Oases Health trading as Trasna
Data Protection Consent Form

1. Purpose for which we process your personal data
   Oases Health Horizons Limited trading as Trasna (“Trasna”) has received a request, either from you or on your
   behalf, to arrange medical care for you in another European Member State, as per your rights under the
   European Cross-Border Healthcare Directive i.e. Directive 2011/24/EU.
   In order to arrange for this medical care (“the Services”), we are required to use or otherwise process personal
   data about you, which is likely to include data in relation to your health and potentially your genetics (hereinafter
   collectively referred to as “personal data”). In this regard we will act as a data controller in relation to your
   personal data.
2. Basis upon which we process your personal data – consent
   We will rely on your consent to us processing your personal data in this way and if you do not consent to us
   processing your personal data, we will not be in a position to provide the Services to you.
   By providing us with your consent, you are consenting to us processing your data for the purposes of the
   Services, which will include:-

• Making contact with healthcare facilities in another member state outlining your health status and
  seeking confirmation of waiting times and potential cost for the required health services;
• We will not process your personal data for any purpose other than for the Services.

1. Who will have access to my personal data?
   Those parties who might have access to your personal data in the course of the Services include all employees
   and agents of Trasna, as well as potential healthcare treatment facilities, actual healthcare treatment facilities
   and our chosen and trusted professional support service providers.
   Where we instruct an individual or organisation to process data on our behalf and in doing so they have access
   to your personal data i.e. a data processor, we will firstly ensure that a legal contract is in place with that person
   confirming that they have appropriate technical and organisational measures in place to securely process your
   data, which includes being ISO 270001 compliant, and confirming that the data will not be used for any purpose
   outside of our instructions.
2. Processing your personal data outside the European Economic Area (“EEA”)
   We generally do not process data outside of the EEA however, in the unlikely event that we are required to do
   so, we will take all steps required to ensure our obligations under data protection legislation have been complied
   with.
3. How long will my data be retained by Trasna?
   Trasna will generally retain your personal data for a period of up to 4 years, however this period may be extended
   where we believe we have a justifiable basis (other than consent) for continuing to process your personal data
   for e.g. anticipating the defence of a legal claim in light of a particular incident. Please note that where you seek
   Page 2 of 2
   to exercise your rights such as your right to erasure of your personal data this will be subject to the
   aforementioned retention timeframes.
4. What are my rights in relation my personal data?
   Under data protection legislation you have a number of general rights in relation to your personal data. These
   include the right to: request from us access to and a copy of your personal data; request from us the rectification
   or erasure of your personal data; request from us the restriction of processing or to object to the processing of
   your personal data; request from us a copy of all personal data we hold about you in a structured, commonly
   used, machine readable format and/or request that all such data is transferred to another data controller i.e.
   data portability.
   You also have the right to lodge a complaint to the Data Protection Commission by emailing
   info@dataprotection.ie if you believe that we have not complied with the requirements of data protection
   legislation with regard to your personal data. You can also submit an enquiry or complaint directly to us by
   emailing info@oaseshealth.com
   Consent*
   I confirm that I have read and understand the contents of this form and I hereby consent to the processing of
   my personal data, to include my health data and genetic data where relevant, in accordance herewith for the
   purpose of carrying out the Services:-
   Signed:_________________
   Print name:______________
   Date: ___________________
   OR
   Consent by Authority*
   I confirm that I am signing this form on behalf of _______________ (“the Patient”) who has duly
   authorised me to do so on his/her behalf. I further confirm that I have read the entire contents of this form to
   the Patient who fully understands the contents hereof and I hereby confirm the Patient’s consent to the
   processing of his/her personal data, to include health data and genetic data where relevant, in accordance
   herewith for the purpose of carrying out the Services:-
   Signed:_________________
   Print name:______________
   Date: ___________________
   *PLEASE NOTE THAT, SUBJECT TO POINT 5 ABOVE, YOU ARE ENTITLED TO WITHDRAW YOUR CONSENT TO
   OASES PROCESSING YOUR PERSONAL DATA AT ANY TIME.