Privacy notice

1. Controller

Steel Soft Inovations, k.s., company ID 55 351 981, Bela IV. 915/9, 960 01 Zvolen, Slovakia, is the controller for account, order, payment, support and its own digital booking-service data. Contact: info@prima.info.

When an organization or clinic uses PRIMA for member, client or patient data for its own purposes, it may be a separate controller and PRIMA may act as its processor under contract.

2. Data we process

Depending on the product, we may process identity and contact data, account and device data, organization roles, orders and billing data, booked appointments, support communications, security records and technical operational data.

Full payment-card numbers are processed by the payment provider and are not stored by PRIMA. The public booking flow is not intended for diagnoses or medical records.

3. Purposes and legal bases

We use data to enter into and perform contracts, activate and operate accounts, provide bookings and notices, invoice, support customers, secure the service, prevent fraud, meet legal duties and protect legitimate interests in safe operation.

Where consent is required, we request it separately and it may be withdrawn prospectively.

4. Recipients and transfers

Contracted hosting, identity, email, SMS, communication, security and payment providers may process data only as needed for their service. We use contractual and technical safeguards required by applicable law for international transfers.

5. Retention

We retain data while an account or contract is active and afterwards only as needed for complaints, accounting, tax, security and legal duties. Specific periods vary by product and record type.

6. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability or object to processing. You may also complain to the competent supervisory authority. Send requests to info@prima.info; we may reasonably verify identity first.

7. Children, security and cookies

A child’s Family account is created and managed by an authorized parent or legal guardian. We use technical and organizational measures including managed access and security monitoring.

The public presentation website uses only technologies needed to operate. We do not start marketing tracking without the relevant notice or consent.