1. Introduction

Welcome to Homspital, a digital healthcare platform operated by Healthqua GmbH. We are committed to protecting your privacy and handling your personal information responsibly, securely, and transparently.

This Privacy Policy explains what personal information we collect, how we use it, how we protect it, how long we retain it, and the rights available to you under the General Data Protection Regulation (GDPR) and other applicable data protection laws.

By creating an account, accessing, or using the Homspital platform, you acknowledge that you have read and understood this Privacy Policy.

2. About Healthqua GmbH

Healthqua GmbH is the operator and Data Controller of the Homspital platform.

Company Name: Healthqua GmbH

Product: Homspital

Location: Wiesbaden, Germany

Privacy Contact: privacy@homspital.com

Account Deletion Portal:
https://hmsp.homspital.com/delete-account

Healthqua GmbH determines the purposes and means of processing personal information collected through the Homspital platform.

3. Scope of this Privacy Policy

This Privacy Policy applies to:

• Homspital mobile applications
• Homspital website
• Healthcare professionals using Homspital
• Patients using Homspital
• Medical documents uploaded through Homspital
• Communications conducted through the platform
• Customer support interactions

This Privacy Policy does not apply to third-party websites or services that may be linked from Homspital.

4. Our Privacy Principles

Healthqua GmbH is committed to protecting your personal information through the following principles:

• Lawful, fair and transparent processing
• Data minimization
• Purpose limitation
• Accuracy of personal information
• Confidentiality and integrity
• Storage limitation
• Accountability
• Privacy by Design
• Security by Default

We collect only the information necessary to provide safe, reliable, and secure healthcare services.

5. Information We Collect

Depending on how you use Homspital, we may collect the following categories of information.

Healthqua GmbH collects only the minimum amount of personal information necessary to provide the requested healthcare services.

PART II – HOW WE USE AND PROTECT YOUR INFORMATION

6. How We Use Your Personal Information

Healthqua GmbH processes your personal information only for legitimate healthcare, operational, security, and legal purposes. We do not use your personal information for purposes that are incompatible with those described in this Privacy Policy.

Depending on how you use the Homspital platform, your personal information may be used to:

• Create and manage your Homspital account.
• Verify your identity and authenticate your access.
• Provide healthcare and telemedicine services.
• Schedule and manage appointments.
• Enable secure communication between patients and healthcare professionals.
• Store and display medical records and uploaded documents.
• Support healthcare professionals in delivering appropriate care.
• Respond to enquiries and provide customer support.
• Maintain system security and prevent unauthorized access.
• Detect fraud, misuse, or other security incidents.
• Comply with applicable legal, regulatory, and contractual obligations.
• Improve the performance, reliability, and security of the Homspital platform.

Healthqua GmbH does not sell, rent, or trade your personal information to third parties for marketing purposes.

7. Legal Basis for Processing Personal Information

Where the General Data Protection Regulation (GDPR) applies, Healthqua GmbH processes personal information only where a lawful basis exists.

Depending on the circumstances, processing may be based on one or more of the following legal grounds:

• Your consent.
• Performance of a contract between you and Healthqua GmbH.
• Compliance with legal obligations.
• Protection of vital interests.
• Legitimate interests pursued by Healthqua GmbH, provided those interests do not override your fundamental rights and freedoms.

Where consent is the legal basis for processing, you may withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

8. Health Information

Certain information processed through Homspital is considered Special Category Personal Data under Article 9 of the GDPR because it relates to your health.

Examples include:

• Medical history.
• Diagnoses.
• Allergies.
• Medications.
• Clinical notes.
• Laboratory reports.
• Medical images.
• Prescriptions.
• Healthcare assessments.
• Other healthcare documents uploaded through the platform.

Health information receives a higher level of protection than ordinary personal information.

Access is restricted to authorized healthcare professionals and authorized personnel who require the information to perform their professional duties.

9. Information Sharing

Healthqua GmbH limits access to personal information on a need-to-know basis.

Your personal information may be shared only with:

Healthcare Professionals

Doctors, nurses, and other healthcare professionals involved in providing healthcare services through Homspital.

Authorized Service Providers

Trusted service providers who support the operation of the Homspital platform, such as hosting providers, infrastructure providers, technical support providers, or other contracted service providers acting on behalf of Healthqua GmbH.

These providers are contractually required to protect your personal information and may process it only for the purposes authorized by Healthqua GmbH.

Legal Authorities

Government authorities, regulators, courts, or law enforcement agencies where disclosure is required by applicable law or a legally binding request.

Business Transfers

If Healthqua GmbH undergoes a merger, acquisition, restructuring, or transfer of assets, personal information may be transferred as part of that transaction, subject to applicable legal requirements.

Healthqua GmbH does not sell your personal information to advertisers or unrelated third parties.

10. International Data Transfers

Healthqua GmbH primarily processes personal information within the European Economic Area (EEA).

If personal information must be transferred outside the EEA, Healthqua GmbH will ensure that appropriate safeguards are implemented in accordance with applicable data protection laws. These safeguards may include:

• Adequacy decisions issued by the European Commission.
• Standard Contractual Clauses (SCCs).
• Other legally recognized transfer mechanisms.

Healthqua GmbH takes reasonable measures to ensure that transferred personal information receives a level of protection equivalent to that required under the GDPR.

11. Cookies and Similar Technologies

The Homspital website may use cookies and similar technologies that are necessary for website functionality, security, and user experience.

Cookies may be used to:

• Maintain secure user sessions.
• Remember user preferences.
• Improve website functionality.
• Protect against unauthorized access.
• Support website performance.

Where legally required, users will be provided with options to manage cookie preferences.

The current version of the Homspital mobile application does not use advertising identifiers for personalized advertising.

12. Automated Decision-Making

The current version of Homspital does not use automated decision-making or profiling that produces legal or similarly significant effects for users.

Healthcare decisions are made by qualified healthcare professionals and are not determined solely by automated processing.

PART III – SECURITY, DATA RETENTION, YOUR RIGHTS AND CONTACT INFORMATION

13. Information Security

Healthqua GmbH is committed to protecting the confidentiality, integrity, and availability of personal information processed through the Homspital platform.

We implement appropriate administrative, technical, and organizational safeguards designed to prevent unauthorized access, alteration, disclosure, loss, or misuse of personal information.

Our security measures include, where appropriate:

• Secure user authentication.
• Role-Based Access Control (RBAC) to ensure users access only the information necessary for their role.
• Encryption of data during transmission using industry-standard security protocols.
• Encryption at rest for uploaded medical documents and other sensitive information, where applicable.
• Secure password storage using industry-standard hashing techniques.
• Continuous monitoring of system security and access logs.
• Regular security updates and vulnerability management.
• Restricted access to systems and databases by authorized personnel only.

Although we take reasonable steps to protect your personal information, no method of electronic transmission or storage is completely secure. We therefore encourage all users to protect their account credentials and report any suspected unauthorized access immediately.

14. Data Retention

Healthqua GmbH retains personal information only for as long as necessary to provide healthcare services, comply with legal obligations, resolve disputes, and maintain the security and integrity of the Homspital platform.

The retention period depends on the type of information processed and applicable legal requirements.

When retention periods expire, personal information is securely deleted, anonymized, or destroyed using appropriate technical and organizational measures.

15. Account Deletion

You have the right to request deletion of your Homspital account at any time.

Official Account Deletion Portal

https://hmsp.homspital.com/delete-account

Before processing your request, Healthqua GmbH may verify your identity to protect your personal information from unauthorized deletion.

Once your request has been verified:

• Your Homspital account will be deactivated.
• Personal information that is no longer required will be permanently deleted.
• Information that must be retained to comply with applicable legal, regulatory, or healthcare record retention requirements will be retained only for the legally required period.
• Backup copies containing deleted information may continue to exist for up to six (6) months before being securely overwritten or deleted.

If you experience any difficulty submitting an account deletion request, please contact:

privacy@homspital.com

16. Your Privacy Rights

Depending on your location and applicable laws, you may have the following rights regarding your personal information:

• Request access to your personal information.
• Request correction of inaccurate or incomplete information.
• Request deletion of personal information where legally permissible.
• Request restriction of processing.
• Object to certain types of processing.
• Request a copy of your personal information in a portable format.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the competent data protection authority.

Healthqua GmbH will respond to verified requests within the timeframes required by applicable law.

17. Children’s Privacy

Homspital is not intended to knowingly collect personal information directly from children unless permitted by applicable law or authorized by a parent, legal guardian, or healthcare provider acting within applicable legal requirements.

Where we become aware that personal information has been collected in violation of applicable law, appropriate steps will be taken to remove or protect that information.

18. Changes to this Privacy Policy

Healthqua GmbH may update this Privacy Policy from time to time to reflect changes in applicable laws, regulatory requirements, technology, or the services provided through Homspital.

The latest version of this Privacy Policy will always be published on the official Homspital website together with its effective date.

Where significant changes are made, users may also be notified through the Homspital application or other appropriate communication channels.

19. Contact Us

If you have any questions about this Privacy Policy, your personal information, or your privacy rights, please contact us using the details below.

Healthqua GmbH

Product: Homspital

Location: Wiesbaden, Germany

Email: privacy@homspital.com

Account Deletion Portal:
https://hmsp.homspital.com/delete-account

Healthqua GmbH is committed to responding to privacy enquiries promptly and in accordance with applicable data protection laws.

20. Commitment to Privacy

Protecting your privacy is fundamental to the services provided by Homspital.

Healthqua GmbH is committed to maintaining the confidentiality, integrity, and security of personal information while delivering trusted digital healthcare services. We continuously review and improve our privacy practices to ensure compliance with applicable legal requirements and to maintain the trust of our users.

Last Updated:- July 2026