Purpose of the service

CalMedi automates synchronisation between Doctolib and Google Calendar for healthcare professionals.

The service is provided by IHTConsulting, registered with the Paris Trade and Companies Register.
Access is reserved for practitioners and team members authorised by the healthcare organisation.
Features evolve regularly to improve service continuity.

Access and user accounts

Account creation requires accurate, up-to-date professional information.
Each user is responsible for keeping their login credentials confidential.
CalMedi may suspend an account if security is compromised or these terms are breached.

Acceptable use

The platform must be used in a professional context that respects patients.

Do not misuse the service for fraudulent purposes or in breach of medical regulations.
Respect third-party rights, including personal data protection.
Report any technical incident or suspicious behaviour to CalMedi without delay.

Data handling

Synchronised data is processed in accordance with GDPR and our privacy policy.
Information exchanged between Doctolib and Google is kept only for the time needed to perform synchronisation.
Each user must ensure they have a lawful basis before connecting the relevant calendars.

Data processing under Article 28 GDPR

Where CalMedi processes personal data on behalf of the customer in connection with the synchronisation between Doctolib and Google Calendar, the customer acts as the data controller and IHTConsulting / CalMedi acts as the data processor within the meaning of Article 28 GDPR.

This section constitutes the data processing agreement applicable between the customer and CalMedi. It forms an integral part of these Terms of Use and applies automatically upon account creation, subscription to the service or use of CalMedi. No individually signed, modified or separately negotiated data processing agreement is offered, unless expressly agreed in writing by CalMedi.

Subject matter, duration and purpose of processing

The purpose of the processing is to enable the technical synchronisation of appointments between the customer’s Doctolib account and the Google Calendar selected by the customer.

The processing is carried out only for the duration of the customer’s use of the CalMedi service.

The purpose of the processing is strictly limited to technical calendar synchronisation, customer account management, service security, technical support and billing.

Data concerned

Depending on the configuration selected by the customer and the data transmitted by Doctolib or Google Calendar, the processed data may include customer identification data, technical synchronisation settings, calendar identifiers, OAuth authentication tokens and, on a transient basis, the information required to create or update events in Google Calendar.

CalMedi does not permanently store patient appointments in its database. Appointment data is processed technically and transiently only to enable synchronisation.

The customer remains solely responsible for the content they choose to synchronise, the selected Google Calendar, the configuration of their Doctolib account and the legal basis allowing them to process the relevant data.

Categories of data subjects

The data subjects may include professional users of the service, authorised members of their team and, where applicable, patients or individuals whose appointments are synchronised.

Customer instructions

CalMedi processes personal data only on documented instructions from the customer, in particular through account configuration, the choice of calendar to be synchronised and the use of the service features.

CalMedi does not sell the data, does not use it for advertising purposes and does not process it for any purpose unrelated to the operation of the service.

Confidentiality and security

CalMedi implements technical and organisational measures designed to protect the processed data, including HTTPS encryption, access restriction, secure storage of OAuth tokens, technical logging necessary for security and support, and hosting with providers located in the European Union or offering GDPR-compliant safeguards.

Persons authorised to work on the service are subject to a confidentiality obligation.

Sub-processors

The customer authorises CalMedi to use sub-processors strictly necessary for the operation of the service, including for hosting, Google OAuth authentication, access to the Google Calendar API, technical security and billing.

CalMedi ensures that such sub-processors provide sufficient guarantees under the GDPR. In the event of a significant change of sub-processor affecting the processing of personal data, CalMedi may inform the customer by any appropriate means.

Assistance to the customer

Taking into account the nature of the service and the information available, CalMedi reasonably assists the customer in responding to data subject rights requests and in complying with obligations relating to security, personal data breaches and, where applicable, data protection impact assessments.

Any request must be sent to support@calmedi.io.

End of service

At the end of the subscription or upon account deletion, CalMedi deletes or makes inaccessible the configuration data linked to the account, unless legal retention obligations apply or the data is necessary for contractual evidence, billing or security purposes.

As appointment data is not permanently stored by CalMedi, it is not subject to any specific return procedure.

Documentation and audits

CalMedi makes available to the customer the information reasonably necessary to demonstrate compliance with its processor obligations. Audits may only concern processing carried out by CalMedi as part of the service, must be reasonable, proportionate, planned in advance and must not compromise the security, confidentiality or operation of the service.

Customer responsibility

The customer remains responsible for the compliance of their use of CalMedi, including information provided to data subjects, the legal basis for processing, Doctolib configuration, the choice of Google Calendar, the persons having access to the synchronised calendar and compliance with professional obligations.

Billing and termination

Pricing conditions are presented when subscribing to the service.
Termination takes effect at the end of the current subscription period unless otherwise specified in the contract.
When termination becomes effective, access to the service and active synchronisations is discontinued.

Responsibilities

CalMedi deploys the necessary means to ensure an available and secure service.
CalMedi cannot be held liable for incorrect configuration of the connected calendars.
Users remain responsible for the information they enter and the exchanges performed through their linked calendars.

Contact and support

For any question about these terms, contact support@calmedi.io.
Regulatory requests may also be sent by post to the address listed in the legal notice.