SOSCHAIN Personal Terms of Service

Version: 1.2.0 Effective date: 22 September 2026

1. Provider and scope

SOSCHAIN Personal is provided by Fundación UNID, tax ID G02793479, registered in the Castilla y León Register of Foundations by resolution dated 23 February 2021 and published on 4 March 2021 (the “Provider”), with published statutory address at Calle Condes de Gómara 6, 5C, Apartado 80, Soria, Spain. The general privacy and rights channel is contact@unid.es; it is not represented as a data-protection-officer contact unless a DPO is formally appointed.

These terms govern the personal account, subject cards the user is authorised to manage, human and animal emergencies, emergency coordination and related communications. Acceptance does not itself create a card, prove authority over another person or animal, or grant access to third-party data.

2. Nature of the service

SOSCHAIN supports protected storage, location, communications and controlled release of minimum information for emergency coordination and care. It is not an emergency service, does not replace 112, diagnosis or clinical/veterinary decisions, and does not guarantee coverage, continuous availability or arrival of assistance.

SOSCHAIN is the emergency-facing application. The index service locates the subject and authorised opaque references; it may be supplied by an insurer, municipality, foundation or another authorised data-space tenant selected for that subject. The Foundation index is an alternative, complementary index service rather than a prerequisite for SOSCHAIN backup.

The SOSCHAIN human continuity backup keeps expressly selected, encrypted human-health snapshots or documents available under its own retention and emergency-release policy even when the originating EHR is not integrated or available. The VetChain animal continuity backup performs the corresponding role for animal data; SOSCHAIN consumes it for authorised animal emergencies and does not move that backup into a human store. Index and backup are separate contractual and technical roles. The same provider may perform both roles, or a different provider may perform either role. The portal and applicable service schedule must identify the active index and backup providers, purposes, custody boundaries and current availability before activation or renewed acceptance. The service is designed and tested for emergency continuity but does not guarantee uninterrupted availability.

3. Account, subjects and authority

Users must provide accurate information, protect credentials and report unauthorised access. Every operation for another person, child, supported person or animal requires current evidence of representation, custody, control or consent for that exact subject, purpose and operation. A person may be a caregiver without being family: they are an invited member of the subject's individual organisation with an accepted care function. Care may be unpaid, paid by the individual, family or a third party, or performed as an organisation employee; that economic relationship is recorded separately and never grants access. A relationship, invitation, membership or possession of a card likewise grants no access without the exact capability and authorisation.

4. Data-protection roles

Fundación UNID acts as controller for account, security, contractual acceptance, portal preferences and processing purposes it determines. Each participating care, veterinary, emergency, research or public organisation acts as independent controller or processor as defined by the applicable agreement; its identity and role must be shown before sharing. SOSCHAIN does not automatically make all parties joint controllers.

Human health data are special-category data. Animal health data are not themselves a human’s health data, but owner or carer identity, contact, location and relationships may be personal data. Data minimisation, purpose limitation, confidentiality, traceability and defined retention apply.

5. Separate decisions

Accepting these terms only forms the service contract. It is not clinical consent, consent to medical or veterinary treatment, authority to represent another subject, research consent, marketing consent or a general emergency-access authorisation.

Where processing legally relies on consent, the portal requests a separate, specific, informed and unambiguous choice and records its version, scope and date. EHDS-governed secondary use is not configured as consent: it is included by default where a valid permit and legal basis exist, subject to a simple, reversible right to opt out. Opting out does not block essential service functions.

6. Ordinary emergency sharing

The person or representative may configure the minimum information available to authorised professional profiles during an emergency. This authorisation may be withdrawn in the portal for the future. Withdrawal does not invalidate lawful past access, audit evidence or legally required retention.

7. Exceptional break-glass access

Break-glass is neither advance consent nor a convenience route. A dedicated technical policy may enable it only where there is an immediate, serious risk to life or integrity, timely authorisation cannot be obtained and the professional is legally qualified for the exact intervention.

It is limited to the minimum necessary, a short time and one incident; it requires strong professional identity, verified profession and membership, matching subject and sector, explicit purpose and justification, tamper-evident audit, post-event review and notice to the person or representative as soon as safely and legally possible. It never permits bulk search, export, research, analytics, model training, marketing, surveillance or general police access.

Withdrawing voluntary emergency sharing cannot prevent an intervention permitted or required by law because of vital risk. Such access is not based on contractual consent and must satisfy every safeguard above.

8. Mandatory sector separation

Capabilities are specific to a service and subject and are not inherited through membership of a multi-sector organisation.

• health-care: qualified healthcare professionals, human subjects and human care only; potentially eligible for human break-glass where law and policy allow.
• animal-care: qualified veterinary professionals, animal subjects and animal care only; potentially eligible for animal break-glass where applicable policy allows.
• health-research: human research and secondary use; never break-glass or direct operational access to people.
• onehealth-research: joint human-animal research or analysis using minimised, pseudonymised or anonymised data; never break-glass or direct operational access to people or animals.
• every animal-* sector is technically barred from exercising break-glass over a person.

A public authority may operate separate services. A municipal veterinarian invited to animal-care gains no human access; a municipal emergency physician accredited in health-care gains no animal access; a police officer gains no break-glass right through office or municipal membership. Police access requires current consent or a specific statutory authority outside break-glass.

9. Secondary use and research

Secondary use requires a legal basis and governance separate from care. In the European Union, once the EHDS regime applies and the required permit exists, covered secondary use is included by default with a reversible right to opt out at any time without a reason. Before use, information must identify the controller or health-data user, permitted purpose, categories, recipients, transfers, period, secure environment, safeguards and applicable permit. Where another rule requires consent, that consent remains separate and withdrawable.

Withdrawal prevents new identifiable or pseudonymised inclusion in later permits or projects. It does not retroactively affect lawful processing, already anonymised results, legal duties or a statutory exception. Anonymisation must be effective; pseudonymised data remain personal data.

The European Health Data Space Regulation is in transition: secondary-use rules start applying mainly in March 2029 and for remaining categories in March 2031. SOSCHAIN may provide the opt-out early, but will not treat EHDS as automatic authority before its applicable date, the health-data access permit and an applicable legal basis.

Animal data are included by default in secondary use authorised by SOSCHAIN policy and the animal-control relationship. This does not remove rights over personal data about owners, carers or other linked people or authorise identifiable reuse beyond the applicable purpose and jurisdiction. The United States and Canada use separate legal profiles: the European opt-out model is not presumed, and authorisation, ethics/privacy-board waiver or another legal basis is required as applicable.

10. Security, audit and incidents

The service applies least-privilege access, encryption in transit and at rest, segregation by subject and sector, traceability, exceptional-access review, and risk-appropriate backup and recovery. Users and organisations must protect credentials and devices. Incidents are assessed and notified to legally required recipients within applicable periods.

11. Rights and withdrawal

Individuals may exercise access, rectification, erasure, restriction, portability, objection and rights concerning automated decisions where applicable. Portal preferences allow individuals to exercise or reverse the secondary-use opt-out and withdraw any consent that applies, without loss of essential functions. An alternative channel in the Privacy Notice is available where login is unavailable. Individuals may also complain to the Spanish Data Protection Agency.

12. Suspension, liability and changes

The Provider may suspend access that threatens security, lacks authority or breaches these terms. It is not responsible for third-party professional decisions, unlawfully supplied or inaccurate data, external outages or force majeure, without excluding liability that cannot lawfully be limited. No clause restricts mandatory consumer or data-subject rights.

Material changes create a new version and require renewed acceptance. The accepted document, cryptographic digest, language, date and account are archived and a reproducible confirmation is provided.

13. Law and jurisdiction

Spanish and European Union law applies. Mandatory consumer venue and remedies are preserved; other cases use the venue validly agreed in the relevant contract without an invalid waiver of rights.