Privacy Policy

SnapInHIPAA respects your right to privacy. This policy summarizes what personal information we may collect, how we may use this information, and other important topics relating to your privacy and data protection.

It is SnapInHIPAA policy to comply with all applicable privacy and data protection laws. This commitment reflects the value we place on earning and keeping the trust of our customers, business partners and others who share their personal information with us.

This Policy applies to all Internet sites and mobile applications operated by or on behalf of SnapInHIPAA and includes SnapInHIPAA entities worldwide (each a “SnapInHIPAA Internet Site or App”). It also applies to personal information SnapInHIPAA may otherwise collect: (i) through our products and services; (ii) when you interact with us by means other than a SnapInHIPAA Internet Site or App, for example, in person, by telephone, or at a trade show or training; and (iii) from our customers, distributors, suppliers, vendors, and other business partners (collectively “Business Partners”).

However, different SnapInHIPAA Internet Sites, Apps, products, and services have different purposes and features. If additional or different disclosures are required for a specific SnapInHIPAA Internet Site, App, product, or service, then we provide those disclosures separately on, or with, the relevant Internet Site, App, product, or service. Each such specific privacy disclosure, policy, or statement (“Specific Privacy Statement”) supplements and amends this Policy.

General Principles of SnapInHIPAA’s Collection, Use and Disclosure of Personal Information

To the extent required by applicable law, whenever SnapInHIPAA collects personal information, SnapInHIPAA will:

• provide timely and appropriate notice to you about our data practices;
• collect your personal information only for specified and legitimate purposes. The information we collect will be relevant, adequate and not excessive for the purposes for which it is collected;
• process your personal information in a manner consistent with the purposes for which it was originally collected or to which you have subsequently consented;
• take commercially reasonable steps to ensure that your personal information is reliable for its intended use, accurate, complete, and, where necessary, kept up-to-date;
• not use your personal information for direct marketing purposes without giving you an opportunity to “opt-out”; and
• take appropriate measures, by contract or otherwise, to provide adequate protection for personal information that is disclosed to a third party or transferred to another country, including transfers within SnapInHIPAA.

Personal Information SnapInHIPAA Collects

SnapInHIPAA collects the following types of personal information:

• Information You Provide

SnapInHIPAA collects personal information you provide us, which may include: (i) contact information, such as your name, company name, job title, address, e-mail address, and phone number; (ii) additional information about you to help us get to know you better, such as your gender, age, date of birth, nationality, professional associations and registration numbers, information about how you use our products, and demographic information; (iii) comments, questions, requests and orders you may make; (iv) financial information needed to process payments if you make purchases, such as credit card or account information or tax identification number; (v) log-in information, including, if applicable, social media account information for login purposes; and (vi) information about your preferences, such as your preferred methods of communication and product types in which you are interested.

• Information Automatically Gathered from Your Device

Device and browser information. SnapInHIPAA may collect technical information about your device, such as device type, browser type, IP address, operating system, and device identifier. SnapInHIPAA collects this information automatically from your device and web browser through cookies and similar technologies.

Information about how you interact with us. SnapInHIPAA may collect technical data about your usage of SnapInHIPAA Internet Sites and Apps and how you interact with our digital advertisements and promotions, such as content viewed or downloaded, features used, links clicked, SnapInHIPAA promotional emails opened, and dates and times of interactions. SnapInHIPAA collects this information using cookies and similar technologies.

Location information. SnapInHIPAA may collect location information, including precise real-time location information from your device and imprecise location information derived from, for example, your IP address or postal code. SnapInHIPAA Apps will NOT access precise-real time location information from your device unless you grant permission to do so.

• Cookies and Similar Technologies:

A “cookie” is a file of information placed on your device when you visit a website. Cookies and similar technologies can enhance your user experience by saving your preferences, personalizing your online experience, holding items in your shopping cart, and sometimes providing you with advertising which is tailored to your interests.

SnapInHIPAA Internet Sites use “session cookies.” A session cookie does not identify you personally and expires after you close your browser. For example, when you use the SnapInHIPAA Product Catalog, we place a session cookie to note what pages you have viewed. We can use this information to provide you recommendations of other products that may be of interest.

SnapInHIPAA Internet Sites also use “persistent cookies.” These cookies do not expire when you close your browser. Persistent cookies stay on your computer until you delete them or they expire. By assigning your computer a unique identifier, we are able to create a database of your previous choices and preferences which can be provided by us automatically, saving you time and effort on future visits. For example, after you make a purchase, if you decide to make another purchase, your shipping address may have been retained and will only need to be confirmed.

Certain countries require your consent to the use of cookies when you visit SnapInHIPAA Internet Sites. If you access a SnapInHIPAA Internet Site for one of these countries, you will be presented with information regarding your options, including the option to accept or reject certain categories of cookies. You will be able to change these settings on subsequent visits. Please note that you will not be able to opt out of receiving certain cookies that are strictly necessary for the delivery of a service requested by you.

At any time when visiting a SnapInHIPAA Internet Site for one of these countries, clicking on the “Cookie Preferences” link at the bottom of each page allows you to access information on cookies and change your settings.

Although you are not required to accept cookies when you visit a SnapInHIPAA Internet Site, you may be unable to use all of the functionality of the site if you reject certain cookies.

In addition, your browser may allow you to adjust settings to accept or reject cookies, or to alert you when a cookie is placed on your computer.

Analytics and Advertising. SnapInHIPAA uses third-party analytics services to better understand how users engage with SnapInHIPAA Internet Sites and Apps, including services provided by Google and Adobe. Please use the following links for more information about how Google and Adobe collect and use data when you visit their partners’ websites or apps:

www.google.com/policies/privacy/partners/

SnapInHIPAA also uses third-party advertising services to provide advertisements for SnapInHIPAA products or services that may be of interest to you when you visit websites or other online services.

SnapInHIPAA allows selected third parties, including these analytics and advertising services, to place cookies on our Internet Sites. These third parties may collect information about your online activities over time and across third-party websites.

These third parties may be members of industry self-regulatory groups such as the Network Advertising Initiative (NAI) and Digital Advertising Alliance (DAA). The websites for these groups provide more information on interest-based online advertising and how to opt out of receiving interest-based online ads from participating companies.

Do Not Track Browser Settings. Some browsers may transmit “Do Not Track” (“DNT”) signals to the websites you visit. Because there is not common agreement about how to interpret DNT signals, SnapInHIPAA currently does not take action in response to them.

• Information from Business Partners and other Third Parties

SnapInHIPAA collects personal information through our Business Partners. This information may include contact information, such as name, company name, job title, address, e-mail address, and phone number.

SnapInHIPAA may also obtain personal information from other third-party sources, including publicly and commercially available sources. We may combine the information we receive from our Business Partners and other third-party sources with information that we collect from you or your device, as described above.

You have choices about the personal information you provide SnapInHIPAA. You may choose not to provide information that we request, but if you do so, we may not be able to provide you a relevant service or a particular feature for a SnapInHIPAA Internet Site, App, or product.

How SnapInHIPAA Uses Your Personal Information

SnapInHIPAA may use your personal information to:

Develop and manage our relationships with you and our Business Partners. This may include: (i) delivering services or carrying out transactions that you or our Business Partners have requested; (ii) providing information about SnapInHIPAA products, services, and transactions, and advertisements, that may be of interest to you; (iii) providing you and our Business Partners a more consistent experience in interacting with SnapInHIPAA, including by learning more about you and how you use and interact with SnapInHIPAA Internet Sites, Apps, products, and services; and (iv) planning, managing, and performing under our contractual relationships with our Business Partners.

Communicate with you or your company. This may include: (i) informing you of SnapInHIPAA products, services, and promotional activities that may be of interest to you or your company; (ii) providing information about relevant SnapInHIPAA products, services, and transactions, including, for example, pricing information, technical data, invoice, shipping, or production information, warranty or recall information, or information about product or service improvements; (iii) responding to questions or inquiries that you make, including customer service requests; and (iv) inviting you to participate in, or informing you of the results of, customer satisfaction or market research surveys.

Provide and improve our Internet Sites, Apps, products, and services. This may include: (i) customizing them to your preferences or interests, making them more compatible with your technology, or otherwise making them easier to use; (ii) maintaining the security of and otherwise protecting them; and (iii) and developing new SnapInHIPAA Internet Sites, Apps, products and services.

Address legal issues. This may include: (i) complying with our obligations to retain certain business records for minimum retention periods; (ii) establishing, exercising, or defending legal claims; (iii) complying with laws, regulations, court orders, or other legal process; (iv) detecting, preventing, and responding to fraud, intellectual property infringement, violation of our contracts or agreements, violations of law, or other misuse of SnapInHIPAA Internet Sites, Apps, products or services; and (v) protecting SnapInHIPAA’s rights or property, or yours or others’ health, safety, welfare, rights, or property.

SnapInHIPAA may also use your personal information for other uses consistent with the context in which the information was collected or with your consent.

SnapInHIPAA may anonymize or aggregate any of the information we collect and use it for any purpose, including for research and product-development purposes. Such information will not identify you individually.

When SnapInHIPAA May Share Your Personal Information

SnapInHIPAA will not disclose your personal information except as described here:

• SnapInHIPAA may share your personal information with other SnapInHIPAA entities, including those in different countries. When we do so, these other SnapInHIPAA entities will use your information in a manner consistent with this Policy, any applicable Specific Privacy Statements, and all applicable privacy and data protection laws.
• SnapInHIPAA may also share your personal information with third parties we hire to perform support services for us. These third parties are required to use the personal information we share with them only to perform services on our behalf and to treat your personal information in compliance with all applicable privacy and data protection laws.
• In some cases, SnapInHIPAA may share your personal information with third parties who partner with us to provide products and services to our customers, such as distributors. If so, we will require our Business Partners to use that information in a manner consistent with this Policy, any applicable Specific Privacy Statements, and all applicable privacy and data protection laws.
• SnapInHIPAA may share your personal information with third parties when we have a good faith belief that disclosure is necessary: (i) to comply with a law, regulation, court order, or other legal process; (ii) to detect, prevent, and respond to fraud, intellectual property infringement, violation of our contracts or agreements, violation of law, or other misuse of SnapInHIPAA Internet Sites, Apps, products or services; (iii) to protect SnapInHIPAA rights or property or yours or others’ health, safety, welfare, rights, or property; or (iv) under similar circumstances. If such an event occurs, we will take appropriate steps to protect your personal information.
• SnapInHIPAA may share your personal information with third parties in connection with the sale, purchase, merger, reorganization, liquidation or dissolution of SnapInHIPAA or a SnapInHIPAA business unit, or under similar circumstances. If such an event occurs, we will take appropriate steps to protect your personal information.
• SnapInHIPAA may share your information with your permission or at your request

SnapInHIPAA may share anonymized or aggregated information internally and with third parties for any purpose. Such information will not identify you individually.

Security of Your Personal Information

Your personal information will generally be stored in SnapInHIPAA databases or databases maintained by our service providers. Many of these databases are stored on servers located in the United States. SnapInHIPAA takes appropriate measures, by contract or otherwise, to provide adequate protection for personal information that is disclosed to a third party or transferred to another country, including transfers within SnapInHIPAA.

SnapInHIPAA maintains reasonable safeguards to protect the confidentiality, security and integrity of your personal information. Although we use security measures to help protect your personal information against unauthorized disclosure, misuse, or alteration, as is the case with all computer networks linked to the Internet, we cannot guarantee the security of information provided over the Internet and will not be responsible for breaches of security beyond our reasonable control.

Links to Third Party Internet Sites and Plugins

SnapInHIPAA Internet Sites and Apps may contain links to websites or mobile apps that are not operated by SnapInHIPAA and plugins from social media platforms and other third parties. An example of a social media plugin is the Facebook “Like” button. We provide these links and plugins as a service and do not imply any endorsement of the activities or content of the related websites, apps, or social media platforms, nor any association with their operators. To learn about the information collected by these third-party websites, apps, and plugins, please visit their privacy policies. We encourage you to review the privacy policies for the websites, apps, and social media platforms you visit before using them or providing personal information.

Access to Your Personal Information

You may review, correct and update personal information you provide to us.

Retention of Your Personal Information

How long we keep your personal information will vary and will depend on the purpose and use of information collected. There are legal requirements that we keep some types of data for specific periods. Otherwise, we will retain it for no longer than is necessary for the purposes for which the data was collected.

Children

Most SnapInHIPAA Internet Sites and Apps are not intended for children under 13 years of age. SnapInHIPAA will not knowingly solicit or collect personal information from or about children under 13, or the relevant minimum age under applicable local legal requirements, except as permitted under applicable law.

SnapInHIPAA B2B Services

Some SnapInHIPAA products, services, Internet Sites, and Apps are intended for use by our Business Partners, including our business customers (“SnapInHIPAA B2B Services”), and your use of them is administered by your company. In such cases, authorized personnel at your company may have access to your personal information collected by these SnapInHIPAA B2B Services, and your company may have policies applicable to your use of them. SnapInHIPAA is not responsible for our Business Partners’ policies and practices related to data privacy and security, which may be different from this Privacy Policy and any applicable Specific Privacy Statements. If your company is administering your use of a SnapInHIPAA B2B Service, please contact your company with any privacy questions related to your use of that SnapInHIPAA B2B Service. If there is a conflict between this Policy and an agreement between SnapInHIPAA and its Business Partner for a SnapInHIPAA B2B Service, then the agreement between SnapInHIPAA and its Business Partner will control.

Additional Information for EU Residents

SnapInHIPAA’s lawful basis for processing your personal data

• The lawful basis for SnapInHIPAA’s processing of your personal data will depend on the purposes of the processing. For most personal data processing activities covered by this Privacy Policy, the lawful basis is that the processing is necessary for SnapInHIPAA’s legitimate business interests. Where we process personal data in relation to a contract, or a potential contract, with you, the lawful basis is that the processing is necessary for the performance of our contract with you or to take steps at your request prior to entering into a contract. When we are required to share personal data with law enforcement agencies or other governmental bodies, we do so on the basis that we are under a legal obligation to do so. We will also use consent as the legal basis where we deem appropriate or to the extent required by applicable law, for example, before we collect precise location data from your mobile device.

Your individual rights

• In accordance with the applicable laws in the European Union, you have the following rights with respect to your personal data, which apply differently in different circumstances: right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability and right to object to processing. Most of these rights are not absolute. Below we describe these rights in more detail and provide information on how you can exercise them. If you make a request to exercise your rights, we will respond within one month, but have the right to extend this period by two additional months, where necessary. If we extend the response period, we will let you know within one month from your request.

Right of Access. You have the right to ask SnapInHIPAA to confirm whether we process your personal data. If we do, you have the right to request access to your personal data that we process and the following information:  the purposes of the processing; (ii) the categories of personal data we process; (iii) the recipients or categories of recipients of your personal data; (iv) the envisaged retention period of the data where possible, or the criteria we use to determine the retention period; (v) your right to request rectification or erasure of your personal data, or restriction of the processing of such data; (vi) your right to file a complaint with a supervisory authority; (vii) if we have not collected the data from you, any information we have available about the source of the data; and (viii) whether we use your personal data to make any automated decisions that have legal or other similar significant effects on you.

• Right to rectification. You have the right to have SnapInHIPAA correct your personal data if they are inaccurate. Taking into account the purposes of the processing, you may also have the right to have incomplete personal data about you completed, including by providing a supplementary statement to SnapInHIPAA.
• Right to object to processing for SnapInHIPAA’s legitimate business interests. You have the right to object to SnapInHIPAA processing your personal data when that data is processed on the basis of SnapInHIPAA’s legitimate business interests. SnapInHIPAA will honor your objection and stop processing the relevant personal data unless:  we have compelling legitimate grounds for the processing that override your interests, rights, and freedoms; or (ii) we need to continue processing your personal data to establish, exercise, or defend a legal claim.
• Right to object to processing for direct marketing. If SnapInHIPAA processes your personal data for direct marketing purposes, you have the right to object to this processing. If you exercise this right, SnapInHIPAA will stop processing your personal data for direct marketing purposes.
• Right to restrict processing. You have the right to request that SnapInHIPAA restrict the processing our your personal data in the following circumstances:  for the period of time SnapInHIPAA needs to verify the accuracy of your personal data when you contest its accuracy; (ii) when the processing of your personal data is unlawful and you oppose the erasure of the data, and instead request that SnapInHIPAA restrict the use of the data; (iii) when SnapInHIPAA no longer needs your personal data for the purposes of processing, but you need the data to establish, exercise, or defend a legal claim; or (iv) for the period of time SnapInHIPAA needs to verify if it has compelling legitimate grounds for processing that override your interests, rights, and freedoms when you object to the processing of your personal data for SnapInHIPAA’s legitimate business interests.
• If following your request SnapInHIPAA restricts the processing of your personal data, SnapInHIPAA will store your data, and otherwise process it only with:  your consent; (ii) to establish, exercise, or defend a legal claim; (iii) to protect the rights of another natural or legal person; or (iv) for reasons of important public interest of the European Union or a Member State. SnapInHIPAA will also inform you before lifting the restriction of processing.
• Right to erasure. The right to erasure is also called the “right to be forgotten.” You may ask SnapInHIPAA to delete your personal data. This right not absolute. SnapInHIPAA is required to delete your personal data upon your request only in the following circumstances:  your personal data is no longer necessary for the purposes for which SnapInHIPAA collected or processed them; (ii) if SnapInHIPAA processes your personal data on the basis of consent, you withdraw your consent, and no other legal ground exists for SnapInHIPAA to continue processing your personal data; (iii) if SnapInHIPAA processes your personal data for its legitimate business interests, you object to the processing, and there are no overriding legitimate grounds for SnapInHIPAA to continue processing your personal data; (iv) if SnapInHIPAA has processed your personal data unlawfully; or (v) the personal data must be erased to comply with a legal obligation under European Union or Member State law to which SnapInHIPAA is subject.
• SnapInHIPAA is not required to erase your personal data to the extent that SnapInHIPAA needs to process them to:  exercise its right of freedom of expression and information; (ii) comply with a legal obligation under European Union or Member State law to which SnapInHIPAA is subject; or (iii) to establish, exercise, or defend a legal claim.
• Right to data portability: You have the right to receive personal data you provided to SnapInHIPAA when:  the processing of the data is based on your consent or is necessary for the performance of a contract between you and SnapInHIPAA; (ii) SnapInHIPAA’s processing of your personal data is carried out by automated means; and (iii) complying with your request will not adversely affect the rights and freedoms of others.
• If you have the right to receive such personal data and request that SnapInHIPAA provide it, SnapInHIPAA will provide it to you in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint with a supervisory authority. SnapInHIPAA will use its best efforts to address and settle any requests or complaints brought to its attention. In addition, you have the right to approach the competent data protection authority with requests or complaints. This can be the supervisory authority in the country or federal state where you live.