Privacy Policy

---

Effective Date: June 1st, 2025

Last Updated: June 26th, 2025

1. Introduction

This Privacy Policy outlines how Prorisk Security Risk Management NV ("we", "us", or

"our") collects, uses, and safeguards information and personal data through our management

systems as well as telehealth and safety advisory platform. Our service allows users—primarily

tourists and patients in Aruba—to receive general and medical information, virtual medical

assistance, submit health-related data, and access urgent safety alerts. This policy adheres to the

European General Data Protection Regulation (GDPR) and the Aruban Landsverordening

Persoonsgegevens. 

2. Personal Data We Collect

We may collect and process the following data:

• Identity Data: Name, nationality, email, phone number, language preference

• Health Data: Body temperature, weight, height, heart rate (variability), blood pressure,

oxygen saturation, breathing frequency as well as fatigue or pain reports

• Usage Data: IP address, device type, app usage logs, browser and OS type

• Location Data: Approximate location (GPS, if enabled), to guide local health access

• Emergency Interaction Logs: Time-stamped data for health alerts or consultations

Although we allow payment via an integrated on-line payment system, we do not collect

financial or payment data via the app.

3. Purpose of Data Processing

We process personal data strictly to:

• Provide telehealth services and health-related guidance

• Facilitate virtual consultations with licensed medical professionals

• Send location-based safety alerts or public health notifications

• Improve our app functionality and user experience

• Ensure compliance with applicable health and safety laws

4. Legal Grounds for Processing

We rely on the following legal bases:

• Consent: Users must actively consent before sharing personal or health data

• Legitimate Interests: Ensuring management system and telehealth platform integrity,

preventing misuse or fraud

• Legal Obligation: Complying with Aruban public health and emergency laws

You may withdraw consent at any time without affecting previous lawful processing.

5. Data Sharing & International Transfers

We do not sell your data. We may share your information only with:

• Licensed Aruba-based medical professionals for your requested services

• Emergency or regulatory authorities, when required by law or during medical crises

• Technical partners, including hosting and software providers, under strict

confidentiality and data processing agreements

Where data is transferred internationally (e.g., for cloud hosting or follow-up consultations),

appropriate safeguards are implemented, including standard contractual clauses as per GDPR.

6. Data Retention

We store your data only for as long as needed to provide our services or meet legal obligations.

Retention periods may vary depending on the nature of the data (e.g., health records vs. technical

logs). After this period, data is securely deleted or anonymized.

7. Data Security

To protect your personal data, we apply ISO-aligned security practices:

• End-to-end encryption of health-related data

• Role-based access controls for internal systems

• Routine penetration testing and data backups

8. Your Rights

As a user, you have the following rights:

• Access, correct, or request deletion of your data

• Restrict or object to specific processing activities

• Withdraw consent for future data use

• File a complaint with the Autoriteit Persoonsgegevens (NL/EU) or DPA Aruba

For support with exercising your rights, see contact details below.

9. Contact

To request more information or file a data-related request, contact:

Prorisk Security Management NV

Victor Hugostraat 8, Unit 3, Oranjestad, Aruba

Email: contact@bossisecurity.com

Website: www.bossisecurity.com

By using this mobile application, you confirm that you have read and accepted this Privacy

Policy. 

We may update this policy periodically; changes will be communicated via app or email.