Scope of Data Protection and Applicability
This Data Protection page provides formal notice of how CrusadeBleedingScore.org, operated by Eldon Vespers, collects, stores, processes, and protects personal data in accordance with relevant data protection regulations applicable within the United States of America. The provisions outlined herein pertain to all users accessing or interacting with any part of the website’s services, whether through direct usage, inquiry, or correspondence. Data protection is applicable to all website users, including, but not limited to, healthcare professionals, patients, researchers, and visitors. The policies herein outline our commitment to the integrity of data handling, and apply to both digital and physical forms of information. Covered information includes but is not limited to identifiable personal information, anonymized data, metadata, and user-generated content. CrusadeBleedingScore.org is committed to upholding industry best practices in data protection, regardless of the user’s geographic location. This scope extends to all devices, platforms, and applications used to access the website. Parents and guardians, where applicable, are also included if data concerns relate to minors. All employees, contractors, volunteers, and agents with access to data managed by CrusadeBleedingScore.org are required to comply with these stated data protection protocols. Third-party vendors or service providers with whom data may be shared for operational reasons are also obligated to adhere to the protection standards as described herein.
Types of Data Collected and Purposes of Processing
At CrusadeBleedingScore.org, we collect a range of user data to provide a secure and personalized user experience. Personal data collected may include name, email address, postal address, and other identifiers provided voluntarily through forms or correspondence. We may also gather technical details such as IP address, browser type, device information, and log files automatically through user interactions with our system. Cookies and similar technologies may be employed to enhance navigation, improve service delivery, and collect aggregate usage statistics. When healthcare queries are submitted, we process information concerning the user’s medical specialty, professional credentials, and areas of interest to offer pertinent resources. Additionally, information relating to the assessment and management of bleeding risks may be processed when users engage with the CRUSADE Bleeding Score tools or related informational content. The primary purposes of processing this information are to provide personalized content, enhance service efficacy, maintain system security, comply with applicable legal obligations, investigate misuse or breaches, and provide user support. We may also use aggregated data derived from user interactions for research, analytics, and service improvement, ensuring that individual data subjects cannot be identified from such aggregated results. Personal data is never sold or used for commercial advertising unrelated to the services provided by CrusadeBleedingScore.org. All processing activities are conducted in alignment with users’ legitimate expectations and lawful grounds as prescribed by data protection laws. When processing is based on consent, users may withdraw this consent at any time, without affecting previous lawful processing. The data collected is integral in fulfilling the overall mission of providing comprehensive bleeding risk and medical information to the healthcare community and the public.
Lawful Bases for Processing Personal Data
CrusadeBleedingScore.org ensures that all processing of personal data is carried out on the basis of lawful grounds recognized by United States data protection regulations. Our operations are primarily supported by the legal bases of legitimate interests, consent, contractual necessity, and compliance with legal obligations. Legitimate interest justifies our collection and use of data necessary for site operation, research functions, user support, site security, and workflow optimization. Explicit consent is obtained from users when requesting sensitive information or when users subscribe to specific services, such as newsletters or updates. Users are fully informed of the purpose and implications of providing such consent and have the right to revoke it at any time. Processing may also occur when required to fulfill contractual obligations, such as responding to user inquiries or providing requested services. Compliance with statutory and regulatory requirements, including but not limited to law enforcement requests and court orders, also constitutes a lawful basis for data processing. Data sharing with authorized third-party processors, such as hosting providers or technical support partners, is conducted under strict contractual controls, ensuring adherence to our stated policies. We review our lawful bases for processing at regular intervals and adjust our practices accordingly to remain in compliance with evolving legal frameworks and regulatory guidance. If the lawful basis for any processing activity changes, all affected users will be informed in a clear and timely manner. The overarching objective is to maintain full transparency and accountability in our data handling practices across all activities conducted on CrusadeBleedingScore.org.
Users’ Rights and Requests
We recognize and respect the rights of users regarding their personal data collected and processed by CrusadeBleedingScore.org. Users have the right to request access to their personal information, to correct inaccuracies in their data, to request deletion or erasure of information, and to restrict or object to certain processing activities. Users may request a copy of their personal data in a standard, machine-readable format, and can instruct us to transmit such data to another controller where technically feasible. You also retain the right to withdraw previously granted consent at any time, which will not affect any processing conducted prior to such withdrawal. Requests relating to personal data should be submitted in writing to Eldon Vespers using the contact details provided below. Requests will be acknowledged and addressed within a reasonable period as prescribed by applicable law, typically no later than 30 days from the date of receipt. Inquiries may require additional verification to ensure the security and privacy of all data subjects. If a user believes that their rights under data protection regulations have been violated, they have the right to lodge a complaint with the appropriate regulatory authority in the United States. We are committed to facilitating the fulfillment of all data subject rights as efficiently as possible and provide clear instructions and assistance for the exercise of these rights.
Data Retention and Security
Personal data collected by CrusadeBleedingScore.org is retained only for as long as is necessary to fulfill the specific purposes for which it was collected and to comply with applicable laws and regulations. We conduct regular reviews of our data retention policies to ensure they align with changing legal obligations and best practice standards. Data that is no longer required or for which there is no ongoing lawful basis is securely erased or anonymized in a manner that eliminates personal identification. We employ robust organizational, technical, and administrative safeguards to protect personal data against unauthorized access, alteration, disclosure, or destruction. Such measures include, but are not limited to, access controls, encryption, secure data storage, staff training, and ongoing system monitoring. We regularly review all data processing systems for potential vulnerabilities and undertake pro-active steps to protect user data. In the unlikely event of a data breach that jeopardizes user rights or freedoms, affected users will be notified in a timely manner as required by law, and remedial actions will be promptly initiated. The security and confidentiality of user data remains a cornerstone of our operations and is reflected in our daily practices, protocols, and strategies.
Contact Information for Data Protection Matters
For all questions, concerns, or requests regarding the collection, processing, or protection of personal data, users are encouraged to directly contact the website owner and data protection officer, Eldon Vespers. Communications can be addressed to the following official contact:
- Name: Eldon Vespers
- Address: University of Otago, 362 Leith Street, North Dunedin, Dunedin 9016, New Zealand
- Email: [email protected]
