This is the version for visitors in the European Union, the European Economic Area and the United Kingdom. It covers the same services, data and practices as the US version, with the information the GDPR and UK GDPR require.
Who is responsible. The controller is Michael Olszewski, who runs the open-source LocumView project (Apache-2.0). Contact: [email protected].
The short version
- The website does not use analytics, advertising trackers or third-party scripts, and it does not sell or share personal data.
- If you contact us, we use what you send only to reply to you.
- The demo service keeps the account and session information needed to run and secure it.
- The backup tool only ever sees files it created itself in its owner's Google Drive.
1. What we process, why, and on what legal basis
| Activity | Personal data | Purpose | Legal basis (GDPR Art. 6) | Retention |
|---|---|---|---|---|
| Contact requests (the form opens your own email program; we receive your email, forwarded by Cloudflare Email Routing) | Name, organization, role (optional), work email, area of interest, anything you write | Replying to your enquiry, arranging a demo or pilot | Steps at your request before a contract (6(1)(b)); otherwise legitimate interest in answering enquiries (6(1)(f)) | Until the request and follow-up are complete, normally deleted within 24 months |
Region preference cookie lv_region | "us" or "eu" | Remembering which version of the site you chose | Strictly necessary to provide the service you asked for (ePrivacy exemption); legitimate interest (6(1)(f)) | 12 months, or until you clear cookies |
| Website delivery and security (Cloudflare) | IP address, request details, browser data | Delivering pages, protecting against abuse, error reporting | Legitimate interest in a secure, working website (6(1)(f)) | According to Cloudflare's policy |
| Demo service at login.locumview.com | Account name and email, sign-in and session records (times, IP address, desktop used), security logs | Running and securing the demo, investigating misuse | Contract or pre-contract steps for invited evaluators (6(1)(b)); legitimate interest in security (6(1)(f)) | Shared guest password rotated after each evaluation; named accounts removed on request; logs up to 90 days unless needed for a security investigation |
| Backup tool (Google Drive) | Only files the tool created; no other Google account data | Storing encrypted backups of the owner's own systems | Legitimate interest of the owner (6(1)(f)) | Daily, weekly and monthly copies, at most six months |
We do not use analytics, advertising or social-media trackers, or fingerprinting, and we do not make decisions about you by automated means. Demo desktops are for evaluation with synthetic or public data only: do not enter real patient data or other special-category data.
2. Recipients
- Cloudflare, Inc. delivers and protects the website and forwards mail sent to [email protected], as our processor. Privacy policy.
- Google LLC stores the backup tool's encrypted files in the owner's Google Drive.
- Your email provider and ours handle contact emails.
We do not sell personal data or share it with anyone for their own purposes.
3. International transfers
LocumView is run from the United States, so your data is processed there. Transfers to Cloudflare and Google rely on the EU-US Data Privacy Framework where the recipient is certified, and otherwise on the European Commission's Standard Contractual Clauses.
4. Google user data (backup tool)
The backup tool uses the Google Drive drive.file permission, which lets it see and manage only the files it created itself. Those files are encrypted before upload. Google user data is not shared, sold or transferred, and is not used for advertising or to train AI models. Access can be revoked at any time at myaccount.google.com/permissions.
LocumView's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5. Your rights
You have the right to access your personal data, to have it corrected or erased, to restrict or object to processing (including processing based on legitimate interests), and to data portability. Where processing is based on consent, you can withdraw it at any time. Email [email protected]; we will respond within one month.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU or EEA country where you live or work, or with the UK Information Commissioner's Office.
6. Security
Access to systems holding personal data is limited to the project owner and protected by strong authentication (access by the owner uses multi-factor authentication). If a breach is likely to put your rights at risk, we will notify you and the competent authority as the GDPR requires.
7. Children
LocumView is a professional tool, not directed at children under 16. We do not knowingly process their data.
8. Changes
Any change will be posted here with a new effective date, and material changes will be highlighted.
9. Contact
Michael Olszewski, LocumView. Email: [email protected].