Clinical-Loop

Privacy Policy

Your privacy matters to us
Clinical Loop is committed to protecting the privacy and personal data of its users. This Privacy Policy explains what personal information we collect, why we collect it, how it is used and the rights available to users under applicable data protection legislation.

Last updated: September 2026

Your privacy matters to us. Clinical Loop is committed to protecting the privacy and personal data of its users. This Privacy Policy explains what personal information we collect, why we collect it, how it may be used, and the rights available to users under applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights.1.

Data Controller
Clinical Loop is an educational initiative associated with the Fundació Hospital Universitari Vall d'Hebron - Institut de Recerca (VHIR).Data
Controller: Fundació Hospital Universitari Vall d'Hebron - Institut de Recerca (VHIR)
NIF: G-60.594.009. Passeig de la Vall d'Hebron, 119–129, Edifici Central. 08035 Barcelona, Spain

Clinical Loop contact: clinical.loop.net@gmail.com
VHIR Legal Unit: lopd@vhir.org
Data Protection Officer: dpd@ticsalutsocial.cat
2. Personal Data We Collect
When users create an account or interact with Clinical Loop, we may collect the following information:Username, Email address, Hospital, healthcare institution or professional affiliation, Membership of medical or scientific societies, Professional and educational interests related to Clinical Loop Information necessary for account management and authentication Technical and security information generated through the use of the website Communication preferences, including whether the user wishes to receive educational updates or newsletters
Clinical Loop is an educational platform and is not intended for the collection or processing of patient data or clinical information. Users must not submit identifiable patient information through the platform.
3. Purposes of Processing Personal data may be processed for the following purposes:To create and manage Clinical Loop user accounts.To authenticate users and provide access to restricted educational content.To provide and manage educational activities and resources.To understand users' educational interests and improve the content, functionality and usability of Clinical Loop.To respond to questions, requests or communications submitted by users.To maintain the security and proper functioning of the platform.To send educational updates, news, events and other information related to Clinical Loop when the user has agreed to receive such communications.Where applicable and subject to the appropriate consent requirements, to obtain aggregated or analytical information about the use of the website.Clinical Loop does not intend to use registration information for automated decision-making producing legal or similarly significant effects.
4. Legal Basis for Processing Personal data required for account creation and management will be processed on the legal basis applicable to the provision of the service requested by the user and the management of the relationship with Clinical Loop.Where consent constitutes the appropriate legal basis, users will be asked to provide consent for the specific processing activity concerned.In particular, consent for receiving optional newsletters, educational communications or promotional information will be requested separately and will not be required to create or maintain a Clinical Loop account.Users may withdraw their consent at any time without affecting the lawfulness of processing carried out before its withdrawal.
5. Educational Communications and Newsletter Users may voluntarily choose to receive news, educational updates, information about courses, events, new resources and other communications related to Clinical Loop.Subscription to these communications is optional and is not required to register or access the educational platform.Where communications include information about activities supported or sponsored by third parties, this will not in itself mean that the user's personal information has been disclosed to the sponsor.Users may withdraw their consent or unsubscribe from optional communications at any time through the mechanisms provided in the communication or by contacting Clinical Loop.
6. Data Retention Personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected and, where applicable, for the periods required to comply with legal obligations.Account-related information may be retained while the user's Clinical Loop account remains active.If an account is deleted or the relationship with the user ends, personal data will be deleted, anonymised or appropriately restricted when applicable, subject to any legally required retention periods.Data relating to optional communications will be processed until the user withdraws consent or requests to unsubscribe, without prejudice to any information that must be retained to demonstrate compliance with applicable legal obligations.
7. Recipients, Service Providers and SponsorsClinical Loop does not sell users' personal data.Personal information may be processed by technology, hosting, email, security or other service providers where their services are necessary for the operation of Clinical Loop. Where applicable, such providers will process personal information subject to the appropriate data-protection requirements.Clinical Loop may receive institutional or commercial sponsorship. The presence of a sponsor, its name, logo or sponsored educational content does not imply that users' registration data or personal information are transferred to that sponsor.If Clinical Loop were in the future to propose disclosing personal information to a sponsor or other third party for its own purposes, users would receive appropriate information and, where legally required, specific consent would be obtained before such disclosure.Where service providers involve international transfers of personal data outside the European Economic Area, the safeguards required under applicable data-protection legislation will be applied.
8. Cookies, Analytics and Third-Party TechnologiesClinical Loop may use cookies and similar technologies that are necessary for the operation, security, authentication and functionality of the website.Clinical Loop may also use, now or in the future, non-essential technologies for purposes such as website analytics, embedded multimedia content, performance measurement or other functionalities.Some of these technologies may be provided by third parties. Third-party services may include analytics providers, multimedia or external content providers and, where applicable, technological services associated with institutional or commercial sponsors.The presence of sponsorship does not automatically result in the use of cookies by the sponsor or in the disclosure of personal data to that sponsor.If technologies associated with sponsors or other third parties are used for advertising, campaign measurement, personalisation, tracking or similar purposes, users will be informed about the relevant purposes and third parties and, where required by law, such technologies will not be activated until the user has provided the appropriate consent.Users will be able to manage non-essential cookie preferences through the cookie management mechanism provided on the website.Further information about the cookies actually used, their purposes, duration and relevant third parties will be provided in the Cookie Policy.
9. Users' Data Protection RightsUsers may exercise the rights provided under applicable data-protection legislation, including, where applicable: Right of access, Right to rectification, Right to erasure, Right to restriction of processing, Right to object to processing, Right to data portability, Right to withdraw consent where processing is based on consent, Requests concerning these rights may be addressed to: VHIR Legal Unit: lopd@vhir.org
Data Protection Officer: dpd@ticsalutsocial.catUsers also have the right to lodge a complaint with the competent data-protection supervisory authority, including the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD) where applicable.
10. Security and Confidentiality Appropriate technical and organisational measures will be applied to protect personal data against unauthorised access, alteration, disclosure, accidental loss or destruction, taking into account the nature of the information processed and the associated risks.Users are responsible for maintaining the confidentiality of their login credentials and should not disclose their passwords to third parties.Clinical Loop is not intended to store patient-identifiable information, medical records or other clinical information. Users should not upload, enter or otherwise communicate identifiable patient data through the platform.
11. Changes to this Privacy Policy This Privacy Policy may be updated when Clinical Loop introduces new services or functionalities, changes the way personal data are processed, incorporates new service providers or technologies, or when modifications are required to comply with applicable legislation.Significant changes affecting the processing of personal data will be communicated to users where required.The date of the latest revision will always be indicated at the beginning of this Privacy Policy.