1. Scope

This Privacy Policy covers only data collected through the Site and not any other data collection or processing, including, without limitation, data collection practices of other web pages to which we link or data that we collect offline or through websites that do not display a direct link to this Privacy Policy. Occasionally, we may refer to this Privacy Policy in notices related to surveys and special- purpose web pages; under such circumstances, this Privacy Policy applies as modified in the particular notice (e.g., with respect to types of data collected or purposes of collection). Some of our business units and web pages apply this Privacy Policy subject to specifically disclosed modifications, supplements or exceptions.

2. Collection Purposes, Use of Data

We collect passively tracked data primarily for purposes of administering, protecting and improving our Site and our systems, to better understand the preferences of our Site visitors, to identify server problems, to compile aggregated statistics about Site usage, and to help personalize your experience of our Site.

We collect actively submitted data primarily for two purposes: firstly, for the purpose for which you originally sent us the data (e.g., to send information to you); and secondly, for purposes of informing you about products, services and events; you can opt-out of receiving marketing emails as explained below.

Selected Biodex Rehab products and software collect location-specific data, including SpirVIEW, and AccuRad, and RDS-32, to not only provide the user with readings, but the particular location where such readings were obtained. Such location-specific data collection is a disclosed feature of those products and software, and is not used for any other purposes. The location-specific data is encrypted in transit. The location-specific data is retained for as long as the user determines, and may be deleted by the user if the user so decides. The location-specific data is accessible to the user-designated persons when stored on the user’s device, and to Biodex Rehab when the data is stored on a Biodex Rehab server. The location-specific data is not sold by Biodex Rehab or shared by Biodex Rehab with any third parties.

3. Opt-Out

You will be provided with an automated way to opt-out of receiving further commercial emails in all marketing emails we send. Please follow the instructions in the email you receive to unsubscribe. You can also contact us to request an opt-out at any time at privacy@BiodexRehab.com.

Please note that other data recipients have their own data privacy policies, which may differ from ours and you would have to contact them separately with respect to opt-out requests.

4. Security

Transmissions over the Internet are never 100% secure or error-free. However, we employ reasonable security procedures to protect your personal information from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. We also require that third party service providers acting on our behalf also provide such reasonable security measures. It is your responsibility to safeguard any password and User ID you use to access the Site if any, and to notify us at privacy@BiodexRehab.com if you ever suspect that this password or User ID has been compromised. You are solely responsible for any unauthorized use of the Site conducted via your password and User ID.

5. Children’s Privacy

The Site is intended for adults only. We do not intentionally or knowingly collect personally identifiable information from children under the age of 16 and we request that individuals under the age of 16 not submit any personal information on the Site.

6. California Consumer Privacy Act(CAL. CIVIL CODE 1798.100 – 1798.199)

With regard to the California Consumer Privacy Act of 2018, we do not “sell” the personal information of our website users or our customers or our employees, other than providing such information to related/affiliated Biodex Rehab entities or to our third party vendors for the intended purpose of that information (such as to HR benefits processing for employees, or to shipping companies for purposes of delivering items to customers, or transmitting technical support information requested by a current customer).

Although we do not sell your personal information, if you would like to fill out a form to opt-out of us ever doing so, please click the button below.

CCPA OPT-OUT FORM

Through the Site, we receive data that you actively submit, as well as data that we track when you request information, respond to an online survey, or otherwise actively send us data. We usually collect data such as your name, email address(es), mailing address(es), telephone number(s), and certain information related to the business you represent.

We collect actively-submitted data for two purposes: firstly, for the purpose for which you originally sent us the data (e.g., to send information to you); and secondly, for purposes of informing you about products, services and events; you can opt-out of receiving marketing emails as explained below. We collect passively tracked data, like cookies, for purposes of administering, protecting and improving our Site and our systems, to better understand the preferences of our Site visitors, to identify server problems, to compile aggregated statistics about Site usage, and to help personalize your experience of our Site

If requested, we will provide the personal information we have collected about a website user or a customer or employee in the preceding 12 months, or will delete personal information we have collected about a website user or a customer or employee where such deletion is feasible. Such requests shall be directed to privacy@BiodexRehab.com, or by telephone to 1-877-516-3401.

7. “General Data Protection Regulation” (GDPR) – Regulation (EU) 2016/679 Privacy Policy

Interpretation & Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

• “Account” means a unique account created for You to access our Service or parts of our Service.
• “Company” (referred to as either “the Company”, “We”, “Us” or “Our” in this Agreement) refers to “Biodex Medical Systems, Inc.” or “Biodex” or “Biodex Rehab”For the purpose of the GDPR, the Company is the Data Controller.
• “Country” refers to United States of America.
• “Cookies” are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.
• “Data Controller“, for the purposes of the GDPR (General Data Protection Regulation), refers to the Company as the legal person which alone or jointly with others determines the purposes and means of the processing of Personal Data.
• “Device” means any device that can access the Service such as a computer, a cell phone or a digital tablet.
• “General Data Protection Regulation” (GDPR) – Regulation (EU) 2016/679
• “Personal Data” is any information that relates to an identified or identifiable individual.For the purposes of GDPR, Personal Data means any information relating to You such as a name, an identification number, location data, online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity.
• “Service” refers to the Website.
• “Service Provider” means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used. For the purpose of the GDPR, Service Providers are considered Data Processors.
• “Usage Data” refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
• “Website” refers to https://www.BiodexRehab.com
• “You” means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.Under GDPR (General Data Protection Regulation), You can be referred to as the Data Subject or as the User as you are the individual using the Service.

Legal Basis for Processing Personal Data Under GDPR

We may process Personal Data under the following conditions:

• Consent: You have given Your consent for processing Personal Data for one or more specific purposes.
• Performance of a contract: Provision of Personal Data is necessary for the performance of an agreement with You and/or for any pre-contractual obligations thereof.
• Legal obligations: Processing Personal Data is necessary for compliance with a legal obligation to which the Company is subject.
• Vital interests: Processing Personal Data is necessary in order to protect Your vital interests or of another natural person.
• Public interests: Processing Personal Data is related to a task that is carried out in the public interest or in the exercise of official authority vested in the Company.
• Legitimate interests: Processing Personal Data is necessary for the purposes of the legitimate interests pursued by the Company.

In any case, the Company will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

Your Rights Under the GDPR

The Company undertakes to respect the confidentiality of Your Personal Data and to guarantee You can exercise Your rights.

You have the right under this Privacy Policy, and by law if You are within the EU, to:

• Request access to Your Personal Data. The right to access, update or delete the information We have on You. Whenever made possible, you can access, update or request deletion of Your Personal Data directly within Your account settings section. If you are unable to perform these actions yourself, please contact Us to assist You. This also enables You to receive a copy of the Personal Data We hold about You.
• Request correction of the Personal Data that We hold about You. You have the right to have any incomplete or inaccurate information We hold about You corrected.
• Object to processing of Your Personal Data. This right exists where We are relying on a legitimate interest as the legal basis for Our processing and there is something about Your particular situation, which makes You want to object to our processing of Your Personal Data on this ground. You also have the right to object where We are processing Your Personal Data for direct marketing purposes.
• Request erasure of Your Personal Data. You have the right to ask Us to delete or remove Personal Data when there is no good reason for Us to continue processing it.
• Request the transfer of Your Personal Data. We will provide to You, or to a third-party You have chosen, Your Personal Data in a structured, commonly used, machine-readable format. Please note that this right only applies to automated information which You initially provided consent for Us to use or where We used the information to perform a contract with You.
• Withdraw Your consent. You have the right to withdraw Your consent on using your Personal Data. If You withdraw Your consent, We may not be able to provide You with access to certain specific functionalities of the Service.

Exercising of Your GDPR Data Protection Rights

You may exercise Your rights of access, rectification, cancellation and opposition by contacting Us. Please note that we may ask You to verify Your identity before responding to such requests. If You make a request, We will try our best to respond to You as soon as possible.

You have the right to complain to a Data Protection Authority about Our collection and use of Your Personal Data. For more information, if You are in the European Economic Area (EEA), please contact Your local data protection authority in the EEA.

8. Effective Date, Amendments

This Privacy Policy is effective as of the date of its publication. We reserve the right to change this Privacy Policy from time to time and in our sole discretion. We reserve the right to change, modify, add or remove portions of this Privacy Policy at any time, but will alert you that changes have been made by indicating on the Privacy Policy the date it was last updated. When you visit the Site, the current version of this Privacy Policy as posted on the Site is the notice that applies, unless otherwise indicated under applicable law. We recommend that users revisit this Privacy Policy on occasion to learn of any changes.

9. Contact Us

Please feel free to contact us with any comments, questions, complaints or suggestions you might have regarding this Privacy Policy. You may send us an email at privacy@BiodexRehab.com