Data controller

Collected data

• Identity data: surname, first name, date of birth, nationality, passport number.
• Contact details: phone, email, hotel or home address.
• Health data (sensitive): medical history, symptoms, diagnoses, treatments, medical reports.
• Insurance data: policy number, assistance company, billing details.
• Technical data: IP address, cookies, website navigation data.

Purpose : medical care, care coordination, administrative and insurance management.

Legal bases for processing

• Vital interest of the patient (medical emergency).
• Performance of a care contract.
• Patient consent (form submission, direct contact).
• Medical and accounting legal obligations.
• Legitimate interest for care organization and insurance coordination.

Data retention

Data recipients

Data is shared only with:

• Internal physicians and medical staff.
• Partner clinics and hospitals.
• Assistance and insurance companies (with authorization).
• Laboratories and medical imaging providers.
• Health authorities when legally required.

No data is sold.

International transfers

Possible only for:

• International insurance coordination.
• Hospitalization or medical repatriation.
• Patient follow-up in home country.

Contractual safeguards and security measures are applied.

Data security

Measures implemented:

• SSL/TLS encryption.
• Secured access to medical records.
• Restricted staff authentication.
• Secure backups.
• Strict medical confidentiality.

Patient rights

Under GDPR:

• Right of access to personal data.
• Right to rectification.
• Right to erasure (subject to medical retention obligations).
• Right to object to marketing.
• Right to data portability.

To exercise your rights: rgpd@911travelassistance.com

Cookies

Use:

• Website operation.
• Anonymous statistics.
• Navigation improvement.

You can refuse cookies through browser settings.

Intellectual property

All content on the 911 Travel Assistance website is protected: texts, logo, photos, brand identity and documents. Any reproduction is prohibited without prior written authorization.

Applicable law

• Tunisian law.
• GDPR application for European patients.
• Jurisdiction: competent courts of Médenine, Tunisia.