Privacy notice

1. Controller and contact

The controller for the public Ariadnepsy website and clinician portal account administration is:

2. Scope

This notice covers the public website at www.ariadnepsy.com and the account administration of the clinician portal at clinician.ariadnepsy.com. The public website is informational only: it has no contact form, no analytics and no advertising or social-media tracking.

3. Data processed

When visiting the public website, limited technical connection data may be processed by the server and security infrastructure, such as IP address, time of request, requested page, browser information and error information. This is necessary to deliver the website securely and diagnose faults.

For authorised clinician-portal users who choose Google sign-in, the portal processes the verified Google account email address and, where supplied, the account name. This is used solely to authenticate the user, check approved access and administer the account.

4. Purposes and legal bases

• to deliver and secure the public website and clinician portal;
• to authenticate authorised clinician users and prevent unauthorised access;
• to investigate technical faults and security incidents; and
• to comply with applicable legal obligations.

Processing is based, as applicable, on legitimate interests in maintaining a secure service, performance of an agreement with professional users, and legal obligations. Where consent is required by law, it will be requested separately.

5. Service providers and transfers

Google OAuth is used only to authenticate clinician-portal users. Google acts as an identity provider for this purpose. The public website does not use analytics services. No sale of personal data takes place.

If personal data are transferred outside the European Economic Area through an identity provider or other service used in the future, appropriate safeguards required by applicable data-protection law will be used and further information will be made available on request.

6. Retention

Technical data are retained only for as long as reasonably necessary for security, operation and troubleshooting. Clinician account data are retained while an account is active and thereafter only as necessary for security, legal obligations or the handling of disputes. Authentication sessions expire after eight hours of inactivity or according to the portal session settings.

7. Your rights

Subject to the conditions and limits in applicable law, you may request access to, correction of, deletion of, restriction of or objection to processing of your personal data. You may also request data portability where applicable. To exercise these rights, contact erik@arawix.com.

You may lodge a complaint with the Belgian Data Protection Authority if you believe that your data-protection rights have been infringed.

8. Clinical content

The clinician portal is intended for authorised professional use. Clinicians remain responsible for ensuring an appropriate legal basis, professional confidentiality and required information to data subjects before entering clinical material into the service. Further contractual and processing arrangements may apply to clinical use.

9. Changes

This notice may be updated when the service or applicable legal requirements change. The current version will be published on this page.