Medytrak is a data collection service used by Health Care Professionals (e.g., Doctor, Consultant, Dentist or Health Care Institutions) to collect data from their patients relating to specific treatment plans.Your Health Care Professional will use this data to accurately monitor and record your symptoms, treatment and additional metrics relating to your general wellbeing
The information below relates solely to people using the Medytrak services. Our clients, employees and website users will be provided with separate data protection information notices.
Data controller
Your Health Care Professional is the data controller for the data processed through the Medytrak Service.
Who are Medytrak?
Medytrak is the trading name for Medicare Tags Ltd. We are an Irish based company and provide medical data collection services for Health Care Professionals all over the world. We are the data processor for your Health Care Professional.
How does the Medytrak app work?
As part of the on-boarding process, your Health Care Professional will issue you with one of the following:
- NFC card (Unique ID printed on reverse of card).
- A Unique ID (auto generated at your Health Care Professional’s practice during on-boarding process). This may be relayed verbally to you and/or by SMS to your mobile device.
It is the responsibility of your Health Care Professional to note the Unique ID, either from the card, or auto generated, and to associate this with their practice patient records. Medytrak only knows the Unique ID and does not have access to the medical records that are held at the Health Care Professional’s practice.
Following the initial on-boarding process, you will submit question Forms using the appropriate method on a regular / frequent basis. The interval of these submissions will be determined by your Health Care Professional. Some Health Care Professionals may require that you complete a form submission daily.
Your Health Care Professional will be provided with real-time updates as you submit data. The Health Care Professional may use this information to monitor your treatment plan and may contact you if they need additional information or wish to make an intervention in your treatment plan.
What data does Medytrak use?
Medytrak may use one of more of the following data items to identify you:
- Unique ID
- email address
- mobile telephone number
Medytrak collects the following data each time you make a Medytrak Service Submission. This data may be used by your Health Care Professional to monitor your treatment plan:
- Unique ID
- IP address
- Date and time of submission
- Treatment data as determined by your Health Care Professional e.g. consumption of medication, pain levels, sleep patterns, feelings of anxiety etc.
Medytrak does not provide your data to medical researchers at any time. Your Health Care Professional will have information about whether they intend to use the data for their own medical research and assist you with any queries.Medytrak will use aggregated data for billing and financial purposes as part of its contract with your Health Care Professional.
Medytrak may use your personal data when we believe it is necessary in order to protect ourselves, defend ourselves against claims, investigate and protect ourselves from fraud, protect the security of our services and protect the property and rights of Medytrak.
What are the lawful bases for data processing?
Medytrak is processing your personal data on behalf of your Health Care Professional. We have a contract with your Health Care Professional that controls the data processing. We have no direct relationship with you.
Your Health Care Professional is responsible for determining the lawful basis used to collect your personal data. It is likely they may be using one of the following lawful bases to process your general data:
- Consent – you have consented to having your data processed, or
- Contract – you and your Health Care Professional have a contract.
Other lawful bases are available and your Health Care Professional can confirm which one they are relying on.Medical personal data is considered a special category of personal data in the European Union. Your Health Care Professional can process your medical data because:
- Processing is necessary for the purposes of preventive or occupational medicine or medical diagnosis, or
- You have given your explicit consent to the processing.
Again, other lawful bases are available and your Health Care Professional can confirm which basis they are relying on.If your Health Care Professional used consent to collect either your data or sensitive personal data, then you have the right to withdraw that consent. You will need to contact your Health Care Professional to revoke your consent.
Medytrak use personal data and aggregated data for billing, financial and protection purposes, in our legitimate interest to provide the Medytrak services to your Health Care Professional.
What data do you process about children?
Medytrak can be used by your Health Care Professional to collect data about a child’s treatment plan. The data processed by Medytrak does not differentiate between adults and children.
Security measures
We have a range of secure processes and technologies in place to prevent unauthorised access to the data. These include:
- Secure login facilities through emails/passwords
- Two factor verification
Our security processes are regularly reviewed and updated. While Medytrak tries to protect your data and always keep it confidential, we cannot absolutely guarantee its security. You should keep any cards issued to you by your Health Care Professional securely and these cards should be destroyed or returned to your Health Care Professional when no longer required.
Who processes my data?
Medytrak uses external suppliers to make our services work, including data collection, storage, sending messages and analytics.
We will store your data securely in the cloud, using data centres in the European Union.
Who does Medytrak share my data with?
Your Health Care Professional is provided with access to the medical data via the Unique ID.
We do not expect to share personal data with third parties, unless it is by law deemed necessary to do so.
How long we hold your personal data for?
Your Health Care Professional, as data controller, determines how long your medical data will be retained in Medytrak.
What are my data rights?
Your Health Care Professional is the data controller and you will need to contact them first if you wish to invoke your data rights. You should refer to your Health Care Professional’s data protection information notice, privacy statement and other information provided to you.
The rights that you can request via your Health Care Professional may include:
- Confirmation whether or not personal data concerning you is being processed,
- Request a copy of your personal data,
- Request a copy of your data in a commonly used and machine-readable format,
- Request rectification of any inaccuracies in your data,
- Request erasure of your personal data,
- Object to the processing of your data,
- Request a restriction of processing of your data.
You have a right in the European Union to complain to the Supervisory Authority where your Health Care Professional is based.
Medytrak are based in Ireland and our Supervisory Authority is the Irish Data Protection Commission. Their contact information can be found at https://forms.dataprotection.ie/contact.
Data Protection Officer
Please refer to your Health Care Professional’s privacy statement for information about their Data Protection Officer and how to contact them.
You can contact the Medytrak’s Data Protection Officer for data protection information at DPO@medytrak.net
Changes to this Data Protection Notice
This Data Protection Information Notice may change from time to time. The changes will be available here.Version 1.0 Data protection information notice – originally published 28 July 2022.
