Privacy Policy
Last updated: 2026-06-09
1. Data Controller
The controller of the data collected via this site is qualidoc.
For any questions regarding your personal data: contact@example.com.
Remember to replace this address with your actual contact address before going live.
2. Data Collected and Purposes
The personal data collected depends on the features you use. The full list is in the Subprocessors section below, where each recipient specifies exactly what data they process and for what purpose.
3. Legal Basis for Processing
The processing of your data is based on one of the legal bases set out in Article 6 of the GDPR depending on the context: performance of a contract, legitimate interest, consent, or legal obligation.
4. Subprocessors and Recipients
To provide this service, we use third-party subprocessors. Each subprocessor only processes the data strictly necessary for their mission, under a contract compliant with Article 28 of the GDPR.
Vercel Inc.
440 N Barranca Ave #4133, Covina, CA 91723, USA
- Purpose
- Hosting and serverless function execution (Frankfurt region - fra1)
- Data processed
- IP addresses
- Server logs
- Session cookies
- Retention
- 30 days for logs
- Legal basis
- Legitimate interest (Art. 6.1.f GDPR)
- Transfer / details
- Standard Contractual Clauses (SCC). Functions run in the EU (Frankfurt) but legal entity is US-based
- Learn more
- Privacy policyData Processing Agreement (DPA)
Databricks, Inc. (Neon)
160 Spear Street, 13th Floor, San Francisco, CA 94105, USA
- Purpose
- PostgreSQL database hosting
- Data processed
- All application data stored in the database
- Retention
- Account lifetime (deletion on request)
- Legal basis
- Contract performance (Art. 6.1.b GDPR)
- Transfer / details
- Standard Contractual Clauses (SCC). Database region configurable (eu-central-1 available)
- Learn more
- Privacy policyData Processing Agreement (DPA)
GitHub, Inc.
88 Colin P. Kelly Jr. St., San Francisco, CA 94107, USA
- Purpose
- Authentication via GitHub account (OAuth)
- Data processed
- GitHub username
- Profile picture
- Retention
- User account lifetime
- Legal basis
- Consent (Art. 6.1.a GDPR)
- Transfer / details
- Standard Contractual Clauses (SCC)
- Learn more
- Privacy policy
5. Your Rights
Under the GDPR, you have the following rights over your data:
- Right of access and rectification
- Right to erasure (right to be forgotten)
- Right to data portability
- Right to object and restriction of processing
- Right to withdraw consent at any time (when processing is based on consent)
- Right to lodge a complaint with the supervisory authority (ico.org.uk)
To exercise your rights: contact@example.com. We commit to responding within one month.
6. Cookies
By default, this site only uses cookies strictly necessary for its operation (session, preferences). No advertising or profiling cookies are set without your explicit consent.
If an audience analytics feature requiring consent is enabled (e.g. Google Analytics), a consent banner will appear before any non-essential cookie is set.
7. Changes
This policy may be updated to reflect changes in the services and subprocessors used. The date of the last update is shown at the top of this page. Material changes will be notified by email to account holders.