The purpose of this program is to improve the performance and accuracy of our solutions and enhance preventive healthcare solutions.

This document outlines how your data will be collected, processed, and protected in accordance with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Belgian national data protection laws.

By signing this document, you agree to participate in this program and consent to the processing of your personal data under the conditions described below.

By agreeing to this informed consent, you authorize us to collect and use your data for:

• Research and development to improve the Health.be and AloGluco platform.
• Enhancing predictive algorithms and refining measurement accuracy.
• Developing new features and functionalities.
• Conducting statistical analyses and scientific research on glucose trends and related health factors.

Your data will not be used for commercial marketing purposes, sold to third parties, or shared without your explicit consent.

The following types of data will be processed:

• Health Data: Blood glucose levels, trends, and sensor readings. Answers to questionnaires.
• Device & Usage Data: Interactions with the device and app, error logs, and feedback.
• Demographic Information: Age, gender, and (if provided) lifestyle factors (e.g., dietary habits, physical activity).
• Technical Data: Device performance and connectivity logs.

Sensitive Data Handling: Health-related data is classified as sensitive data under GDPR. We ensure strict compliance with Article 9 GDPR, meaning your data will be processed securely and solely for research and health-related purposes.

Your data will be handled with the highest security standards, in compliance with GDPR principles:

• Encryption of data in transit and at rest.
• Access restricted to authorized personnel involved in research.
• Anonymization or pseudonymization of data where possible.
• Use of third-party service providers with GDPR-compliant contracts.

Your data will be retained for a maximum of 5 years after the completion of this research phase, in accordance with Belgian and EU data protection laws.

After this period, your data will be securely deleted or anonymized unless further retention is required by law.

You may request deletion of your personal data at any time by contacting our Data Protection Officer (DPO).

As a participant, you have the following rights under Articles 15-22 of the GDPR:

• Right to Access: Request a copy of the data we hold about you.
• Right to Rectification: Request corrections to inaccurate or incomplete data.
• Right to Erasure (“Right to be Forgotten”): Request deletion of your data at any time.
• Right to Restrict Processing: Limit how we use your data.
• Right to Data Portability: Request your data in a structured, commonly used format.
• Right to Object: Withdraw consent and stop data processing.

For any questions or requests, please contact our Data Protection Officer at privacy@health.be.