Privacy Policy for End-Users of the eIFU Platform

1. Introduction

Welcome to the eIFU Platform, operated by dytab GmbH ("we," "our," or "us"). This Privacy Policy applies to end-users who access or use the electronic Instructions for Use (eIFU) websites hosted by us on behalf of our clients (the manufacturers of medical devices).

We act as a service provider to our clients. This means that while you may interact directly with the eIFU Platform, the data we process is managed and controlled by our clients. We handle data only to technically operate the eIFU Platform on behalf of our clients. In the case of print requests, the address information you provide is stored on our platform so that our clients can manage and fulfill the request. We do not use this data for our own purposes.

2. Information We Collect

As part of providing the eIFU service to our clients, we may process the following types of information when you interact with the platform:

2.1. Access Data:

• IP address, browser type, device information, and access times.
• This data is collected automatically for technical operation, troubleshooting, and ensuring the availability of the platform.

2.2. Print Requests:

If you request a printed copy of an IFU (Instruction for Use) through the platform, we will collect and process:

• Name
• Postal address
• Other delivery-related details you provide

This data is used solely to fulfill your print request and is shared with our client (the medical device manufacturer) who is responsible for the content and delivery.

3. How We Use Your Information

We process your personal data exclusively for the following purposes:

• To provide access to the eIFU Platform.
• To process your request for a printed IFU.
• To ensure the secure and reliable operation of the service.

We do not use your data for marketing, profiling, or any other purpose beyond delivering the requested services on behalf of our clients.

4. Sharing of Information

Your information may be shared only in the following cases:

• With Our Clients (Medical Device Manufacturers): Necessary data (e.g., your address for print requests) is provided to our clients so they can fulfill their obligations.
• Service Providers: We may use third-party providers (e.g., IT hosting) strictly for the purpose of processing your request.
• Legal Requirements: We may disclose data if required to comply with applicable laws or to protect rights, safety, or property.

5. Data Retention

We retain your personal data only as long as necessary to provide the requested service (e.g., fulfilling your print request) and in line with our clients' instructions.

6. Security Measures

We apply technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. However, no method of internet transmission or electronic storage is 100% secure.

7. Data Controller

For the processing of your personal data, the primary Data Controller is the medical device manufacturer whose eIFU website you are accessing. dytab GmbH acts as a processor on their behalf. If you have questions about the processing of your data, you should contact the respective manufacturer directly.

8. Your Rights

Depending on your location (e.g., under GDPR in the EU/EEA), you may have the right to:

• Access your personal data
• Request correction or deletion
• Restrict processing
• Object to processing
• Data portability

Please contact the medical device manufacturer directly to exercise your rights. We will support them in responding to your request as required.

9. Changes to this Policy

We may update this Privacy Policy to reflect changes in legal, technical, or operational requirements. Updates will be published on the respective eIFU website with a revised date.

10. Contact

If you have questions about this Privacy Policy, you may contact us at:

dytab GmbH
Email: contact@meddevo.com

For questions about the handling of your data related to a specific medical device, please contact the responsible manufacturer directly.