Privacy Policy
How personal data processed through the app and the website is used and protected.
MedJourney is a patient communication and follow-up platform for international patients. This policy explains for which purposes personal data processed through the app and the website is used, with whom it is shared and how it is protected.
Data processed: name and surname, contact details, the health information you share in the application form, the documents you upload, appointment and travel details, and in-app correspondence.
Purpose of processing: assessment of your application by the international patient department and the physicians of the healthcare institution, preparation of your treatment plan, appointment and travel coordination, and post-treatment follow-up. The system does not produce automated medical decisions; the assessment is always made by a physician.
Legal basis: your health data is processed on the basis of your explicit consent. You may withdraw your consent at any time; withdrawal does not affect processing lawfully carried out until that moment.
Transfer and retention: your data is shared with the authorised staff and physicians of the healthcare institution in order to carry out the treatment process. International transfer takes place only with the separate explicit consent you give. Health data is retained for the periods required by law; operational records such as sessions and verification codes are deleted after shorter periods.
Security: data is transmitted over an encrypted connection, fields that constitute identity information are stored encrypted in the database, and access is limited by an authorisation matrix. Every access and change is written to the audit log.
Your rights: you have the right to access your data, to request its correction or deletion, to request restriction of processing and to data portability. You may use the contact details in the page footer for your requests.