Consent to Data Processing

1. 1) Purpose of processing
2. 2) Sensitive health data (STI test results)
3. 3) Types of data we process
4. 4) Legal basis for processing
5. 5) Withdrawal of consent
6. 6) Your rights
7. 7) Contact

By using AskBefore's services, you acknowledge and agree that we may process your personal data in order to:

• provide you with access to the AskBefore platform and your user account;
• allow you to book STI-related services with partner clinics;
• facilitate secure sharing of encrypted STI test results;
• send service-related communications (e.g. appointment updates, technical notifications);
• comply with legal obligations and ensure platform security.

We only process data that is necessary for these purposes and as described in our Privacy Policy.

If you choose to upload STI test results or other medical files, they are:

• encrypted on your device before upload (end-to-end encryption, or E2EE),
• stored only in encrypted form,
• never accessible or readable by AskBefore, its employees, or any third parties.

We do not access, read, or decrypt the contents of your medical documents. Only you and the recipients you explicitly authorize can access them.

Depending on how you use our platform, we may process:

• contact information (e.g. email address),
• booking data (e.g. clinic, test type, date/time),
• communication metadata (e.g. message timestamps),
• encrypted uploads and related metadata (e.g. upload time, sharing status),
• optional feedback and account preferences.

We do not sell your data or use it for profiling or advertising.

We rely on the following legal bases to process your data:

• Your consent, as provided through this document;
• Performance of a contract, to deliver services you request;
• Compliance with legal obligations, where applicable;
• Legitimate interests, such as fraud prevention, platform optimization, and analytics — without infringing on your rights or freedoms.

You may withdraw your consent at any time by:

• contacting us at hello@askbefore.eu, or
• deleting your account via https://app.askbefore.eu/account-settings.

Please note that withdrawal does not affect processing already lawfully carried out before your withdrawal.

As a data subject under the GDPR or equivalent laws, you may have the right to:

• access your data;
• request correction or deletion;
• object to processing;
• request data portability;
• file a complaint with a supervisory authority.

For more details, refer to our Privacy Policy or contact us.

Data Controller:
AskBefore UG (haftungsbeschränkt)
Berlin, Germany
Email: hello@askbefore.eu