Privacy policy

For data needed to operate accounts, security, support, the Community, the Directory and the platform, Geniosteo by Forge Labs is the data controller: it decides why this data is used and how it is processed.

For patient data in the Practice space, the responsible practitioner or organisation decides how the data is used and who needs access. Geniosteo by Forge Labs processes it on their behalf as a data processor, under the applicable instructions and agreement.

Depending on the features used: identity and contact details, login and security information, practice membership, preferences, Community contributions, support requests, billing data and technical logs.

Messaging between members processes messages, attachments, read indicators, blocks and reports. Email notifications announce a new message and link to the conversation without reproducing its content.

The Practice space may contain appointments, patient records, consultations, documents and invoices. This information is not used to populate the Community, public Directory or editorial content.

Processing supports account creation and security, requested features, practice and subscription administration, support, moderation, abuse prevention, continuity and applicable obligations.

Each use of personal data must have a legal basis under the GDPR: performing the service agreement, meeting a legal obligation, pursuing a justified legitimate interest or obtaining consent where required. Reading this policy does not mean consenting to every use of personal data.

Data is accessible only to people who need it for their work: authorised practice members, authorised publisher staff and providers needed to deliver the service. Access must be limited to the information needed for each task.

The publisher records providers needed for hosting, messaging, payments, security and support. Their processing locations and safeguards must be stated in the information provided to users and practices. Transfers outside the European Economic Area must meet the applicable rules and have documented safeguards.

Data is retained for as long as the account or service requires it. Once it is no longer needed for everyday operations, only information still required for legal obligations, billing, security or a dispute is kept. It is placed in an archive with restricted access. Retention depends on the data category and the reason for keeping it.

The retention rule provides for deleting a conversation when its last message is more than 24 months old, both participants have archived it and no report remains open. An open report suspends deletion. Moderation access to reported conversations requires recent authentication verification; opening a conversation in the moderation screen is logged.

Geniosteo protects data through individual accounts, restricted permissions, additional sign-in checks for the relevant access paths, logs recording certain actions and backups. No service can guarantee zero risk. Incident response depends on what happened and each party’s responsibilities.

You may ask to view your data or receive a copy, correct an error and, where the conditions are met, delete data, restrict its use, object to processing or receive it in a reusable format. Additional identity information may be requested if there is reasonable doubt about your identity. Requests concerning a patient record should be addressed to the responsible practitioner or organisation; Geniosteo assists under its service agreement.

Access to health information is governed by the GDPR and applicable French rules, including Article 64 of the French Data Protection Act and Article L.1111-7 of the French Public Health Code. The responsible practitioner or organisation assesses the request, applicable deadlines and information to disclose while protecting other people’s rights. Geniosteo provides a tool to prepare and record disclosure; the tool does not decide what the responsible party must disclose.

With your permission, Umami, hosted by FORGE LABS, measures visits, registration steps and use of spaces outside administration. URLs are reduced to page templates: parameters, tokens and personal identifiers are excluded. No form content, patient data or message is sent, and sessions are not recorded. You can accept, decline or change your choice using the audience preferences button. Your choice is stored in your browser for six months; a random session identifier groups internal measurements after acceptance.

You may also complain to the competent data-protection authority. Essential cookies support sessions, security and preferences; any non-essential tracker that may be enabled must be subject to a separate choice.