Privacy Policy

1. Controller and contact

For processing Jadita carries out for its own purposes, the controller is Agustin Danel Vissani, a self-employed businessperson established in Spain (NIE Z1777113T), Calle M. de San Lorenzo de El Escorial 4, 47015 Valladolid, Spain. Privacy contact: [email protected].

2. Scope

This policy applies to website visitors, people requesting information or a demo, customers and account administrators, authorized users, support contacts, and recipients of service-related or promotional communications.

3. Data processed for Jadita's own purposes

Depending on your relationship with Jadita, we may process identification and contact details; professional and organization data; account, role, and permission data; subscription, billing, payment, support, communication, technical, and security data.

4. Patient and clinical data

Healthcare professionals and centers decide the purposes, data, access, and applicable obligations for patient and clinical information entered into Jadita. Jadita processes that information on the customer's behalf under the SaaS Agreement, DPA, and valid customer instructions. We do not use that clinical data for targeted advertising, patient marketing profiles, or incompatible commercial purposes.

5. Purposes and legal bases

We process data to respond to information and demo requests, manage customers and accounts, authenticate users, protect the service, recover access, provide support, administer subscriptions and payments, send operational communications, comply with legal obligations, and defend rights. Where applicable, the basis may be pre-contractual measures, contract performance, legitimate interests, legal obligations, or consent.

6. Sources, providers, and international transfers

Data may come directly from you, from the customer organization that manages your access, from use of the platform, or from contractual administration. Jadita uses providers including Databricks/Neon, Fly.io, Cloudflare, Scaleway, and Google/Google Cloud as required by the current architecture. Core infrastructure is configured in the European Union; security and delivery services such as reCAPTCHA and Cloudflare may involve international processing, using the applicable safeguards when required.

The current details of these providers are available in the Public Subprocessors Register.

7. Cookies, retention, and security

Jadita uses technologies necessary for service operation and security. Public forms may use Google reCAPTCHA to prevent abuse. Data is retained for the time necessary for the relevant purpose and subsequent legal, security, or defense periods. Jadita applies reasonable technical and organizational security measures.

8. Your rights

Where applicable, you may exercise rights of access, rectification, erasure, restriction, objection, portability, and withdrawal of consent by writing to [email protected]. Patient requests should normally be addressed to the relevant professional or center. You may also lodge a complaint with the competent authority, including the AEPD in Spain or AAIP in Argentina where applicable.

9. Other information and changes

Commercial forms are not intended to collect health data. Jadita does not currently make solely automated decisions with legal or similarly significant effects for its own purposes. This policy may be updated; the current version is available at https://www.jadita.com/privacy.