Privacy Notice for Chatbot (Web App and WhatsApp)
1. Introduction
This Privacy Notice applies to users interacting with our chatbot through both the web app and WhatsApp. It explains how we collect, use, and protect your personal data across these channels. We are committed to ensuring that your information is handled responsibly and in compliance with GDPR.
2. Data Collection
Web App: We collect non-personal data, such as usage data and cookies, to improve the chatbot’s functionality and user experience.
WhatsApp: We collect personal data, including your phone number, handle, and chat content, to maintain and facilitate conversations.
3. Purpose of Data Processing
Web App: Data is processed to enhance the chatbot’s performance and user experience.
WhatsApp: Personal data is processed to sustain conversations, provide information about RSV, and respond to your inquiries.
4. Legal Basis for Processing
Web App: We process non-personal data based on our legitimate interest in improving the functionality and performance of the web app.
WhatsApp: The legal basis for processing your personal data is your explicit consent, which you provide by interacting with the chatbot.
5. Data Retention
Personal data collected via WhatsApp will be retained for 90 days and then securely deleted unless further retention is legally required or needed for auditing. Non-personal data collected through the web app is retained to improve services, with retention periods based on operational needs.
6. Data Subject Rights
You have the right to check or request the removal of any data shared with us. You can do so by contacting us at info@resvinet.org. We will respond in accordance with GDPR requirements.
7. Data Sharing
Both Channels: Our technical partner, Eazit, manages the chatbot’s operations. Sub-processors like OpenAI (in the case of the web app) and WhatsApp may have limited access to ensure proper chatbot functionality. OpenAI only processes non-personal data, and no personal data is shared with them.
WhatsApp: Personal data such as your phone number and chat content may be accessed by Eazit and WhatsApp to ensure proper service delivery. All access to personal data is logged for auditing purposes.
8. Security Measures
We implement appropriate technical and organisational measures to protect your data against unauthorised access, disclosure, or alteration. This includes encryption of data in transit, access controls, and logging any access for auditing. Our vendor does not access chat contents unless specifically requested, and all such access will be logged and subject to audit.
9. Changes to This Privacy Notice
We may update this Privacy Notice from time to time. Please review it periodically for any changes.