Clinic Logo

Data Processing Agreement

Between MyClinicBooking ("Processor") and the Clinic ("Controller")

1. Purpose

This Data Processing Agreement governs the processing of personal data by MyClinicBooking on behalf of clinics using the platform.

2. Roles

  • Clinic: Data Controller
  • MyClinicBooking: Data Processor

The Clinic determines the purposes and means of processing patient data. MyClinicBooking processes data solely on documented instructions from the Clinic.

3. Categories of Data

Personal data may include:

  • Patient names
  • Contact information
  • Appointment details
  • Practitioner information
  • User account information

4. Processing Activities

MyClinicBooking processes personal data to:

  • Manage appointments
  • Send notifications and reminders
  • Maintain user accounts
  • Provide platform functionality
  • Deliver support services

5. Security Measures

MyClinicBooking shall implement appropriate technical and organizational measures, including:

  • Encryption where appropriate
  • Access controls
  • Authentication mechanisms
  • Secure hosting infrastructure
  • Monitoring and incident management procedures

6. Sub processors

MyClinicBooking may engage trusted sub processors for hosting, email delivery, analytics, support, and infrastructure services.

Appropriate contractual safeguards shall be maintained with all sub processors.

7. Data Subject Rights

MyClinicBooking shall assist Clinics in responding to requests relating to:

  • Access
  • Rectification
  • Erasure
  • Restriction
  • Portability
  • Objection

8. Personal Data Breaches

MyClinicBooking shall notify the Clinic without undue delay after becoming aware of a personal data breach affecting Clinic data.

9. Data Retention and Deletion

Upon termination of services, personal data shall be returned or deleted according to applicable legal and contractual requirements.

10. GDPR Compliance

Both parties agree to comply with applicable data protection legislation, including the GDPR.

11. Ownership of Patient Data

The Clinic retains ownership and control of all patient data and healthcare records processed through the platform.

MyClinicBooking acquires no ownership rights over patient data and processes such information solely for the purpose of providing the contracted services.

Nothing in this Agreement shall transfer ownership of patient information, healthcare records, or clinical data from the Clinic to MyClinicBooking.