Privacy policy
This policy covers this website. How ClinicAll processes patient calls for practices is described on the security page and in each practice’s data processing agreement.
Who is responsible
EXIGE SARL, Luxembourg, which operates ClinicAll under the AInnovate brand, is the controller for the data described here. Contact details are in the legal notice.
Booking a call
When you book a call we collect your name, email address, practice name, the language you prefer, the time you choose and, if you give it, your phone number.
These details are saved as an event in our Google calendar and are used only to hold the call and follow up on it. The legal basis is taking steps at your request before a possible contract (Art. 6(1)(b) GDPR).
We keep them while we are in contact about the call and delete them within 24 months of our last contact.
Protecting the booking form
Cloudflare Turnstile checks that the form is used by a person; Cloudflare processes technical data from your browser for this. To limit abuse we keep a hashed form of your IP address for 24 hours. The legal basis is our legitimate interest in keeping the form usable (Art. 6(1)(f) GDPR).
Analytics and cookies
We set no advertising or tracking cookies. We use Cloudflare Web Analytics, which counts page views without cookies or other storage in your browser.
Our hosting provider processes your IP address to deliver pages, and may set strictly necessary security cookies to protect the site from attacks. The legal basis is our legitimate interest in running and securing the site (Art. 6(1)(f) GDPR).
If you write to us, we use your message and address to reply, and keep the correspondence while we are in contact and at most 24 months after our last contact. The legal basis is our legitimate interest in answering you (Art. 6(1)(f) GDPR), or steps before a contract when you ask for a quote (Art. 6(1)(b) GDPR).
Who else processes it
Google (calendar and email) and Cloudflare (hosting, form protection and analytics) process this data for us. Both are based in the United States; transfers rely on the EU-U.S. Data Privacy Framework and Standard Contractual Clauses. We do not sell data or use it for advertising.
Your rights
You can ask for access to your data, its correction or deletion, a copy in a portable format, or restrict or object to its processing. Write to us at the address in the legal notice.
You can also complain to the Luxembourg data protection authority, the Commission nationale pour la protection des données (CNPD), or to the authority where you live.
Last updated: