Personal Data Processing Policy

1. General Provisions

This Policy defines the procedure for processing the personal data of users of the aict.az service and the measures taken to ensure their security. Personal data is processed in accordance with the applicable legislation of the Republic of Azerbaijan on personal data.

Operator: the team of the aict.az service (hereinafter - the "Operator", "we"). Contact e-mail: mail@aict.az.

The Operator regards respect for human rights and freedoms in the processing of personal data, including protection of the rights to privacy and to personal and family secrets, as its most important goal and a condition of its activities.

2. Key Terms

• Personal data (PD) - any information relating directly or indirectly to an identified or identifiable natural person.
• Operator - a person who, alone or jointly with other persons, organizes and/or carries out the processing of PD.
• Processing of PD - any action (operation) or set of actions performed on PD: collection, recording, systematization, accumulation, storage, updating, use, transfer, anonymization, blocking, deletion, destruction.
• Website - the set of materials available at aict.az.
• User - a visitor of the Website.
• Cookies - a small piece of data sent by a web server and stored on the User's device.

3. What Personal Data Is Processed

The Operator may process the following categories of data:

• medical images (MRI and CT scans, X-ray images, fluorography images and other images obtained by radiological diagnostic methods) uploaded by the User for automated processing;
• information voluntarily provided by the User in the accompanying fields (complaints, medical history);
• e-mail address - if the User has provided it voluntarily (providing an e-mail is not mandatory);
• technical data (IP address, browser type, operating system, request logs) collected automatically to ensure the operation and security of the Service.

4. Purposes of Personal Data Processing

• automated processing of the studies uploaded by the User with the aict.az software and generation of a report (PDF file);
• storage of the User's report file and provision of access to it;
• informing the User about the processing status and related matters (if an e-mail is provided);
• ensuring the operability and security of the Website;
• improving the quality of the Website and the software, as well as statistical research - exclusively on anonymized data that does not allow identification of the personal data subject.

5. Legal Grounds for Processing

• the applicable legislation of the Republic of Azerbaijan on personal data;
• the User's consent expressed by performing actions on the Website (submitting forms, confirming the upload of a study);
• the User Agreement accepted by the User when using the Service.

6. Procedure for Collecting, Storing, Transferring and Protecting Data

Data security is ensured by legal, organizational and technical measures. The Operator protects data against unlawful or accidental access, destruction, alteration, blocking, copying and dissemination.

Storage periods. Study files (uploaded images) and generated reports are stored for 30 days from the moment of upload, after which they are automatically deleted. The User may request deletion of their data before this period expires by sending an e-mail to mail@aict.az.

Users' personal data is not transferred to third parties, except in cases provided for by applicable legislation, as well as transfers to processors engaged by the Operator to ensure the operation of the Service (hosting, infrastructure) - strictly to the extent necessary to perform their duties.

7. Use of Cookies

The Website uses only technical cookies necessary for the operation of the interface. Third-party analytics counters are not used. For details, see the Cookie Notice.

The User may disable cookies in the browser settings; in this case some functions may not work correctly.

8. Rights of the Personal Data Subject

• to receive information about the processing of their PD;
• to demand that incomplete, outdated or inaccurate data be corrected, blocked or destroyed;
• to request deletion of their data (including uploaded studies and reports) by sending a request to mail@aict.az;
• to withdraw consent to processing at any time in the same manner.

9. Final Provisions

The Operator has the right to amend this Policy. The new version takes effect from the moment it is published on the Website. The current version is available at aict.az/privacy.

For any questions related to the processing of personal data, please contact mail@aict.az.