Privacy
Professional clinical website · study closed · reviewed: 21 September 2026
Scope reviewed for publication. This notice describes current decisions and limitations; it is not legal advice, regulatory authorisation or clinical certification.
Study closed
The study remains closed in this release: the application does not create new study sessions or cookies and does not accept new study participation or submissions. This does not delete data or cookies that may remain from earlier versions; they require separate management.
Calculator: calculations in your browser
Inputs to the calculator are processed in your browser; this feature does not send them to the study database. Do not enter names, identifiers or dates of birth. You are responsible for downloaded sheets and files; age, sex and body measurements may be sensitive even without a name.
Clinical notice during the session
Accepting the clinical notice stores ibd_disclaimer_accepted in sessionStorage for the tab session. It contains no calculator measurements. The component also attempts to remove the old persistent acknowledgement from localStorage; this does not clear other browser data or cookies.
Internal QA
Internal quality assurance requires authorised access. If used, it may store reviewer information and answers locally until cleared in that browser. It is separate from the public calculator; do not enter patient data.
Email contact
The contact link opens your email application; it does not send a message by itself. If you choose to write, your address, message and attachments are transmitted through the email service. Do not include patient data, health information or identity documents. This channel does not provide clinical consultations or emergency care.
Services used for email
The contacto@ibdnutrition.org mailbox is hosted by IONOS and email is read and answered using Apple Mail on the controller’s Mac. Automatic forwarding to Gmail was disabled on 13 September 2026; this does not delete copies previously received by Google. Messages may be retained in the mailbox and on the device. The IONOS data processing agreement was completed on the same date. Historical copies are reviewed and managed separately.
Lawful basis for email
The controller relies on legitimate interests under Article 6(1)(f) GDPR to read and answer website messages, follow them up and retain necessary records. The balancing assessment recognises that a person who writes voluntarily reasonably expects a proportionate reply and follow-up, and limits use to the matter raised, with no advertising, research, AI training or clinical care. You may object on grounds relating to your situation. Rights requests and other legal duties are handled under Article 6(1)(c) GDPR where applicable. This basis does not authorise processing unsolicited health data.
Retention of website correspondence
Email is exclusively for website matters, not clinical consultations. Messages may be retained to address these matters, follow them up and keep necessary records of website issues, corrections or collaborations. Closing a matter does not mean automatically deleting its correspondence. The need to retain closed correspondence will be reviewed and documented at least once every twelve months and also when a rights request or material service change occurs; retention is not indefinite by default. Once retention is no longer necessary, erasure or applicable legal data blocking will be managed. The review covers the mailbox, sent mail, trash, devices and provider copies; immediate deletion of every copy is not promised. No automatic deletion rules have been activated.
Hosting and technical data
Vercel hosts the website on the Hobby plan. To deliver and protect the service it generates technical traffic data that may include IP address, path, status, timing, telemetry and security logs. Calculator inputs are processed in the browser and are not sent to Vercel or the study database. The reviewed code and public page do not load Vercel Web Analytics, Speed Insights, advertising, third-party analytics or custom loggers. Vercel documents one hour of accessible function-log retention on Hobby; other system data is processed under its terms and privacy notice, including processing in the United States or other locations used by its subprocessors.
Browser preferences
The application remembers your selected light or dark theme using local browser storage. It does not use this preference for advertising profiles. See the cookies and storage page for its duration and how to clear it.
Responsibility and rights
Data controller for email correspondence: José Ramón Alberto Alonso. For privacy enquiries, contact contacto@ibdnutrition.org. Receipt and reply were checked in a technical test on 13 September 2026; this test is not a security or compliance certification. You may request access, rectification, erasure, objection, restriction or portability where applicable, and complain to the Spanish Data Protection Agency. Requests generally require a response within one month; any lawful extension must be notified and justified.
Scope reviewed for publication
The website-only purpose, need-limited retention, lawful basis and annual review have been documented. The first operational email review will take place within the annual cycle and also following a rights request or material service change; it is not by itself a precondition for publication. Technical minimisation on Vercel Hobby has been checked and the team preference Improve models with my data has been disabled. The owner has accepted the residual Hobby risk: Vercel’s published DPA limits its processor role to Pro and Enterprise customers, and this notice does not claim that Hobby alone supplies an Article 28 GDPR processing agreement or that data remains exclusively in Spain or the European Union. This decision must be reviewed if the plan, forms, analytics, monetisation or processing changes.