Website privacy notice

1. Controller and contact

The website is operated by the individual owner and operator of ReplacedHip and MinHofteProtese. Contact email: minhofteprotese@gmail.com. The controller’s legal identity has not yet been configured in the public site metadata.

2. App-interest validation

When the app promotion is shown, selected or answered, the site can record the event type, a random browser-session identifier, language, source domain, page path and timestamp. The optional early-testing answer is recorded only as yes or no.

No contact information is collected when you indicate interest in the app. The interaction does not ask for a name, email address, account, health information or free text. The session identifier reduces obvious double counting, but the results measure interactions or sessions and not verified unique people.

3. Other information you may submit

The separate public question form stores the question you choose to send. It no longer asks for or accepts an email address. Questions can still contain personal or health information if you type it, so avoid names, contact details, medical-record numbers or other details that identify you or another person.

Answer-feedback forms may store a response and optional comment. Submitted questions and feedback are used to decide what to research, improve and publish. Nothing is published automatically.

4. Website measurement and choices

The site uses first-party session measurement to understand visits and selected interactions. The random session identifier is kept in browser session storage and is not a new cross-session profile or fingerprint. Stored events may include language, source domain, timestamps and a bounded page or content reference; search text is not stored in search analytics.

ReplacedHip loads Google Ads measurement only after you allow it through Privacy choices. The interest interaction does not send names, email addresses, health data or typed free text to Google. MinHofteProtese does not use Google Ads measurement.

5. Technical processing and service providers

Cloudflare hosts the website and database as a processor. Like other web infrastructure, Cloudflare may process technical request data such as IP address, browser information and security signals to deliver and protect the service. The app-interest event payload and event table do not contain an IP-address, email, name or health-data field.

Cloudflare and its subprocessors may process technical or stored data outside the EEA. Where GDPR transfer rules apply, Cloudflare describes safeguards including the EU Standard Contractual Clauses in its Data Processing Addendum. We do not claim that the database is stored only in the EU.

6. Legal basis, retention and rights

The limited first-party measurement is used to evaluate and improve the websites and app concept. The intended legal basis is legitimate interests under GDPR Article 6(1)(f), subject to the required balancing and applicable privacy rules. Optional Google measurement uses your Privacy choices.

First-party analytics and submitted content are retained only for as long as needed for the stated product, research, security and documentation purposes. Retention periods and deletion routines are reviewed as the service develops.

Subject to applicable data-protection law, you may request access, correction, deletion, restriction or portability, or object where that right applies. Contact minhofteprotese@gmail.com. You may complain to your local supervisory authority; in Norway this is Datatilsynet (datatilsynet.no).

7. Automated decisions

The website does not use these app-interest interactions for automated decisions or profiling that produces legal or similarly significant effects.