Privacy Policy

PlastSurgeon is an educational platform for plastic, breast and reconstructive surgery. This policy explains what personal data we process and your rights under the EU General Data Protection Regulation (GDPR).

Data we process

• Account data: name, email, and optionally your title, institution and country.
• Learning data: course enrolments, lesson progress and quiz attempts.
• Submitted content: surgical cases you choose to upload.
• Technical data: limited security/audit logs (e.g. IP address for significant actions).
• Usage statistics: anonymous, aggregated page views and product events (see "Analytics" below).

Why and on what basis

We process this data to provide the learning platform and membership (contract), to keep the service secure and to understand how the platform is used in aggregate (legitimate interest, GDPR art. 6(1)(f)), and where required by law. Authentication can be provided by our shared sign-in, Plast ID.

Analytics

We measure how the platform is used with Umami, an open-source analytics tool that we host ourselves on Nordic Surgery Lab's own server in the EU (analytics.nordicsurgerylab.com, hosted by Hetzner Online GmbH, Germany). It is cookieless: nothing is stored on your device (no cookies, no local storage), there is no cross-site tracking, and your IP address is not stored. A visit is only identified by a daily-rotating hash of IP address, browser and website that cannot be reversed.

We record page views and anonymous product events such as "purchase completed", "quiz submitted" or "case published". These events contain no personal data: no name, e-mail, user ID, free text or patient data. The data stays on our server and is not shared with third parties. The legal basis is our legitimate interest in aggregated usage statistics (GDPR art. 6(1)(f)). Because nothing is stored on your device, no cookie consent is required under the Danish cookie rules, but you can object to this processing at any time by contacting us (see below).

Clinical content & consent

Case material may include clinical information and images. Authors confirm that appropriate patient consent has been obtained before uploading. Do not submit identifiable patient data without valid consent.

Your rights

You can, at any time:

• Access & portability: download all your data from your account page.
• Rectification: edit your profile on the account page.
• Erasure: delete your account; enrolments, progress and quiz history are erased and submitted cases are anonymised.

Retention

We keep account and learning data while your account is active. Audit logs are kept for a limited period for security and compliance. Backups are encrypted and rotated.

Contact

For privacy questions or requests, contact contact@plastsurgeon.com.