Privacy policy

Data controller

The data controller can be contacted at hello@clinicmapper.com.

Hosting with Cloudflare

The site is hosted by Cloudflare, Inc. (USA), which acts as our data processor. When you visit the site, Cloudflare processes technically necessary data such as your IP address and browser details to deliver the site and protect it from abuse, and may keep them briefly in log files. The legal basis is our legitimate interest in running a secure website (GDPR Art. 6(1)(f)).

Cloudflare may process data outside the EU, including in the USA. Transfers to the USA are based on the European Commission's adequacy decision (EU) 2023/1795 on the EU-U.S. Data Privacy Framework, under which Cloudflare is certified, and otherwise on the European Commission's standard contractual clauses in Cloudflare's data processing agreement.

Clicks through to clinics

When you click through to a clinic, we only count the number of clicks per clinic per day. In our own data we use no cookies for this and store no IP address, browser details or anything else that could identify you. Cloudflare does technically process your IP address when it delivers the site (see "Hosting with Cloudflare").

Click statistics contain no personal data and are stored as totals.

Health information

We don't ask for health information and have no fields for it. Please be aware that the mere fact that you visit a site about medical weight loss or write to us can say something about your health. That is why we collect as little as possible, don't pass enquiries on to clinics and don't use the information for marketing.

Forms

During the test phase the site has no profile form for clinics, and we collect no contact details through the site.

Analytics with Google Analytics (consent only)

If you click "Accept analytics", we load Google Analytics 4 to measure visits (page views and scrolling). Without your consent nothing is loaded from Google – not even cookieless measurements. The legal basis is your consent (Art. 6(1)(a)).

Google Analytics is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which processes the data as our processor. Data may be transferred to Google LLC in the USA. The transfer is based on the European Commission's adequacy decision (EU) 2023/1795 on the EU-U.S. Data Privacy Framework, under which Google LLC is certified.

We only send the page address without query parameters and only the domain of the page you came from. The page address can show which clinic you looked at. Google Signals, ad personalisation and outbound-click measurement are turned off. Google keeps event data for 2 months.

Google Analytics sets two cookies on clinicmapper.com: _ga, which distinguishes visitors using a random ID, and _ga_<id>, which keeps track of your current session. Google's default lifetime for both is 2 years, but here they expire when your consent expires, and after 365 days at the latest.

Cookies

We store your choice in a necessary cookie, clinicmapper_consent. It only contains a version, your choice and an expiry date – nothing that identifies you.

A yes is stored for 365 days, a no for 30 days. The cookie is not renewed when you visit again; a new choice starts a new period.

You can change or withdraw your consent at any time via "Cookie preferences" at the bottom of the page. We then turn analytics off and delete the Google Analytics cookies. Withdrawal stops future collection but does not automatically delete data already collected.

Your rights

You have the right of access to the information we hold about you, and the rights to rectification, erasure, restriction of processing and data portability. You can object to processing based on our legitimate interest.

Where processing is based on consent, you can withdraw it at any time. This does not affect the lawfulness of processing before the withdrawal.

Write to hello@clinicmapper.com to exercise your rights.

You have the right to complain to a supervisory authority about how we process your personal data.