Privacy Policy

We design and develop our site to minimise the amount of information we collect about you and to collect only data required for us to provide and improve our services.

We may collect and process:

• Your computer’s IP address
• Your browser type
• The pages you visit on our website
• The time and date of your visit
• The time spent on each page

Supplying this information is not mandatory and collection of this information is based on your acceptance of analytics cookies.

We may ask for:

• Details of the traveller’s journey and travel documentation
• Departure location
• Destination
• Nationality
• Travel document type
• Travel document issuing authority
• Travel document expiry date
• Current residency
• Current Covid-19 vaccination status

When a healthcare or wellness service is booked or managed through Health4Travel, we require the Patient's name, email address and phone number. Where relevant, you may also provide optional insurer, policy number and case number information. We may in future collect other information reasonably required by the selected Provider to arrange or fulfil the Booking.

This booking and administrative information, including the selected service and Provider, appointment details and related information, may itself constitute or reveal data concerning health under the GDPR, even where it does not contain a diagnosis, treatment record or other clinical information.

Health4Travel does not normally require clinical records, diagnoses, treatment notes, prescriptions, images or test results as part of the standard booking process. Clinical information created in connection with the healthcare service is normally handled by the relevant healthcare Provider under its own legal and professional responsibilities.

We ask for:

• Email address
• Mobile phone number
• Or information supplied through an available single sign-on service

We collect, process, store and disclose information for purposes including:

• contacting you about bookings and appointments made through our website or digital service
• performing a Covid-19 or other travel-requirements check
• creating and administering a Health4Travel user account
• providing access to and use of our website and associated applications
• communicating with you about your account or support inquiries
• internal record-keeping and administration
• analytics, market research and business development, including improvement of our website and applications
• compliance with legal obligations and resolution of disputes

We process personal data only where we have an applicable lawful basis under Article 6 GDPR. Depending on the processing activity, this may include processing necessary to provide the Health4Travel service requested by you, compliance with a legal obligation, our legitimate interests where those interests are not overridden by your rights, or your consent where applicable.

Where information processed in connection with a Booking constitutes or reveals data concerning health, Health4Travel also requires an applicable condition under Article 9(2) GDPR.

The Article 9 condition depends on how the Booking is made and the purpose for which the information is processed. This may include your explicit consent under Article 9(2)(a) where Health4Travel asks you directly to provide or authorise the processing of health-related Booking information. Other Article 9 conditions may apply where a Booking is arranged through an insurer, assistance company, healthcare Provider or other authorised organisation, depending on the circumstances and applicable law.

Where Health4Travel relies on explicit consent, we will request that consent before carrying out the processing that requires it. You may withdraw that consent at any time, without affecting processing already lawfully carried out before withdrawal.

We retain information for our records and to facilitate support where required, and we use reasonable security measures designed to prevent loss, theft, unauthorised access, disclosure, copying, use or modification. No electronic transmission or storage method can be guaranteed to be completely secure.

Retention varies according to the type and purpose of the information. Account information may be retained while an account remains active, and an account that has not been used for 60 months may be deleted.

Information gathered by Google Analytics may be retained for up to 48 months. Information gathered during a Health4Travel check may be retained for 12 months.

We may request consent to process data for specific purposes. You have the right to withdraw consent at any time, subject to processing that is required on another lawful basis or by law.

You may ask us to restrict the collection or use of your personal information. Contact Health4Travel if you wish to exercise this right. We will explain how a restriction affects your ability to use our website, products or services where relevant.

You may request details of personal information that we hold about you and may request a copy of that information.

You may request erasure of personal information we hold about you. We will comply unless retention is required by law or necessary to protect the rights of others or meet another applicable legal requirement. For example, payment and accounting information may need to be retained under bookkeeping rules.

If you believe information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, contact Health4Travel and we will take reasonable steps to correct it.

We will comply with applicable laws regarding personal-data breaches.

If you believe we have breached applicable data-protection law, you may contact Health4Travel with details of the alleged breach. We will investigate and respond. You also have the right to contact a competent regulatory body or data-protection authority.

A cookie is a small piece of data stored on your device and accessed when you visit the site. We use cookies to enable site functionality and to understand how the site is used.

Some cookies are required for essential site functions such as navigation, account login and remembering choices such as analytics-cookie consent.

We use analytics tools for aggregated website traffic analysis, including information about pages viewed and time spent on them, to improve user experience and understand site effectiveness.

We do not trade, sell or rent personal information. We may disclose information where required by government or law-enforcement requests, legal proceedings, or to establish, exercise or defend legal rights. Third-party service providers may process information to support Health4Travel services, including infrastructure and hosting providers. We require providers processing information on our behalf to protect its security and confidentiality.

Information may be processed in several locations depending on the systems and service providers involved. Health4Travel uses cloud infrastructure in Frankfurt and may use processing locations outside the European Economic Area where appropriate safeguards and applicable legal requirements are met. Information may also need to be transferred internationally where requested services or selected service providers are located outside the EEA.

Health4Travel websites and subdomains may link to external sites not operated by Health4Travel. We do not control the content or privacy practices of independent third-party sites.

Health4Travel may update this policy to reflect changes in its services, systems, legal obligations or privacy practices. Significant changes may be communicated through the website or other appropriate means.

Current public privacy-policy URL: https://health4travel.com/privacy-policy Current public contact: info@health4travel.com