Privacy statement

Privacy Policy

ExorLive is committed to protecting your privacy and developing technology that gives you the most powerful and safe online experience. This Statement of Privacy applies to the ExorLive Website and mobile platforms and Apps owned and controlled by ExorLive (hereafter collectively named “ExorLive”) and governs data collection and usage. By using the ExorLive, you consent to the data practices described in this statement.


Collection of your Personal Information

ExorLive collects personally identifiable information, such as your e-mail address, name, home or work address or telephone number. ExorLive also collects anonymous demographic information, which is not unique to you, such as your ZIP code, age, gender, preferences, interests and favorites.

There is also information about your computer hardware and software that is automatically collected by ExorLive. This information can include: your IP address, browser type, domain names, access times and referring Web site addresses. This information is used by ExorLive for the operation of the service, to maintain quality of the service, and to provide general statistics regarding use of the ExorLive Web site.

Please keep in mind that if you directly disclose personally identifiable information or personally sensitive data through ExorLive public message boards, this information may be collected and used by others. Note: ExorLive does not read any of your private online communications.

ExorLive encourages you to review the privacy statements of Websites you choose to link to from ExorLive so that you can understand how those Web sites collect, use and share your information. ExorLive is not responsible for the privacy statements or other content on Web sites outside of the ExorLive and ExorLive family of Web sites.


Information about Children

ExorLive is not intended for or targeting children under the age of 13, and we do not knowingly or intentionally collect information about children under the age of 13. If you believe that we have collected information about children under the age of 13, please contact us at dpo@exorlive.com.


Use of Your Personal Information

ExorLive collects and uses your personal information to operate the ExorLive Web site and deliver the services you have requested. ExorLive also uses your personally identifiable information to inform you of other products or services available from ExorLive and its affiliates. ExorLive may also contact you via surveys to conduct research about your opinion of current services or of potential new services that may be offered.

ExorLive does not sell, rent or lease its customer lists to third parties. ExorLive may, from time to time, contact you on behalf of external business partners about a particular offering that may be of interest to you. In those cases, your unique personally identifiable information (e-mail, name, address, telephone number) is not transferred to the third party. In addition, ExorLive may share data with trusted partners to help us perform statistical analysis, send you email or postal mail, provide customer support, or arrange for deliveries. All such third parties are prohibited from using your personal information except to provide these services to ExorLive, and they are required to maintain the confidentiality of your information.

ExorLive does not use or disclose sensitive personal information, such as race, religion, or political affiliations, without your explicit consent.

ExorLive keeps track of the Web sites and pages our customers visit within ExorLive, in order to determine what ExorLive services are the most popular. This data is used to deliver customized content and advertising within ExorLive to customers whose behavior indicates that they are interested in a particular subject area.

ExorLive Web sites will disclose your personal information, without notice, only if required to do so by law or in the good faith belief that such action is necessary to: (a) conform to the edicts of the law or comply with legal process served on ExorLive or the site; (b) protect and defend the rights or property of ExorLive; and, (c) act under exigent circumstances to protect the personal safety of users of ExorLive, or the public.


Use of Cookies

The ExorLive Web site use "cookies" to help you personalize your online experience. A cookie is a text file that is placed on your hard disk by a Web page server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you, and can only be read by a web server in the domain that issued the cookie to you.

One of the primary purposes of cookies is to provide a convenience feature to save you time. The purpose of a cookie is to tell the Web server that you have returned to a specific page. For example, if you personalize ExorLive pages, or register with ExorLive site or services, a cookie helps ExorLive to recall your specific information on subsequent visits. This simplifies the process of recording your personal information, such as billing addresses, shipping addresses, and so on. When you return to the same ExorLive Web site, the information you previously provided can be retrieved, so you can easily use the ExorLive features that you customized.

You have the ability to accept or decline cookies. Most Web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. If you choose to decline cookies, you may not be able to fully experience the interactive features of the ExorLive services or Web sites you visit.


Security of your Personal Information

ExorLive secures your personal information from unauthorized access, use or disclosure. ExorLive secures the personally identifiable information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use or disclosure. When personal information (such as a credit card number) is transmitted to other Web sites, it is protected through the use of encryption, such as the Secure Socket Layer (SSL) protocol.

Security in ExorLive is enforced by a strict security policy, and does not permit entities to be accessed or manipulated across organisations. Within the organisation, security is role based and users can be given administrative roles on a unit/department level.

The application is always accessed over SSL, safeguarding the information being exchanged between the client and the server from eavesdropping. ExorLive store only a hash of the user’s password, and when authenticating through ExorLive’s regular interface, salt, hashing, and a short lived challenge is used to ensure that message replay cannot be used to wrongfully gain access.

External services are required to use the SSL enabled endpoints to ensure transport security. The system provides integrity by ensuring that users are not able to insert or edit entities, they are not authorized for. Actions are logged.

Safety measures and procedures against external attacks: We are partners with Microsoft and keep our technical staff updated on the current system and security solutions; Through Azure, we ensure with Microsoft that our services are always up to date on security and latest security patches; Always running the latest version of important software; Logging of all attempts at login; Performance of manual vulnerability tests.

ExorLive satisfies the requirement for built-in privacy.

ExorLive is classified as a medical software in risk Class 1. This is the lowest risk class.


Retention of Personal Information

We retain Personal Information that you provide us as long as we consider it potentially useful in contacting you about the Subscription Service or our other services, or as needed to comply with our legal obligations, resolve disputes and enforce our agreements, and then we securely delete the information. We will delete this information from the servers at an earlier date if you so request, as described in "Opting Out and Unsubscribing". If you provide information to our customers as part of their use of the Subscription Service, our customers decide how long to retain the personal information they collect from you. If a customer terminates its use of the Subscription Service, then we will provide customer with access to all information stored for the customer by the Subscription Service, including any Personal Information provided by you, for export by the customer according to our agreement with our customer. After termination, we may, unless legally prohibited, delete all customer information, including your Personal Information, from the Subscription Service.


International Transfer of Information

All data is replicated on multiple servers real-time, and Backups are stored on Microsoft Azure Servers located in Dublin, Ireland. ExorLive process and store data in accordance with current EU directives. The servers are administered by limited number of authorized technical personnel at ExorLive Headquarter in Oslo, Norway. Degree of anonymization can be chosen by the organisation. ExorLive encrypt data traffic through HTTPS.


Data Processor Agreement

The purpose of processing personal data is to create training programs and plans that the patient or member can perform. In this connection, you can choose which personal information is included. The most common is the name, email and training data linked to this. It is up to the Customer how much personal information they submit and this is further regulated in the agreement with the Professional User or in our License Agreement. Everyone who collects or uses personal data must enter into a Data Processor Agreement with ExorLive, where the Customer is the owner of the data (datacontroller) and ExorLive is the data processor. It is the responsibility of the datacontroller that such an agreement is in place. ExorLive’s License Agreement regulates data protection in general, and ExorLive’s Data Processor Agreement is a standard Agreement the Customer can enter into. Where the Customer wants additional protection clauses or services we customize the Data Processor Agreement.


Changes to this Statement

ExorLive will occasionally update this Statement of Privacy to reflect company and customer feedback. ExorLive encourages you to periodically review this Statement to be informed of how ExorLive is protecting your information.


Contact Information

ExorLive welcomes your comments regarding this Statement of Privacy. If you believe that ExorLive has not adhered to this Statement, please contact ExorLive at dpo@exorlive.com. We will use commercially reasonable efforts to promptly determine and remedy the problem.