Privacy Policy

Last updated: August 2026

CardioFlowLab respects your privacy. This Privacy Policy explains what personal data may be collected when you use this website, why it is processed, and what rights you have under applicable data-protection law, including the General Data Protection Regulation (GDPR), where applicable.

1. Data controller
Name: Dr. Daniel Mendonça, MD — Vascular Surgeon
Address: Ludwig-Erhard-Str. 18, 20459 Hamburg
Email: cardioflowlabproject@gmail.com

2. Personal data we collect
Newsletter signup: If you subscribe to the CardioFlowLab newsletter, we collect the email address you provide. We may also process subscription preferences, confirmation status, and interaction data such as opens or clicks. Please do not submit health information or other sensitive medical details through the newsletter signup form.

Technical information: When you visit the website, technical data such as IP address, browser type, device information, and basic server logs may be processed for secure operation and troubleshooting.

3. How we use personal data
To provide and manage the newsletter; send educational updates where consent has been given; maintain subscription records and manage unsubscribe requests; understand newsletter performance where measurement is enabled; operate and secure the website; and comply with legal obligations.

4. Legal bases for processing
Consent (newsletter subscriptions), legitimate interests (website security and improvement), and legal obligations, where applicable. You may withdraw consent at any time.

5. Newsletter provider — beehiiv
Newsletter data is processed using the third-party provider beehiiv. Your email and subscription information may be transferred to and processed by beehiiv for delivery, list management, and related functions, potentially outside your country or the EEA.

6. Cookies
This website may use cookies necessary for basic functionality. [To be finalized after auditing the live site's actual cookies.]

7. Data retention
We retain newsletter data for as long as you remain subscribed, or as needed for compliance and legitimate business records.

8. Your rights
You may request access, correction, deletion, or restriction of your data, object to processing, or withdraw consent at any time. To request deletion, email cardioflowlabproject@gmail.com with the subject "Data deletion request," or use the unsubscribe link in any newsletter. You may also lodge a complaint with a competent data-protection authority.

9. Data security
We use reasonable technical and organizational measures to protect personal data. No system can be guaranteed completely secure.

10. Changes to this Policy
This Privacy Policy may be updated periodically. The latest version will always be published on this page.