Privacy Policy

Principles

Krooa is fully committed to ensuring and faithfully protecting the personal data of its users, strictly adhering to the regulations in force under applicable legislation.

• Comprehensive protection of user rights
• Emphasis on fundamental rights of freedom and privacy
• Transparency in all data processing operations
• Security and incident prevention
• Accountability and responsibility

Definitions

For better understanding of this Policy, we present the main concepts used:

1. What Data We Collect and For What Purpose

Our system collects and uses some of your personal data in order to enable service provision and enhance the user experience.

2. How We Collect Your Data

The collection of your personal data occurs in the following ways:

• Data entered by the Krooa System user themselves
• Information provided by the patient/clinics/laboratories
• In-person and/or remote service (via phone call, email, messaging app)
• Negotiation and/or acquisition of Krooa products and/or services
• Interaction with service channels or social networks
• Registration in selection processes, promotional actions or quality surveys

3. Consent

It is from your consent that we process your personal data. Consent is the free, informed, and unequivocal manifestation by which you authorize Krooa to process your data. Your data will only be collected, processed, and stored with prior and express consent. Your consent will be obtained specifically for each purpose, demonstrating our commitment to transparency and good faith. At any time and at no cost, you may revoke your consent. It is important to note that revoking consent for data processing may result in the inability to adequately perform some system functionality.

4. Data Storage

Your personal data collected by Krooa will be used and stored for the time necessary to provide the service or for the purposes listed in this Privacy Policy to be achieved. In general, your data will be kept as long as the contractual relationship between you and Krooa lasts. After the personal data storage period ends, they will be deleted from our databases or anonymized, except for legally provided cases.

• Compliance with legal or regulatory obligation by the controller
• Study by research body, ensuring, whenever possible, the anonymization of personal data
• Transfer to third party, provided that data processing requirements are respected
• Exclusive use by the controller, prohibited access by third parties, and provided that data is anonymized

5. Data Security

To keep your personal information secure, we use physical, electronic, and managerial tools aimed at protecting your privacy. Krooa is committed to adopting the best practices to avoid security incidents. However, it should be noted that no virtual page is entirely secure and risk-free.

• Only authorized persons have access to your personal data
• Access to your personal data is made only after a confidentiality commitment
• Your personal data is stored in a secure and suitable environment
• We use end-to-end encryption in sensitive communications
• We perform regular security audits

6. Data Sharing

In view of preserving your privacy, Krooa will not share your personal data with any unauthorized third party. Your data may be shared with our business partners only to the extent necessary for the provision of contracted services, and our contracts are guided by data protection standards.

• Legal determination, request, requisition or court order
• Corporate movements such as merger, acquisition and incorporation
• Protection of Krooa rights in any type of conflict

7. International Data Transfer

Some of the third parties with whom we share your data may be located or have facilities located in foreign countries. Under these conditions, your personal data will be subject to applicable data protection laws. Krooa is committed to always adopting efficient cybersecurity and data protection standards, in the best efforts to guarantee and comply with legislative requirements.

8. Changes to this Policy

We reserve the right to modify this Privacy Policy at any time, mainly due to adaptation to any changes made to our system or in the legislative scope. We recommend that you review it frequently. Any changes will take effect from their publication on our website and we will always notify you of the changes that have occurred.

9. Responsibility

Krooa provides for the responsibility of agents acting in data processing processes. We are committed to keeping this Privacy Policy updated, observing its provisions and ensuring its compliance. Furthermore, we also assume the commitment to seek technical and organizational conditions securely capable of protecting the entire data processing process.

10. Disclaimer

Although we adopt high security standards to avoid incidents, no virtual page is entirely risk-free. In this sense, Krooa is not responsible for:

• Any consequences arising from negligence, imprudence or malpractice of users in relation to their individual data
• Malicious actions by third parties, such as hacker attacks, except if proven culpable or deliberate conduct by Krooa
• Untruthfulness of information entered by the user/client in the records necessary for the use of services

Your Rights as Data Subject

Krooa ensures its users/clients their data subject rights provided for in applicable data protection laws. Thus, you may, free of charge and at any time:

Cookies and Browsing Data

Krooa uses Cookies, which are text files sent by the platform to your computer and stored therein, containing information related to website navigation. Cookies are used to enhance the user experience. You may, at any time and at no cost, change permissions, block or refuse Cookies. However, revoking consent for certain Cookies may prevent the correct functioning of some platform features.