Privacy policy

Updated: 20 September 2026

This policy covers echosteom.docteurdereant.lu, enquiries sent to its publisher and the ECHOSTEOM newsletter. The public website presents the study and aggregate figures. It has no user accounts, patient enrolment forms or medical records.

1. Who to contact

For website operations and communications, the controller is Dr Joris Dereant, jd@docteurdereant.lu. Professional correspondence address: Centre Médical Primera, 33, rue du Castel, L-4525 Niederkorn, Luxembourg.

For questions about the conduct of the study, contact Dr Boris Gass, principal investigator: boris.gass@univ-lorraine.fr.

Research participants’ data are governed separately, under the responsibility of the study sponsor, Nancy University Hospital (CHRU de Nancy), as set out in the study documents. This page does not replace the participant information notice. To exercise rights relating to research data, use the contact details in that notice or ask the study team to direct you to the appropriate contact. Do not send identifiable patient information to the website’s general email addresses.

2. Data and purposes

Visiting the website

The hosting service processes technical information needed to deliver pages and keep the service secure: IP address, request date and time, requested resource, browser information and response code. The legal basis is the legitimate interest in website availability and security (GDPR Article 6(1)(f)).

The website includes no advertising, audience analytics, tracking pixels or profiling. Fonts, images and videos are served from the website itself. Google Search Console is used to monitor search visibility; no Google visitor tracking script is embedded in the pages.

Email enquiries

A “mailto” link opens your email application. Nothing is sent until you send the message. The recipient receives your address, display name, message and any attachments you choose to provide. These data are used to answer and follow up your enquiry, based on the legitimate interest in managing communications about the website and study. Providing information is optional; without contact details, a reply is not possible.

Investigator newsletter

The newsletter is intended for investigators and study team members, providing progress updates, practical information and recruitment news. It is not used to promote commercial products or services. Data used include names, email addresses, mailing roles and technical delivery records. They are provided by the individuals concerned or by the study coordination team. Visiting the website does not subscribe you to any list.

This professional communication relies on the legitimate interest in keeping people involved in ECHOSTEOM informed. You may object to receiving the newsletter without giving a reason, by replying or writing to jd@docteurdereant.lu. Opting out does not change any separate communication obligations under the research protocol.

Investigators receive individual messages. A separate copy may be sent to team members, whose email addresses are visible to the other recipients of that copy. The investigator mailing list is not published. The newsletter template contains no opening pixels or click-tracking links.

3. Recipients and service providers

Messages are available to their recipients and, where needed to answer an enquiry, authorised team members involved in the request. Technical data are processed by Hostinger and the providers needed to supply hosting. Senders’ and recipients’ email services handle email delivery and storage.

Mailing contacts and delivery records are stored in a private workspace, separate from the public website files. They are not sold or shared for advertising. Disclosure may be required by law or by an authorised public body.

Hostinger describes its subprocessors and safeguards for any transfers outside the European Economic Area in its data processing addendum, including standard contractual clauses where applicable. Processing locations depend on the hosting and email services used; we do not describe all processing as taking place exclusively within Europe. Contact the publisher for the providers and safeguards applicable to your enquiry.

4. Retention

Retention is determined by the following purposes:

• Email enquiries: while the request is being handled and for the follow-up needed to resolve it. Unnecessary exchanges should be deleted. A document needed for a legal obligation or dispute may be kept separately for the applicable period.
• Mailing list: while you participate in study communications, until you object or the newsletter ends. The minimum information needed to honour an objection may be retained to prevent accidental re-subscription.
• Delivery records: for the period needed to monitor campaigns, prevent duplicates and investigate delivery incidents; they are not intended to be retained indefinitely.
• Technical logs and backups: according to the hosting service’s retention cycles and security needs. Contact the publisher for the settings applicable to the subscribed service; no unverified fixed period is stated here.

These criteria do not set the regulatory retention periods for research data, which are covered by the study documents.

5. Cookies, language and external links

The website code sets no cookies and uses neither local storage nor session storage to track browsing. Language is selected through the page URL. Browser or system preferences for reduced motion are respected without being stored by the website. See Cookies and external services.

Following an external link takes you to an independent service with its own privacy rules. ECHOSTEOM does not automatically connect you to those services.

6. Your rights

Subject to the GDPR’s conditions, you may request access, rectification, erasure or restriction of processing, and object to processing based on legitimate interests. Portability applies to automated processing based on consent or a contract. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing. The website makes no automated decisions producing legal effects concerning you.

Send requests to jd@docteurdereant.lu. A response is normally provided within one month. This may be extended by two months for complex or numerous requests, with notification within the first month. Proportionate identity verification may be requested where there is reasonable doubt; please do not send identity documents unsolicited. Exercising your rights is normally free of charge.

You may complain to the CNPD in Luxembourg, the CNIL in France, or the supervisory authority in your habitual residence, place of work or the place of the alleged infringement.

7. Changes to this policy

This page is reviewed when services or processing change. The revision date appears at the top. A new use requiring consent will not be activated merely because you have read this page.

See also the legal notice and terms of use.