Privacy Policy – iMac-event App (Iskra Medical d.o.o.)

Last updated: May 2026

---

1. Data Controller

This Privacy Policy applies to the mobile application iMac-event (the “App”), operated by:

Iskra Medical d.o.o.
Slovenia
Email: info@iskramedical.eu

Iskra Medical d.o.o. acts as the data controller of your personal data.

---

2. What Data We Collect

We may collect and process the following types of data:

a) Automatically Collected Data

• Device information (device type, OS version)
• IP address
• Unique device identifiers
• App usage data (screens viewed, interactions, session duration)

b) Push Notification Data

If you opt-in to receive notifications:

• Push notification token (via OneSignal)
• Notification interaction data

c) Optional Personal Data

If features require it (e.g. registration, forms):

• Name
• Email address
• Phone number (optional)

d) Location Data

• Only collected if explicitly permitted by you
• Can be disabled anytime in your device settings

---

3. Legal Basis for Processing (GDPR)

We process your data based on:

• Consent (Art. 6(1)(a) GDPR)
  → for push notifications, location access
• Legitimate interest (Art. 6(1)(f) GDPR)
  → for improving app performance, analytics, security
• Performance of a contract (Art. 6(1)(b) GDPR)
  → when providing app functionality

---

4. Purpose of Data Processing

We use your data to:

• Provide and operate the App
• Improve functionality and user experience
• Send relevant notifications (if enabled)
• Ensure security and prevent misuse
• Provide user support

---

5. Third-Party Services

We may use trusted third-party services:

• OneSignal → push notifications
• Apple → App Store distribution
• Google Play → Android distribution

These providers may process data in accordance with their own privacy policies.

---

6. Data Transfers Outside the EU

Some of our service providers may process data outside the European Economic Area (EEA).

In such cases, we ensure appropriate safeguards, including:

• Standard Contractual Clauses (SCC)
• EU-U.S. Data Privacy Framework (where applicable)

---

7. Data Retention

We retain personal data only as long as necessary:

• Usage data: up to 24 months
• Support-related data: up to 3 years
• Notification data: until opt-out

---

8. Your Rights (GDPR)

You have the right to:

• Access your personal data
• Request correction
• Request deletion (“right to be forgotten”)
• Restrict processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority (e.g. in Slovenia)

To exercise your rights, contact: info@iskramedical.eu

---

9. Data Security

We implement appropriate technical and organizational measures:

• Encrypted communication (SSL/TLS)
• Secure servers
• Access control and authentication
• Data minimization principles

However, no system is 100% secure.

---

10. Children’s Privacy

The App is not intended for children under 16 years of age.

We do not knowingly collect data from children.
If we become aware of such data, we will delete it promptly.

---

11. Push Notifications

By enabling notifications, you agree to receive messages via OneSignal.

You can disable notifications anytime:

• in the App settings
• in your device settings

---

12. Changes to This Policy

We may update this Privacy Policy from time to time.

Any changes will be published within the App and/or on our website.

---

13. Contact

If you have any questions regarding this Privacy Policy:

Iskra Medical d.o.o.
Email: info@iskramedical.eu