Last updated: December 15, 2025
The General Data Protection Regulation (GDPR) provides individuals in the European Union with comprehensive rights regarding their personal data. At Elynos, we are committed to ensuring you can exercise these rights easily and transparently.
Important: Our drug interaction checking service does not collect, store, or process any personal health information (PHI) or patient data. All drug interaction analysis is performed on anonymized drug names and combinations only.
You have the right to request and receive a copy of the personal data we hold about you. This includes:
How to exercise: Send us an email with your request. We will respond within 30 days.
You have the right to have inaccurate personal data corrected and incomplete data completed. If you notice any errors in the information we hold about you, please contact us to have it corrected.
How to exercise: Contact us with the corrected information and we will update your records.
You have the right to request deletion of your personal data when:
Note: We may be required to retain certain data for legal or regulatory reasons even if you request deletion.
How to exercise: Send us a deletion request. We will process it within 30 days and confirm when deletion is complete.
You have the right to request that we limit how we use your personal data in certain circumstances, such as:
How to exercise: Contact us with your request and the reason for restriction.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where:
How to exercise: Request your data in a portable format. We will provide it in JSON or CSV format.
You have the right to object to processing of your personal data when:
If you object, we will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
How to exercise: Contact us with your objection and we will assess and respond within 30 days.
If processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
How to exercise: Contact us or use unsubscribe links in our communications.
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local data protection authority:
We encourage you to contact us first so we can resolve any concerns directly.
To exercise any of your GDPR rights, please contact us using one of the following methods:
To help us process your request efficiently, please include:
We will respond to your request within 30 days of receipt. If your request is complex or we receive multiple requests, we may extend this period by an additional 60 days, in which case we will inform you within the first 30 days.
We process your personal data based on the following legal grounds:
The personal data we may process includes:
We do NOT process: Personal health information, patient data, medical records, or any clinical information.
Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure that such transfers comply with GDPR requirements through:
We retain your personal data only for as long as necessary to fulfill the purposes outlined in our Privacy Policy, unless a longer retention period is required or permitted by law. Generally:
We may update this GDPR Rights page from time to time to reflect changes in our practices or legal requirements. We encourage you to review this page periodically.