Hephaestus Demo
Via Demo, 123
20000 Milan
Italy

Email: privacy@hephaestusatlas.org

Tel: +39

The Data Controller is responsible for the collection and processing of personal data through the Hephaestus platform, which is dedicated to training and research in the field of joint ultrasound for hemophilic arthropathy.

Personal data are processed for the following purposes:

• Medical training: Use of the educational platform for learning ultrasound techniques.
• Scientific research: Analysis of anonymized clinical cases for research purposes related to hemophilic arthropathy.
• Technical support: Assistance to users in using the platform.
• Service improvement: Usage analysis aimed at optimizing the platform.
• Communications: Sending updates and information related to the service.

The processing of personal data is based on the following legal grounds:

• Consent (Art. 6, para. 1, letter a GDPR): For sending promotional communications and newsletters.
• Performance of a contract (Art. 6, para. 1, letter b GDPR): For the provision of the educational service.
• Legitimate interest (Art. 6, para. 1, letter f GDPR): For service improvement and usage analysis.
• Public interest (Art. 6, para. 1, letter e GDPR): For scientific research in the medical field.

Note: For health-related data (special categories), Article 9 GDPR applies with specific additional safeguards.

The platform collects the following types of data:

Registration Data:

• First and last name
• Email address
• Professional qualification
• Affiliated institution

Usage Data:

• Access and navigation logs
• Preferences and settings
• Interactions with educational content

Technical Data:

• IP address
• Browser and device type
• Technical and analytical cookies

Clinical Cases (Anonymous):

• Anonymized ultrasound images
• Non-identifiable clinical data
• Evaluation parameters

In accordance with the GDPR, you have the following rights regarding your personal data:

• Access (Art. 15): Obtain information about the data being processed.
• Rectification (Art. 16): Correct inaccurate or incomplete data.
• Erasure (Art. 17): Request the removal of your data.
• Restriction (Art. 18): Limit processing under specific circumstances.
• Portability (Art. 20): Receive your data in a structured, commonly used format.
• Objection (Art. 21): Object to processing based on legitimate interest.
• Withdrawal of consent: Withdraw your consent at any time.

How to exercise your rights:
Send a request to: privacy@hephaestusatlas.org

We will respond within 30 days of receiving your request.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).

The data retention period varies according to the purpose:

• Registration data: For the duration of the contractual relationship + 10 years.
• Usage data: 24 months for statistical analysis.
• Support data: 2 years from ticket closure.
• Anonymous clinical cases: Indefinite retention for scientific research purposes.
• Technical cookies: For the duration of the session or up to 2 years.
• Analytical cookies: 14 months (Google Analytics).

At the end of the retention period, the data are securely and irreversibly deleted.

For any information regarding the processing of personal data:

Data Protection Officer (DPO):
Email: dpo@hephaestusatlas.org

Tel: +39

Data Controller:
Hephaestus Demo
Email: privacy@hephaestusatlas.org

Supervisory Authority:
Italian Data Protection Authority (Garante per la Protezione dei Dati Personali)
Address
Email