Privacy Policy
Last updated: October 2026
This policy covers the surgitwin.com website and its access request form. Twinsight SAS processes your personal data in accordance with the General Data Protection Regulation (GDPR, Regulation EU 2016/679).
1. Data controller
Twinsight SAS, 43 rue Lachmann, 38000 Grenoble, France. RCS Grenoble B 882 692 320. Contact: contact@twinsight-medical.com.
2. Data we collect
Through the access request form: name, professional email address, medical center, country, implants used, annual TKA volume, enabling technologies and, if you give it, your phone number.
To protect the form against spam, our server counts the requests sent from each IP address in a day. It keeps a one-way hash of your IP address, never the address itself, and deletes it at the end of the day.
The website sets no analytics or advertising cookies.
3. Purpose and legal basis
| Purpose | Legal basis |
|---|---|
| Handle your access request, open your SurgiTwin account and follow up with you | Consent (Art. 6.1.a GDPR), given with the checkbox of the form |
| Protect the form against spam and abuse | Legitimate interest (Art. 6.1.f GDPR) |
4. Recipients
Your request is read by the Twinsight staff in charge of access requests. It is handled with the help of the following processors:
- Google (Firebase and Google Cloud): hosting of the website, and storage of the requests in the European Union;
- Twilio (SendGrid): delivery of the notification email to our team.
No data is sold or rented to third parties.
5. Transfers outside the EU
Google and Twilio may process data outside the European Union. These transfers are covered by the European Commission's standard contractual clauses and, for certified US companies, by the EU-US Data Privacy Framework.
6. Retention
Access requests are deleted automatically 3 years after they are received. If your account is opened, its data is governed by the SurgiTwin terms of use.
7. Your rights
You can access, rectify or erase your data, restrict or object to its processing, ask for its portability, and withdraw your consent at any time. Write to contact@twinsight-medical.com with the subject "Exercise of my GDPR rights". We answer within one month.
You can also lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France (www.cnil.fr).