Sofia, Bulgaria, email demo@sanahealth.bg. A data protection officer has not been designated; data protection enquiries are to be addressed to the email stated.
2. Data through this site
The sanahealth.bg site does not require registration and does not set any tracking technologies. The only personal data that arrives through it is the data you send yourself with a request for a demonstration: name, work email, institution and role. Legal basis: taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR).
3. Data in the app.sanahealth.bg platform
Registration processes email, name and UIN for the purposes of professional verification (legitimate interest in access by healthcare professionals only). Clinical questions and answers are recorded in an audit log together with a copy of the sources used at the time of the answer; the record is not rewritten. The platform is designed not to require, not to collect and not to process patient data; questions to the assistant must not contain data allowing a patient to be identified. The conversation history is kept only in the user’s browser.
4. Recipients and sub-processors
| Recipient | Role | Location |
|---|---|---|
| Google Cloud (hosting, databases, storage) | sub-processor | EU, europe-west1 region (Belgium) |
| Google (answer generation, Generative AI API) | sub-processor | processing is carried out under Google’s data processing terms and is not tied to a specific region |
Data is not sold and is not provided to third parties for marketing.
5. Retention periods
| Category | Period |
|---|---|
| Demonstration requests | up to 12 months from the end of the communication |
| Account data | for as long as the account exists, and up to 12 months after its closure |
| Audit log of clinical lookups | 5 years from the record |
| Backups | up to 90 days |
6. Rights
You have the right of access and the rights to rectification, erasure, restriction of processing, portability and objection, as well as the right to lodge a complaint with the Commission for Personal Data Protection (cpdp.bg, 2 Prof. Tsvetan Lazarov Boulevard, 1592 Sofia). Requests are submitted to demo@sanahealth.bg and are dealt with within one month.