Privacy
This page says what we do with your data when you leave us your contact details. It also says what we will do with your patients' data once your practice uses Docelya. These are two different situations and the law does not give us the same role in each.
Last updated :
Two situations not to be confused
When you ask to be called back on this site, we are the ones who decide why and how your contact details are processed. The GDPR then calls us the data controller.
When your practice uses Docelya, your patients' data will remain yours. You will decide what it is used for and we will only process it on your instructions. The GDPR then calls us the data processor and this relationship is governed by a written contract provided for in its article 28.
Who is responsible
KubeOptix, whose registered office is at Rue Openveld 48, 1082 Berchem-Sainte-Agathe, Belgique, company number BE 1005.229.905.
The data controller is KubeOptix, represented by Ilyes Barouni, director.
For any question about your data or to exercise your rights, write to support@docelya.com.
What we collect on this site
Only what you enter yourself in the call-back form:
- your telephone number
- your professional email address
- the time of day when you prefer to be called
- your practice setting and your speciality
Nothing else. We do not ask for your full name, your practice address or any health data.
Why we collect it
To call you back and to tell you when we open. Nothing else.
The legal basis is your consent within the meaning of article 6.1.a of the GDPR. You give it by ticking the box on the form and you can withdraw it at any time without having to give a reason.
How long we keep it
Twelve months after your request or until you ask us to delete it if that is sooner. After that period it is erased.
If your practice becomes a customer, your contact details move into the contractual relationship and then follow the retention periods set out in the contract.
Where it is hosted and who has access
In the European Union, on infrastructure we run ourselves. It is never transferred outside the Union.
Only the people at KubeOptix who call you back have access to it. We do not sell it, rent it out or share it with any commercial partner.
Audience measurement
We measure traffic on this site with Matomo, which we host ourselves in the European Union. It is configured without cookies and collects no data that could identify you.
That is why this site imposes no consent banner on you. There is nothing to accept because there is nothing to place on your device.
Your patients' data
When your practice uses Docelya, your patients' data will be processed on your behalf and on your instructions alone. You will remain the data controller and we will be the data processor.
A data processing agreement compliant with article 28 of the GDPR will govern this relationship. It will be signed before any go-live and will set out the purposes, the retention periods, the security measures and what becomes of the data at the end of the contract.
Each practice's data is kept separate from that of every other practice and hosted in the European Union. It can be exported at any time: reversibility is contractual, not a favour.
Docelya directs the patient towards an appointment. It makes no diagnosis, performs no triage and assesses no urgency. It therefore processes no health data within the meaning of article 9 of the GDPR in the course of appointment booking.
Our assistants are automated
Docelya's conversational assistant always states that it is automated at the start of every exchange and hands over to a person as soon as the patient asks. This information is required under article 50 of the EU Artificial Intelligence Act.
Your rights
The GDPR gives you the right to:
- know what data we hold about you and obtain a copy of it
- have it corrected if it is inaccurate
- have it erased
- object to its processing or ask for that processing to be restricted
- receive it in a reusable format
- withdraw your consent at any time
Write to support@docelya.com. We reply within one month. If our reply does not satisfy you, you can lodge a complaint with the Belgian Data Protection Authority, rue de la Presse 35, 1000 Brussels.