...
- a short and clear text about the purposes you will process their personal (health) data for. This message must contain what data is collected and why. Make sure the language is understandable for the user.
- An identification of the app developer (technical party and/or business lead)[Office1] + Contact information and localization of the app developer to allow to raise questions.
- Precise categories of personal data the app will process
- Explain how the data will be used
- Information where his/her data will be stored, if in any other location than his/her device.
- Information on the right to access and correct personal data or delete it.
The application informs the users when it has access to other resources of the device, to users’ accounts and to profiles in social networks.
This information:ü
- must be available BEFORE app installation
...
- must also be accessible from within the app, after installation.
...
- must be displayed in the normal usage of the app and do not require the user to navigate into a menu or settings.
- Moreover, informed consent CANNOT be placed in privacy policy or terms of service and CANNOT be included with other disclosures unrelated to personal or sensitive data collection.
2. Obtain consent
After informing prior or at installation time, you must obtain their informed consent for the specific purpose you will use their data for. If possible, the app should allow users to make granular choices in allowing data processing, rather than obtaining one single consent.
...