Essilor MYOPIA EXPERT 700, Руководство пользователя

Страница: 22 / 132

20
Processor: means a natural or legal person, public authority, agency or other body which processes
personal data on behalf of the Controller.
The processor is/are the person/s designed by the clinic or hospital to operate the device and use the
results.
4.9.1.2 Device characteristics to support Data Protection
Data Protection
The device provides by default encryption of data stored, to avoid unauthorized access to Personal Data.
The device provides by default technical measures to provide integrity, availability, and resilience of subject
data by means of encryption, data integrity checksum, and redundancy.
The data can be accessed based on subject identification only within the application itself, which is
protected by the login that can be configured by the Data Controller to grant confidentiality.
The subject’s data are used within the
device on-board application only for storage and identification
purposes.
The Controller can apply an explicit pseudonymization rule to handle subject identification by using only
ID subject identification and not using the subject’s name, DoB, gender in
the device.
Right of Access by the data subject
The controller and processor have access to data related to the subject, which can be stored on the device
and can make the data available to the subject in the normal operating mode. The data can also be
accessed in the form of a printable or electronic file (PDF or XML file).
Right to Rectification or Erasure
The controller and processor can, upon request from the data subject, rectify the subject’s identification
data.
The controller and processor can, upon
request from the data subject, erase permanently the subject’s
identification data and physical/physiological data. After erasure, no trace of the subject data is present
on the device.
Refer to the patient management section for details on how to rectify or erase patient data.
Right to restriction of processing
The device application doesn’t automatically process or transmit the subject data.
Right to data portability
The controller and processor can provide to the data subject the data in the form of exported or printed
reports or XML data file.
Right to object
No automated processing of data subjects is performed in this device. The processing is performed on the
decision of the processor.
Automated individual decision-making, including profiling
No automated decision-making or profiling is performed on this device.