Effective Date: 10/10/2025

Welcome to the Telendo SAS website. Protecting your personal data—and, above all, the confidentiality and security of the health data processed by our solution—is our top priority. The purpose of this policy is to inform you about how Telendo SAS collects, uses, and protects your personal data.

1. IDENTITY OF THE DATA CONTROLLER

The entity responsible for processing the personal data collected through the website is:

Telendo SAS Adresse : 2, Avenue de la Forêt de Haye, 54505 Vandoeuvre les Nancy CEDEX

Contact email for the DPO/Personal Data: contact@telendo.com

2. GENERAL PRINCIPLES AND LEGAL BASIS

Telendo SAS is committed to complying with the provisions of the General Data Protection Regulation (GDPR) and the French Data Protection Act.

Data is collected for specific, explicit, and legitimate purposes and is processed in a lawful, fair, and transparent manner.

3. DATA PROCESSING RELATED TO THE CORE BUSINESS (CLINICAL SOLUTION)

ATTENTION : This section covers the processing of health data that your software solution collects, analyzes, and organizes for healthcare professionals. This data is extremely sensitive.

3.1. Nature of the Data Processed by the Solution

Our software solution processes special-category health data:

  • Clinical Imaging Data: Video and photo streams from endoscopy, cystoscopy, and hysteroscopy, as well as dermatology images (including those captured via smartphone).
  • Reconstruction Data: 2D/3D digital twins and maps generated from data streams.
  • Clinical Metadata: Context of the examination, key events (biopsies, abnormalities) identified by AI, metrics, and indicators of quality and completeness.
  • Patient/Professional Identification Data: If applicable, if this data has not been pseudonymized by the healthcare facility.

3.2. Telendo's Role and Legal Framework

In providing its solution to healthcare facilities (hospitals, clinics, medical practices), Telendo SAS generally acts as subcontractor for health data. The healthcare facility remains the data controller.

  • Legal Basis for Processing: The processing of this data is necessary for the purposes of preventive medicine or occupational medicine, the establishment of medical diagnoses, and the management of health care (Article 9.2.h of the GDPR), and is governed by a data processing agreement (DPA) entered into with each client (healthcare facility).
  • Health Data Hosting: Telendo SAS is committed to ensuring that health data is hosted by a Health Data Host (HDS) certified in accordance with French regulations, thereby ensuring the highest level of security and confidentiality.

3.3. Objectives (for the clinical solution)

The processing of this data is strictly limited to the following purposes, for the benefit of the healthcare professional:

  1. Provision of 2D/3D reconstruction services and AI-powered assistance.
  2. Assistance with diagnosis and clinical documentation (structured reports).
  3. Review, second opinion, and long-term follow-up of lesions.
  4. Maintenance, security, and improvement of the solution (using data that has been previously anonymized or pseudonymized).

4. DATA PROCESSING RELATED TO THE WEBSITE (WWW.TELENDO.COM)

This section covers the data collected when you visit our website or contact us. The site is managed through WordPress.

Data Categories Tool(s) / Source Purpose of the Processing Legal Basis (GDPR) Length of Storage
Contact Information (Last Name, First Name, Email, Phone) Contact Forms, Request a Demo Handling inquiries, sales prospecting, customer service. Legitimate Interest (tracking prospects) or Pre-Contractual Performance. Legitimate Interest (tracking prospects) or Pre-Contractual Performance.
Navigation Data (IP address, Page views, Session duration, Device type) Google Analytics, WordPress (Technical Cookies), Google Search Console Audience measurement, traffic analysis, and improvements to the user experience and website effectiveness. Consent (for non-essential cookies such as Google Analytics). Google Analytics: 26 months. Cookies: depending on their type (see Section 5).

4.1. Use of Google Analytics and Google Search Console

We use these tools to analyze traffic and usage on our website.

  • Google Analytics : We are committed to configuring Google Analytics to minimize data collection, in particular byIP address anonymization (via the fonction anonymizeIp) and by collecting data only with your prior consent (via a cookie banner).
  • Google Search Console : This tool is used to monitor and maintain our website's visibility and performance in Google search results. It does not collect personal data directly from website visitors, but rather technical information related to search engine optimization.

4.2. Website Security (WordPress)

Telendo ensures that the WordPress CMS and its plugins are kept up to date and secure to prevent any data breaches or unauthorized access.

5. COOKIE POLICY

Our website uses cookies. A cookie is a small text file that is stored on your device when you visit the site.

  • Essential Cookies (WordPress): Essential to the functioning of the site. They cannot be disabled. (Legal Basis: Legitimate Interest).
  • Analytics Cookies (Google Analytics): Used to measure and analyze the website's audience. (Legal Basis: Your Consent explicitly via the cookie banner).

Vous pouvez à tout moment retirer votre consentement ou gérer vos préférences via notre outil de gestion des cookies ou en configurant votre navigateur.

6. RECIPIENTS OF THE DATA

Your personal data may be shared with:

  1. To Subcontractors from Telendo (an HDS hosting provider for clinical data, an email service provider, etc.), in strict compliance with the purposes of use and the GDPR.
  2. To Internal Departments Telendo employees (Sales and Technical Departments) authorized to process the data.
  3. To Google (via Google Analytics and Search Console) for browsing data, subject to your consent and IP anonymization.

Telendo does not sell or rent your personal data to third parties.

7. YOUR GDPR RIGHTS

In accordance with the GDPR, you have the following rights regarding your personal data:

  • Right of Access (to find out what data we process).
  • Right to Correction (correct inaccurate information).
  • Right to erasure (“right to be forgotten”).
  • Right to Restriction of the treatment.
  • Right to Data Portability of the data.
  • Rights to objection data processing (including sales prospecting).

To exercise these rights, you may contact our Data Protection Officer at the following email address: [DPO/Personal Data contact email address specified in Section 1].

You also have the right to file a complaint with the relevant supervisory authority (in France, the CNIL).

8. TRANSFERS OUTSIDE THE EU

Data is primarily stored and processed within the European Union. When using third-party services (such as Google Analytics) that involve a transfer to the United States, Telendo SAS ensures that these transfers are governed by appropriate security measures (the European Commission’s Standard Contractual Clauses).

9. CHANGES TO THE POLICY

This Privacy Policy may be updated at any time. We encourage you to review it regularly.