1.5.3 | Data protection and IT security

The data protection provisions of alea as a system can be viewed in the contract documents of your care institution. Please contact the alea representatives at your institution.

The following applies to the use of alea, in particular the alea app and alea cockpit as the main application components:

Safety instructions

Secure access:

Sufficiently secure log-in or access data should always be used and all specifications should be observed by the persons responsible for maintenance (customers).

Existing data protection rules of your care managers also apply to alea:

  • The same rules apply with regard to care recipient and personal data protection that must be observed in the context of using an existing care documentation system.

  • Each person responsible for care independently guarantees compliance with data protection regulations when dealing with alea.

  • AssistMe does not collect any personal data.

  • The person responsible for care is solely responsible for the collection and use of personal data.

User group:

The senior managers must ensure that only authorised nursing staff or nursing staff responsible for care use the system and have undergone appropriate training by the manufacturer or the nursing staff responsible for care themselves in order to ensure all IT security rules in the context of the use of alea.

Personal data:

All personal data collected in the context of alea use is the responsibility of the user and the person responsible for care. AssistMe does not collect any personal data as a matter of principle.

Use of mobile devices:

The care setting must ensure its general requirements, conditions and rules in connection with the use of mobile devices, computers and other digital tools.

Updates:

All alea components are subject to regular update and version management, so that AssistMe guarantees all issues of the IT security environment in connection with GDPR, EUMDR and all associated IT security regulations.

Easy and safe to use:

There are no special measures that the user must take in order to use alea securely (such as maintaining a special alea-related firewall, virus scanner or anti-malware).

DSGVO checked:

  • AssistMe complies with all regulations and official recommendations as part of a GDPR-compliant data and system security strategy and processes.

  • For further information, AssistMe can provide all relevant documents such as the IT security aspects of all data hosting and data transfer services that we provide in and for alea Digital Assistance System.

In the event of loss of end devices with alea apps:

  • In the event of lost or stolen devices containing alea-related authentication elements, the person responsible for care must contact the AssistMe care manager immediately to clarify the situation.

  • The network of care managers will ask for additional information and provide a guide to solving the safety problem.

Procedure in the event of a security incident:

  • In the event of a lost authentication element, the alea Cloud Portal (alea Cockpit) can be used to retrieve usernames or credentials if there is access to the email address associated with the account.

  • In the event of stolen authentication elements, the person responsible for maintenance must be contacted as soon as possible and the account will be temporarily blocked.

  • Any attempt to use it is temporarily blocked and reported.

  • The network of care managers then provides new login details (or receives them from the manufacturer).