Privacy policy
This policy covers this website. How CliniCall processes patient calls for practices is described on the security page and in each practice’s data processing agreement.
Who is responsible
EXIGE SARL, Luxembourg, which operates CliniCall under the AInnovate brand, is the controller for the data described here. Contact details are in the legal notice.
Booking a call
When you book a call we collect your name, email address, practice name, the language you prefer, the time you choose and, if you give it, your phone number.
These details are saved as an event in our Google calendar and are used only to hold the call and follow up on it. The legal basis is taking steps at your request before a possible contract (Art. 6(1)(b) GDPR).
We keep them while we are in contact about the call and delete them within 24 months of our last contact.
Protecting the booking form
Cloudflare Turnstile checks that the form is used by a person; Cloudflare processes technical data from your browser for this. To limit abuse we keep a hashed form of your IP address for 24 hours. The legal basis is our legitimate interest in keeping the form usable (Art. 6(1)(f) GDPR).
Diagnostic report by email
If you ask for the report of the reachability check by email, we store your first name, your email address, your answers, your score and the language of the page.
We use them to send you the report and at most one follow-up message. The legal basis is your consent (Art. 6(1)(a) GDPR). They are kept in Cloudflare’s storage and deleted automatically 12 months after your request. The report form is protected in the same way as the booking form.
You can withdraw your consent at any time: the link in the email lets you delete your details straight away, or write to [email protected]. Withdrawing does not affect what was done before.
Analytics and cookies
We set no advertising or tracking cookies. We use Cloudflare Web Analytics, which counts page views without cookies or other storage in your browser.
Our hosting provider processes your IP address to deliver pages, and may set strictly necessary security cookies to protect the site from attacks. The legal basis is our legitimate interest in running and securing the site (Art. 6(1)(f) GDPR).
If you write to us, we use your message and address to reply, and keep the correspondence while we are in contact and at most 24 months after our last contact. The legal basis is our legitimate interest in answering you (Art. 6(1)(f) GDPR), or steps before a contract when you ask for a quote (Art. 6(1)(b) GDPR).
Who else processes it
These providers process this data for us: Google, for the calendar that holds booked calls and for the mailbox that receives our booking notifications (with the details you give when booking) and a copy of replies and bounced messages sent to our bookings address; Hetzner Online GmbH, which hosts our own mail server, from which the diagnostic reports and our booking notifications are sent; and Cloudflare, for hosting, form protection and analytics. Google and Cloudflare are based in the United States; transfers to them rely on the EU-U.S. Data Privacy Framework and Standard Contractual Clauses. We do not sell data or use it for advertising.
Your rights
You can ask for access to your data, its correction or deletion, a copy in a portable format, or restrict or object to its processing. Write to us at the address in the legal notice.
You can also complain to the Luxembourg data protection authority, the Commission nationale pour la protection des données (CNPD), or to the authority where you live.
Last updated: