Personal data shall be:

1. Processed lawfully, fairly and in a transparent manner with respect to the data subject
2. Collected for specified, explicit and legitimate purposes only (not further processed in any manner that is incompatible with those purposes)
3. Adequate, relevant and limited to what is necessary
4. Accurate and, where necessary, kept up-to-date
5. Kept in a form that permits identification of data subjects for no longer than is necessary
6. Processed in a manner that ensures appropriate security of personal data by using technical  and organization measures

Principle 1: Fair and Lawful Processing

“Fair and lawful” means the data controller must ensure transparency so that data subjects are aware of who is processing their personal data and why. This is primarily an obligation for the data controller because they determine what is being processed and are responsible for communicating with their patients.

Processing typically performed by Trice Imaging includes storage, archiving, patient sharing, image compression, anonymization, and download options. Trice Imaging works with each customer to help determine their needs and processing instructions are documented in the Business Agreement (contract).

Principle 2: Purpose Limitation Principle

The Purpose Limitation Principle states that personal data collected for one purpose should not be used for a new, incompatible purpose. Therefore, personal data obtained for lawful purposes cannot be further processed in an incompatible manner without explicit consent from the data subject.

To adhere to this principle, Trice does not process or add any additional processing outside of those specified in the contractual instructions/Business Agreement.

In addition, Trice Imaging does not engage other processors unless specified within the written customer contract. Learn more about who Trice Imaging works with to properly handle personal data by visiting www.tricefy.help/help/processors

Principle 3: Data Minimization Principle

The Data Minimization principle states that an organization should only process the personal data it needs in order to achieve its processing purposes.

Trice does not process any data outside of what is needed to fulfill their contractual agreement with each customer. Contracts are reviewed as part of the sales process to ensure clear and accurate instructions.

In addition, Trice Imaging does not allow or engage in, under any circumstance, processing of data that could reveal “sensitive personal data” (as defined at the end of this document).

Principle 4: Accurate and Up-to-Date

The Accuracy Principle states that personal data must be accurate and kept up-to-date. Every reasonable step must be taken to ensure that inaccurate and/or incomplete data is either erased or rectified. Trice Imaging’s software, Tricefy:

• Accurately records data received from the data controller
• Includes mechanisms to ensure accuracy
• Includes mechanisms to provide rectification
• Includes mechanisms for personal data to be deleted (in support of the “Right to be forgotten”- see Principle 5)

Trice does not correct data on behalf of controllers, but provides training (in-person or by video call), written instructions, and support for doing so (available at http://www.tricefy.help/help/correctdata ).

Principle 5: Data Retention Principle

Legislation requires that personal data processed for any purpose must not be kept for longer than necessary for that purpose.

Specifically, personal data kept in a form that permits identification of data subjects cannot be retained for longer than what is necessary for the purposes of processing. Personal data may be stored for longer periods insofar as the data will be processed for archiving, scientific, historical, or statistical purposes as long as there is no privacy breach possible.

The retention period for personal data is contained in the contract with the data controller (Trice customer). Trice will ensure that all patient data is removed in a timely fashion when the retention period is over.

Additionally, Tricefy includes mechanisms for personal data to be deleted before the retention period is reached (in support of the “Right to be forgotten”). Trice Imaging, including support staff, does not have the authority or ability to delete patient data on behalf of the controller. If data needs to be deleted before the retention period has passed for any reason, Trice Imaging provides training, written instructions and support to the clinic for doing so.

Principle 6: Security

Trice Imaging has technical and organizational measures and procedures in place to protect personal data from accidental loss/destruction and unwarranted/unlawful processing. More detail can be found in the Trice Imaging Information Security Policy and Security Whitepaper:

http://www.tricefy.help/help/security

• Trice Imaging, Inc. Data Protection Officer (US): Kris Kumler (privacy@triceimaging.com)
• Tricefy AB Data Protection Officer (EU): Martin Westin (privacy@triceimaging.com)
• Privacy Officer: Maria Samuel (privacy@triceimaging.com)
• European Union Representative: Johanna Wollert-Melin (johanna@triceimaging.com)

To request information about data collection or erasure of data, email (privacy@triceimaging.com).

European Representative

The European Union (EU) Representative shall be addressed (with the Data Protection Officer) for all issues related to data processing for the purposes of ensuring compliance with GDPR (Article 27). The EU Representative is responsible for handling communication between European customers and supervisory authorities in response to issues regarding data protection and privacy concerns. EU Representative functions on behalf of the interest of the data subject and is without prejudice to legal actions that could be initiated against Trice.

Risk Assessment for Processing Personal Data

Trice Imaging routinely undergoes a risk analysis process as part of their software development cycle. This process has been updated to include routine risk assessments regarding the processing of personal data. The assessment consists of three distinct pieces:

1.  Assessing the system architecture, workflows, and business to assemble a company-wide risk profile
2. Taking appropriate measures to mitigate all security risks
3. Repeating the risk assessment and mitigation process continuously

Data Protection Impact Assessments

GDPR requires Data Controllers to conduct impact assessments prior to any high-risk processing activities. As a Data Processor, Trice Imaging is committed to helping our customers meet this requirement by assisting with impact and/or privacy assessments upon request.