Privacy Policy

Evermed, Inc. (“Evermed”, “we”, or “us”) provides a software-as-a-service learning experience platform that is licensed to professional associations and similar organizations (the “Services”).

Evermed processes personal data in connection with the operation and delivery of the Services, including through customer-branded websites, applications, and domains operated by Evermed on behalf of its customers. Depending on the context, Evermed acts as an independent controller or joint controller of personal data, as defined under applicable data protection laws.

In this Privacy Policy, “you” refers to any individual whose personal data is processed in connection with the Services, including users of customer-branded instances of the Services.

We process personal data when you access or use the Services, including when you access customer-branded instances of the Services operated by Evermed on behalf of its customers.

1. Specific personal data to be collected

Personal data collected during account creation and use of the Services is used by Evermed and its affiliates for purposes including user authentication, account administration, delivery and operation of the Services, personalization of content within the Services based on areas of professional interest provided by users, and communications related to the licensed Services. Personal data may also be processed to comply with applicable legal, regulatory, or reporting obligations.

2. Specific third parties with whom we share your personal data

We do not sell personal data. We only disclose personal data to third parties as described in this Privacy Policy and solely to the extent necessary to operate, deliver, support, or secure the Services.

Personal data may be accessed by or disclosed to the following categories of recipients, solely on a need-to-know basis and only as required to provide the Services:

Evermed personnel and affiliated entities involved in the operation, support, security, and administration of the Services;
third-party service providers and subprocessors (such as cloud hosting providers, analytics providers, security providers, and customer support tools) engaged to support the delivery and operation of the Services under written agreements that impose confidentiality, data protection, and security obligations;
professional advisors (including legal, accounting, and auditing firms) acting in their professional capacity; and
third parties involved in a corporate transaction (such as a merger, acquisition, or asset sale), subject to appropriate confidentiality and data protection safeguards.

The above third parties are contractually obliged to protect the confidentiality and security of your personal data, in compliance with applicable law.

Personal data may also be disclosed to governmental, regulatory, law enforcement, or judicial authorities where required by applicable law or lawful request.

The personal data we collect from you may also be processed, accessed or stored in a country outside the country where Evermed Inc. is located, which may not offer the same level of protection of personal data.

For transfers of personal data outside the European Economic Area (EEA), Evermed relies on appropriate safeguards in accordance with applicable data protection laws, including the use of Standard Contractual Clauses approved by the European Commission and equivalent mechanisms, as applicable. In all cases, Evermed Inc. remains responsible for the management and protection of personal data processed in connection with the Services.

3. Duration of storage

Personal data will generally be retained for up to twenty-four (24) months after the user’s last access to the Services, unless a longer retention period is required to comply with legal, regulatory, contractual, or audit obligations.

4. Cookies and other similar technologies

Evermed collects usage and interaction data in connection with the operation of the Services.

The following categories of cookies and similar technologies may be used in connection with the Services and customer-branded websites or applications through which the Services are delivered:

Strictly necessary cookies, which are required to enable core functionality of the Services, including user authentication, session management, security, and load balancing.
Functional cookies, which allow the Services to remember user preferences and settings (such as language, interface configuration, or display preferences) in order to provide a consistent user experience.
Analytics cookies, which are used to collect aggregated and anonymized information about how users interact with the Services (such as feature usage, navigation patterns, and performance metrics) for the purpose of improving reliability, performance, and usability.
Media and content delivery cookies, which are required to deliver video, audio, or other digital content within the Services and to ensure proper playback, performance optimization, and user experience.

Evermed uses analytics tools to understand how users interact with the Services and to improve performance, reliability, and user experience. These tools count the number of users and provide aggregated information about usage patterns, such as the typical duration of user sessions, the average number of pages viewed, and the types of content accessed. For this purpose, first-party analytics technologies may be used in connection with the Services. Information collected through these technologies is aggregated and not used to identify individual users.

Data collected through cookies and similar technologies may be processed by third-party service providers acting on Evermed’s behalf under contractual obligations consistent with this Privacy Policy and applicable law.

5. Protection of your personal data

We have implemented appropriate technical and organizational measures to provide an adequate level of security and confidentiality to your personal data, taking into account the nature of the data and the risk of processing such data.

The purpose thereof is to protect it against accidental or unlawful destruction or alteration, accidental loss, unauthorized disclosure or access and against other unlawful forms of processing.

Moreover, when handling your personal data, we comply with the following obligations:

we only collect and process personal data which is adequate, relevant and not excessive, as required to meet the above purposes;
we ensure that your personal data remains up to date and accurate (for the latter, we may request you to confirm the personal data we hold about you and you are also invited to spontaneously inform us whenever there is a change in your personal circumstances, so we can ensure your personal data is kept up-to-date).

6. What are your rights and how can you exercise them?

You may exercise the following rights under the conditions and within the limits set forth in the law:

the right to access your personal data as processed by us and, if you believe that any information relating to you is incorrect, obsolete or incomplete, to request its correction or updating;
the right to request the erasure of your personal data or the restriction thereof to specific categories of processing;
the right to withdraw your consent at any time, without affecting the lawfulness of the processing before such withdrawal;
the right to object, in whole or in part, to the processing of your personal data;
the right to object to direct marketing communications; and
to the extent applicable, the right to request its portability, i.e. that the personal data you have provided to us be returned to you or transferred to the person of your choice, in a structured, commonly used and machine-readable format without hindrance from us and subject to your confidentiality obligations.

Please note however that, in certain circumstances, your refusal to accept cookies or your browser settings may affect your browsing experience and may affect your ability to use certain features of the Services.

If you have a question, if you are not satisfied how we process your personal data or if you want to exercise the above rights, you may send an email to support@evermedtv.com. When contacting us, please add a description of your relationship and/or your interactions with us. If you wish to receive information related to your personal data, please also add a scan of your identity card for identification purpose, it being understood that we shall only use such data to verify your identity. When sending us such a scan, please make sure to redact your picture and national registry number or equivalent on the scan.

In any case, you also have the right to file a complaint with the competent data protection authorities, in addition to your rights above.

7. How will you be informed of the changes to our Privacy Policy?

You are informed about future changes or additions to the processing of your personal data as described in this Privacy Policy in advance through our usual communication channels (e.g. by email or through the Services, customer-branded websites, or other customary communication channels).