Documentation Available

Health data

The regulation designates the pharmacist as data controller; Medelu acts as processor, on instruction, with no rights of its own over health data.

• Hosting in the European Union, in Frankfurt (Germany). Health data is hosted on servers located in the European Union, in Frankfurt, Germany, and never leaves them: it is a requirement Medelu imposes on itself.
• Three prohibitions. Never sold. Never used for advertising or profiling. Never reused for a service outside the pharmaceutical authorisation.
• The person who delivers knows nothing. The person handing over the parcel sees a name and an address: never the medicine, the indication, the dosage or the CNS number.
• Impact assessment. The data protection impact assessment (DPIA) is carried out in-house, in accordance with the GDPR.