Privacy Policy

ARDS Industries Ltd. – website www.ardsimplants.com and electronic instructions for use portal www.ai-ifu.com
Version 1.0- effective date: 27.09.2026

1. Who we are

This policy explains how ARDS Industries Ltd. ("ARDS", "we", "us") processes personal data when you visit www.ardsimplants.com, access our electronic instructions for use (eIFU) through www.ai-ifu.com, or contact us. It is provided in accordance with Articles 12 to 14 of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Article 7(2)(d) of Commission Implementing Regulation (EU) 2021/2226 on electronic instructions for use of medical devices.

Controller

ARDS  Industries Ltd.
POB 6762, Petah Tikva 4934829, Israel
Phone: +972 4 381 2333

Privacy contact

E-mail:  info@ardsimplants.com
Post: as above, marked "Privacy"

Representative in the EU (Art. 27  GDPR)

AR Expert B.V Boeing Avenue 209, 1119 PD Schiphol-Rijk, The Netherlands Tel: +31(0)85-007-3210 info@certification-experts.com

Data protection officer

ARDS has not appointed a data protection officer, as the conditions of Art. 37 GDPR do not apply. Privacy questions can be sent to the privacy contact above to info@ardsimplants.com

2. Using the eIFU portal without providing personal data

You can view and download our instructions for use without registering, logging in or providing your name or contact details. The region, product category, language and REF (catalogue) number you select or enter are used only to show you the correct documents and are not linked to your identity.

Instructions for use are provided as PDF files that can be opened with any free PDF reader. Downloading a PDF does not send personal data to ARDS beyond the technical data described in section 3.1.

3. What we process, why, on which legal basis and for how long

3.1 Technical data when you visit the website or the eIFU portal

Data

IP address, date and time of the request, page or file requested, browser type and version, operating system, referring page, and the HTTP status of the request.

Purpose

To deliver the website and the instruction files to your device, to keep the service secure and available, to protect the instruction files against unauthorized modification, and to investigate faults and attacks. The last three purposes are also required by Article 7(2)(b) and (c) of Regulation (EU) 2021/2226.

Legal basis

Art. 6(1)(f) GDPR – our legitimate interest in operating a secure and available website and eIFU service.

Retention

Server logs are kept by our hosting provider for 1 day and then deleted, unless they are needed to investigate a specific security incident.

3.2 Requests for a paper copy of the instructions for use

You can request a paper copy of any of our instructions for use free of charge. We send it within 7 calendar days of receiving the request. If you ask for it when you place your order, we deliver it with the device. To request a copy, e-mail- info@ardsimplants.com, call +972 4 381 2333, or contact your local ARDS distributor.

Data

Name, clinic or organization, delivery address, e-mail address, telephone number, and the product (REF number, lot number) and language requested.

Purpose

To send you the paper copy and to keep a record that the request was fulfilled.

Legal basis

Art. 6(1)(c) GDPR – legal obligation under Article 5(3) of Regulation (EU)  2021/2226 to supply a paper copy on request.

Retention

15 years after the request, in line with ARDS's quality-record retention procedure.

Is the data required?

Yes. Without a name and delivery address we cannot send the paper copy.

3.3 Enquiries by e-mail, telephone or through distributors

Data

Name, organization, contact details and the content of your message.

Purpose

To answer your enquiry and, where relevant, to handle orders and the business relationship.

Legal basis

Art. 6(1)(b) GDPR, where the enquiry relates to a contract or steps before a contract; otherwise, Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries.

Retention

Enquiries that do not lead to an order, a complaint or a paper-copy request are deleted 3 years after the enquiry has been closed. Where an enquiry leads to an order, the order records are kept for the period required by commercial and tax law. Where it concerns a complaint or an incident, section 3.4 applies.

If you contact us through the form on our "Get in touch" page, including requests for a paper copy of the instructions for use, the form is provided by POWr.io, Inc. (USA). POWr processes the data you enter on our behalf, as our processor, and forwards it to us.

‍

3.4 Complaints, adverse events and serious incidents (vigilance)

If you report a complaint, a malfunction or an incident involving an ARDS device, we process the information needed to investigate it and to meet our obligations as a medical device manufacturer.

Data

Reporter's name, organization and contact details. Details of the device (REF, lot) and of the event. Where necessary for the investigation, limited information about the patient, such as age, sex, the clinical course and the treatment given. This may include health data.

Purpose

Complaint handling, post-market surveillance, and vigilance reporting to competent authorities and our notified body.

Legal basis

Art. 6(1)(c) GDPR – legal obligations under Regulation (EU) 2017/745 (MDR), in particular Articles 10, 83 and 87. For health data: Art. 9(2)(i) GDPR- reasons of public interest in ensuring high standards of quality and safety of medical devices.

Retention

For the period required by the MDR for the technical and post-market surveillance documentation: at least 15 years after the last device of the type concerned has been placed on the market.

Please do not send us the patient's name or other directly identifying details. Use a case or patient code instead. If identifying details are received, we pseudonymize them.

3.5 Links to social media

Our website contains links to our pages on Facebook, Instagram, LinkedIn and X (Twitter). These are plain links: no data is sent to these platforms until you click a link. After you leave our website, the privacy policy of the platform applies.

‍

3.6 Fonts and technical libraries loaded from third parties

To display the website, your browser loads fonts and program libraries directly from the providers listed below. When this happens, your IP address and technical browser data (browser type, requested file, time of request) are transmitted to the provider. We do not pass any other information to these providers.

· Adobe Fonts (use.typekit.net) – Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland, and Adobe Inc., USA. Adobe may log information about the fonts served for licence-compliance purposes.

· jQuery library – delivered through the content-delivery network used by our hosting provider Webflow (Amazon CloudFront).

Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in a consistent and reliable presentation of the website. For transfers to the USA, see section 6.

· Google Fonts and Google Hosted Libraries (fonts.googleapis.com, fonts.gstatic.com, ajax.googleapis.com) – Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, USA.

‍

Our website uses only cookies and similar technologies that are srictly necessary to provide the service you request, such as remembering your language selection. These do not require your consent (Article 5(3) of Directive 2002/58/EC). We do not use analytics, advertising or tracking cookies.

Name

_cfuvid

Provider

Cloudflare

Purpose

Distinguishes individual visitors sharing the same IP address, to apply security/rate-limiting protections against malicious traffic

Duration

Session

‍

Name

siteLang

Provider

ARDS (local storage in your browser)

Purpose

Remembers the language you selected for the website and the instructions for use

Duration

Until you clear your browser storage

‍

Name

siteTranslationsCache

Provider

ARDS (local storage in your browser)

Purpose

Stores the website text in your selected language on your device, so that pages load faster

Duration

Until you clear your browser storage

‍

Items in local storage stay on your device and are not sent to us.

‍

5. Who receives your data

· Website hosting: Webflow, Inc., USA, and its content-delivery sub-processors host the website and the instruction files. They act as our processor under a data processing agreement.

· E-mail and IT services: Google Ireland Limited (Google Workspace), acting as our processor.

· Security service: Cloudflare, Inc., USA – protection of the website against malicious traffic (cookie _cfuvid).

· Contact form: POWr.io, Inc., USA – provides the "Get in touch" form, including paper- copy requests, as our processor.

· Font and library providers: Google and Adobe – delivery of fonts and program libraries (see section 3.6).

· ARDS distributors: where a distributor delivers the paper copy or handles your enquiry in your country.

· Authorities and our notified body: competent authorities and our notified body, where required for vigilance and post-market surveillance under the MDR.

· Professional advisers and courts: where necessary to establish, exercise or defend legal claims.

We do not sell personal data, and we do not use it for advertising.

6. International transfers

ARDS is established in Israel. The European Commission has recognized that Israel provides an adequate level of data protection (Commission Decision 2011/61/EU), so no additional safeguards are needed for transfers from the EEA to ARDS.

Where data is transferred to service providers in the USA or other third countries, we rely on one of two safeguards:

· the EU–U.S. Data Privacy Framework, where the recipient is certified; or

· otherwise, the Standard Contractual Clauses adopted by the European Commission (Implementing Decision (EU) 2021/914), with supplementary measures where needed.

You can request a copy of these safeguards from the privacy contact.

7. Security

The website and the eIFU portal are delivered only over encrypted connections (HTTPS/TLS). Instruction files are uploaded only by authorized ARDS personnel under our document-control procedure and are verified against the controlled master copy before publication. Access to personal data is limited to the staff who need it for the purposes above.

8. Your rights

Under the GDPR you have the right to:

· access your personal data and receive a copy (Art. 15);

· have inaccurate data corrected (Art. 16);

· have your data erased (Art.17);

· restrict processing (Art. 18);

· receive data you provided in a portable format (Art. 20);

· object at any time to processing based on our legitimate interest (Art. 21);

· withdraw consent at any time, where processing is based on consent (Art. 7(3)).

Some of these rights are limited where we must keep data to meet a legal obligation, for example vigilance records under the MDR.

To exercise your rights, contact the privacy contact in section 1. We answer within one month; this can be extended by two further months for complex requests, in which case we will tell you. We may ask you to confirm your identity.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). You can do this in particular in the EU Member State where you live or work, or where you believe the infringement took place. The list of authorities is available at edpb.europa.eu.

9. Automated decisions

We do not make decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you.

10. Professional users

Our website and instructions for use are intended for dental professionals. They are not directed at children, and we do not knowingly collect data from children.

11. Changes to this policy

We review this policy when our processing changes, and at least once a year. The current version and its effective date are shown at the top of this page. Previous versions are available on request from the privacy contact.

‍

Privacy Policy

ARDS Industries Ltd. – website www.ardsimplants.com and electronic instructions for use portal www.ai-ifu.com
Version 1.0- effective date: 27.09.2026

1. Who we are

This policy explains how ARDS Industries Ltd. ("ARDS", "we", "us") processes personal data when you visit www.ardsimplants.com, access our electronic instructions for use (eIFU) through www.ai-ifu.com, or contact us. It is provided in accordance with Articles 12 to 14 of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Article 7(2)(d) of Commission Implementing Regulation (EU) 2021/2226 on electronic instructions for use of medical devices.

Controller

ARDS  Industries Ltd.
POB 6762, Petah Tikva 4934829, Israel
Phone: +972 4 381 2333

Privacy contact

E-mail:  info@ardsimplants.com
Post: as above, marked "Privacy"

Representative in the EU (Art. 27  GDPR)

AR Expert B.V Boeing Avenue 209, 1119 PD Schiphol-Rijk, The Netherlands Tel: +31(0)85-007-3210 info@certification-experts.com

Data protection officer

ARDS has not appointed a data protection officer, as the conditions of Art. 37 GDPR do not apply. Privacy questions can be sent to the privacy contact above to info@ardsimplants.com

2. Using the eIFU portal without providing personal data

You can view and download our instructions for use without registering, logging in or providing your name or contact details. The region, product category, language and REF (catalogue) number you select or enter are used only to show you the correct documents and are not linked to your identity.

Instructions for use are provided as PDF files that can be opened with any free PDF reader. Downloading a PDF does not send personal data to ARDS beyond the technical data described in section 3.1.

3. What we process, why, on which legal basis and for how long

3.1 Technical data when you visit the website or the eIFU portal

Data

IP address, date and time of the request, page or file requested, browser type and version, operating system, referring page, and the HTTP status of the request.

Purpose

To deliver the website and the instruction files to your device, to keep the service secure and available, to protect the instruction files against unauthorized modification, and to investigate faults and attacks. The last three purposes are also required by Article 7(2)(b) and (c) of Regulation (EU) 2021/2226.

Legal basis

Art. 6(1)(f) GDPR – our legitimate interest in operating a secure and available website and eIFU service.

Retention

Server logs are kept by our hosting provider for 1 day and then deleted, unless they are needed to investigate a specific security incident.

3.2 Requests for a paper copy of the instructions for use

You can request a paper copy of any of our instructions for use free of charge. We send it within 7 calendar days of receiving the request. If you ask for it when you place your order, we deliver it with the device. To request a copy, e-mail- info@ardsimplants.com, call +972 4 381 2333, or contact your local ARDS distributor.

Data

Name, clinic or organization, delivery address, e-mail address, telephone number, and the product (REF number, lot number) and language requested.

Purpose

To send you the paper copy and to keep a record that the request was fulfilled.

Legal basis

Art. 6(1)(c) GDPR – legal obligation under Article 5(3) of Regulation (EU)  2021/2226 to supply a paper copy on request.

Retention

15 years after the request, in line with ARDS's quality-record retention procedure.

Is the data required?

Yes. Without a name and delivery address we cannot send the paper copy.

3.3 Enquiries by e-mail, telephone or through distributors

Data

Name, organization, contact details and the content of your message.

Purpose

To answer your enquiry and, where relevant, to handle orders and the business relationship.

Legal basis

Art. 6(1)(b) GDPR, where the enquiry relates to a contract or steps before a contract; otherwise, Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries.

Retention

Enquiries that do not lead to an order, a complaint or a paper-copy request are deleted 3 years after the enquiry has been closed. Where an enquiry leads to an order, the order records are kept for the period required by commercial and tax law. Where it concerns a complaint or an incident, section 3.4 applies.

If you contact us through the form on our "Get in touch" page, including requests for a paper copy of the instructions for use, the form is provided by POWr.io, Inc. (USA). POWr processes the data you enter on our behalf, as our processor, and forwards it to us.

‍

3.4 Complaints, adverse events and serious incidents (vigilance)

If you report a complaint, a malfunction or an incident involving an ARDS device, we process the information needed to investigate it and to meet our obligations as a medical device manufacturer.

Data

Reporter's name, organization and contact details. Details of the device (REF, lot) and of the event. Where necessary for the investigation, limited information about the patient, such as age, sex, the clinical course and the treatment given. This may include health data.

Purpose

Complaint handling, post-market surveillance, and vigilance reporting to competent authorities and our notified body.

Legal basis

Art. 6(1)(c) GDPR – legal obligations under Regulation (EU) 2017/745 (MDR), in particular Articles 10, 83 and 87. For health data: Art. 9(2)(i) GDPR- reasons of public interest in ensuring high standards of quality and safety of medical devices.

Retention

For the period required by the MDR for the technical and post-market surveillance documentation: at least 15 years after the last device of the type concerned has been placed on the market.

Please do not send us the patient's name or other directly identifying details. Use a case or patient code instead. If identifying details are received, we pseudonymize them.

3.5 Links to social media

Our website contains links to our pages on Facebook, Instagram, LinkedIn and X (Twitter). These are plain links: no data is sent to these platforms until you click a link. After you leave our website, the privacy policy of the platform applies.

‍

3.6 Fonts and technical libraries loaded from third parties

To display the website, your browser loads fonts and program libraries directly from the providers listed below. When this happens, your IP address and technical browser data (browser type, requested file, time of request) are transmitted to the provider. We do not pass any other information to these providers.

· Adobe Fonts (use.typekit.net) – Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland, and Adobe Inc., USA. Adobe may log information about the fonts served for licence-compliance purposes.

· jQuery library – delivered through the content-delivery network used by our hosting provider Webflow (Amazon CloudFront).

Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in a consistent and reliable presentation of the website. For transfers to the USA, see section 6.

‍

Our website uses only cookies and similar technologies that are srictly necessary to provide the service you request, such as remembering your language selection. These do not require your consent (Article 5(3) of Directive 2002/58/EC). We do not use analytics, advertising or tracking cookies.

Name

_cfuvid

Provider

Cloudflare

Purpose

Distinguishes individual visitors sharing the same IP address, to apply security/rate-limiting protections against malicious traffic

Duration

Session

‍

Name

siteLang

Provider

ARDS (local storage in your browser)

Purpose

Remembers the language you selected for the website and the instructions for use

Duration

Until you clear your browser storage

‍

Name

siteTranslationsCache

Provider

ARDS (local storage in your browser)

Purpose

Stores the website text in your selected language on your device, so that pages load faster

Duration

Until you clear your browser storage

‍

Items in local storage stay on your device and are not sent to us.

‍

5. Who receives your data

· Website hosting: Webflow, Inc., USA, and its content-delivery sub-processors host the website and the instruction files. They act as our processor under a data processing agreement.

· E-mail and IT services: Google Ireland Limited (Google Workspace), acting as our processor.

· Security service: Cloudflare, Inc., USA – protection of the website against malicious traffic (cookie _cfuvid).

· Contact form: POWr.io, Inc., USA – provides the "Get in touch" form, including paper- copy requests, as our processor.

· Font and library providers: Google and Adobe – delivery of fonts and program libraries (see section 3.6).

· ARDS distributors: where a distributor delivers the paper copy or handles your enquiry in your country.

· Authorities and our notified body: competent authorities and our notified body, where required for vigilance and post-market surveillance under the MDR.

· Professional advisers and courts: where necessary to establish, exercise or defend legal claims.

We do not sell personal data, and we do not use it for advertising.

6. International transfers

ARDS is established in Israel. The European Commission has recognized that Israel provides an adequate level of data protection (Commission Decision 2011/61/EU), so no additional safeguards are needed for transfers from the EEA to ARDS.

Where data is transferred to service providers in the USA or other third countries, we rely on one of two safeguards:

· the EU–U.S. Data Privacy Framework, where the recipient is certified; or

· otherwise, the Standard Contractual Clauses adopted by the European Commission (Implementing Decision (EU) 2021/914), with supplementary measures where needed.

You can request a copy of these safeguards from the privacy contact.

7. Security

The website and the eIFU portal are delivered only over encrypted connections (HTTPS/TLS). Instruction files are uploaded only by authorized ARDS personnel under our document-control procedure and are verified against the controlled master copy before publication. Access to personal data is limited to the staff who need it for the purposes above.

8. Your rights

Under the GDPR you have the right to:

· access your personal data and receive a copy (Art. 15);

· have inaccurate data corrected (Art. 16);

· have your data erased (Art.17);

· restrict processing (Art. 18);

· receive data you provided in a portable format (Art. 20);

· object at any time to processing based on our legitimate interest (Art. 21);

· withdraw consent at any time, where processing is based on consent (Art. 7(3)).

Some of these rights are limited where we must keep data to meet a legal obligation, for example vigilance records under the MDR.

To exercise your rights, contact the privacy contact in section 1. We answer within one month; this can be extended by two further months for complex requests, in which case we will tell you. We may ask you to confirm your identity.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). You can do this in particular in the EU Member State where you live or work, or where you believe the infringement took place. The list of authorities is available at edpb.europa.eu.

9. Automated decisions

We do not make decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you.

10. Professional users

Our website and instructions for use are intended for dental professionals. They are not directed at children, and we do not knowingly collect data from children.

11. Changes to this policy

We review this policy when our processing changes, and at least once a year. The current version and its effective date are shown at the top of this page. Previous versions are available on request from the privacy contact.

‍

Privacy Policy

ARDS Industries Ltd. – website www.ardsimplants.com and electronic instructions for use portal www.ai-ifu.com
Version 1.0- effective date: 27.09.2026

1. Who we are

This policy explains how ARDS Industries Ltd. ("ARDS", "we", "us") processes personal data when you visit www.ardsimplants.com, access our electronic instructions for use (eIFU) through www.ai-ifu.com, or contact us. It is provided in accordance with Articles 12 to 14 of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Article 7(2)(d) of Commission Implementing Regulation (EU) 2021/2226 on electronic instructions for use of medical devices.

Controller

ARDS  Industries Ltd.
POB 6762, Petah Tikva 4934829, Israel
Phone: +972 4 381 2333

Privacy contact

E-mail:  info@ardsimplants.com
Post: as above, marked "Privacy"

Representative in the EU (Art. 27  GDPR)

AR Expert B.V Boeing Avenue 209, 1119 PD Schiphol-Rijk, The Netherlands Tel: +31(0)85-007-3210 info@certification-experts.com

Data protection officer

ARDS has not appointed a data protection officer, as the conditions of Art. 37 GDPR do not apply. Privacy questions can be sent to the privacy contact above to info@ardsimplants.com

2. Using the eIFU portal without providing personal data

You can view and download our instructions for use without registering, logging in or providing your name or contact details. The region, product category, language and REF (catalogue) number you select or enter are used only to show you the correct documents and are not linked to your identity.

Instructions for use are provided as PDF files that can be opened with any free PDF reader. Downloading a PDF does not send personal data to ARDS beyond the technical data described in section 3.1.

3. What we process, why, on which legal basis and for how long

3.1 Technical data when you visit the website or the eIFU portal

Data

IP address, date and time of the request, page or file requested, browser type and version, operating system, referring page, and the HTTP status of the request.

Purpose

To deliver the website and the instruction files to your device, to keep the service secure and available, to protect the instruction files against unauthorized modification, and to investigate faults and attacks. The last three purposes are also required by Article 7(2)(b) and (c) of Regulation (EU) 2021/2226.

Legal basis

Art. 6(1)(f) GDPR – our legitimate interest in operating a secure and available website and eIFU service.

Retention

Server logs are kept by our hosting provider for 1 day and then deleted, unless they are needed to investigate a specific security incident.

3.2 Requests for a paper copy of the instructions for use

You can request a paper copy of any of our instructions for use free of charge. We send it within 7 calendar days of receiving the request. If you ask for it when you place your order, we deliver it with the device. To request a copy, e-mail- info@ardsimplants.com, call +972 4 381 2333, or contact your local ARDS distributor.

Data

Name, clinic or organization, delivery address, e-mail address, telephone number, and the product (REF number, lot number) and language requested.

Purpose

To send you the paper copy and to keep a record that the request was fulfilled.

Legal basis

Art. 6(1)(c) GDPR – legal obligation under Article 5(3) of Regulation (EU)  2021/2226 to supply a paper copy on request.

Retention

15 years after the request, in line with ARDS's quality-record retention procedure.

Is the data required?

Yes. Without a name and delivery address we cannot send the paper copy.

3.3 Enquiries by e-mail, telephone or through distributors

Data

Name, organization, contact details and the content of your message.

Purpose

To answer your enquiry and, where relevant, to handle orders and the business relationship.

Legal basis

Art. 6(1)(b) GDPR, where the enquiry relates to a contract or steps before a contract; otherwise, Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries.

Retention

Enquiries that do not lead to an order, a complaint or a paper-copy request are deleted 3 years after the enquiry has been closed. Where an enquiry leads to an order, the order records are kept for the period required by commercial and tax law. Where it concerns a complaint or an incident, section 3.4 applies.

If you contact us through the form on our "Get in touch" page, including requests for a paper copy of the instructions for use, the form is provided by POWr.io, Inc. (USA). POWr processes the data you enter on our behalf, as our processor, and forwards it to us.

‍

3.4 Complaints, adverse events and serious incidents (vigilance)

If you report a complaint, a malfunction or an incident involving an ARDS device, we process the information needed to investigate it and to meet our obligations as a medical device manufacturer.

Data

Reporter's name, organization and contact details. Details of the device (REF, lot) and of the event. Where necessary for the investigation, limited information about the patient, such as age, sex, the clinical course and the treatment given. This may include health data.

Purpose

Complaint handling, post-market surveillance, and vigilance reporting to competent authorities and our notified body.

Legal basis

Art. 6(1)(c) GDPR – legal obligations under Regulation (EU) 2017/745 (MDR), in particular Articles 10, 83 and 87. For health data: Art. 9(2)(i) GDPR- reasons of public interest in ensuring high standards of quality and safety of medical devices.

Retention

For the period required by the MDR for the technical and post-market surveillance documentation: at least 15 years after the last device of the type concerned has been placed on the market.

Please do not send us the patient's name or other directly identifying details. Use a case or patient code instead. If identifying details are received, we pseudonymize them.

3.5 Links to social media

Our website contains links to our pages on Facebook, Instagram, LinkedIn and X (Twitter). These are plain links: no data is sent to these platforms until you click a link. After you leave our website, the privacy policy of the platform applies.

‍

3.6 Fonts and technical libraries loaded from third parties

To display the website, your browser loads fonts and program libraries directly from the providers listed below. When this happens, your IP address and technical browser data (browser type, requested file, time of request) are transmitted to the provider. We do not pass any other information to these providers.

· Adobe Fonts (use.typekit.net) – Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland, and Adobe Inc., USA. Adobe may log information about the fonts served for licence-compliance purposes.

· jQuery library – delivered through the content-delivery network used by our hosting provider Webflow (Amazon CloudFront).

Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in a consistent and reliable presentation of the website. For transfers to the USA, see section 6.

‍

Our website uses only cookies and similar technologies that are srictly necessary to provide the service you request, such as remembering your language selection. These do not require your consent (Article 5(3) of Directive 2002/58/EC). We do not use analytics, advertising or tracking cookies.

Name

_cfuvid

Provider

Cloudflare

Purpose

Distinguishes individual visitors sharing the same IP address, to apply security/rate-limiting protections against malicious traffic

Duration

Session

‍

Name

siteLang

Provider

ARDS (local storage in your browser)

Purpose

Remembers the language you selected for the website and the instructions for use

Duration

Until you clear your browser storage

‍

Name

siteTranslationsCache

Provider

ARDS (local storage in your browser)

Purpose

Stores the website text in your selected language on your device, so that pages load faster

Duration

Until you clear your browser storage

‍

Items in local storage stay on your device and are not sent to us.

‍

5. Who receives your data

· Website hosting: Webflow, Inc., USA, and its content-delivery sub-processors host the website and the instruction files. They act as our processor under a data processing agreement.

· E-mail and IT services: Google Ireland Limited (Google Workspace), acting as our processor.

· Security service: Cloudflare, Inc., USA – protection of the website against malicious traffic (cookie _cfuvid).

· Contact form: POWr.io, Inc., USA – provides the "Get in touch" form, including paper- copy requests, as our processor.

· Font and library providers: Google and Adobe – delivery of fonts and program libraries (see section 3.6).

· ARDS distributors: where a distributor delivers the paper copy or handles your enquiry in your country.

· Authorities and our notified body: competent authorities and our notified body, where required for vigilance and post-market surveillance under the MDR.

· Professional advisers and courts: where necessary to establish, exercise or defend legal claims.

We do not sell personal data, and we do not use it for advertising.

6. International transfers

ARDS is established in Israel. The European Commission has recognized that Israel provides an adequate level of data protection (Commission Decision 2011/61/EU), so no additional safeguards are needed for transfers from the EEA to ARDS.

Where data is transferred to service providers in the USA or other third countries, we rely on one of two safeguards:

· the EU–U.S. Data Privacy Framework, where the recipient is certified; or

· otherwise, the Standard Contractual Clauses adopted by the European Commission (Implementing Decision (EU) 2021/914), with supplementary measures where needed.

You can request a copy of these safeguards from the privacy contact.

7. Security

The website and the eIFU portal are delivered only over encrypted connections (HTTPS/TLS). Instruction files are uploaded only by authorized ARDS personnel under our document-control procedure and are verified against the controlled master copy before publication. Access to personal data is limited to the staff who need it for the purposes above.

8. Your rights

Under the GDPR you have the right to:

· access your personal data and receive a copy (Art. 15);

· have inaccurate data corrected (Art. 16);

· have your data erased (Art.17);

· restrict processing (Art. 18);

· receive data you provided in a portable format (Art. 20);

· object at any time to processing based on our legitimate interest (Art. 21);

· withdraw consent at any time, where processing is based on consent (Art. 7(3)).

Some of these rights are limited where we must keep data to meet a legal obligation, for example vigilance records under the MDR.

To exercise your rights, contact the privacy contact in section 1. We answer within one month; this can be extended by two further months for complex requests, in which case we will tell you. We may ask you to confirm your identity.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). You can do this in particular in the EU Member State where you live or work, or where you believe the infringement took place. The list of authorities is available at edpb.europa.eu.

9. Automated decisions

We do not make decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you.

10. Professional users

Our website and instructions for use are intended for dental professionals. They are not directed at children, and we do not knowingly collect data from children.

11. Changes to this policy

We review this policy when our processing changes, and at least once a year. The current version and its effective date are shown at the top of this page. Previous versions are available on request from the privacy contact.

‍

Privacy Policy

ARDS Industries Ltd. – website www.ardsimplants.com and electronic instructions for use portal www.ai-ifu.com
Version 1.0- effective date: 27.09.2026

1. Who we are

This policy explains how ARDS Industries Ltd. ("ARDS", "we", "us") processes personal data when you visit www.ardsimplants.com, access our electronic instructions for use (eIFU) through www.ai-ifu.com, or contact us. It is provided in accordance with Articles 12 to 14 of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Article 7(2)(d) of Commission Implementing Regulation (EU) 2021/2226 on electronic instructions for use of medical devices.

Controller

ARDS  Industries Ltd.
POB 6762, Petah Tikva 4934829, Israel
Phone: +972 4 381 2333

Privacy contact

E-mail:  info@ardsimplants.com
Post: as above, marked "Privacy"

Representative in the EU (Art. 27  GDPR)

AR Expert B.V Boeing Avenue 209, 1119 PD Schiphol-Rijk, The Netherlands Tel: +31(0)85-007-3210 info@certification-experts.com

Data protection officer

ARDS has not appointed a data protection officer, as the conditions of Art. 37 GDPR do not apply. Privacy questions can be sent to the privacy contact above to info@ardsimplants.com

2. Using the eIFU portal without providing personal data

You can view and download our instructions for use without registering, logging in or providing your name or contact details. The region, product category, language and REF (catalogue) number you select or enter are used only to show you the correct documents and are not linked to your identity.

Instructions for use are provided as PDF files that can be opened with any free PDF reader. Downloading a PDF does not send personal data to ARDS beyond the technical data described in section 3.1.

3. What we process, why, on which legal basis and for how long

3.1 Technical data when you visit the website or the eIFU portal

Data

IP address, date and time of the request, page or file requested, browser type and version, operating system, referring page, and the HTTP status of the request.

Purpose

To deliver the website and the instruction files to your device, to keep the service secure and available, to protect the instruction files against unauthorized modification, and to investigate faults and attacks. The last three purposes are also required by Article 7(2)(b) and (c) of Regulation (EU) 2021/2226.

Legal basis

Art. 6(1)(f) GDPR – our legitimate interest in operating a secure and available website and eIFU service.

Retention

Server logs are kept by our hosting provider for 1 day and then deleted, unless they are needed to investigate a specific security incident.

3.2 Requests for a paper copy of the instructions for use

You can request a paper copy of any of our instructions for use free of charge. We send it within 7 calendar days of receiving the request. If you ask for it when you place your order, we deliver it with the device. To request a copy, e-mail- info@ardsimplants.com, call +972 4 381 2333, or contact your local ARDS distributor.

Data

Name, clinic or organization, delivery address, e-mail address, telephone number, and the product (REF number, lot number) and language requested.

Purpose

To send you the paper copy and to keep a record that the request was fulfilled.

Legal basis

Art. 6(1)(c) GDPR – legal obligation under Article 5(3) of Regulation (EU)  2021/2226 to supply a paper copy on request.

Retention

15 years after the request, in line with ARDS's quality-record retention procedure.

Is the data required?

Yes. Without a name and delivery address we cannot send the paper copy.

3.3 Enquiries by e-mail, telephone or through distributors

Data

Name, organization, contact details and the content of your message.

Purpose

To answer your enquiry and, where relevant, to handle orders and the business relationship.

Legal basis

Art. 6(1)(b) GDPR, where the enquiry relates to a contract or steps before a contract; otherwise, Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries.

Retention

Enquiries that do not lead to an order, a complaint or a paper-copy request are deleted 3 years after the enquiry has been closed. Where an enquiry leads to an order, the order records are kept for the period required by commercial and tax law. Where it concerns a complaint or an incident, section 3.4 applies.

If you contact us through the form on our "Get in touch" page, including requests for a paper copy of the instructions for use, the form is provided by POWr.io, Inc. (USA). POWr processes the data you enter on our behalf, as our processor, and forwards it to us.

‍

3.4 Complaints, adverse events and serious incidents (vigilance)

If you report a complaint, a malfunction or an incident involving an ARDS device, we process the information needed to investigate it and to meet our obligations as a medical device manufacturer.

Data

Reporter's name, organization and contact details. Details of the device (REF, lot) and of the event. Where necessary for the investigation, limited information about the patient, such as age, sex, the clinical course and the treatment given. This may include health data.

Purpose

Complaint handling, post-market surveillance, and vigilance reporting to competent authorities and our notified body.

Legal basis

Art. 6(1)(c) GDPR – legal obligations under Regulation (EU) 2017/745 (MDR), in particular Articles 10, 83 and 87. For health data: Art. 9(2)(i) GDPR- reasons of public interest in ensuring high standards of quality and safety of medical devices.

Retention

For the period required by the MDR for the technical and post-market surveillance documentation: at least 15 years after the last device of the type concerned has been placed on the market.

Please do not send us the patient's name or other directly identifying details. Use a case or patient code instead. If identifying details are received, we pseudonymize them.

3.5 Links to social media

Our website contains links to our pages on Facebook, Instagram, LinkedIn and X (Twitter). These are plain links: no data is sent to these platforms until you click a link. After you leave our website, the privacy policy of the platform applies.

‍

3.6 Fonts and technical libraries loaded from third parties

To display the website, your browser loads fonts and program libraries directly from the providers listed below. When this happens, your IP address and technical browser data (browser type, requested file, time of request) are transmitted to the provider. We do not pass any other information to these providers.

· Adobe Fonts (use.typekit.net) – Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland, and Adobe Inc., USA. Adobe may log information about the fonts served for licence-compliance purposes.

· jQuery library – delivered through the content-delivery network used by our hosting provider Webflow (Amazon CloudFront).

Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in a consistent and reliable presentation of the website. For transfers to the USA, see section 6.

‍

Our website uses only cookies and similar technologies that are srictly necessary to provide the service you request, such as remembering your language selection. These do not require your consent (Article 5(3) of Directive 2002/58/EC). We do not use analytics, advertising or tracking cookies.

Name

_cfuvid

Provider

Cloudflare

Purpose

Distinguishes individual visitors sharing the same IP address, to apply security/rate-limiting protections against malicious traffic

Duration

Session

‍

Name

siteLang

Provider

ARDS (local storage in your browser)

Purpose

Remembers the language you selected for the website and the instructions for use

Duration

Until you clear your browser storage

‍

Name

siteTranslationsCache

Provider

ARDS (local storage in your browser)

Purpose

Stores the website text in your selected language on your device, so that pages load faster

Duration

Until you clear your browser storage

‍

Items in local storage stay on your device and are not sent to us.

‍

5. Who receives your data

· Website hosting: Webflow, Inc., USA, and its content-delivery sub-processors host the website and the instruction files. They act as our processor under a data processing agreement.

· E-mail and IT services: Google Ireland Limited (Google Workspace), acting as our processor.

· Security service: Cloudflare, Inc., USA – protection of the website against malicious traffic (cookie _cfuvid).

· Contact form: POWr.io, Inc., USA – provides the "Get in touch" form, including paper- copy requests, as our processor.

· Font and library providers: Google and Adobe – delivery of fonts and program libraries (see section 3.6).

· ARDS distributors: where a distributor delivers the paper copy or handles your enquiry in your country.

· Authorities and our notified body: competent authorities and our notified body, where required for vigilance and post-market surveillance under the MDR.

· Professional advisers and courts: where necessary to establish, exercise or defend legal claims.

We do not sell personal data, and we do not use it for advertising.

6. International transfers

ARDS is established in Israel. The European Commission has recognized that Israel provides an adequate level of data protection (Commission Decision 2011/61/EU), so no additional safeguards are needed for transfers from the EEA to ARDS.

Where data is transferred to service providers in the USA or other third countries, we rely on one of two safeguards:

· the EU–U.S. Data Privacy Framework, where the recipient is certified; or

· otherwise, the Standard Contractual Clauses adopted by the European Commission (Implementing Decision (EU) 2021/914), with supplementary measures where needed.

You can request a copy of these safeguards from the privacy contact.

7. Security

The website and the eIFU portal are delivered only over encrypted connections (HTTPS/TLS). Instruction files are uploaded only by authorized ARDS personnel under our document-control procedure and are verified against the controlled master copy before publication. Access to personal data is limited to the staff who need it for the purposes above.

8. Your rights

Under the GDPR you have the right to:

· access your personal data and receive a copy (Art. 15);

· have inaccurate data corrected (Art. 16);

· have your data erased (Art.17);

· restrict processing (Art. 18);

· receive data you provided in a portable format (Art. 20);

· object at any time to processing based on our legitimate interest (Art. 21);

· withdraw consent at any time, where processing is based on consent (Art. 7(3)).

Some of these rights are limited where we must keep data to meet a legal obligation, for example vigilance records under the MDR.

To exercise your rights, contact the privacy contact in section 1. We answer within one month; this can be extended by two further months for complex requests, in which case we will tell you. We may ask you to confirm your identity.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). You can do this in particular in the EU Member State where you live or work, or where you believe the infringement took place. The list of authorities is available at edpb.europa.eu.

9. Automated decisions

We do not make decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you.

10. Professional users

Our website and instructions for use are intended for dental professionals. They are not directed at children, and we do not knowingly collect data from children.

11. Changes to this policy

We review this policy when our processing changes, and at least once a year. The current version and its effective date are shown at the top of this page. Previous versions are available on request from the privacy contact.

‍

Privacy Policy

ARDS Industries Ltd. – website www.ardsimplants.com and electronic instructions for use portal www.ai-ifu.com
Version 1.0- effective date: 27.09.2026

1. Who we are

This policy explains how ARDS Industries Ltd. ("ARDS", "we", "us") processes personal data when you visit www.ardsimplants.com, access our electronic instructions for use (eIFU) through www.ai-ifu.com, or contact us. It is provided in accordance with Articles 12 to 14 of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Article 7(2)(d) of Commission Implementing Regulation (EU) 2021/2226 on electronic instructions for use of medical devices.

Controller

ARDS  Industries Ltd.
POB 6762, Petah Tikva 4934829, Israel
Phone: +972 4 381 2333

Privacy contact

E-mail:  info@ardsimplants.com
Post: as above, marked "Privacy"

Representative in the EU (Art. 27  GDPR)

AR Expert B.V Boeing Avenue 209, 1119 PD Schiphol-Rijk, The Netherlands Tel: +31(0)85-007-3210 info@certification-experts.com

Data protection officer

ARDS has not appointed a data protection officer, as the conditions of Art. 37 GDPR do not apply. Privacy questions can be sent to the privacy contact above to info@ardsimplants.com

2. Using the eIFU portal without providing personal data

You can view and download our instructions for use without registering, logging in or providing your name or contact details. The region, product category, language and REF (catalogue) number you select or enter are used only to show you the correct documents and are not linked to your identity.

Instructions for use are provided as PDF files that can be opened with any free PDF reader. Downloading a PDF does not send personal data to ARDS beyond the technical data described in section 3.1.

3. What we process, why, on which legal basis and for how long

3.1 Technical data when you visit the website or the eIFU portal

Data

IP address, date and time of the request, page or file requested, browser type and version, operating system, referring page, and the HTTP status of the request.

Purpose

To deliver the website and the instruction files to your device, to keep the service secure and available, to protect the instruction files against unauthorized modification, and to investigate faults and attacks. The last three purposes are also required by Article 7(2)(b) and (c) of Regulation (EU) 2021/2226.

Legal basis

Art. 6(1)(f) GDPR – our legitimate interest in operating a secure and available website and eIFU service.

Retention

Server logs are kept by our hosting provider for 1 day and then deleted, unless they are needed to investigate a specific security incident.

3.2 Requests for a paper copy of the instructions for use

You can request a paper copy of any of our instructions for use free of charge. We send it within 7 calendar days of receiving the request. If you ask for it when you place your order, we deliver it with the device. To request a copy, e-mail- info@ardsimplants.com, call +972 4 381 2333, or contact your local ARDS distributor.

Data

Name, clinic or organization, delivery address, e-mail address, telephone number, and the product (REF number, lot number) and language requested.

Purpose

To send you the paper copy and to keep a record that the request was fulfilled.

Legal basis

Art. 6(1)(c) GDPR – legal obligation under Article 5(3) of Regulation (EU)  2021/2226 to supply a paper copy on request.

Retention

15 years after the request, in line with ARDS's quality-record retention procedure.

Is the data required?

Yes. Without a name and delivery address we cannot send the paper copy.

3.3 Enquiries by e-mail, telephone or through distributors

Data

Name, organization, contact details and the content of your message.

Purpose

To answer your enquiry and, where relevant, to handle orders and the business relationship.

Legal basis

Art. 6(1)(b) GDPR, where the enquiry relates to a contract or steps before a contract; otherwise, Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries.

Retention

Enquiries that do not lead to an order, a complaint or a paper-copy request are deleted 3 years after the enquiry has been closed. Where an enquiry leads to an order, the order records are kept for the period required by commercial and tax law. Where it concerns a complaint or an incident, section 3.4 applies.

If you contact us through the form on our "Get in touch" page, including requests for a paper copy of the instructions for use, the form is provided by POWr.io, Inc. (USA). POWr processes the data you enter on our behalf, as our processor, and forwards it to us.

‍

3.4 Complaints, adverse events and serious incidents (vigilance)

If you report a complaint, a malfunction or an incident involving an ARDS device, we process the information needed to investigate it and to meet our obligations as a medical device manufacturer.

Data

Reporter's name, organization and contact details. Details of the device (REF, lot) and of the event. Where necessary for the investigation, limited information about the patient, such as age, sex, the clinical course and the treatment given. This may include health data.

Purpose

Complaint handling, post-market surveillance, and vigilance reporting to competent authorities and our notified body.

Legal basis

Art. 6(1)(c) GDPR – legal obligations under Regulation (EU) 2017/745 (MDR), in particular Articles 10, 83 and 87. For health data: Art. 9(2)(i) GDPR- reasons of public interest in ensuring high standards of quality and safety of medical devices.

Retention

For the period required by the MDR for the technical and post-market surveillance documentation: at least 15 years after the last device of the type concerned has been placed on the market.

Please do not send us the patient's name or other directly identifying details. Use a case or patient code instead. If identifying details are received, we pseudonymize them.

3.5 Links to social media

Our website contains links to our pages on Facebook, Instagram, LinkedIn and X (Twitter). These are plain links: no data is sent to these platforms until you click a link. After you leave our website, the privacy policy of the platform applies.

‍

3.6 Fonts and technical libraries loaded from third parties

To display the website, your browser loads fonts and program libraries directly from the providers listed below. When this happens, your IP address and technical browser data (browser type, requested file, time of request) are transmitted to the provider. We do not pass any other information to these providers.

· Adobe Fonts (use.typekit.net) – Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland, and Adobe Inc., USA. Adobe may log information about the fonts served for licence-compliance purposes.

· jQuery library – delivered through the content-delivery network used by our hosting provider Webflow (Amazon CloudFront).

Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in a consistent and reliable presentation of the website. For transfers to the USA, see section 6.

‍

Our website uses only cookies and similar technologies that are srictly necessary to provide the service you request, such as remembering your language selection. These do not require your consent (Article 5(3) of Directive 2002/58/EC). We do not use analytics, advertising or tracking cookies.

Name

_cfuvid

Provider

Cloudflare

Purpose

Distinguishes individual visitors sharing the same IP address, to apply security/rate-limiting protections against malicious traffic

Duration

Session

‍

Name

siteLang

Provider

ARDS (local storage in your browser)

Purpose

Remembers the language you selected for the website and the instructions for use

Duration

Until you clear your browser storage

‍

Name

siteTranslationsCache

Provider

ARDS (local storage in your browser)

Purpose

Stores the website text in your selected language on your device, so that pages load faster

Duration

Until you clear your browser storage

‍

Items in local storage stay on your device and are not sent to us.

‍

5. Who receives your data

· Website hosting: Webflow, Inc., USA, and its content-delivery sub-processors host the website and the instruction files. They act as our processor under a data processing agreement.

· E-mail and IT services: Google Ireland Limited (Google Workspace), acting as our processor.

· Security service: Cloudflare, Inc., USA – protection of the website against malicious traffic (cookie _cfuvid).

· Contact form: POWr.io, Inc., USA – provides the "Get in touch" form, including paper- copy requests, as our processor.

· Font and library providers: Google and Adobe – delivery of fonts and program libraries (see section 3.6).

· ARDS distributors: where a distributor delivers the paper copy or handles your enquiry in your country.

· Authorities and our notified body: competent authorities and our notified body, where required for vigilance and post-market surveillance under the MDR.

· Professional advisers and courts: where necessary to establish, exercise or defend legal claims.

We do not sell personal data, and we do not use it for advertising.

6. International transfers

ARDS is established in Israel. The European Commission has recognized that Israel provides an adequate level of data protection (Commission Decision 2011/61/EU), so no additional safeguards are needed for transfers from the EEA to ARDS.

Where data is transferred to service providers in the USA or other third countries, we rely on one of two safeguards:

· the EU–U.S. Data Privacy Framework, where the recipient is certified; or

· otherwise, the Standard Contractual Clauses adopted by the European Commission (Implementing Decision (EU) 2021/914), with supplementary measures where needed.

You can request a copy of these safeguards from the privacy contact.

7. Security

The website and the eIFU portal are delivered only over encrypted connections (HTTPS/TLS). Instruction files are uploaded only by authorized ARDS personnel under our document-control procedure and are verified against the controlled master copy before publication. Access to personal data is limited to the staff who need it for the purposes above.

8. Your rights

Under the GDPR you have the right to:

· access your personal data and receive a copy (Art. 15);

· have inaccurate data corrected (Art. 16);

· have your data erased (Art.17);

· restrict processing (Art. 18);

· receive data you provided in a portable format (Art. 20);

· object at any time to processing based on our legitimate interest (Art. 21);

· withdraw consent at any time, where processing is based on consent (Art. 7(3)).

Some of these rights are limited where we must keep data to meet a legal obligation, for example vigilance records under the MDR.

To exercise your rights, contact the privacy contact in section 1. We answer within one month; this can be extended by two further months for complex requests, in which case we will tell you. We may ask you to confirm your identity.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). You can do this in particular in the EU Member State where you live or work, or where you believe the infringement took place. The list of authorities is available at edpb.europa.eu.

9. Automated decisions

We do not make decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you.

10. Professional users

Our website and instructions for use are intended for dental professionals. They are not directed at children, and we do not knowingly collect data from children.

11. Changes to this policy

We review this policy when our processing changes, and at least once a year. The current version and its effective date are shown at the top of this page. Previous versions are available on request from the privacy contact.

‍

Privacy Policy

ARDS Industries Ltd. – website www.ardsimplants.com and electronic instructions for use portal www.ai-ifu.com
Version 1.0- effective date: 27.09.2026

1. Who we are

This policy explains how ARDS Industries Ltd. ("ARDS", "we", "us") processes personal data when you visit www.ardsimplants.com, access our electronic instructions for use (eIFU) through www.ai-ifu.com, or contact us. It is provided in accordance with Articles 12 to 14 of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Article 7(2)(d) of Commission Implementing Regulation (EU) 2021/2226 on electronic instructions for use of medical devices.

Controller

ARDS  Industries Ltd.
POB 6762, Petah Tikva 4934829, Israel
Phone: +972 4 381 2333

Privacy contact

E-mail:  info@ardsimplants.com
Post: as above, marked "Privacy"

Representative in the EU (Art. 27  GDPR)

AR Expert B.V Boeing Avenue 209, 1119 PD Schiphol-Rijk, The Netherlands Tel: +31(0)85-007-3210 info@certification-experts.com

Data protection officer

ARDS has not appointed a data protection officer, as the conditions of Art. 37 GDPR do not apply. Privacy questions can be sent to the privacy contact above to info@ardsimplants.com

2. Using the eIFU portal without providing personal data

You can view and download our instructions for use without registering, logging in or providing your name or contact details. The region, product category, language and REF (catalogue) number you select or enter are used only to show you the correct documents and are not linked to your identity.

Instructions for use are provided as PDF files that can be opened with any free PDF reader. Downloading a PDF does not send personal data to ARDS beyond the technical data described in section 3.1.

3. What we process, why, on which legal basis and for how long

3.1 Technical data when you visit the website or the eIFU portal

Data

IP address, date and time of the request, page or file requested, browser type and version, operating system, referring page, and the HTTP status of the request.

Purpose

To deliver the website and the instruction files to your device, to keep the service secure and available, to protect the instruction files against unauthorized modification, and to investigate faults and attacks. The last three purposes are also required by Article 7(2)(b) and (c) of Regulation (EU) 2021/2226.

Legal basis

Art. 6(1)(f) GDPR – our legitimate interest in operating a secure and available website and eIFU service.

Retention

Server logs are kept by our hosting provider for 1 day and then deleted, unless they are needed to investigate a specific security incident.

3.2 Requests for a paper copy of the instructions for use

You can request a paper copy of any of our instructions for use free of charge. We send it within 7 calendar days of receiving the request. If you ask for it when you place your order, we deliver it with the device. To request a copy, e-mail- info@ardsimplants.com, call +972 4 381 2333, or contact your local ARDS distributor.

Data

Name, clinic or organization, delivery address, e-mail address, telephone number, and the product (REF number, lot number) and language requested.

Purpose

To send you the paper copy and to keep a record that the request was fulfilled.

Legal basis

Art. 6(1)(c) GDPR – legal obligation under Article 5(3) of Regulation (EU)  2021/2226 to supply a paper copy on request.

Retention

15 years after the request, in line with ARDS's quality-record retention procedure.

Is the data required?

Yes. Without a name and delivery address we cannot send the paper copy.

3.3 Enquiries by e-mail, telephone or through distributors

Data

Name, organization, contact details and the content of your message.

Purpose

To answer your enquiry and, where relevant, to handle orders and the business relationship.

Legal basis

Art. 6(1)(b) GDPR, where the enquiry relates to a contract or steps before a contract; otherwise, Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries.

Retention

Enquiries that do not lead to an order, a complaint or a paper-copy request are deleted 3 years after the enquiry has been closed. Where an enquiry leads to an order, the order records are kept for the period required by commercial and tax law. Where it concerns a complaint or an incident, section 3.4 applies.

If you contact us through the form on our "Get in touch" page, including requests for a paper copy of the instructions for use, the form is provided by POWr.io, Inc. (USA). POWr processes the data you enter on our behalf, as our processor, and forwards it to us.

‍

3.4 Complaints, adverse events and serious incidents (vigilance)

If you report a complaint, a malfunction or an incident involving an ARDS device, we process the information needed to investigate it and to meet our obligations as a medical device manufacturer.

Data

Reporter's name, organization and contact details. Details of the device (REF, lot) and of the event. Where necessary for the investigation, limited information about the patient, such as age, sex, the clinical course and the treatment given. This may include health data.

Purpose

Complaint handling, post-market surveillance, and vigilance reporting to competent authorities and our notified body.

Legal basis

Art. 6(1)(c) GDPR – legal obligations under Regulation (EU) 2017/745 (MDR), in particular Articles 10, 83 and 87. For health data: Art. 9(2)(i) GDPR- reasons of public interest in ensuring high standards of quality and safety of medical devices.

Retention

For the period required by the MDR for the technical and post-market surveillance documentation: at least 15 years after the last device of the type concerned has been placed on the market.

Please do not send us the patient's name or other directly identifying details. Use a case or patient code instead. If identifying details are received, we pseudonymize them.

3.5 Links to social media

Our website contains links to our pages on Facebook, Instagram, LinkedIn and X (Twitter). These are plain links: no data is sent to these platforms until you click a link. After you leave our website, the privacy policy of the platform applies.

‍

3.6 Fonts and technical libraries loaded from third parties

To display the website, your browser loads fonts and program libraries directly from the providers listed below. When this happens, your IP address and technical browser data (browser type, requested file, time of request) are transmitted to the provider. We do not pass any other information to these providers.

· Adobe Fonts (use.typekit.net) – Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland, and Adobe Inc., USA. Adobe may log information about the fonts served for licence-compliance purposes.

· jQuery library – delivered through the content-delivery network used by our hosting provider Webflow (Amazon CloudFront).

Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in a consistent and reliable presentation of the website. For transfers to the USA, see section 6.

‍

Our website uses only cookies and similar technologies that are srictly necessary to provide the service you request, such as remembering your language selection. These do not require your consent (Article 5(3) of Directive 2002/58/EC). We do not use analytics, advertising or tracking cookies.

Name

_cfuvid

Provider

Cloudflare

Purpose

Distinguishes individual visitors sharing the same IP address, to apply security/rate-limiting protections against malicious traffic

Duration

Session

‍

Name

siteLang

Provider

ARDS (local storage in your browser)

Purpose

Remembers the language you selected for the website and the instructions for use

Duration

Until you clear your browser storage

‍

Name

siteTranslationsCache

Provider

ARDS (local storage in your browser)

Purpose

Stores the website text in your selected language on your device, so that pages load faster

Duration

Until you clear your browser storage

‍

Items in local storage stay on your device and are not sent to us.

‍

5. Who receives your data

· Website hosting: Webflow, Inc., USA, and its content-delivery sub-processors host the website and the instruction files. They act as our processor under a data processing agreement.

· E-mail and IT services: Google Ireland Limited (Google Workspace), acting as our processor.

· Security service: Cloudflare, Inc., USA – protection of the website against malicious traffic (cookie _cfuvid).

· Contact form: POWr.io, Inc., USA – provides the "Get in touch" form, including paper- copy requests, as our processor.

· Font and library providers: Google and Adobe – delivery of fonts and program libraries (see section 3.6).

· ARDS distributors: where a distributor delivers the paper copy or handles your enquiry in your country.

· Authorities and our notified body: competent authorities and our notified body, where required for vigilance and post-market surveillance under the MDR.

· Professional advisers and courts: where necessary to establish, exercise or defend legal claims.

We do not sell personal data, and we do not use it for advertising.

6. International transfers

ARDS is established in Israel. The European Commission has recognized that Israel provides an adequate level of data protection (Commission Decision 2011/61/EU), so no additional safeguards are needed for transfers from the EEA to ARDS.

Where data is transferred to service providers in the USA or other third countries, we rely on one of two safeguards:

· the EU–U.S. Data Privacy Framework, where the recipient is certified; or

· otherwise, the Standard Contractual Clauses adopted by the European Commission (Implementing Decision (EU) 2021/914), with supplementary measures where needed.

You can request a copy of these safeguards from the privacy contact.

7. Security

The website and the eIFU portal are delivered only over encrypted connections (HTTPS/TLS). Instruction files are uploaded only by authorized ARDS personnel under our document-control procedure and are verified against the controlled master copy before publication. Access to personal data is limited to the staff who need it for the purposes above.

8. Your rights

Under the GDPR you have the right to:

· access your personal data and receive a copy (Art. 15);

· have inaccurate data corrected (Art. 16);

· have your data erased (Art.17);

· restrict processing (Art. 18);

· receive data you provided in a portable format (Art. 20);

· object at any time to processing based on our legitimate interest (Art. 21);

· withdraw consent at any time, where processing is based on consent (Art. 7(3)).

Some of these rights are limited where we must keep data to meet a legal obligation, for example vigilance records under the MDR.

To exercise your rights, contact the privacy contact in section 1. We answer within one month; this can be extended by two further months for complex requests, in which case we will tell you. We may ask you to confirm your identity.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). You can do this in particular in the EU Member State where you live or work, or where you believe the infringement took place. The list of authorities is available at edpb.europa.eu.

9. Automated decisions

We do not make decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you.

10. Professional users

Our website and instructions for use are intended for dental professionals. They are not directed at children, and we do not knowingly collect data from children.

11. Changes to this policy

We review this policy when our processing changes, and at least once a year. The current version and its effective date are shown at the top of this page. Previous versions are available on request from the privacy contact.

‍

Privacy Policy

ARDS Industries Ltd. – website www.ardsimplants.com and electronic instructions for use portal www.ai-ifu.com
Version 1.0- effective date: 27.09.2026

1. Who we are

This policy explains how ARDS Industries Ltd. ("ARDS", "we", "us") processes personal data when you visit www.ardsimplants.com, access our electronic instructions for use (eIFU) through www.ai-ifu.com, or contact us. It is provided in accordance with Articles 12 to 14 of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Article 7(2)(d) of Commission Implementing Regulation (EU) 2021/2226 on electronic instructions for use of medical devices.

Controller

ARDS  Industries Ltd.
POB 6762, Petah Tikva 4934829, Israel
Phone: +972 4 381 2333

Privacy contact

E-mail:  info@ardsimplants.com
Post: as above, marked "Privacy"

Representative in the EU (Art. 27  GDPR)

AR Expert B.V Boeing Avenue 209, 1119 PD Schiphol-Rijk, The Netherlands Tel: +31(0)85-007-3210 info@certification-experts.com

Data protection officer

ARDS has not appointed a data protection officer, as the conditions of Art. 37 GDPR do not apply. Privacy questions can be sent to the privacy contact above to info@ardsimplants.com

2. Using the eIFU portal without providing personal data

You can view and download our instructions for use without registering, logging in or providing your name or contact details. The region, product category, language and REF (catalogue) number you select or enter are used only to show you the correct documents and are not linked to your identity.

Instructions for use are provided as PDF files that can be opened with any free PDF reader. Downloading a PDF does not send personal data to ARDS beyond the technical data described in section 3.1.

3. What we process, why, on which legal basis and for how long

3.1 Technical data when you visit the website or the eIFU portal

Data

IP address, date and time of the request, page or file requested, browser type and version, operating system, referring page, and the HTTP status of the request.

Purpose

To deliver the website and the instruction files to your device, to keep the service secure and available, to protect the instruction files against unauthorized modification, and to investigate faults and attacks. The last three purposes are also required by Article 7(2)(b) and (c) of Regulation (EU) 2021/2226.

Legal basis

Art. 6(1)(f) GDPR – our legitimate interest in operating a secure and available website and eIFU service.

Retention

Server logs are kept by our hosting provider for 1 day and then deleted, unless they are needed to investigate a specific security incident.

3.2 Requests for a paper copy of the instructions for use

You can request a paper copy of any of our instructions for use free of charge. We send it within 7 calendar days of receiving the request. If you ask for it when you place your order, we deliver it with the device. To request a copy, e-mail- info@ardsimplants.com, call +972 4 381 2333, or contact your local ARDS distributor.

Data

Name, clinic or organization, delivery address, e-mail address, telephone number, and the product (REF number, lot number) and language requested.

Purpose

To send you the paper copy and to keep a record that the request was fulfilled.

Legal basis

Art. 6(1)(c) GDPR – legal obligation under Article 5(3) of Regulation (EU)  2021/2226 to supply a paper copy on request.

Retention

15 years after the request, in line with ARDS's quality-record retention procedure.

Is the data required?

Yes. Without a name and delivery address we cannot send the paper copy.

3.3 Enquiries by e-mail, telephone or through distributors

Data

Name, organization, contact details and the content of your message.

Purpose

To answer your enquiry and, where relevant, to handle orders and the business relationship.

Legal basis

Art. 6(1)(b) GDPR, where the enquiry relates to a contract or steps before a contract; otherwise, Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries.

Retention

Enquiries that do not lead to an order, a complaint or a paper-copy request are deleted 3 years after the enquiry has been closed. Where an enquiry leads to an order, the order records are kept for the period required by commercial and tax law. Where it concerns a complaint or an incident, section 3.4 applies.

If you contact us through the form on our "Get in touch" page, including requests for a paper copy of the instructions for use, the form is provided by POWr.io, Inc. (USA). POWr processes the data you enter on our behalf, as our processor, and forwards it to us.

‍

3.4 Complaints, adverse events and serious incidents (vigilance)

If you report a complaint, a malfunction or an incident involving an ARDS device, we process the information needed to investigate it and to meet our obligations as a medical device manufacturer.

Data

Reporter's name, organization and contact details. Details of the device (REF, lot) and of the event. Where necessary for the investigation, limited information about the patient, such as age, sex, the clinical course and the treatment given. This may include health data.

Purpose

Complaint handling, post-market surveillance, and vigilance reporting to competent authorities and our notified body.

Legal basis

Art. 6(1)(c) GDPR – legal obligations under Regulation (EU) 2017/745 (MDR), in particular Articles 10, 83 and 87. For health data: Art. 9(2)(i) GDPR- reasons of public interest in ensuring high standards of quality and safety of medical devices.

Retention

For the period required by the MDR for the technical and post-market surveillance documentation: at least 15 years after the last device of the type concerned has been placed on the market.

Please do not send us the patient's name or other directly identifying details. Use a case or patient code instead. If identifying details are received, we pseudonymize them.

3.5 Links to social media

Our website contains links to our pages on Facebook, Instagram, LinkedIn and X (Twitter). These are plain links: no data is sent to these platforms until you click a link. After you leave our website, the privacy policy of the platform applies.

‍

3.6 Fonts and technical libraries loaded from third parties

To display the website, your browser loads fonts and program libraries directly from the providers listed below. When this happens, your IP address and technical browser data (browser type, requested file, time of request) are transmitted to the provider. We do not pass any other information to these providers.

· Adobe Fonts (use.typekit.net) – Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland, and Adobe Inc., USA. Adobe may log information about the fonts served for licence-compliance purposes.

· jQuery library – delivered through the content-delivery network used by our hosting provider Webflow (Amazon CloudFront).

Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in a consistent and reliable presentation of the website. For transfers to the USA, see section 6.

‍

Our website uses only cookies and similar technologies that are srictly necessary to provide the service you request, such as remembering your language selection. These do not require your consent (Article 5(3) of Directive 2002/58/EC). We do not use analytics, advertising or tracking cookies.

Name

_cfuvid

Provider

Cloudflare

Purpose

Distinguishes individual visitors sharing the same IP address, to apply security/rate-limiting protections against malicious traffic

Duration

Session

‍

Name

siteLang

Provider

ARDS (local storage in your browser)

Purpose

Remembers the language you selected for the website and the instructions for use

Duration

Until you clear your browser storage

‍

Name

siteTranslationsCache

Provider

ARDS (local storage in your browser)

Purpose

Stores the website text in your selected language on your device, so that pages load faster

Duration

Until you clear your browser storage

‍

Items in local storage stay on your device and are not sent to us.

‍

5. Who receives your data

· Website hosting: Webflow, Inc., USA, and its content-delivery sub-processors host the website and the instruction files. They act as our processor under a data processing agreement.

· E-mail and IT services: Google Ireland Limited (Google Workspace), acting as our processor.

· Security service: Cloudflare, Inc., USA – protection of the website against malicious traffic (cookie _cfuvid).

· Contact form: POWr.io, Inc., USA – provides the "Get in touch" form, including paper- copy requests, as our processor.

· Font and library providers: Google and Adobe – delivery of fonts and program libraries (see section 3.6).

· ARDS distributors: where a distributor delivers the paper copy or handles your enquiry in your country.

· Authorities and our notified body: competent authorities and our notified body, where required for vigilance and post-market surveillance under the MDR.

· Professional advisers and courts: where necessary to establish, exercise or defend legal claims.

We do not sell personal data, and we do not use it for advertising.

6. International transfers

ARDS is established in Israel. The European Commission has recognized that Israel provides an adequate level of data protection (Commission Decision 2011/61/EU), so no additional safeguards are needed for transfers from the EEA to ARDS.

Where data is transferred to service providers in the USA or other third countries, we rely on one of two safeguards:

· the EU–U.S. Data Privacy Framework, where the recipient is certified; or

· otherwise, the Standard Contractual Clauses adopted by the European Commission (Implementing Decision (EU) 2021/914), with supplementary measures where needed.

You can request a copy of these safeguards from the privacy contact.

7. Security

The website and the eIFU portal are delivered only over encrypted connections (HTTPS/TLS). Instruction files are uploaded only by authorized ARDS personnel under our document-control procedure and are verified against the controlled master copy before publication. Access to personal data is limited to the staff who need it for the purposes above.

8. Your rights

Under the GDPR you have the right to:

· access your personal data and receive a copy (Art. 15);

· have inaccurate data corrected (Art. 16);

· have your data erased (Art.17);

· restrict processing (Art. 18);

· receive data you provided in a portable format (Art. 20);

· object at any time to processing based on our legitimate interest (Art. 21);

· withdraw consent at any time, where processing is based on consent (Art. 7(3)).

Some of these rights are limited where we must keep data to meet a legal obligation, for example vigilance records under the MDR.

To exercise your rights, contact the privacy contact in section 1. We answer within one month; this can be extended by two further months for complex requests, in which case we will tell you. We may ask you to confirm your identity.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). You can do this in particular in the EU Member State where you live or work, or where you believe the infringement took place. The list of authorities is available at edpb.europa.eu.

9. Automated decisions

We do not make decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you.

10. Professional users

Our website and instructions for use are intended for dental professionals. They are not directed at children, and we do not knowingly collect data from children.

11. Changes to this policy

We review this policy when our processing changes, and at least once a year. The current version and its effective date are shown at the top of this page. Previous versions are available on request from the privacy contact.

‍

Privacy Policy

ARDS Industries Ltd. – website www.ardsimplants.com and electronic instructions for use portal www.ai-ifu.com
Version 1.0- effective date: 27.09.2026

1. Who we are

This policy explains how ARDS Industries Ltd. ("ARDS", "we", "us") processes personal data when you visit www.ardsimplants.com, access our electronic instructions for use (eIFU) through www.ai-ifu.com, or contact us. It is provided in accordance with Articles 12 to 14 of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Article 7(2)(d) of Commission Implementing Regulation (EU) 2021/2226 on electronic instructions for use of medical devices.

Controller

ARDS  Industries Ltd.
POB 6762, Petah Tikva 4934829, Israel
Phone: +972 4 381 2333

Privacy contact

E-mail:  info@ardsimplants.com
Post: as above, marked "Privacy"

Representative in the EU (Art. 27  GDPR)

AR Expert B.V Boeing Avenue 209, 1119 PD Schiphol-Rijk, The Netherlands Tel: +31(0)85-007-3210 info@certification-experts.com

Data protection officer

ARDS has not appointed a data protection officer, as the conditions of Art. 37 GDPR do not apply. Privacy questions can be sent to the privacy contact above to info@ardsimplants.com

2. Using the eIFU portal without providing personal data

You can view and download our instructions for use without registering, logging in or providing your name or contact details. The region, product category, language and REF (catalogue) number you select or enter are used only to show you the correct documents and are not linked to your identity.

Instructions for use are provided as PDF files that can be opened with any free PDF reader. Downloading a PDF does not send personal data to ARDS beyond the technical data described in section 3.1.

3. What we process, why, on which legal basis and for how long

3.1 Technical data when you visit the website or the eIFU portal

Data

IP address, date and time of the request, page or file requested, browser type and version, operating system, referring page, and the HTTP status of the request.

Purpose

To deliver the website and the instruction files to your device, to keep the service secure and available, to protect the instruction files against unauthorized modification, and to investigate faults and attacks. The last three purposes are also required by Article 7(2)(b) and (c) of Regulation (EU) 2021/2226.

Legal basis

Art. 6(1)(f) GDPR – our legitimate interest in operating a secure and available website and eIFU service.

Retention

Server logs are kept by our hosting provider for 1 day and then deleted, unless they are needed to investigate a specific security incident.

3.2 Requests for a paper copy of the instructions for use

You can request a paper copy of any of our instructions for use free of charge. We send it within 7 calendar days of receiving the request. If you ask for it when you place your order, we deliver it with the device. To request a copy, e-mail- info@ardsimplants.com, call +972 4 381 2333, or contact your local ARDS distributor.

Data

Name, clinic or organization, delivery address, e-mail address, telephone number, and the product (REF number, lot number) and language requested.

Purpose

To send you the paper copy and to keep a record that the request was fulfilled.

Legal basis

Art. 6(1)(c) GDPR – legal obligation under Article 5(3) of Regulation (EU)  2021/2226 to supply a paper copy on request.

Retention

15 years after the request, in line with ARDS's quality-record retention procedure.

Is the data required?

Yes. Without a name and delivery address we cannot send the paper copy.

3.3 Enquiries by e-mail, telephone or through distributors

Data

Name, organization, contact details and the content of your message.

Purpose

To answer your enquiry and, where relevant, to handle orders and the business relationship.

Legal basis

Art. 6(1)(b) GDPR, where the enquiry relates to a contract or steps before a contract; otherwise, Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries.

Retention

Enquiries that do not lead to an order, a complaint or a paper-copy request are deleted 3 years after the enquiry has been closed. Where an enquiry leads to an order, the order records are kept for the period required by commercial and tax law. Where it concerns a complaint or an incident, section 3.4 applies.

If you contact us through the form on our "Get in touch" page, including requests for a paper copy of the instructions for use, the form is provided by POWr.io, Inc. (USA). POWr processes the data you enter on our behalf, as our processor, and forwards it to us.

‍

3.4 Complaints, adverse events and serious incidents (vigilance)

If you report a complaint, a malfunction or an incident involving an ARDS device, we process the information needed to investigate it and to meet our obligations as a medical device manufacturer.

Data

Reporter's name, organization and contact details. Details of the device (REF, lot) and of the event. Where necessary for the investigation, limited information about the patient, such as age, sex, the clinical course and the treatment given. This may include health data.

Purpose

Complaint handling, post-market surveillance, and vigilance reporting to competent authorities and our notified body.

Legal basis

Art. 6(1)(c) GDPR – legal obligations under Regulation (EU) 2017/745 (MDR), in particular Articles 10, 83 and 87. For health data: Art. 9(2)(i) GDPR- reasons of public interest in ensuring high standards of quality and safety of medical devices.

Retention

For the period required by the MDR for the technical and post-market surveillance documentation: at least 15 years after the last device of the type concerned has been placed on the market.

Please do not send us the patient's name or other directly identifying details. Use a case or patient code instead. If identifying details are received, we pseudonymize them.

3.5 Links to social media

Our website contains links to our pages on Facebook, Instagram, LinkedIn and X (Twitter). These are plain links: no data is sent to these platforms until you click a link. After you leave our website, the privacy policy of the platform applies.

‍

3.6 Fonts and technical libraries loaded from third parties

To display the website, your browser loads fonts and program libraries directly from the providers listed below. When this happens, your IP address and technical browser data (browser type, requested file, time of request) are transmitted to the provider. We do not pass any other information to these providers.

· Adobe Fonts (use.typekit.net) – Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland, and Adobe Inc., USA. Adobe may log information about the fonts served for licence-compliance purposes.

· jQuery library – delivered through the content-delivery network used by our hosting provider Webflow (Amazon CloudFront).

Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in a consistent and reliable presentation of the website. For transfers to the USA, see section 6.

‍

Our website uses only cookies and similar technologies that are srictly necessary to provide the service you request, such as remembering your language selection. These do not require your consent (Article 5(3) of Directive 2002/58/EC). We do not use analytics, advertising or tracking cookies.

Name

_cfuvid

Provider

Cloudflare

Purpose

Distinguishes individual visitors sharing the same IP address, to apply security/rate-limiting protections against malicious traffic

Duration

Session

‍

Name

siteLang

Provider

ARDS (local storage in your browser)

Purpose

Remembers the language you selected for the website and the instructions for use

Duration

Until you clear your browser storage

‍

Name

siteTranslationsCache

Provider

ARDS (local storage in your browser)

Purpose

Stores the website text in your selected language on your device, so that pages load faster

Duration

Until you clear your browser storage

‍

Items in local storage stay on your device and are not sent to us.

‍

5. Who receives your data

· Website hosting: Webflow, Inc., USA, and its content-delivery sub-processors host the website and the instruction files. They act as our processor under a data processing agreement.

· E-mail and IT services: Google Ireland Limited (Google Workspace), acting as our processor.

· Security service: Cloudflare, Inc., USA – protection of the website against malicious traffic (cookie _cfuvid).

· Contact form: POWr.io, Inc., USA – provides the "Get in touch" form, including paper- copy requests, as our processor.

· Font and library providers: Google and Adobe – delivery of fonts and program libraries (see section 3.6).

· ARDS distributors: where a distributor delivers the paper copy or handles your enquiry in your country.

· Authorities and our notified body: competent authorities and our notified body, where required for vigilance and post-market surveillance under the MDR.

· Professional advisers and courts: where necessary to establish, exercise or defend legal claims.

We do not sell personal data, and we do not use it for advertising.

6. International transfers

ARDS is established in Israel. The European Commission has recognized that Israel provides an adequate level of data protection (Commission Decision 2011/61/EU), so no additional safeguards are needed for transfers from the EEA to ARDS.

Where data is transferred to service providers in the USA or other third countries, we rely on one of two safeguards:

· the EU–U.S. Data Privacy Framework, where the recipient is certified; or

· otherwise, the Standard Contractual Clauses adopted by the European Commission (Implementing Decision (EU) 2021/914), with supplementary measures where needed.

You can request a copy of these safeguards from the privacy contact.

7. Security

The website and the eIFU portal are delivered only over encrypted connections (HTTPS/TLS). Instruction files are uploaded only by authorized ARDS personnel under our document-control procedure and are verified against the controlled master copy before publication. Access to personal data is limited to the staff who need it for the purposes above.

8. Your rights

Under the GDPR you have the right to:

· access your personal data and receive a copy (Art. 15);

· have inaccurate data corrected (Art. 16);

· have your data erased (Art.17);

· restrict processing (Art. 18);

· receive data you provided in a portable format (Art. 20);

· object at any time to processing based on our legitimate interest (Art. 21);

· withdraw consent at any time, where processing is based on consent (Art. 7(3)).

Some of these rights are limited where we must keep data to meet a legal obligation, for example vigilance records under the MDR.

To exercise your rights, contact the privacy contact in section 1. We answer within one month; this can be extended by two further months for complex requests, in which case we will tell you. We may ask you to confirm your identity.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). You can do this in particular in the EU Member State where you live or work, or where you believe the infringement took place. The list of authorities is available at edpb.europa.eu.

9. Automated decisions

We do not make decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you.

10. Professional users

Our website and instructions for use are intended for dental professionals. They are not directed at children, and we do not knowingly collect data from children.

11. Changes to this policy

We review this policy when our processing changes, and at least once a year. The current version and its effective date are shown at the top of this page. Previous versions are available on request from the privacy contact.

‍

Privacy Policy

ARDS Industries Ltd. – website www.ardsimplants.com and electronic instructions for use portal www.ai-ifu.com
Version 1.0- effective date: 27.09.2026

1. Who we are

This policy explains how ARDS Industries Ltd. ("ARDS", "we", "us") processes personal data when you visit www.ardsimplants.com, access our electronic instructions for use (eIFU) through www.ai-ifu.com, or contact us. It is provided in accordance with Articles 12 to 14 of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Article 7(2)(d) of Commission Implementing Regulation (EU) 2021/2226 on electronic instructions for use of medical devices.

Controller

ARDS  Industries Ltd.
POB 6762, Petah Tikva 4934829, Israel
Phone: +972 4 381 2333

Privacy contact

E-mail:  info@ardsimplants.com
Post: as above, marked "Privacy"

Representative in the EU (Art. 27  GDPR)

AR Expert B.V Boeing Avenue 209, 1119 PD Schiphol-Rijk, The Netherlands Tel: +31(0)85-007-3210 info@certification-experts.com

Data protection officer

ARDS has not appointed a data protection officer, as the conditions of Art. 37 GDPR do not apply. Privacy questions can be sent to the privacy contact above to info@ardsimplants.com

2. Using the eIFU portal without providing personal data

You can view and download our instructions for use without registering, logging in or providing your name or contact details. The region, product category, language and REF (catalogue) number you select or enter are used only to show you the correct documents and are not linked to your identity.

Instructions for use are provided as PDF files that can be opened with any free PDF reader. Downloading a PDF does not send personal data to ARDS beyond the technical data described in section 3.1.

3. What we process, why, on which legal basis and for how long

3.1 Technical data when you visit the website or the eIFU portal

Data

IP address, date and time of the request, page or file requested, browser type and version, operating system, referring page, and the HTTP status of the request.

Purpose

To deliver the website and the instruction files to your device, to keep the service secure and available, to protect the instruction files against unauthorized modification, and to investigate faults and attacks. The last three purposes are also required by Article 7(2)(b) and (c) of Regulation (EU) 2021/2226.

Legal basis

Art. 6(1)(f) GDPR – our legitimate interest in operating a secure and available website and eIFU service.

Retention

Server logs are kept by our hosting provider for 1 day and then deleted, unless they are needed to investigate a specific security incident.

3.2 Requests for a paper copy of the instructions for use

You can request a paper copy of any of our instructions for use free of charge. We send it within 7 calendar days of receiving the request. If you ask for it when you place your order, we deliver it with the device. To request a copy, e-mail- info@ardsimplants.com, call +972 4 381 2333, or contact your local ARDS distributor.

Data

Name, clinic or organization, delivery address, e-mail address, telephone number, and the product (REF number, lot number) and language requested.

Purpose

To send you the paper copy and to keep a record that the request was fulfilled.

Legal basis

Art. 6(1)(c) GDPR – legal obligation under Article 5(3) of Regulation (EU)  2021/2226 to supply a paper copy on request.

Retention

15 years after the request, in line with ARDS's quality-record retention procedure.

Is the data required?

Yes. Without a name and delivery address we cannot send the paper copy.

3.3 Enquiries by e-mail, telephone or through distributors

Data

Name, organization, contact details and the content of your message.

Purpose

To answer your enquiry and, where relevant, to handle orders and the business relationship.

Legal basis

Art. 6(1)(b) GDPR, where the enquiry relates to a contract or steps before a contract; otherwise, Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries.

Retention

Enquiries that do not lead to an order, a complaint or a paper-copy request are deleted 3 years after the enquiry has been closed. Where an enquiry leads to an order, the order records are kept for the period required by commercial and tax law. Where it concerns a complaint or an incident, section 3.4 applies.

If you contact us through the form on our "Get in touch" page, including requests for a paper copy of the instructions for use, the form is provided by POWr.io, Inc. (USA). POWr processes the data you enter on our behalf, as our processor, and forwards it to us.

‍

3.4 Complaints, adverse events and serious incidents (vigilance)

If you report a complaint, a malfunction or an incident involving an ARDS device, we process the information needed to investigate it and to meet our obligations as a medical device manufacturer.

Data

Reporter's name, organization and contact details. Details of the device (REF, lot) and of the event. Where necessary for the investigation, limited information about the patient, such as age, sex, the clinical course and the treatment given. This may include health data.

Purpose

Complaint handling, post-market surveillance, and vigilance reporting to competent authorities and our notified body.

Legal basis

Art. 6(1)(c) GDPR – legal obligations under Regulation (EU) 2017/745 (MDR), in particular Articles 10, 83 and 87. For health data: Art. 9(2)(i) GDPR- reasons of public interest in ensuring high standards of quality and safety of medical devices.

Retention

For the period required by the MDR for the technical and post-market surveillance documentation: at least 15 years after the last device of the type concerned has been placed on the market.

Please do not send us the patient's name or other directly identifying details. Use a case or patient code instead. If identifying details are received, we pseudonymize them.

3.5 Links to social media

Our website contains links to our pages on Facebook, Instagram, LinkedIn and X (Twitter). These are plain links: no data is sent to these platforms until you click a link. After you leave our website, the privacy policy of the platform applies.

‍

3.6 Fonts and technical libraries loaded from third parties

To display the website, your browser loads fonts and program libraries directly from the providers listed below. When this happens, your IP address and technical browser data (browser type, requested file, time of request) are transmitted to the provider. We do not pass any other information to these providers.

· Adobe Fonts (use.typekit.net) – Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland, and Adobe Inc., USA. Adobe may log information about the fonts served for licence-compliance purposes.

· jQuery library – delivered through the content-delivery network used by our hosting provider Webflow (Amazon CloudFront).

Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in a consistent and reliable presentation of the website. For transfers to the USA, see section 6.

‍

Our website uses only cookies and similar technologies that are srictly necessary to provide the service you request, such as remembering your language selection. These do not require your consent (Article 5(3) of Directive 2002/58/EC). We do not use analytics, advertising or tracking cookies.

Name

_cfuvid

Provider

Cloudflare

Purpose

Distinguishes individual visitors sharing the same IP address, to apply security/rate-limiting protections against malicious traffic

Duration

Session

‍

Name

siteLang

Provider

ARDS (local storage in your browser)

Purpose

Remembers the language you selected for the website and the instructions for use

Duration

Until you clear your browser storage

‍

Name

siteTranslationsCache

Provider

ARDS (local storage in your browser)

Purpose

Stores the website text in your selected language on your device, so that pages load faster

Duration

Until you clear your browser storage

‍

Items in local storage stay on your device and are not sent to us.

‍

5. Who receives your data

· Website hosting: Webflow, Inc., USA, and its content-delivery sub-processors host the website and the instruction files. They act as our processor under a data processing agreement.

· E-mail and IT services: Google Ireland Limited (Google Workspace), acting as our processor.

· Security service: Cloudflare, Inc., USA – protection of the website against malicious traffic (cookie _cfuvid).

· Contact form: POWr.io, Inc., USA – provides the "Get in touch" form, including paper- copy requests, as our processor.

· Font and library providers: Google and Adobe – delivery of fonts and program libraries (see section 3.6).

· ARDS distributors: where a distributor delivers the paper copy or handles your enquiry in your country.

· Authorities and our notified body: competent authorities and our notified body, where required for vigilance and post-market surveillance under the MDR.

· Professional advisers and courts: where necessary to establish, exercise or defend legal claims.

We do not sell personal data, and we do not use it for advertising.

6. International transfers

ARDS is established in Israel. The European Commission has recognized that Israel provides an adequate level of data protection (Commission Decision 2011/61/EU), so no additional safeguards are needed for transfers from the EEA to ARDS.

Where data is transferred to service providers in the USA or other third countries, we rely on one of two safeguards:

· the EU–U.S. Data Privacy Framework, where the recipient is certified; or

· otherwise, the Standard Contractual Clauses adopted by the European Commission (Implementing Decision (EU) 2021/914), with supplementary measures where needed.

You can request a copy of these safeguards from the privacy contact.

7. Security

The website and the eIFU portal are delivered only over encrypted connections (HTTPS/TLS). Instruction files are uploaded only by authorized ARDS personnel under our document-control procedure and are verified against the controlled master copy before publication. Access to personal data is limited to the staff who need it for the purposes above.

8. Your rights

Under the GDPR you have the right to:

· access your personal data and receive a copy (Art. 15);

· have inaccurate data corrected (Art. 16);

· have your data erased (Art.17);

· restrict processing (Art. 18);

· receive data you provided in a portable format (Art. 20);

· object at any time to processing based on our legitimate interest (Art. 21);

· withdraw consent at any time, where processing is based on consent (Art. 7(3)).

Some of these rights are limited where we must keep data to meet a legal obligation, for example vigilance records under the MDR.

To exercise your rights, contact the privacy contact in section 1. We answer within one month; this can be extended by two further months for complex requests, in which case we will tell you. We may ask you to confirm your identity.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). You can do this in particular in the EU Member State where you live or work, or where you believe the infringement took place. The list of authorities is available at edpb.europa.eu.

9. Automated decisions

We do not make decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you.

10. Professional users

Our website and instructions for use are intended for dental professionals. They are not directed at children, and we do not knowingly collect data from children.

11. Changes to this policy

We review this policy when our processing changes, and at least once a year. The current version and its effective date are shown at the top of this page. Previous versions are available on request from the privacy contact.

‍

Privacy Policy

ARDS Industries Ltd. – website www.ardsimplants.com and electronic instructions for use portal www.ai-ifu.com
Version 1.0- effective date: 27.09.2026

1. Who we are

This policy explains how ARDS Industries Ltd. ("ARDS", "we", "us") processes personal data when you visit www.ardsimplants.com, access our electronic instructions for use (eIFU) through www.ai-ifu.com, or contact us. It is provided in accordance with Articles 12 to 14 of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Article 7(2)(d) of Commission Implementing Regulation (EU) 2021/2226 on electronic instructions for use of medical devices.

Controller

ARDS  Industries Ltd.
POB 6762, Petah Tikva 4934829, Israel
Phone: +972 4 381 2333

Privacy contact

E-mail:  info@ardsimplants.com
Post: as above, marked "Privacy"

Representative in the EU (Art. 27  GDPR)

AR Expert B.V Boeing Avenue 209, 1119 PD Schiphol-Rijk, The Netherlands Tel: +31(0)85-007-3210 info@certification-experts.com

Data protection officer

ARDS has not appointed a data protection officer, as the conditions of Art. 37 GDPR do not apply. Privacy questions can be sent to the privacy contact above to info@ardsimplants.com

2. Using the eIFU portal without providing personal data

You can view and download our instructions for use without registering, logging in or providing your name or contact details. The region, product category, language and REF (catalogue) number you select or enter are used only to show you the correct documents and are not linked to your identity.

Instructions for use are provided as PDF files that can be opened with any free PDF reader. Downloading a PDF does not send personal data to ARDS beyond the technical data described in section 3.1.

3. What we process, why, on which legal basis and for how long

3.1 Technical data when you visit the website or the eIFU portal

Data

IP address, date and time of the request, page or file requested, browser type and version, operating system, referring page, and the HTTP status of the request.

Purpose

To deliver the website and the instruction files to your device, to keep the service secure and available, to protect the instruction files against unauthorized modification, and to investigate faults and attacks. The last three purposes are also required by Article 7(2)(b) and (c) of Regulation (EU) 2021/2226.

Legal basis

Art. 6(1)(f) GDPR – our legitimate interest in operating a secure and available website and eIFU service.

Retention

Server logs are kept by our hosting provider for 1 day and then deleted, unless they are needed to investigate a specific security incident.

3.2 Requests for a paper copy of the instructions for use

You can request a paper copy of any of our instructions for use free of charge. We send it within 7 calendar days of receiving the request. If you ask for it when you place your order, we deliver it with the device. To request a copy, e-mail- info@ardsimplants.com, call +972 4 381 2333, or contact your local ARDS distributor.

Data

Name, clinic or organization, delivery address, e-mail address, telephone number, and the product (REF number, lot number) and language requested.

Purpose

To send you the paper copy and to keep a record that the request was fulfilled.

Legal basis

Art. 6(1)(c) GDPR – legal obligation under Article 5(3) of Regulation (EU)  2021/2226 to supply a paper copy on request.

Retention

15 years after the request, in line with ARDS's quality-record retention procedure.

Is the data required?

Yes. Without a name and delivery address we cannot send the paper copy.

3.3 Enquiries by e-mail, telephone or through distributors

Data

Name, organization, contact details and the content of your message.

Purpose

To answer your enquiry and, where relevant, to handle orders and the business relationship.

Legal basis

Art. 6(1)(b) GDPR, where the enquiry relates to a contract or steps before a contract; otherwise, Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries.

Retention

Enquiries that do not lead to an order, a complaint or a paper-copy request are deleted 3 years after the enquiry has been closed. Where an enquiry leads to an order, the order records are kept for the period required by commercial and tax law. Where it concerns a complaint or an incident, section 3.4 applies.

If you contact us through the form on our "Get in touch" page, including requests for a paper copy of the instructions for use, the form is provided by POWr.io, Inc. (USA). POWr processes the data you enter on our behalf, as our processor, and forwards it to us.

‍

3.4 Complaints, adverse events and serious incidents (vigilance)

If you report a complaint, a malfunction or an incident involving an ARDS device, we process the information needed to investigate it and to meet our obligations as a medical device manufacturer.

Data

Reporter's name, organization and contact details. Details of the device (REF, lot) and of the event. Where necessary for the investigation, limited information about the patient, such as age, sex, the clinical course and the treatment given. This may include health data.

Purpose

Complaint handling, post-market surveillance, and vigilance reporting to competent authorities and our notified body.

Legal basis

Art. 6(1)(c) GDPR – legal obligations under Regulation (EU) 2017/745 (MDR), in particular Articles 10, 83 and 87. For health data: Art. 9(2)(i) GDPR- reasons of public interest in ensuring high standards of quality and safety of medical devices.

Retention

For the period required by the MDR for the technical and post-market surveillance documentation: at least 15 years after the last device of the type concerned has been placed on the market.

Please do not send us the patient's name or other directly identifying details. Use a case or patient code instead. If identifying details are received, we pseudonymize them.

3.5 Links to social media

Our website contains links to our pages on Facebook, Instagram, LinkedIn and X (Twitter). These are plain links: no data is sent to these platforms until you click a link. After you leave our website, the privacy policy of the platform applies.

‍

3.6 Fonts and technical libraries loaded from third parties

To display the website, your browser loads fonts and program libraries directly from the providers listed below. When this happens, your IP address and technical browser data (browser type, requested file, time of request) are transmitted to the provider. We do not pass any other information to these providers.

· Adobe Fonts (use.typekit.net) – Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland, and Adobe Inc., USA. Adobe may log information about the fonts served for licence-compliance purposes.

· jQuery library – delivered through the content-delivery network used by our hosting provider Webflow (Amazon CloudFront).

Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in a consistent and reliable presentation of the website. For transfers to the USA, see section 6.

‍

‍

Our website uses only cookies and similar technologies that are srictly necessary to provide the service you request, such as remembering your language selection. These do not require your consent (Article 5(3) of Directive 2002/58/EC). We do not use analytics, advertising or tracking cookies.

Name

_cfuvid

Provider

Cloudflare

Purpose

Distinguishes individual visitors sharing the same IP address, to apply security/rate-limiting protections against malicious traffic

Duration

Session

‍

Name

siteLang

Provider

ARDS (local storage in your browser)

Purpose

Remembers the language you selected for the website and the instructions for use

Duration

Until you clear your browser storage

‍

Name

siteTranslationsCache

Provider

ARDS (local storage in your browser)

Purpose

Stores the website text in your selected language on your device, so that pages load faster

Duration

Until you clear your browser storage

‍

Items in local storage stay on your device and are not sent to us.

‍

5. Who receives your data

· Website hosting: Webflow, Inc., USA, and its content-delivery sub-processors host the website and the instruction files. They act as our processor under a data processing agreement.

· E-mail and IT services: Google Ireland Limited (Google Workspace), acting as our processor.

· Security service: Cloudflare, Inc., USA – protection of the website against malicious traffic (cookie _cfuvid).

· Contact form: POWr.io, Inc., USA – provides the "Get in touch" form, including paper- copy requests, as our processor.

· Font and library providers: Google and Adobe – delivery of fonts and program libraries (see section 3.6).

· ARDS distributors: where a distributor delivers the paper copy or handles your enquiry in your country.

· Authorities and our notified body: competent authorities and our notified body, where required for vigilance and post-market surveillance under the MDR.

· Professional advisers and courts: where necessary to establish, exercise or defend legal claims.

We do not sell personal data, and we do not use it for advertising.

6. International transfers

ARDS is established in Israel. The European Commission has recognized that Israel provides an adequate level of data protection (Commission Decision 2011/61/EU), so no additional safeguards are needed for transfers from the EEA to ARDS.

Where data is transferred to service providers in the USA or other third countries, we rely on one of two safeguards:

· the EU–U.S. Data Privacy Framework, where the recipient is certified; or

· otherwise, the Standard Contractual Clauses adopted by the European Commission (Implementing Decision (EU) 2021/914), with supplementary measures where needed.

You can request a copy of these safeguards from the privacy contact.

7. Security

The website and the eIFU portal are delivered only over encrypted connections (HTTPS/TLS). Instruction files are uploaded only by authorized ARDS personnel under our document-control procedure and are verified against the controlled master copy before publication. Access to personal data is limited to the staff who need it for the purposes above.

8. Your rights

Under the GDPR you have the right to:

· access your personal data and receive a copy (Art. 15);

· have inaccurate data corrected (Art. 16);

· have your data erased (Art.17);

· restrict processing (Art. 18);

· receive data you provided in a portable format (Art. 20);

· object at any time to processing based on our legitimate interest (Art. 21);

· withdraw consent at any time, where processing is based on consent (Art. 7(3)).

Some of these rights are limited where we must keep data to meet a legal obligation, for example vigilance records under the MDR.

To exercise your rights, contact the privacy contact in section 1. We answer within one month; this can be extended by two further months for complex requests, in which case we will tell you. We may ask you to confirm your identity.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). You can do this in particular in the EU Member State where you live or work, or where you believe the infringement took place. The list of authorities is available at edpb.europa.eu.

9. Automated decisions

We do not make decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you.

10. Professional users

Our website and instructions for use are intended for dental professionals. They are not directed at children, and we do not knowingly collect data from children.

11. Changes to this policy

We review this policy when our processing changes, and at least once a year. The current version and its effective date are shown at the top of this page. Previous versions are available on request from the privacy contact.

‍

Privacy Policy

ARDS Industries Ltd. – website www.ardsimplants.com and electronic instructions for use portal www.ai-ifu.com
Version 1.0- effective date: 27.09.2026

1. Who we are

This policy explains how ARDS Industries Ltd. ("ARDS", "we", "us") processes personal data when you visit www.ardsimplants.com, access our electronic instructions for use (eIFU) through www.ai-ifu.com, or contact us. It is provided in accordance with Articles 12 to 14 of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Article 7(2)(d) of Commission Implementing Regulation (EU) 2021/2226 on electronic instructions for use of medical devices.

Controller

ARDS  Industries Ltd.
POB 6762, Petah Tikva 4934829, Israel
Phone: +972 4 381 2333

Privacy contact

E-mail:  info@ardsimplants.com
Post: as above, marked "Privacy"

Representative in the EU (Art. 27  GDPR)

AR Expert B.V Boeing Avenue 209, 1119 PD Schiphol-Rijk, The Netherlands Tel: +31(0)85-007-3210 info@certification-experts.com

Data protection officer

ARDS has not appointed a data protection officer, as the conditions of Art. 37 GDPR do not apply. Privacy questions can be sent to the privacy contact above to info@ardsimplants.com

2. Using the eIFU portal without providing personal data

You can view and download our instructions for use without registering, logging in or providing your name or contact details. The region, product category, language and REF (catalogue) number you select or enter are used only to show you the correct documents and are not linked to your identity.

Instructions for use are provided as PDF files that can be opened with any free PDF reader. Downloading a PDF does not send personal data to ARDS beyond the technical data described in section 3.1.

3. What we process, why, on which legal basis and for how long

3.1 Technical data when you visit the website or the eIFU portal

Data

IP address, date and time of the request, page or file requested, browser type and version, operating system, referring page, and the HTTP status of the request.

Purpose

To deliver the website and the instruction files to your device, to keep the service secure and available, to protect the instruction files against unauthorized modification, and to investigate faults and attacks. The last three purposes are also required by Article 7(2)(b) and (c) of Regulation (EU) 2021/2226.

Legal basis

Art. 6(1)(f) GDPR – our legitimate interest in operating a secure and available website and eIFU service.

Retention

Server logs are kept by our hosting provider for 1 day and then deleted, unless they are needed to investigate a specific security incident.

3.2 Requests for a paper copy of the instructions for use

You can request a paper copy of any of our instructions for use free of charge. We send it within 7 calendar days of receiving the request. If you ask for it when you place your order, we deliver it with the device. To request a copy, e-mail- info@ardsimplants.com, call +972 4 381 2333, or contact your local ARDS distributor.

Data

Name, clinic or organization, delivery address, e-mail address, telephone number, and the product (REF number, lot number) and language requested.

Purpose

To send you the paper copy and to keep a record that the request was fulfilled.

Legal basis

Art. 6(1)(c) GDPR – legal obligation under Article 5(3) of Regulation (EU)  2021/2226 to supply a paper copy on request.

Retention

15 years after the request, in line with ARDS's quality-record retention procedure.

Is the data required?

Yes. Without a name and delivery address we cannot send the paper copy.

3.3 Enquiries by e-mail, telephone or through distributors

Data

Name, organization, contact details and the content of your message.

Purpose

To answer your enquiry and, where relevant, to handle orders and the business relationship.

Legal basis

Art. 6(1)(b) GDPR, where the enquiry relates to a contract or steps before a contract; otherwise, Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries.

Retention

Enquiries that do not lead to an order, a complaint or a paper-copy request are deleted 3 years after the enquiry has been closed. Where an enquiry leads to an order, the order records are kept for the period required by commercial and tax law. Where it concerns a complaint or an incident, section 3.4 applies.

If you contact us through the form on our "Get in touch" page, including requests for a paper copy of the instructions for use, the form is provided by POWr.io, Inc. (USA). POWr processes the data you enter on our behalf, as our processor, and forwards it to us.

‍

3.4 Complaints, adverse events and serious incidents (vigilance)

If you report a complaint, a malfunction or an incident involving an ARDS device, we process the information needed to investigate it and to meet our obligations as a medical device manufacturer.

Data

Reporter's name, organization and contact details. Details of the device (REF, lot) and of the event. Where necessary for the investigation, limited information about the patient, such as age, sex, the clinical course and the treatment given. This may include health data.

Purpose

Complaint handling, post-market surveillance, and vigilance reporting to competent authorities and our notified body.

Legal basis

Art. 6(1)(c) GDPR – legal obligations under Regulation (EU) 2017/745 (MDR), in particular Articles 10, 83 and 87. For health data: Art. 9(2)(i) GDPR- reasons of public interest in ensuring high standards of quality and safety of medical devices.

Retention

For the period required by the MDR for the technical and post-market surveillance documentation: at least 15 years after the last device of the type concerned has been placed on the market.

Please do not send us the patient's name or other directly identifying details. Use a case or patient code instead. If identifying details are received, we pseudonymize them.

3.5 Links to social media

Our website contains links to our pages on Facebook, Instagram, LinkedIn and X (Twitter). These are plain links: no data is sent to these platforms until you click a link. After you leave our website, the privacy policy of the platform applies.

‍

3.6 Fonts and technical libraries loaded from third parties

To display the website, your browser loads fonts and program libraries directly from the providers listed below. When this happens, your IP address and technical browser data (browser type, requested file, time of request) are transmitted to the provider. We do not pass any other information to these providers.

· Adobe Fonts (use.typekit.net) – Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland, and Adobe Inc., USA. Adobe may log information about the fonts served for licence-compliance purposes.

· jQuery library – delivered through the content-delivery network used by our hosting provider Webflow (Amazon CloudFront).

Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in a consistent and reliable presentation of the website. For transfers to the USA, see section 6.

‍

‍

Our website uses only cookies and similar technologies that are srictly necessary to provide the service you request, such as remembering your language selection. These do not require your consent (Article 5(3) of Directive 2002/58/EC). We do not use analytics, advertising or tracking cookies.

Name

_cfuvid

Provider

Cloudflare

Purpose

Distinguishes individual visitors sharing the same IP address, to apply security/rate-limiting protections against malicious traffic

Duration

Session

‍

Name

siteLang

Provider

ARDS (local storage in your browser)

Purpose

Remembers the language you selected for the website and the instructions for use

Duration

Until you clear your browser storage

‍

Name

siteTranslationsCache

Provider

ARDS (local storage in your browser)

Purpose

Stores the website text in your selected language on your device, so that pages load faster

Duration

Until you clear your browser storage

‍

Items in local storage stay on your device and are not sent to us.

‍

5. Who receives your data

· Website hosting: Webflow, Inc., USA, and its content-delivery sub-processors host the website and the instruction files. They act as our processor under a data processing agreement.

· E-mail and IT services: Google Ireland Limited (Google Workspace), acting as our processor.

· Security service: Cloudflare, Inc., USA – protection of the website against malicious traffic (cookie _cfuvid).

· Contact form: POWr.io, Inc., USA – provides the "Get in touch" form, including paper- copy requests, as our processor.

· Font and library providers: Google and Adobe – delivery of fonts and program libraries (see section 3.6).

· ARDS distributors: where a distributor delivers the paper copy or handles your enquiry in your country.

· Authorities and our notified body: competent authorities and our notified body, where required for vigilance and post-market surveillance under the MDR.

· Professional advisers and courts: where necessary to establish, exercise or defend legal claims.

We do not sell personal data, and we do not use it for advertising.

6. International transfers

ARDS is established in Israel. The European Commission has recognized that Israel provides an adequate level of data protection (Commission Decision 2011/61/EU), so no additional safeguards are needed for transfers from the EEA to ARDS.

Where data is transferred to service providers in the USA or other third countries, we rely on one of two safeguards:

· the EU–U.S. Data Privacy Framework, where the recipient is certified; or

· otherwise, the Standard Contractual Clauses adopted by the European Commission (Implementing Decision (EU) 2021/914), with supplementary measures where needed.

You can request a copy of these safeguards from the privacy contact.

7. Security

The website and the eIFU portal are delivered only over encrypted connections (HTTPS/TLS). Instruction files are uploaded only by authorized ARDS personnel under our document-control procedure and are verified against the controlled master copy before publication. Access to personal data is limited to the staff who need it for the purposes above.

8. Your rights

Under the GDPR you have the right to:

· access your personal data and receive a copy (Art. 15);

· have inaccurate data corrected (Art. 16);

· have your data erased (Art.17);

· restrict processing (Art. 18);

· receive data you provided in a portable format (Art. 20);

· object at any time to processing based on our legitimate interest (Art. 21);

· withdraw consent at any time, where processing is based on consent (Art. 7(3)).

Some of these rights are limited where we must keep data to meet a legal obligation, for example vigilance records under the MDR.

To exercise your rights, contact the privacy contact in section 1. We answer within one month; this can be extended by two further months for complex requests, in which case we will tell you. We may ask you to confirm your identity.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). You can do this in particular in the EU Member State where you live or work, or where you believe the infringement took place. The list of authorities is available at edpb.europa.eu.

9. Automated decisions

We do not make decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you.

10. Professional users

Our website and instructions for use are intended for dental professionals. They are not directed at children, and we do not knowingly collect data from children.

11. Changes to this policy

We review this policy when our processing changes, and at least once a year. The current version and its effective date are shown at the top of this page. Previous versions are available on request from the privacy contact.

‍

Privacy Policy

ARDS Industries Ltd. – website www.ardsimplants.com and electronic instructions for use portal www.ai-ifu.com
Version 1.0- effective date: 27.09.2026

1. Who we are

This policy explains how ARDS Industries Ltd. ("ARDS", "we", "us") processes personal data when you visit www.ardsimplants.com, access our electronic instructions for use (eIFU) through www.ai-ifu.com, or contact us. It is provided in accordance with Articles 12 to 14 of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Article 7(2)(d) of Commission Implementing Regulation (EU) 2021/2226 on electronic instructions for use of medical devices.

Controller

ARDS  Industries Ltd.
POB 6762, Petah Tikva 4934829, Israel
Phone: +972 4 381 2333

Privacy contact

E-mail:  info@ardsimplants.com
Post: as above, marked "Privacy"

Representative in the EU (Art. 27  GDPR)

AR Expert B.V Boeing Avenue 209, 1119 PD Schiphol-Rijk, The Netherlands Tel: +31(0)85-007-3210 info@certification-experts.com

Data protection officer

ARDS has not appointed a data protection officer, as the conditions of Art. 37 GDPR do not apply. Privacy questions can be sent to the privacy contact above to info@ardsimplants.com

2. Using the eIFU portal without providing personal data

You can view and download our instructions for use without registering, logging in or providing your name or contact details. The region, product category, language and REF (catalogue) number you select or enter are used only to show you the correct documents and are not linked to your identity.

Instructions for use are provided as PDF files that can be opened with any free PDF reader. Downloading a PDF does not send personal data to ARDS beyond the technical data described in section 3.1.

3. What we process, why, on which legal basis and for how long

3.1 Technical data when you visit the website or the eIFU portal

Data

IP address, date and time of the request, page or file requested, browser type and version, operating system, referring page, and the HTTP status of the request.

Purpose

To deliver the website and the instruction files to your device, to keep the service secure and available, to protect the instruction files against unauthorized modification, and to investigate faults and attacks. The last three purposes are also required by Article 7(2)(b) and (c) of Regulation (EU) 2021/2226.

Legal basis

Art. 6(1)(f) GDPR – our legitimate interest in operating a secure and available website and eIFU service.

Retention

Server logs are kept by our hosting provider for 1 day and then deleted, unless they are needed to investigate a specific security incident.

3.2 Requests for a paper copy of the instructions for use

You can request a paper copy of any of our instructions for use free of charge. We send it within 7 calendar days of receiving the request. If you ask for it when you place your order, we deliver it with the device. To request a copy, e-mail- info@ardsimplants.com, call +972 4 381 2333, or contact your local ARDS distributor.

Data

Name, clinic or organization, delivery address, e-mail address, telephone number, and the product (REF number, lot number) and language requested.

Purpose

To send you the paper copy and to keep a record that the request was fulfilled.

Legal basis

Art. 6(1)(c) GDPR – legal obligation under Article 5(3) of Regulation (EU)  2021/2226 to supply a paper copy on request.

Retention

15 years after the request, in line with ARDS's quality-record retention procedure.

Is the data required?

Yes. Without a name and delivery address we cannot send the paper copy.

3.3 Enquiries by e-mail, telephone or through distributors

Data

Name, organization, contact details and the content of your message.

Purpose

To answer your enquiry and, where relevant, to handle orders and the business relationship.

Legal basis

Art. 6(1)(b) GDPR, where the enquiry relates to a contract or steps before a contract; otherwise, Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries.

Retention

Enquiries that do not lead to an order, a complaint or a paper-copy request are deleted 3 years after the enquiry has been closed. Where an enquiry leads to an order, the order records are kept for the period required by commercial and tax law. Where it concerns a complaint or an incident, section 3.4 applies.

If you contact us through the form on our "Get in touch" page, including requests for a paper copy of the instructions for use, the form is provided by POWr.io, Inc. (USA). POWr processes the data you enter on our behalf, as our processor, and forwards it to us.

‍

3.4 Complaints, adverse events and serious incidents (vigilance)

If you report a complaint, a malfunction or an incident involving an ARDS device, we process the information needed to investigate it and to meet our obligations as a medical device manufacturer.

Data

Reporter's name, organization and contact details. Details of the device (REF, lot) and of the event. Where necessary for the investigation, limited information about the patient, such as age, sex, the clinical course and the treatment given. This may include health data.

Purpose

Complaint handling, post-market surveillance, and vigilance reporting to competent authorities and our notified body.

Legal basis

Art. 6(1)(c) GDPR – legal obligations under Regulation (EU) 2017/745 (MDR), in particular Articles 10, 83 and 87. For health data: Art. 9(2)(i) GDPR- reasons of public interest in ensuring high standards of quality and safety of medical devices.

Retention

For the period required by the MDR for the technical and post-market surveillance documentation: at least 15 years after the last device of the type concerned has been placed on the market.

Please do not send us the patient's name or other directly identifying details. Use a case or patient code instead. If identifying details are received, we pseudonymize them.

3.5 Links to social media

Our website contains links to our pages on Facebook, Instagram, LinkedIn and X (Twitter). These are plain links: no data is sent to these platforms until you click a link. After you leave our website, the privacy policy of the platform applies.

‍

3.6 Fonts and technical libraries loaded from third parties

To display the website, your browser loads fonts and program libraries directly from the providers listed below. When this happens, your IP address and technical browser data (browser type, requested file, time of request) are transmitted to the provider. We do not pass any other information to these providers.

· Adobe Fonts (use.typekit.net) – Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland, and Adobe Inc., USA. Adobe may log information about the fonts served for licence-compliance purposes.

· jQuery library – delivered through the content-delivery network used by our hosting provider Webflow (Amazon CloudFront).

Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in a consistent and reliable presentation of the website. For transfers to the USA, see section 6.

‍

‍

Our website uses only cookies and similar technologies that are srictly necessary to provide the service you request, such as remembering your language selection. These do not require your consent (Article 5(3) of Directive 2002/58/EC). We do not use analytics, advertising or tracking cookies.

Name

_cfuvid

Provider

Cloudflare

Purpose

Distinguishes individual visitors sharing the same IP address, to apply security/rate-limiting protections against malicious traffic

Duration

Session

‍

Name

siteLang

Provider

ARDS (local storage in your browser)

Purpose

Remembers the language you selected for the website and the instructions for use

Duration

Until you clear your browser storage

‍

Name

siteTranslationsCache

Provider

ARDS (local storage in your browser)

Purpose

Stores the website text in your selected language on your device, so that pages load faster

Duration

Until you clear your browser storage

‍

Items in local storage stay on your device and are not sent to us.

‍

5. Who receives your data

· Website hosting: Webflow, Inc., USA, and its content-delivery sub-processors host the website and the instruction files. They act as our processor under a data processing agreement.

· E-mail and IT services: Google Ireland Limited (Google Workspace), acting as our processor.

· Security service: Cloudflare, Inc., USA – protection of the website against malicious traffic (cookie _cfuvid).

· Contact form: POWr.io, Inc., USA – provides the "Get in touch" form, including paper- copy requests, as our processor.

· Font and library providers: Google and Adobe – delivery of fonts and program libraries (see section 3.6).

· ARDS distributors: where a distributor delivers the paper copy or handles your enquiry in your country.

· Authorities and our notified body: competent authorities and our notified body, where required for vigilance and post-market surveillance under the MDR.

· Professional advisers and courts: where necessary to establish, exercise or defend legal claims.

We do not sell personal data, and we do not use it for advertising.

6. International transfers

ARDS is established in Israel. The European Commission has recognized that Israel provides an adequate level of data protection (Commission Decision 2011/61/EU), so no additional safeguards are needed for transfers from the EEA to ARDS.

Where data is transferred to service providers in the USA or other third countries, we rely on one of two safeguards:

· the EU–U.S. Data Privacy Framework, where the recipient is certified; or

· otherwise, the Standard Contractual Clauses adopted by the European Commission (Implementing Decision (EU) 2021/914), with supplementary measures where needed.

You can request a copy of these safeguards from the privacy contact.

7. Security

The website and the eIFU portal are delivered only over encrypted connections (HTTPS/TLS). Instruction files are uploaded only by authorized ARDS personnel under our document-control procedure and are verified against the controlled master copy before publication. Access to personal data is limited to the staff who need it for the purposes above.

8. Your rights

Under the GDPR you have the right to:

· access your personal data and receive a copy (Art. 15);

· have inaccurate data corrected (Art. 16);

· have your data erased (Art.17);

· restrict processing (Art. 18);

· receive data you provided in a portable format (Art. 20);

· object at any time to processing based on our legitimate interest (Art. 21);

· withdraw consent at any time, where processing is based on consent (Art. 7(3)).

Some of these rights are limited where we must keep data to meet a legal obligation, for example vigilance records under the MDR.

To exercise your rights, contact the privacy contact in section 1. We answer within one month; this can be extended by two further months for complex requests, in which case we will tell you. We may ask you to confirm your identity.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). You can do this in particular in the EU Member State where you live or work, or where you believe the infringement took place. The list of authorities is available at edpb.europa.eu.

9. Automated decisions

We do not make decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you.

10. Professional users

Our website and instructions for use are intended for dental professionals. They are not directed at children, and we do not knowingly collect data from children.

11. Changes to this policy

We review this policy when our processing changes, and at least once a year. The current version and its effective date are shown at the top of this page. Previous versions are available on request from the privacy contact.

‍

Privacy Policy

ARDS Industries Ltd. – website www.ardsimplants.com and electronic instructions for use portal www.ai-ifu.com
Version 1.0- effective date: 27.09.2026

1. Who we are

This policy explains how ARDS Industries Ltd. ("ARDS", "we", "us") processes personal data when you visit www.ardsimplants.com, access our electronic instructions for use (eIFU) through www.ai-ifu.com, or contact us. It is provided in accordance with Articles 12 to 14 of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Article 7(2)(d) of Commission Implementing Regulation (EU) 2021/2226 on electronic instructions for use of medical devices.

Controller

ARDS  Industries Ltd.
POB 6762, Petah Tikva 4934829, Israel
Phone: +972 4 381 2333

Privacy contact

E-mail:  info@ardsimplants.com
Post: as above, marked "Privacy"

Representative in the EU (Art. 27  GDPR)

AR Expert B.V Boeing Avenue 209, 1119 PD Schiphol-Rijk, The Netherlands Tel: +31(0)85-007-3210 info@certification-experts.com

Data protection officer

ARDS has not appointed a data protection officer, as the conditions of Art. 37 GDPR do not apply. Privacy questions can be sent to the privacy contact above to info@ardsimplants.com

2. Using the eIFU portal without providing personal data

You can view and download our instructions for use without registering, logging in or providing your name or contact details. The region, product category, language and REF (catalogue) number you select or enter are used only to show you the correct documents and are not linked to your identity.

Instructions for use are provided as PDF files that can be opened with any free PDF reader. Downloading a PDF does not send personal data to ARDS beyond the technical data described in section 3.1.

3. What we process, why, on which legal basis and for how long

3.1 Technical data when you visit the website or the eIFU portal

Data

IP address, date and time of the request, page or file requested, browser type and version, operating system, referring page, and the HTTP status of the request.

Purpose

To deliver the website and the instruction files to your device, to keep the service secure and available, to protect the instruction files against unauthorized modification, and to investigate faults and attacks. The last three purposes are also required by Article 7(2)(b) and (c) of Regulation (EU) 2021/2226.

Legal basis

Art. 6(1)(f) GDPR – our legitimate interest in operating a secure and available website and eIFU service.

Retention

Server logs are kept by our hosting provider for 1 day and then deleted, unless they are needed to investigate a specific security incident.

3.2 Requests for a paper copy of the instructions for use

You can request a paper copy of any of our instructions for use free of charge. We send it within 7 calendar days of receiving the request. If you ask for it when you place your order, we deliver it with the device. To request a copy, e-mail- info@ardsimplants.com, call +972 4 381 2333, or contact your local ARDS distributor.

Data

Name, clinic or organization, delivery address, e-mail address, telephone number, and the product (REF number, lot number) and language requested.

Purpose

To send you the paper copy and to keep a record that the request was fulfilled.

Legal basis

Art. 6(1)(c) GDPR – legal obligation under Article 5(3) of Regulation (EU)  2021/2226 to supply a paper copy on request.

Retention

15 years after the request, in line with ARDS's quality-record retention procedure.

Is the data required?

Yes. Without a name and delivery address we cannot send the paper copy.

3.3 Enquiries by e-mail, telephone or through distributors

Data

Name, organization, contact details and the content of your message.

Purpose

To answer your enquiry and, where relevant, to handle orders and the business relationship.

Legal basis

Art. 6(1)(b) GDPR, where the enquiry relates to a contract or steps before a contract; otherwise, Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries.

Retention

Enquiries that do not lead to an order, a complaint or a paper-copy request are deleted 3 years after the enquiry has been closed. Where an enquiry leads to an order, the order records are kept for the period required by commercial and tax law. Where it concerns a complaint or an incident, section 3.4 applies.

If you contact us through the form on our "Get in touch" page, including requests for a paper copy of the instructions for use, the form is provided by POWr.io, Inc. (USA). POWr processes the data you enter on our behalf, as our processor, and forwards it to us.

‍

3.4 Complaints, adverse events and serious incidents (vigilance)

If you report a complaint, a malfunction or an incident involving an ARDS device, we process the information needed to investigate it and to meet our obligations as a medical device manufacturer.

Data

Reporter's name, organization and contact details. Details of the device (REF, lot) and of the event. Where necessary for the investigation, limited information about the patient, such as age, sex, the clinical course and the treatment given. This may include health data.

Purpose

Complaint handling, post-market surveillance, and vigilance reporting to competent authorities and our notified body.

Legal basis

Art. 6(1)(c) GDPR – legal obligations under Regulation (EU) 2017/745 (MDR), in particular Articles 10, 83 and 87. For health data: Art. 9(2)(i) GDPR- reasons of public interest in ensuring high standards of quality and safety of medical devices.

Retention

For the period required by the MDR for the technical and post-market surveillance documentation: at least 15 years after the last device of the type concerned has been placed on the market.

Please do not send us the patient's name or other directly identifying details. Use a case or patient code instead. If identifying details are received, we pseudonymize them.

3.5 Links to social media

Our website contains links to our pages on Facebook, Instagram, LinkedIn and X (Twitter). These are plain links: no data is sent to these platforms until you click a link. After you leave our website, the privacy policy of the platform applies.

‍

3.6 Fonts and technical libraries loaded from third parties

To display the website, your browser loads fonts and program libraries directly from the providers listed below. When this happens, your IP address and technical browser data (browser type, requested file, time of request) are transmitted to the provider. We do not pass any other information to these providers.

· Adobe Fonts (use.typekit.net) – Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland, and Adobe Inc., USA. Adobe may log information about the fonts served for licence-compliance purposes.

· jQuery library – delivered through the content-delivery network used by our hosting provider Webflow (Amazon CloudFront).

Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in a consistent and reliable presentation of the website. For transfers to the USA, see section 6.

‍

‍

Our website uses only cookies and similar technologies that are srictly necessary to provide the service you request, such as remembering your language selection. These do not require your consent (Article 5(3) of Directive 2002/58/EC). We do not use analytics, advertising or tracking cookies.

Name

_cfuvid

Provider

Cloudflare

Purpose

Distinguishes individual visitors sharing the same IP address, to apply security/rate-limiting protections against malicious traffic

Duration

Session

‍

Name

siteLang

Provider

ARDS (local storage in your browser)

Purpose

Remembers the language you selected for the website and the instructions for use

Duration

Until you clear your browser storage

‍

Name

siteTranslationsCache

Provider

ARDS (local storage in your browser)

Purpose

Stores the website text in your selected language on your device, so that pages load faster

Duration

Until you clear your browser storage

‍

Items in local storage stay on your device and are not sent to us.

‍

5. Who receives your data

· Website hosting: Webflow, Inc., USA, and its content-delivery sub-processors host the website and the instruction files. They act as our processor under a data processing agreement.

· E-mail and IT services: Google Ireland Limited (Google Workspace), acting as our processor.

· Security service: Cloudflare, Inc., USA – protection of the website against malicious traffic (cookie _cfuvid).

· Contact form: POWr.io, Inc., USA – provides the "Get in touch" form, including paper- copy requests, as our processor.

· Font and library providers: Google and Adobe – delivery of fonts and program libraries (see section 3.6).

· ARDS distributors: where a distributor delivers the paper copy or handles your enquiry in your country.

· Authorities and our notified body: competent authorities and our notified body, where required for vigilance and post-market surveillance under the MDR.

· Professional advisers and courts: where necessary to establish, exercise or defend legal claims.

We do not sell personal data, and we do not use it for advertising.

6. International transfers

ARDS is established in Israel. The European Commission has recognized that Israel provides an adequate level of data protection (Commission Decision 2011/61/EU), so no additional safeguards are needed for transfers from the EEA to ARDS.

Where data is transferred to service providers in the USA or other third countries, we rely on one of two safeguards:

· the EU–U.S. Data Privacy Framework, where the recipient is certified; or

· otherwise, the Standard Contractual Clauses adopted by the European Commission (Implementing Decision (EU) 2021/914), with supplementary measures where needed.

You can request a copy of these safeguards from the privacy contact.

7. Security

The website and the eIFU portal are delivered only over encrypted connections (HTTPS/TLS). Instruction files are uploaded only by authorized ARDS personnel under our document-control procedure and are verified against the controlled master copy before publication. Access to personal data is limited to the staff who need it for the purposes above.

8. Your rights

Under the GDPR you have the right to:

· access your personal data and receive a copy (Art. 15);

· have inaccurate data corrected (Art. 16);

· have your data erased (Art.17);

· restrict processing (Art. 18);

· receive data you provided in a portable format (Art. 20);

· object at any time to processing based on our legitimate interest (Art. 21);

· withdraw consent at any time, where processing is based on consent (Art. 7(3)).

Some of these rights are limited where we must keep data to meet a legal obligation, for example vigilance records under the MDR.

To exercise your rights, contact the privacy contact in section 1. We answer within one month; this can be extended by two further months for complex requests, in which case we will tell you. We may ask you to confirm your identity.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). You can do this in particular in the EU Member State where you live or work, or where you believe the infringement took place. The list of authorities is available at edpb.europa.eu.

9. Automated decisions

We do not make decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you.

10. Professional users

Our website and instructions for use are intended for dental professionals. They are not directed at children, and we do not knowingly collect data from children.

11. Changes to this policy

We review this policy when our processing changes, and at least once a year. The current version and its effective date are shown at the top of this page. Previous versions are available on request from the privacy contact.

‍

Privacy Policy

ARDS Industries Ltd. – website www.ardsimplants.com and electronic instructions for use portal www.ai-ifu.com
Version 1.0- effective date: 27.09.2026

1. Who we are

This policy explains how ARDS Industries Ltd. ("ARDS", "we", "us") processes personal data when you visit www.ardsimplants.com, access our electronic instructions for use (eIFU) through www.ai-ifu.com, or contact us. It is provided in accordance with Articles 12 to 14 of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Article 7(2)(d) of Commission Implementing Regulation (EU) 2021/2226 on electronic instructions for use of medical devices.

Controller

ARDS  Industries Ltd.
POB 6762, Petah Tikva 4934829, Israel
Phone: +972 4 381 2333

Privacy contact

E-mail:  info@ardsimplants.com
Post: as above, marked "Privacy"

Representative in the EU (Art. 27  GDPR)

AR Expert B.V Boeing Avenue 209, 1119 PD Schiphol-Rijk, The Netherlands Tel: +31(0)85-007-3210 info@certification-experts.com

Data protection officer

ARDS has not appointed a data protection officer, as the conditions of Art. 37 GDPR do not apply. Privacy questions can be sent to the privacy contact above to info@ardsimplants.com

2. Using the eIFU portal without providing personal data

You can view and download our instructions for use without registering, logging in or providing your name or contact details. The region, product category, language and REF (catalogue) number you select or enter are used only to show you the correct documents and are not linked to your identity.

Instructions for use are provided as PDF files that can be opened with any free PDF reader. Downloading a PDF does not send personal data to ARDS beyond the technical data described in section 3.1.

3. What we process, why, on which legal basis and for how long

3.1 Technical data when you visit the website or the eIFU portal

Data

IP address, date and time of the request, page or file requested, browser type and version, operating system, referring page, and the HTTP status of the request.

Purpose

To deliver the website and the instruction files to your device, to keep the service secure and available, to protect the instruction files against unauthorized modification, and to investigate faults and attacks. The last three purposes are also required by Article 7(2)(b) and (c) of Regulation (EU) 2021/2226.

Legal basis

Art. 6(1)(f) GDPR – our legitimate interest in operating a secure and available website and eIFU service.

Retention

Server logs are kept by our hosting provider for 1 day and then deleted, unless they are needed to investigate a specific security incident.

3.2 Requests for a paper copy of the instructions for use

You can request a paper copy of any of our instructions for use free of charge. We send it within 7 calendar days of receiving the request. If you ask for it when you place your order, we deliver it with the device. To request a copy, e-mail- info@ardsimplants.com, call +972 4 381 2333, or contact your local ARDS distributor.

Data

Name, clinic or organization, delivery address, e-mail address, telephone number, and the product (REF number, lot number) and language requested.

Purpose

To send you the paper copy and to keep a record that the request was fulfilled.

Legal basis

Art. 6(1)(c) GDPR – legal obligation under Article 5(3) of Regulation (EU)  2021/2226 to supply a paper copy on request.

Retention

15 years after the request, in line with ARDS's quality-record retention procedure.

Is the data required?

Yes. Without a name and delivery address we cannot send the paper copy.

3.3 Enquiries by e-mail, telephone or through distributors

Data

Name, organization, contact details and the content of your message.

Purpose

To answer your enquiry and, where relevant, to handle orders and the business relationship.

Legal basis

Art. 6(1)(b) GDPR, where the enquiry relates to a contract or steps before a contract; otherwise, Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries.

Retention

Enquiries that do not lead to an order, a complaint or a paper-copy request are deleted 3 years after the enquiry has been closed. Where an enquiry leads to an order, the order records are kept for the period required by commercial and tax law. Where it concerns a complaint or an incident, section 3.4 applies.

If you contact us through the form on our "Get in touch" page, including requests for a paper copy of the instructions for use, the form is provided by POWr.io, Inc. (USA). POWr processes the data you enter on our behalf, as our processor, and forwards it to us.

‍

3.4 Complaints, adverse events and serious incidents (vigilance)

If you report a complaint, a malfunction or an incident involving an ARDS device, we process the information needed to investigate it and to meet our obligations as a medical device manufacturer.

Data

Reporter's name, organization and contact details. Details of the device (REF, lot) and of the event. Where necessary for the investigation, limited information about the patient, such as age, sex, the clinical course and the treatment given. This may include health data.

Purpose

Complaint handling, post-market surveillance, and vigilance reporting to competent authorities and our notified body.

Legal basis

Art. 6(1)(c) GDPR – legal obligations under Regulation (EU) 2017/745 (MDR), in particular Articles 10, 83 and 87. For health data: Art. 9(2)(i) GDPR- reasons of public interest in ensuring high standards of quality and safety of medical devices.

Retention

For the period required by the MDR for the technical and post-market surveillance documentation: at least 15 years after the last device of the type concerned has been placed on the market.

Please do not send us the patient's name or other directly identifying details. Use a case or patient code instead. If identifying details are received, we pseudonymize them.

3.5 Links to social media

Our website contains links to our pages on Facebook, Instagram, LinkedIn and X (Twitter). These are plain links: no data is sent to these platforms until you click a link. After you leave our website, the privacy policy of the platform applies.

‍

3.6 Fonts and technical libraries loaded from third parties

To display the website, your browser loads fonts and program libraries directly from the providers listed below. When this happens, your IP address and technical browser data (browser type, requested file, time of request) are transmitted to the provider. We do not pass any other information to these providers.

· Adobe Fonts (use.typekit.net) – Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland, and Adobe Inc., USA. Adobe may log information about the fonts served for licence-compliance purposes.

· jQuery library – delivered through the content-delivery network used by our hosting provider Webflow (Amazon CloudFront).

Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in a consistent and reliable presentation of the website. For transfers to the USA, see section 6.

‍

Our website uses only cookies and similar technologies that are srictly necessary to provide the service you request, such as remembering your language selection. These do not require your consent (Article 5(3) of Directive 2002/58/EC). We do not use analytics, advertising or tracking cookies.

Name

_cfuvid

Provider

Cloudflare

Purpose

Distinguishes individual visitors sharing the same IP address, to apply security/rate-limiting protections against malicious traffic

Duration

Session

‍

Name

siteLang

Provider

ARDS (local storage in your browser)

Purpose

Remembers the language you selected for the website and the instructions for use

Duration

Until you clear your browser storage

‍

Name

siteTranslationsCache

Provider

ARDS (local storage in your browser)

Purpose

Stores the website text in your selected language on your device, so that pages load faster

Duration

Until you clear your browser storage

‍

Items in local storage stay on your device and are not sent to us.

‍

5. Who receives your data

· Website hosting: Webflow, Inc., USA, and its content-delivery sub-processors host the website and the instruction files. They act as our processor under a data processing agreement.

· E-mail and IT services: Google Ireland Limited (Google Workspace), acting as our processor.

· Security service: Cloudflare, Inc., USA – protection of the website against malicious traffic (cookie _cfuvid).

· Contact form: POWr.io, Inc., USA – provides the "Get in touch" form, including paper- copy requests, as our processor.

· Font and library providers: Google and Adobe – delivery of fonts and program libraries (see section 3.6).

· ARDS distributors: where a distributor delivers the paper copy or handles your enquiry in your country.

· Authorities and our notified body: competent authorities and our notified body, where required for vigilance and post-market surveillance under the MDR.

· Professional advisers and courts: where necessary to establish, exercise or defend legal claims.

We do not sell personal data, and we do not use it for advertising.

6. International transfers

ARDS is established in Israel. The European Commission has recognized that Israel provides an adequate level of data protection (Commission Decision 2011/61/EU), so no additional safeguards are needed for transfers from the EEA to ARDS.

Where data is transferred to service providers in the USA or other third countries, we rely on one of two safeguards:

· the EU–U.S. Data Privacy Framework, where the recipient is certified; or

· otherwise, the Standard Contractual Clauses adopted by the European Commission (Implementing Decision (EU) 2021/914), with supplementary measures where needed.

You can request a copy of these safeguards from the privacy contact.

7. Security

The website and the eIFU portal are delivered only over encrypted connections (HTTPS/TLS). Instruction files are uploaded only by authorized ARDS personnel under our document-control procedure and are verified against the controlled master copy before publication. Access to personal data is limited to the staff who need it for the purposes above.

8. Your rights

Under the GDPR you have the right to:

· access your personal data and receive a copy (Art. 15);

· have inaccurate data corrected (Art. 16);

· have your data erased (Art.17);

· restrict processing (Art. 18);

· receive data you provided in a portable format (Art. 20);

· object at any time to processing based on our legitimate interest (Art. 21);

· withdraw consent at any time, where processing is based on consent (Art. 7(3)).

Some of these rights are limited where we must keep data to meet a legal obligation, for example vigilance records under the MDR.

To exercise your rights, contact the privacy contact in section 1. We answer within one month; this can be extended by two further months for complex requests, in which case we will tell you. We may ask you to confirm your identity.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). You can do this in particular in the EU Member State where you live or work, or where you believe the infringement took place. The list of authorities is available at edpb.europa.eu.

9. Automated decisions

We do not make decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you.

10. Professional users

Our website and instructions for use are intended for dental professionals. They are not directed at children, and we do not knowingly collect data from children.

11. Changes to this policy

We review this policy when our processing changes, and at least once a year. The current version and its effective date are shown at the top of this page. Previous versions are available on request from the privacy contact.

‍

Privacy Policy

ARDS Industries Ltd. – website www.ardsimplants.com and electronic instructions for use portal www.ai-ifu.com
Version 1.0- effective date: 27.09.2026

1. Who we are

This policy explains how ARDS Industries Ltd. ("ARDS", "we", "us") processes personal data when you visit www.ardsimplants.com, access our electronic instructions for use (eIFU) through www.ai-ifu.com, or contact us. It is provided in accordance with Articles 12 to 14 of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Article 7(2)(d) of Commission Implementing Regulation (EU) 2021/2226 on electronic instructions for use of medical devices.

Controller

ARDS  Industries Ltd.
POB 6762, Petah Tikva 4934829, Israel
Phone: +972 4 381 2333

Privacy contact

E-mail:  info@ardsimplants.com
Post: as above, marked "Privacy"

Representative in the EU (Art. 27  GDPR)

AR Expert B.V Boeing Avenue 209, 1119 PD Schiphol-Rijk, The Netherlands Tel: +31(0)85-007-3210 info@certification-experts.com

Data protection officer

ARDS has not appointed a data protection officer, as the conditions of Art. 37 GDPR do not apply. Privacy questions can be sent to the privacy contact above to info@ardsimplants.com

2. Using the eIFU portal without providing personal data

You can view and download our instructions for use without registering, logging in or providing your name or contact details. The region, product category, language and REF (catalogue) number you select or enter are used only to show you the correct documents and are not linked to your identity.

Instructions for use are provided as PDF files that can be opened with any free PDF reader. Downloading a PDF does not send personal data to ARDS beyond the technical data described in section 3.1.

3. What we process, why, on which legal basis and for how long

3.1 Technical data when you visit the website or the eIFU portal

Data

IP address, date and time of the request, page or file requested, browser type and version, operating system, referring page, and the HTTP status of the request.

Purpose

To deliver the website and the instruction files to your device, to keep the service secure and available, to protect the instruction files against unauthorized modification, and to investigate faults and attacks. The last three purposes are also required by Article 7(2)(b) and (c) of Regulation (EU) 2021/2226.

Legal basis

Art. 6(1)(f) GDPR – our legitimate interest in operating a secure and available website and eIFU service.

Retention

Server logs are kept by our hosting provider for 1 day and then deleted, unless they are needed to investigate a specific security incident.

3.2 Requests for a paper copy of the instructions for use

You can request a paper copy of any of our instructions for use free of charge. We send it within 7 calendar days of receiving the request. If you ask for it when you place your order, we deliver it with the device. To request a copy, e-mail- info@ardsimplants.com, call +972 4 381 2333, or contact your local ARDS distributor.

Data

Name, clinic or organization, delivery address, e-mail address, telephone number, and the product (REF number, lot number) and language requested.

Purpose

To send you the paper copy and to keep a record that the request was fulfilled.

Legal basis

Art. 6(1)(c) GDPR – legal obligation under Article 5(3) of Regulation (EU)  2021/2226 to supply a paper copy on request.

Retention

15 years after the request, in line with ARDS's quality-record retention procedure.

Is the data required?

Yes. Without a name and delivery address we cannot send the paper copy.

3.3 Enquiries by e-mail, telephone or through distributors

Data

Name, organization, contact details and the content of your message.

Purpose

To answer your enquiry and, where relevant, to handle orders and the business relationship.

Legal basis

Art. 6(1)(b) GDPR, where the enquiry relates to a contract or steps before a contract; otherwise, Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries.

Retention

Enquiries that do not lead to an order, a complaint or a paper-copy request are deleted 3 years after the enquiry has been closed. Where an enquiry leads to an order, the order records are kept for the period required by commercial and tax law. Where it concerns a complaint or an incident, section 3.4 applies.

If you contact us through the form on our "Get in touch" page, including requests for a paper copy of the instructions for use, the form is provided by POWr.io, Inc. (USA). POWr processes the data you enter on our behalf, as our processor, and forwards it to us.

‍

3.4 Complaints, adverse events and serious incidents (vigilance)

If you report a complaint, a malfunction or an incident involving an ARDS device, we process the information needed to investigate it and to meet our obligations as a medical device manufacturer.

Data

Reporter's name, organization and contact details. Details of the device (REF, lot) and of the event. Where necessary for the investigation, limited information about the patient, such as age, sex, the clinical course and the treatment given. This may include health data.

Purpose

Complaint handling, post-market surveillance, and vigilance reporting to competent authorities and our notified body.

Legal basis

Art. 6(1)(c) GDPR – legal obligations under Regulation (EU) 2017/745 (MDR), in particular Articles 10, 83 and 87. For health data: Art. 9(2)(i) GDPR- reasons of public interest in ensuring high standards of quality and safety of medical devices.

Retention

For the period required by the MDR for the technical and post-market surveillance documentation: at least 15 years after the last device of the type concerned has been placed on the market.

Please do not send us the patient's name or other directly identifying details. Use a case or patient code instead. If identifying details are received, we pseudonymize them.

3.5 Links to social media

Our website contains links to our pages on Facebook, Instagram, LinkedIn and X (Twitter). These are plain links: no data is sent to these platforms until you click a link. After you leave our website, the privacy policy of the platform applies.

‍

3.6 Fonts and technical libraries loaded from third parties

To display the website, your browser loads fonts and program libraries directly from the providers listed below. When this happens, your IP address and technical browser data (browser type, requested file, time of request) are transmitted to the provider. We do not pass any other information to these providers.

· Adobe Fonts (use.typekit.net) – Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland, and Adobe Inc., USA. Adobe may log information about the fonts served for licence-compliance purposes.

· jQuery library – delivered through the content-delivery network used by our hosting provider Webflow (Amazon CloudFront).

Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in a consistent and reliable presentation of the website. For transfers to the USA, see section 6.

‍

Our website uses only cookies and similar technologies that are srictly necessary to provide the service you request, such as remembering your language selection. These do not require your consent (Article 5(3) of Directive 2002/58/EC). We do not use analytics, advertising or tracking cookies.

Name

_cfuvid

Provider

Cloudflare

Purpose

Distinguishes individual visitors sharing the same IP address, to apply security/rate-limiting protections against malicious traffic

Duration

Session

‍

Name

siteLang

Provider

ARDS (local storage in your browser)

Purpose

Remembers the language you selected for the website and the instructions for use

Duration

Until you clear your browser storage

‍

Name

siteTranslationsCache

Provider

ARDS (local storage in your browser)

Purpose

Stores the website text in your selected language on your device, so that pages load faster

Duration

Until you clear your browser storage

‍

Items in local storage stay on your device and are not sent to us.

‍

5. Who receives your data

· Website hosting: Webflow, Inc., USA, and its content-delivery sub-processors host the website and the instruction files. They act as our processor under a data processing agreement.

· E-mail and IT services: Google Ireland Limited (Google Workspace), acting as our processor.

· Security service: Cloudflare, Inc., USA – protection of the website against malicious traffic (cookie _cfuvid).

· Contact form: POWr.io, Inc., USA – provides the "Get in touch" form, including paper- copy requests, as our processor.

· Font and library providers: Google and Adobe – delivery of fonts and program libraries (see section 3.6).

· ARDS distributors: where a distributor delivers the paper copy or handles your enquiry in your country.

· Authorities and our notified body: competent authorities and our notified body, where required for vigilance and post-market surveillance under the MDR.

· Professional advisers and courts: where necessary to establish, exercise or defend legal claims.

We do not sell personal data, and we do not use it for advertising.

6. International transfers

ARDS is established in Israel. The European Commission has recognized that Israel provides an adequate level of data protection (Commission Decision 2011/61/EU), so no additional safeguards are needed for transfers from the EEA to ARDS.

Where data is transferred to service providers in the USA or other third countries, we rely on one of two safeguards:

· the EU–U.S. Data Privacy Framework, where the recipient is certified; or

· otherwise, the Standard Contractual Clauses adopted by the European Commission (Implementing Decision (EU) 2021/914), with supplementary measures where needed.

You can request a copy of these safeguards from the privacy contact.

7. Security

The website and the eIFU portal are delivered only over encrypted connections (HTTPS/TLS). Instruction files are uploaded only by authorized ARDS personnel under our document-control procedure and are verified against the controlled master copy before publication. Access to personal data is limited to the staff who need it for the purposes above.

8. Your rights

Under the GDPR you have the right to:

· access your personal data and receive a copy (Art. 15);

· have inaccurate data corrected (Art. 16);

· have your data erased (Art.17);

· restrict processing (Art. 18);

· receive data you provided in a portable format (Art. 20);

· object at any time to processing based on our legitimate interest (Art. 21);

· withdraw consent at any time, where processing is based on consent (Art. 7(3)).

Some of these rights are limited where we must keep data to meet a legal obligation, for example vigilance records under the MDR.

To exercise your rights, contact the privacy contact in section 1. We answer within one month; this can be extended by two further months for complex requests, in which case we will tell you. We may ask you to confirm your identity.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). You can do this in particular in the EU Member State where you live or work, or where you believe the infringement took place. The list of authorities is available at edpb.europa.eu.

9. Automated decisions

We do not make decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you.

10. Professional users

Our website and instructions for use are intended for dental professionals. They are not directed at children, and we do not knowingly collect data from children.

11. Changes to this policy

We review this policy when our processing changes, and at least once a year. The current version and its effective date are shown at the top of this page. Previous versions are available on request from the privacy contact.

‍

Privacy Policy

ARDS Industries Ltd. – website www.ardsimplants.com and electronic instructions for use portal www.ai-ifu.com
Version 1.0- effective date: 27.09.2026

1. Who we are

This policy explains how ARDS Industries Ltd. ("ARDS", "we", "us") processes personal data when you visit www.ardsimplants.com, access our electronic instructions for use (eIFU) through www.ai-ifu.com, or contact us. It is provided in accordance with Articles 12 to 14 of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Article 7(2)(d) of Commission Implementing Regulation (EU) 2021/2226 on electronic instructions for use of medical devices.

Controller

ARDS  Industries Ltd.
POB 6762, Petah Tikva 4934829, Israel
Phone: +972 4 381 2333

Privacy contact

E-mail:  info@ardsimplants.com
Post: as above, marked "Privacy"

Representative in the EU (Art. 27  GDPR)

AR Expert B.V Boeing Avenue 209, 1119 PD Schiphol-Rijk, The Netherlands Tel: +31(0)85-007-3210 info@certification-experts.com

Data protection officer

ARDS has not appointed a data protection officer, as the conditions of Art. 37 GDPR do not apply. Privacy questions can be sent to the privacy contact above to info@ardsimplants.com

2. Using the eIFU portal without providing personal data

You can view and download our instructions for use without registering, logging in or providing your name or contact details. The region, product category, language and REF (catalogue) number you select or enter are used only to show you the correct documents and are not linked to your identity.

Instructions for use are provided as PDF files that can be opened with any free PDF reader. Downloading a PDF does not send personal data to ARDS beyond the technical data described in section 3.1.

3. What we process, why, on which legal basis and for how long

3.1 Technical data when you visit the website or the eIFU portal

Data

IP address, date and time of the request, page or file requested, browser type and version, operating system, referring page, and the HTTP status of the request.

Purpose

To deliver the website and the instruction files to your device, to keep the service secure and available, to protect the instruction files against unauthorized modification, and to investigate faults and attacks. The last three purposes are also required by Article 7(2)(b) and (c) of Regulation (EU) 2021/2226.

Legal basis

Art. 6(1)(f) GDPR – our legitimate interest in operating a secure and available website and eIFU service.

Retention

Server logs are kept by our hosting provider for 1 day and then deleted, unless they are needed to investigate a specific security incident.

3.2 Requests for a paper copy of the instructions for use

You can request a paper copy of any of our instructions for use free of charge. We send it within 7 calendar days of receiving the request. If you ask for it when you place your order, we deliver it with the device. To request a copy, e-mail- info@ardsimplants.com, call +972 4 381 2333, or contact your local ARDS distributor.

Data

Name, clinic or organization, delivery address, e-mail address, telephone number, and the product (REF number, lot number) and language requested.

Purpose

To send you the paper copy and to keep a record that the request was fulfilled.

Legal basis

Art. 6(1)(c) GDPR – legal obligation under Article 5(3) of Regulation (EU)  2021/2226 to supply a paper copy on request.

Retention

15 years after the request, in line with ARDS's quality-record retention procedure.

Is the data required?

Yes. Without a name and delivery address we cannot send the paper copy.

3.3 Enquiries by e-mail, telephone or through distributors

Data

Name, organization, contact details and the content of your message.

Purpose

To answer your enquiry and, where relevant, to handle orders and the business relationship.

Legal basis

Art. 6(1)(b) GDPR, where the enquiry relates to a contract or steps before a contract; otherwise, Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries.

Retention

Enquiries that do not lead to an order, a complaint or a paper-copy request are deleted 3 years after the enquiry has been closed. Where an enquiry leads to an order, the order records are kept for the period required by commercial and tax law. Where it concerns a complaint or an incident, section 3.4 applies.

If you contact us through the form on our "Get in touch" page, including requests for a paper copy of the instructions for use, the form is provided by POWr.io, Inc. (USA). POWr processes the data you enter on our behalf, as our processor, and forwards it to us.

‍

3.4 Complaints, adverse events and serious incidents (vigilance)

If you report a complaint, a malfunction or an incident involving an ARDS device, we process the information needed to investigate it and to meet our obligations as a medical device manufacturer.

Data

Reporter's name, organization and contact details. Details of the device (REF, lot) and of the event. Where necessary for the investigation, limited information about the patient, such as age, sex, the clinical course and the treatment given. This may include health data.

Purpose

Complaint handling, post-market surveillance, and vigilance reporting to competent authorities and our notified body.

Legal basis

Art. 6(1)(c) GDPR – legal obligations under Regulation (EU) 2017/745 (MDR), in particular Articles 10, 83 and 87. For health data: Art. 9(2)(i) GDPR- reasons of public interest in ensuring high standards of quality and safety of medical devices.

Retention

For the period required by the MDR for the technical and post-market surveillance documentation: at least 15 years after the last device of the type concerned has been placed on the market.

Please do not send us the patient's name or other directly identifying details. Use a case or patient code instead. If identifying details are received, we pseudonymize them.

3.5 Links to social media

Our website contains links to our pages on Facebook, Instagram, LinkedIn and X (Twitter). These are plain links: no data is sent to these platforms until you click a link. After you leave our website, the privacy policy of the platform applies.

‍

3.6 Fonts and technical libraries loaded from third parties

To display the website, your browser loads fonts and program libraries directly from the providers listed below. When this happens, your IP address and technical browser data (browser type, requested file, time of request) are transmitted to the provider. We do not pass any other information to these providers.

· Adobe Fonts (use.typekit.net) – Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland, and Adobe Inc., USA. Adobe may log information about the fonts served for licence-compliance purposes.

· jQuery library – delivered through the content-delivery network used by our hosting provider Webflow (Amazon CloudFront).

Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in a consistent and reliable presentation of the website. For transfers to the USA, see section 6.

‍

Our website uses only cookies and similar technologies that are srictly necessary to provide the service you request, such as remembering your language selection. These do not require your consent (Article 5(3) of Directive 2002/58/EC). We do not use analytics, advertising or tracking cookies.

Name

_cfuvid

Provider

Cloudflare

Purpose

Distinguishes individual visitors sharing the same IP address, to apply security/rate-limiting protections against malicious traffic

Duration

Session

‍

Name

siteLang

Provider

ARDS (local storage in your browser)

Purpose

Remembers the language you selected for the website and the instructions for use

Duration

Until you clear your browser storage

‍

Name

siteTranslationsCache

Provider

ARDS (local storage in your browser)

Purpose

Stores the website text in your selected language on your device, so that pages load faster

Duration

Until you clear your browser storage

‍

Items in local storage stay on your device and are not sent to us.

‍

5. Who receives your data

· Website hosting: Webflow, Inc., USA, and its content-delivery sub-processors host the website and the instruction files. They act as our processor under a data processing agreement.

· E-mail and IT services: Google Ireland Limited (Google Workspace), acting as our processor.

· Security service: Cloudflare, Inc., USA – protection of the website against malicious traffic (cookie _cfuvid).

· Contact form: POWr.io, Inc., USA – provides the "Get in touch" form, including paper- copy requests, as our processor.

· Font and library providers: Google and Adobe – delivery of fonts and program libraries (see section 3.6).

· ARDS distributors: where a distributor delivers the paper copy or handles your enquiry in your country.

· Authorities and our notified body: competent authorities and our notified body, where required for vigilance and post-market surveillance under the MDR.

· Professional advisers and courts: where necessary to establish, exercise or defend legal claims.

We do not sell personal data, and we do not use it for advertising.

6. International transfers

ARDS is established in Israel. The European Commission has recognized that Israel provides an adequate level of data protection (Commission Decision 2011/61/EU), so no additional safeguards are needed for transfers from the EEA to ARDS.

Where data is transferred to service providers in the USA or other third countries, we rely on one of two safeguards:

· the EU–U.S. Data Privacy Framework, where the recipient is certified; or

· otherwise, the Standard Contractual Clauses adopted by the European Commission (Implementing Decision (EU) 2021/914), with supplementary measures where needed.

You can request a copy of these safeguards from the privacy contact.

7. Security

The website and the eIFU portal are delivered only over encrypted connections (HTTPS/TLS). Instruction files are uploaded only by authorized ARDS personnel under our document-control procedure and are verified against the controlled master copy before publication. Access to personal data is limited to the staff who need it for the purposes above.

8. Your rights

Under the GDPR you have the right to:

· access your personal data and receive a copy (Art. 15);

· have inaccurate data corrected (Art. 16);

· have your data erased (Art.17);

· restrict processing (Art. 18);

· receive data you provided in a portable format (Art. 20);

· object at any time to processing based on our legitimate interest (Art. 21);

· withdraw consent at any time, where processing is based on consent (Art. 7(3)).

Some of these rights are limited where we must keep data to meet a legal obligation, for example vigilance records under the MDR.

To exercise your rights, contact the privacy contact in section 1. We answer within one month; this can be extended by two further months for complex requests, in which case we will tell you. We may ask you to confirm your identity.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). You can do this in particular in the EU Member State where you live or work, or where you believe the infringement took place. The list of authorities is available at edpb.europa.eu.

9. Automated decisions

We do not make decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you.

10. Professional users

Our website and instructions for use are intended for dental professionals. They are not directed at children, and we do not knowingly collect data from children.

11. Changes to this policy

We review this policy when our processing changes, and at least once a year. The current version and its effective date are shown at the top of this page. Previous versions are available on request from the privacy contact.

‍