Effective 1 st September 2019
Assuré Medical’s mission is to help to restore health, quality of life as well as tackling the problem of
growing antibiotic resistance for women with recurrent Urinary Tract Infections (UTIs) by developing
a non-antibiotic treatment. Central to this mission is our commitment to be transparent about the
and when you participate in an anonymous survey. We offer our users choices about the data we
This page is used to inform website visitors regarding our policies with the collection, use, and
disclosure of Personal Information for anyone using our website.
If you choose to provide us with personal data on our website, we will process that data in line with
what is laid out in this policy. We will not use or share your information with anyone except as
Who we are:
Assuré Medical Limited
Sonas, Quin, Co. Clare, Ireland.
Where do we process data:
Assuré Medical process personal data for the following purpose(s):
Provision of an information booklet.
Direct Marketing – Signing up to be kept informed of news and updates.
Responding to online queries submitted via the website.
The legal basis for this processing is:
Legitimate interests – The website user is expressly requesting an information booklet on
UTIs and requesting feedback via the contact form.
Consent – for the news and updates.
Data we collect:
Information booklet request: Name and e-mail address.
Contact form: Name, e-mail address and a free form comments field which may or may not contain personal data, depending on what you type in. Please do not enter any medical or sensitive personal data in this form.
We provide people with a link to a medical survey, which asks several questions about that person’s experience with UTIs. None of the questions record any personal data that can identify a living person, so the data that is captured does not fall in scope for data protection legislation, as it is considered anonymous.
If any identifiable personal data is entered in response to any of the questions, it will be deleted by our staff before we continue to process the responses. This is to ensure the anonymity of the data.
For updates on the research that we are doing, which the survey data will be supporting, then please visit: www.assuremedicaltech.com
This survey is carried out on a Google Form. The form options have been set so it doesn’t require the respondent to sign-in to a Google Account and email addresses are not collected as part of the form. There is also no recording of a respondents Internet Protocol (IP) address in the form.
The Google Cloud Security details are available here: https://support.google.com/googlecloud/answer/6056693
Links to Other Sites
This site does not address anyone under the age of 18. We do not knowingly collect personally identifiable information from children under 18. In the case we discover that a child under 18 has provided us with personal information, we immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to carry out necessary actions.
We use the data (which can include your communications) to investigate, respond to and resolve complaints (e.g. regarding direct marketing). We do not share personal data with third parties for their direct marketing purposes.
Recipients of the personal data:
We do not share personal data collected on this website with any third parties.
Our legal representatives may receive personal data if we need to seek their advice or defend a legal claim.
Philipa Jane Farley, Pro Privacy, Castletownroche, Co. Cork www.proprivacy.ie
Details of transfers to other countries:
We do not transfer personal data to any other country outside of the European Economic Area (EEA).
Data retention period:
We retain the personal data which we process based on consent, to use for news and updates for up to 2 years. Before this time expires, we may contact you again to ask if you would like to provide consent to remain on the mailing list for another 2 years. If we do not hear back from you within 30 days of that contact, your personal data will be deleted from our systems.
We don’t retain the personal data which we process based on legitimate interest, beyond the time it takes for us to respond to your request.
Cookies are files with a small amount of data that are commonly used as anonymous unique identifiers. These are sent to your browser from the websites that you visit and are stored on your device's internal memory.
We use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out such things as the number of visitors to the various parts of the site. This information is only processed in a way that does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.
We implement security safeguards designed to protect your data, such as HTTPS and data encryption. We regularly monitor our systems for possible vulnerabilities and attacks and take all appropriate technical and organisational measures to keep your personal data safe, ensuring its confidentiality, integrity and availability.
Where necessary we will process personal data provided to us for the purposes of seeking legal advice or other legal purposes.
Also, where we receive a formal request under Article 23 of the General Data Protection Regulation (GDPR) we may be required to disclose personal data of website users to Law Enforcement Authorities, State Customs/Taxation Authorities, or another relevant organisation.
System Logs, Maintenance, and Investigation of Data Security Breaches:
We want to inform you that whenever you use our website, in the case of a security incident we collect what’s called Log Data. This Log Data may include information such as your device’s Internet Protocol (“IP”) address, device name, operating system version, the time and date of your use of the website. This data would be used by our website hosting provider and law enforcement to carry out an investigation into any security breach.
You have the following rights in respect to the personal data that Assuré Medical hold on you. Please contact us at the address above in order to exercise any of these rights:
- The right to be informed
You have the right to receive “fair processing information”.
- The right of access
You have the right to obtain:
- Confirmation of your personal data being processed
- Access to a copy of your personal data
- And any other supplementary information
- The right to rectification
You have the right to have your personal data corrected if it is inaccurate or incomplete
- The right to erasure (includes withdrawal of consent)
You have the right to have your personal data erased, in the following circumstances:
- You withdraw consent.
- The personal data must be deleted to comply with a legal obligation.
- The personal data was unlawfully processed.
- Where the personal data is no longer necessary in relation to the purpose for which it was originally collected.
- Where you object to the processing and there is no superseding legitimate requirement to continue the processing.
- The personal data is processed in relation to the offer of “information society services” to a child.
- The right to restrict processing
You have the right to ‘block’ or suppress processing of personal data
- The right to data portability
You have the right to obtain and reuse their personal data for their own purposes across different services.
- The right to object
You have the right to object to:
- Processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling).
- Direct marketing (including profiling).
- Processing for purposes of scientific/historical research and statistics.
- Rights in relation to automated decision making and profiling
You the right not to be subject to a decision when:
- It is based on automated processing.
- It produces a legal effect or a similarly significant effect on the data subject.
The right to complain:
If you feel that Assuré Medical has not fulfilled its obligations under the Data Protection Act 2018, then you have the right to lodge a complaint with the Data Protection Commission (DPC).
The DPC offers guidance on how to make a complaint here:
Automated decision making, including profiling:
Assuré Medical do not use any automated decision making or profiling.
Updates or Questions