Graid - System Architecture Blueprint

Company Data
Name: Graid IT Solutions Kft.
Address: 1117 Budapest, Nádorliget utca 5. B. lház. VII. em. 702. ajtó
Tax number: 26303657-2-43
Company registry number: 01-09-323051
Court of registration: Company Registry Court of Budapest
Representative: Dr. Bence Nemeth, Managing Director
Email: info@graid.io
Phone: +36 30 502 8301

Hosting Provider
Name: Google Ireland Limited (Firebase Hosting)
Address: Gordon House, Barrow Street, Dublin 4, Ireland
Contact: firebase.google.com/support

1. Data Controller
The data controller is Graid IT Solutions Kft. (address: 1117 Budapest, Nádorliget utca 5. B. lház. VII. em. 702. ajtó, tax number: 26303657-2-43, email: info@graid.io).

2. Legal Basis and Principles
Your personal data is processed in compliance with the GDPR (General Data Protection Regulation). The legal basis for processing is user consent (Article 6(1)(a) GDPR) or performance of a contract (Article 6(1)(b) GDPR).

3. Scope and Purpose of Data Processing
We process personal data necessary for communication, recruitment, and service fulfillment. DICOM medical images are anonymized in your browser before upload. However, free-text messages and attached PDF documents may contain personal health data. By submitting these, you give explicit consent (GDPR Article 9) for us to process this health data to fulfill the requested service. By providing your email, you also consent to receiving service-related medical information via standard email (which is secured via TLS).

4. Data Retention Period
Billing data is retained for 8 years in accordance with accounting laws. Other communication data is kept until the purpose is fulfilled or until the user requests deletion.

5. Data Processors and Third Parties
We use dicomlibrary.com to process and store DICOM images based on your explicit consent (GDPR Art. 9), as it is an external service without a direct DPA. Before upload, DICOM metadata is automatically anonymized in your browser. Other infrastructure providers (Cloudflare, Google Workspace, Firebase, Szamlazz.hu) process data under strict DPAs. We do not share data for marketing.

6. Data Security
Your data is protected using industry-standard encryption. The removal of metadata (anonymization) from medical images (DICOM) occurs directly on your device before the upload begins.

7. Cookies
We do not use any cookies (neither analytical nor marketing) on our website, ensuring your browsing remains completely private.

8. Rights and Remedies
You may request access to, correction, deletion, or restriction of your data at info@graid.io. In case of unlawful data processing, you can lodge a complaint with the National Authority for Data Protection and Freedom of Information (NAIH, www.naih.hu).

1. General Provisions
These General Terms and Conditions (GTC) apply to all services provided by Graid IT Solutions Kft. By using the website or submitting a form, the user accepts these terms.

2. Service Nature and Disclaimer
The 'Second Opinion' service provides information and expert consultation. It does not replace an acute or urgent physical medical examination and does not constitute emergency care. Graid IT Solutions Kft. provides technical solutions, but the ultimate responsibility for medical diagnosis rests with the treating physician.

3. Contract Formation
The contract is formed after the user initiates contact and subsequently accepts (via email) a specific, individualized quote provided by the Service Provider.

4. Pricing and Payment Terms
Service fees are determined based on the prior individualized quote. Payment is made via bank transfer upon fulfillment of the service, based on the issued electronic invoice, which is automatically generated and securely sent via our billing partner, Szamlazz.hu.

5. User Responsibility and Data Security
Users must ensure they are authorized to upload data. While DICOM metadata is anonymized in the browser, personal data visually burned into images or within PDF attachments is not. By using the service, you consent to storing images on DicomLibrary's servers and assume responsibility for any remaining personal data. We accept no liability for their data management.

6. Right of Withdrawal
Consumers (individuals) have the right to withdraw from the contract without giving any reason within 14 days of its conclusion. This right is lost if the Service Provider has fully performed the service with the consumer's explicit prior consent.

7. Limitation of Liability
The Service Provider assumes no liability for damages arising from the quality of the uploaded data or inaccurate information provided by the user.

8. Complaint Handling and Governing Law
Parties shall attempt to resolve disputes amicably. In case of consumer disputes, an Arbitration Board may be approached. Matters not regulated in this contract shall be governed by Hungarian law.