OKKO Health acts as the data controller for the information you provide or that is collected by OKKO Health or its affiliates. OKKO Health collects Personal Data to operate effectively as a business and to provide you with services and products.

​You have choices about the Personal Data we collect. When you are asked to provide Personal Data, you may decline, however, if you choose not to provide Personal Data that is necessary in order for us to provide services to you, you may not be able to use that product.

We provide further information below on the types of Personal Data we obtain and how we use them throughout your use of our products and services.

Under GDPR, we will ensure that your Personal Data is processed lawfully, fairly and transparently without adversely affecting your rights.

We will only process your Personal Data if at least one of the following bases applies:

• you have given consent to the processing of your Personal Data for one or more specific purposes;
• processing is necessary for the performance of a contract to which you are a party or in order to take steps at the request of you prior to entering into a contract;
• processing is necessary for compliance with a legal obligation to which we are subject;
• processing is necessary to protect the vital interests of you or of another natural person;
• processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; and/or
• processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by the fundamental rights and freedoms of the data subject which require protection of Personal Data, in particular where the data subject is a child.

Depending on our relationship with you, we will collect and use your Personal Data in different ways: