Provider:
mbits imaging GmbH
(a German limited liability company)
Hans-Bunte-Str. 4
69123 Heidelberg
Germany
Represented by the CEOs:
Dr. Ingmar Gergel und Dr. Michael Müller
Produkt:
mRay Importer
Effective Date:
May, 2026
Contact
Tel: +49 6221 3217 400
Fax: +49 6221 3217 409
E-Mail: mail(at)mbits.info
These End User License Agreement and Terms of Use ("Terms") govern the use of the software solution mRay Importer , including all associated web interfaces, APIs, software components, services, and documentation provided by mbits imaging GmbH ("mbits", "we", "us", or "our").
mRay Importer enables authorized users to retrieve radiological imaging data, diagnostic reports, and other medical files from third-party portals, make such data temporarily available within the mbits infrastructure, and subsequently transfer the data into designated target systems, including systems operated by healthcare providers.
These Terms apply to the Software-as-a-Service (SaaS) version of mRay Importer. Separate terms may apply to alternative deployment models, including but not limited to on-premises installations.
„mRay Importer“ means the software solution provided by mbits for downloading, temporarily storing, processing, and importing medical data.
"User" means any individual using mRay Importer, including patients and healthcare professionals.
"Patient" means an individual whose medical data is downloaded, processed, transferred, or imported through mRay Importer.
"Healthcare Professional" means any physician, healthcare practitioner, medical assistant, employee of a hospital, clinic, medical practice, healthcare center, or other healthcare organization using mRay Importer in the course of professional activities.
"Healthcare Organization" means any hospital, clinic, medical practice, healthcare center, or other healthcare institution on whose behalf or under whose responsibility mRay Importer is used.
"Medical Data" means, without limitation, DICOM studies, imaging data, DICOM metadata, diagnostic reports, physician letters, PDF documents, worklist information, and any other examination-related or treatment-related medical information.
mbits provides mRay Importer to facilitate the retrieval of Medical Data from external imaging, reporting, and patient portals and to make such data available for further medical use.
The software is designed in particular to support:
downloading Medical Data from supported external portals;
temporarily storing and technically processing such data within the mbits infrastructure;
transferring Medical Data into authorized target systems operated by Healthcare Organizations;
modifying, supplementing, or harmonizing technical and medical metadata where necessary to enable successful import and integration.
mRay Importer is a technical data transfer and integration solution only. The software does not provide medical diagnoses, clinical interpretations, treatment recommendations, or medical decision-making functionality. Responsibility for reviewing, validating, interpreting, and using imported Medical Data remains solely with the responsible Healthcare Professional and/or Healthcare Organization.
Use of mRay Importer is restricted to: Patients acting on their own behalf; or Individuals acting on behalf of, under the authority of, or within the responsibility of an authorized Healthcare Organization.
Healthcare Professionals may use mRay Importer only where such use is authorized within the scope of their professional duties, organizational responsibilities, treatment relationship, or other lawful purpose.
Access to and use of the software is permitted only if Users have accepted these Terms and have reviewed any applicable privacy notices and data protection information.
By using mRay Importer, Patients consent to the download, temporary storage, technical processing, and transfer of their Medical Data to the designated target system to the extent necessary for operation of the software.
Such authorization may be provided in one of the following ways:
Direct Patient Authorization
A Patient personally accesses mRay Importer and provides the required credentials, links, access codes, tokens, QR codes, or other retrieval information, thereby initiating the download and transfer of Medical Data.
Authorization Through Healthcare Professionals
A Healthcare Professional uses mRay Importer in connection with the provision of healthcare services after the Patient has authorized the transfer, disclosure, provision, or use of the relevant Medical Data, or where another lawful basis for processing exists under applicable law.
The Healthcare Organization and the acting Healthcare Professional are solely responsible for ensuring that the necessary authorization, consent, or legal basis exists before processing Medical Data through mRay Importer.
By using the software, Users represent and warrant that: the retrieval, temporary storage, transfer, and import of the relevant Medical Data are lawful; they are authorized to initiate such processing activities; and no third-party rights prevent or restrict the intended processing.
Patients are responsible for ensuring that they provide access only to Medical Data relating to themselves or to data that they are otherwise authorized to access and share.
Healthcare Professionals and Healthcare Organizations are responsible for ensuring that mRay Importer is used only for Patients and Medical Data for which an appropriate treatment relationship, consent, statutory authorization, contractual authorization, or other valid legal basis exists.
mbits does not independently verify whether a Healthcare Organization or individual Useris authorized to access, process, transfer, or import specific Medical Data in a particular clinical context. Responsibility for such verification rests solely with the relevant Healthcare Organization and its authorized personnel.
Users shall use only their own individual user accounts.
The use of shared accounts, group accounts, departmental accounts, generic accounts, or accounts belonging to other individuals is strictly prohibited. Users shall not disclose, share, transfer, lend, or otherwise make their login credentials available to any third party. Credentials must be stored securely and protected against unauthorized access.
Each User is responsible for maintaining the confidentiality of account credentials and for all activities conducted through their account.
If a User becomes aware of, or reasonably suspects, unauthorized access, credential compromise, or misuse of an account, the User shall notify mbits without undue delay.
Users agree to:
Healthcare Professionals represent and warrant that they are acting within the scope of their professional duties and are authorized to use mRay Importer for the relevant purpose.
Before importing Medical Data into a target system, Healthcare Professionals shall verify, where appropriate:
that the data belongs to the correct Patient;
that the imported data is complete and technically readable;
that metadata has been transferred correctly or modified appropriately;
that the intended import is clinically, legally, and operationally permissible;
that duplicate records, incomplete studies, mismatches, or other inconsistencies have been identified and appropriately addressed.
Responsibility for the clinical interpretation, medical use, and further processing of imported Medical Data remains exclusively with the responsible Healthcare Organization and Healthcare Professional.
mbits will use commercially reasonable efforts to make mRay Importer available with minimal interruption. Unless expressly agreed otherwise in writing, mbits does not guarantee uninterrupted, error-free, or continuous availability of the software.
Availability may be affected by, among other things: maintenance activities; software updates or security updates; technical failures; failures of third-party services or portals; network interruptions; force majeure events; or circumstances beyond the reasonable control of mbits.
mbits is not responsible for the availability, accessibility, functionality, performance, data quality, or continued operation of external imaging portals, reporting portals, patient portals, or other third-party systems.
mRay Importer may retrieve Medical Data from third-party systems and portals operated by independent providers. Such portals are neither operated nor controlled by mbits.
Users are solely responsible for ensuring that they are authorized to access such external portals and retrieve any data made available through them.
Any credentials, access links, tokens, QR codes, authentication information, or retrieval codes entered into mRay Importer must have been lawfully obtained and may only be used in accordance with applicable law and the terms governing the respective external portal.
Medical Data is processed and stored only to the extent necessary to facilitate download, temporary availability, technical processing, and transfer into the designated target system.
Unless otherwise agreed or technically required, Medical Data will be retained for a maximum period of seven (7) calendar days (168 hours) following receipt within the mbits infrastructure. After expiration of the applicable retention period, Medical Data will be automatically deleted.
mbits may delete data earlier where: the data is no longer required for the intended purpose; technical or operational reasons require deletion; legal obligations require deletion; or security considerations necessitate removal.
The processing of personal data is governed by the applicable Privacy Policy for mRay Importer.
The Privacy Notice provides information regarding: categories of personal data processed; purposes of processing; legal bases for processing; recipients of personal data; retention periods; security measures; and rights of data subjects.
Where mbits processes personal data on behalf of a Healthcare Organization, such processing shall be performed pursuant to a data processing agreement in accordance with Article 28 GDPR.
mbits implements appropriate technical and organizational measures designed to ensure the confidentiality, integrity, availability, and resilience of processing activities. Such measures may include, among others: encryption in transit; encryption at rest; access control mechanisms; authentication and authorization procedures; security logging and monitoring; role-based access management; system hardening measures; backup and recovery procedures; and vulnerability management processes.
Users shall use all provided security features as intended and shall not circumvent, disable, interfere with, or compromise any security mechanism.
Subject to compliance with these Terms, mbits grants Users a limited, non-exclusive, non-transferable, non-sublicensable, revocable right to access and use mRay Importer solely for its intended purposes.
All intellectual property rights, including copyrights, trademarks, trade names, logos, software code, interfaces, documentation, designs, databases, and other protected materials, remain the exclusive property of mbits or its licensors.
Except where expressly permitted by applicable law, Users shall not: copy, reproduce, distribute, or modify the software; create derivative works; reverse engineer, decompile, disassemble, or otherwise attempt to derive source code; sublicense, lease, rent, sell, transfer, or commercially exploit the software; or use the software for purposes other than those expressly permitted under these Terms.
Users shall not:
use mRay Importer without proper authorization;
access or use accounts belonging to other individuals;
retrieve Medical Data without appropriate authorization;
process Medical Data without a valid legal basis;
manipulate, falsify, alter, or improperly modify Medical Data, metadata, audit records, or import destinations;
attempt to bypass or undermine security controls;
engage in unauthorized reverse engineering activities;
perform automated bulk requests, scraping activities, penetration testing, or load testing without prior written authorization from mbits; or
use the software in any manner that infringes the rights of Patients, Healthcare Organizations, portal operators, mbits, or any third party.
mbits imaging GmbH may temporarily or permanently suspend or restrict access to mRay Importer if there are concrete indications of unauthorized use, a threat to IT security, a breach of these Terms of Use, or unlawful processing of personal data.
This applies in particular in cases of suspected compromised credentials, abusive account usage, unauthorized data access, or security-related incidents.
mRay Importer is provided with reasonable care and skill. However, mbits imaging GmbH does not warrant that external portals will be continuously available, that all data obtained from such external portals will be complete, accurate, or available in a particular format, or that data imports into every target system can be performed successfully without additional review, validation, or configuration.
The medical and organizational review of the imported data remains the responsibility of the respective healthcare organization and its medical professionals.
mbits imaging GmbH shall not be liable for any damages arising from Users providing inaccurate information, accessing data without authorization, using third-party or shared accounts, failing to verify data prior to medical use, or failing to detect errors in external portals or target systems.
Liability for data loss shall be limited to the typical recovery costs that would have been incurred had the responsible organization implemented proper and regular data backups, to the extent permitted by applicable law.
Users and/or the respective healthcare organization shall indemnify mbits imaging GmbH against any third-party claims arising from the use of mRay Importer in violation of these Terms of Use, without sufficient authorization, or in breach of statutory, professional, or contractual obligations.
This applies in particular to claims relating to unauthorized downloads, unauthorized processing of medical data, incorrect patient assignment, use of third-party accounts, or violations of data protection requirements.
mbits imaging GmbH may further develop mRay Importer and modify, add, or remove features, provided that such changes do not unreasonably prejudice the legitimate interests of Users and Healthcare Organizations.
These Terms of Use may be amended where technical, organizational, legal, or security-related changes make such amendments necessary.
Users will be informed of any material changes in an appropriate manner. Continued use of the software after the amended Terms have taken effect constitutes acceptance of the revised Terms.
Users may discontinue the use of mRay Importer at any time.
Termination of use does not affect the lawfulness of any processing activities already carried out. Statutory or contractual retention, record-keeping, and documentation obligations remain unaffected.
This Agreement shall be governed by the laws of the Federal Republic of Germany, excluding the United Nations Convention on Contracts for the International Sale of Goods (CISG).
If Users are merchants, legal entities under public law, or special funds under public law, the place of jurisdiction shall be the registered seat of mbits imaging GmbH, to the extent permitted by law.
Mandatory consumer protection provisions remain unaffected.
If any provision of these Terms of Use is or becomes invalid or unenforceable, the validity of the remaining provisions shall remain unaffected.
In place of the invalid or unenforceable provision, the legally permissible provision that most closely reflects the economic and legal intent of the original provision shall apply.
In Kürze erhalten Sie eine E-Mail, mit der Sie das Abonnement unseres Newsletters bestätigen können.