Who we are
This website, immunoneurosurgery.com, is run by Dr. Apostolos Stathopoulos. If you have any question about this policy or your information, please use the contact form and choose the category “Other”.
The short version
- No tracking cookies, no analytics, no advertising, and no third-party scripts, fonts or social media buttons. The only cookie is the one that keeps authorised users logged in.
- We collect only what you send through the contact form, plus the basic technical records every web server keeps.
- We use it only to reply to you and to keep the site secure. We never sell it, never use it for marketing and never add you to a mailing list.
What we collect
When you visit
Like almost every website, our server automatically records each request: your IP address, the page requested, the date and time, and the type of browser. We use these records only to keep the site running and to detect attacks, and they are deleted automatically after 14 days.
When you use the contact form
We receive the category you choose, your name (optional), your email address and your message. We also record the date and time, your IP address and your browser type, which we use to filter out automated spam.
Private login area
The website has a login area used only by Dr. Stathopoulos and the site administrator. Accounts are created by the administrator; there is no public sign-up. When you log in, the site sets one cookie, which is needed to keep you logged in and is not used for anything else. It expires after 14 days, or when you log out. We record the time of each user's last login. Passwords are stored only in scrambled (hashed) form, so they cannot be read back. Images in the login area are visible only to the account they were uploaded to.
Please do not send medical information
The contact form is not a way to get medical advice and must not be used in an emergency. Please do not include medical records, scans or other health details in your message. If you do, we will use them only to reply to you.
How we use it, and why
We use your message and email address only to read and answer your enquiry, and the technical details only to block spam and keep the site secure. For visitors in the European Union and the United Kingdom, the legal basis is our legitimate interest in answering the people who contact us and in protecting the website.
Who else handles it
The website runs on a server rented from DigitalOcean, located in the United States. If you write to us from outside the US, your message is transferred to and stored in the US.
Apart from the service providers that help us run the website, we do not share your information with anyone unless the law requires it.
How long we keep it
- Server records: 14 days.
- Images in the login area: until the account owner asks for them to be removed.
- Messages flagged as spam: deleted after 90 days.
- Genuine messages: removed from the website's server 90 days after we collect them. We keep our own copy only as long as we need it to deal with your enquiry.
Your rights
You can ask us what information we hold about you, ask us to correct it or delete it, or object to how we use it. Just contact us. If you are in the European Union or the United Kingdom and are not satisfied with our answer, you can complain to your data protection authority, for example the CNIL in France or the Data Protection Authority (APD/GBA) in Belgium.
Security
Every page is served over an encrypted (HTTPS) connection. Messages are stored on the server where they cannot be seen from the website, access to the server is restricted, and its software is updated automatically.
Links to other websites
Some pages link to other websites, such as ERC and published articles. Those sites have their own privacy policies, which we do not control.
Children
This website is not intended for children under 16, and we do not knowingly collect their information.
Changes to this policy
If we change how we handle information, we will update this page and the date at the top.