VascularReportVascularReport
Notice

Privacy notice

English translation for convenience only This is a courtesy translation. The Italian version is the only authoritative text: VascularReport is operated from Italy and the Italian notice is the one that applies for the purposes of the Italian Data Protection Authority. In case of any discrepancy between the two versions, the Italian text prevails.

This page explains what data VascularReport collects, why, where it is stored and what rights you have as a user — in particular as regards the reports, which remain solely on your own device.

Ultimo aggiornamento: 21 luglio 2026
1

Data controller

The controller of the data collected through VascularReport is Dr Giuseppe Carella, Consultant Vascular Surgeon.

For any request concerning your personal data (access, rectification, erasure, withdrawal of consent to the newsletter) you may write to: [email protected].

Note for whoever publishes this page This text is a basic template written for the technical architecture of VascularReport (Supabase + Cloudflare). Before publishing it, have the text reviewed — in particular the obligations that apply to a healthcare professional, and any promotional use of the newsletter — by a privacy consultant or a lawyer. It is not legal advice.
2

Data collected and purposes

DataWhy we collect itLegal basis
Account email and password To let you sign in to the application securely Performance of the service requested
Customised phrases, report header and signature To restore your settings each time you sign in, including from another device Esecuzione del servizio richiesto
Email address for the newsletter To send you updates about the service, only if you have given consent Consent (which may be withdrawn)

The password is never readable by us: it is handled by Supabase, the authentication provider, using standard secure hashing.

3

Reports stay on your device

The content of the reports — patient data, selected findings, generated text — is never sent to or stored on our servers. It remains saved solely in the local storage of the browser you are using (on your own computer or device), exactly as intended by the aim of the project not to share sensitive data online.

  • No one — including the data controller — can access the reports you write remotely.
  • Reports are not synchronised automatically between different devices.
  • Clearing the browser's browsing data, or uninstalling the app, will delete the reports stored locally: use the copy, print or export functions of the application to keep a copy elsewhere.
4

Newsletter and optional communications

When registering you may choose, by ticking an optional box, to receive email updates about new features and news of VascularReport. This choice is never required in order to create an account or use the application.

If the newsletter should in future also include promotional communications (for example linked to sponsors in the pharmaceutical or medical device sector), this notice will be updated to state so explicitly before any such communication is sent.

You may withdraw your consent at any time by writing to the address given in section 1, or through the unsubscribe link at the foot of the emails you receive.

6

Providers and data retention

Two technical providers are used to run the service:

  • Supabase — handles accounts, sign-in and passwords.
  • Cloudflare — hosts the site (Cloudflare Pages) and stores your personal report settings (Cloudflare KV).

Account and settings data are kept for as long as your account remains active; you may request their deletion at any time. Report data, as explained in section 3, neither passes through nor remains on these servers: its retention depends solely on your device and your browser.

Data region Se in fase di configurazione del progetto Supabase e Cloudflare è stata scelta una regione europea (es. Francoforte), i dati restano conservati all'interno dell'Unione Europea. [confermare la regione effettivamente scelta].
7

Your rights

As a data subject, you have the right to:

  • access the personal data concerning you;
  • request their rectification if inaccurate or incomplete;
  • request their erasure;
  • restrict or object to the processing;
  • obtain their portability, where applicable;
  • withdraw your consent to the newsletter at any time, without affecting the lawfulness of processing carried out before withdrawal;
  • lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.gpdp.it), if you consider that the processing infringes the applicable legislation.

To exercise these rights, write to the address given in section 1.

8

Changes to this notice

This notice may be updated over time, for example when new features or new providers are introduced. The date of the most recent update is shown at the top of the page; any significant change (for example the introduction of promotional communications by newsletter) will be clearly signalled.