1. Data Controller

The party responsible for data processing on this website within the meaning of the GDPR is:

2. Emergency Profile Data (incl. Health Data)

When you fill out your emergency profile and click "Save Profile," your details — name, date of birth, blood type, allergies, medication, pre-existing conditions, and emergency contacts — are stored in our database hosted by STRATO (server location: Germany). Allergies, medication, and pre-existing conditions are health data within the meaning of Art. 9 GDPR; we process them only on the basis of your explicit consent (Art. 9(2)(a) in conjunction with Art. 6(1)(a) GDPR), which you provide via checkbox when saving.

To match your profile, we set a technically necessary cookie ("smartaid_token") with a random, non-personally-identifying value. There is no password-protected user account — whoever has access to this cookie or browser profile can view and edit the associated emergency profile. For this reason, avoid setting up your profile on a shared or publicly accessible device.

When you select "Transfer to Band," a link to your emergency profile (profile.php?id=…) is written to your band or QR code — not the raw data itself. Anyone who opens this link — for example helpers who tap your band — sees the emergency data you entered. This is intended in an emergency: the link is deliberately accessible without a password so help can be provided quickly. Therefore only share the band or link if you are comfortable with the information being viewable. The profile page is excluded from search engines (noindex).

3. Launch Registration

When you register for the product launch, your name, email address, and stated interest are stored in our database and additionally forwarded to us by email, so we can contact you about the launch. The legal basis is your consent (Art. 6(1)(a) GDPR).

4. Purpose of Processing

The processing serves to enable the personalization of your SmartAid band and to inform you about the product launch.

5. Disclosure to Third Parties

Your data is not disclosed to third parties unless you actively choose to share it with helpers via the band or QR code. Our hosting provider STRATO processes the data technically as a data processor on its servers.

6. Retention Period

Emergency profile data remains stored in our database until you change it via the form or ask us to delete it at contact@smartaid.tech. We store launch registration data until the launch is complete or you object to the processing.

7. Cookies

We set a technically necessary cookie ("smartaid_token") to match your emergency profile to your browser. It serves this purpose only, not tracking or analytics, and is permitted on the basis of Art. 6(1)(f) GDPR (legitimate interest in the functionality of the site).

8. Hosting

This website, including the database, is hosted by STRATO. The servers are located in Germany. When you visit the website, technically necessary access data (server log files) are processed by the hosting provider.

9. Your Rights

Under the GDPR, you have the right to access, rectification, erasure, restriction of processing, data portability, and objection regarding your personal data — you may withdraw your consent to the processing of health data at any time with effect for the future. Please contact contact@smartaid.tech for this purpose.

10. Changes to This Policy

We update this privacy policy whenever the website or legal requirements change.