PRIVACY AND DATA PROTECTION POLICY

TBIBNA, SARL - Last updated: May 8, 2026

1. PURPOSE OF THE POLICY

This Privacy and Data Protection Policy describes how TBIBNA, SARL collects, uses, protects, retains, deletes, or anonymizes personal, medical, technical, and financial data related to the use of the platform.

2. LEGAL FRAMEWORK

TBIBNA, SARL is committed to complying with applicable Algerian legislation on personal data protection, in particular Law No. 18-07 on the protection of individuals in the processing of personal data, as well as the directives of the National Authority for the Protection of Personal Data (ANPDP).

3. COLLECTED DATA

IDENTITY DATA

  • Last Name, First Name, and Gender
  • Date and Place of Birth
  • Residential Address
  • Phone Number and Email
  • National Identification Number

MEDICAL DATA

  • Medical History and Allergies
  • Consultation Reports
  • Lab Results and Medical Imaging
  • Prescriptions and Protocols
  • Blood Type

4. PURPOSES OF PROCESSING

  • Management of the Shared Medical Record (DMP).
  • Appointment scheduling and telemedicine.
  • Secure exchanges between healthcare professionals.
  • Continuous improvement of TBIBNA services.

5. CONSENT

The processing of health data is based on the explicit consent of the user, collected during account creation. This consent can be withdrawn at any time, potentially resulting in the inability to access certain services.

6. HOSTING AND SECURITY

All data is hosted on secure servers located on Algerian national territory, in compliance with digital sovereignty requirements. We provide encrypted and secure video consultations.

7. DATA ACCESS

Access to medical data is strictly limited to healthcare professionals explicitly authorized by the user. TBIBNA's technical staff does not have access to readable medical content.

8. RETENTION PERIOD

Medical data is retained for 10 years following the user's last activity, unless early deletion is requested or a legal obligation dictates otherwise.

9. YOUR RIGHTS

In accordance with Law 18-07, you have the right to access, rectify, delete, restrict processing, and request portability of your data.

10. COOKIES AND TRACKERS

TBIBNA uses technical cookies necessary for session functioning. No data is sold to third parties for advertising purposes.

11. BREACH NOTIFICATION

In the event of a data breach, TBIBNA is committed to notifying the ANPDP and the affected users within the legal timeframes set by Algerian regulations.

12. DATA CONTROLLER

The data controller is TBIBNA SARL, located in Algiers, represented by its acting manager.

13. POLICY AMENDMENTS

TBIBNA reserves the right to modify this policy at any time. Users will be informed by a notification on the platform 30 days before the changes take effect.

14. INTERNATIONAL TRANSFER

No personal data is transferred outside the national territory, unless expressly authorized by the ANPDP and in accordance with the law.

15. CONTACT AND COMPLAINTS

For any questions or to exercise your rights, contact our services:
privacy@tbibna.com - legal@tbibna.com

16. APPLICABLE LAW AND JURISDICTION

This policy is governed by Algerian law. Any dispute relating to its application will be under the exclusive jurisdiction of the courts of Algiers.

Document certified compliant with Law 18-07 - Ref: TB-DPP-2026-V2