Who processes your data
Clarivet is a service of Germán Ezequiel Laso Andino, trading as ProfBlu.
- Owner: Germán Ezequiel Laso Andino, libero professionista.
- Partita IVA: 04702090988. Codice fiscale: LSNGMN88S04Z600M.
- Professional activity not registered in the Registro delle Imprese (no REA number).
- Contact address: Via della Sega 1, 38080 Verdesina, Porte di Rendena (TN), Italy.
- Email for anything about your data: privacidad@profblu.com.
No data protection officer has been appointed: the law does not require one for an activity of this size.
Two different roles
In Clarivet there are two controllers, and it helps to know which is which before reading on.
- What a practice keeps about its clients is the practice's responsibility. A client's record, their animals, clinical history, vaccinations, appointments, farm visits, test results and photos, and reminders are decided on and used by the practice that cares for you. It is the controller, and we keep that data on its behalf. That arrangement is a contract and can be read in full in the data processing agreement.
- Accounts are our responsibility. The account you use to sign in to the panel or to your practice's website, the plan the practice subscribes to and the logs that keep the service secure. We are the controller.
If you are a practice's client, for almost everything below your point of contact is the practice: ask it to correct or delete what it holds about you and your animals.
What data we process
What follows comes from Clarivet's code, not from a generic list. If a piece of data is not here, Clarivet does not keep it.
Your identity
Clarivet has no sign-up form or password of its own. You sign in with your ProfBlu account, which is managed centrally: name, email and password live there, under the platform's privacy policy. Clarivet only checks the session token that account issues and stores your user identifier alongside what you do.
A practice's team
For each team member we keep their name, email, role at the practice (Manager, Vet or Reception) and which clinics they work at. Team invitations are sent by email.
A practice's clients (on its behalf)
Written by the practice's team:
- the client record: name, ID document, phone, email, address and notes;
- their animals: name, species, breed, sex, date of birth, colour, identification (for example, the microchip or ear tag) and photo;
- for farm work, the farms (name, the location the practice writes and holding number) and their groups;
- clinical history: consultations, treatments, vaccinations, test results and attached photos;
- appointments and farm visits, with their date, place and who attends;
- the reminders the practice sends by email and whether they went out.
The practice's website
If the practice links you to your record, you receive an email with a link. When you sign in with your ProfBlu account you see your animals, their vaccinations and your appointments on its website, and you can request an appointment: we keep which animal, which type of appointment, where, when and any note you write. The practice receives it and decides.
The website collects no data from people who just visit it: no forms, no cookies, no third-party counters.
The practice's plan
When a practice subscribes to Clarivet, payment is handled by ProfBlu's billing service. Clarivet neither sees nor stores card details: they are processed by Stripe, that service's payment provider.
Security and operation
The server's technical logs record each request and each error, to operate the service.
Why, and on what basis
- So the practice can do its work: storing and showing what its team writes. The basis is set by the practice, as controller (usually, the service it provides to you and its health obligations); we act on its behalf (Art. 28 GDPR).
- For your account and your practice's website: performance of what you ask of us by using them (Art. 6(1)(b) GDPR).
- To charge the practice's plan: performance of the contract (Art. 6(1)(b)) and tax obligations (Art. 6(1)(c)).
- To keep the service secure: our legitimate interest in detecting abuse and being able to investigate an incident (Art. 6(1)(f)).
There is no advertising, no commercial profiling and no automated decision-making.
Where it is processed, and who else sees it
- Hetzner Online GmbH hosts the server, the database and the files (photos and test results), in Germany. Within the European Economic Area.
- IONOS delivers outgoing email (invitations and reminders), with the account in its Spanish region.
- Stripe (Stripe Payments Europe, Ireland) processes payment for the practice's plan. It may transfer data to the United States with the safeguards of Chapter V GDPR.
- Anthropic is only involved in the panel, and only if someone on the practice's team uses the assistant: what that person writes to it and what the assistant looks up to answer goes through its model, in the United States, with the safeguards of Chapter V GDPR. The practice's website has no assistant.
There is no one else, and no advertising tool.
How long
What a practice keeps, for as long as it uses Clarivet and decides to: it is its clinical history and it keeps it for as long as its rules require. When a practice leaves Clarivet, we return its data if it asks and then delete it, as set out in the data processing agreement.
To be precise: there is currently no automatic deletion by time limits. Deletion happens when the controller requests it, within one month, and only what a law requires is kept. Database backups are kept for 35 days at most: what is deleted also disappears from them, at the latest, 35 days later.
Your rights
You can exercise the rights the General Data Protection Regulation gives you: access, rectification, erasure, portability, objection, restriction and withdrawing your consent without affecting what was done before.
- What a practice keeps about you and your animals, ask the practice, which is its controller. If you ask us, we pass it on and help it answer you.
- For your account and everything else, write to privacidad@profblu.com from your account's email. We reply within one month at most.
You can complain to the supervisory authority: in Italy, the Garante per la protezione dei dati personali (www.garanteprivacy.it); in Spain, the Agencia Española de Protección de Datos (www.aepd.es); or the one in the European Union country where you live.
Minors
Clarivet is not aimed at children under fourteen. The person responsible for an animal before the practice is an adult.
Security
Communications are encrypted (TLS). Each practice sees only its own data: asking with one practice's session for another's data does not return it. On the website, a client sees only the animals in their record. If we detect a breach that affects you we will tell you, and the supervisory authority within the 72 hours the law sets; if it affects what a practice holds, we will tell the practice without delay so that it can do so.
Changes
If we change what we do with data, we change this text and move the revision date.