echokardio.de
EchoMastery
DE EN
CalculatorsMysteryCongressesCoursesGuidelinesBlog

Privacy Policy

Last updated: March 5, 2026

1. Data Controller

Data controller for data processing under the GDPR:
Dr. med. Christian Kirsch
Klinikum Lippstadt GmbH, Klosterstraße 31, 59555 Lippstadt, Germany

Email: support@echokardio.de

2. Data Collected and Legal Basis

  • Server log files: For technical security, our servers automatically log technical data (IP address, browser type, timestamp). Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
  • Session cookies: For logged-in users, technically necessary session cookies are used. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
  • Voting cookie (Mystery Echo): When voting on a Mystery Echo case, a technically necessary cookie is set to prevent multiple votes (stored for 30 days, no personal identification). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in valid voting results).
  • Clinical calculators: Measurements you enter are processed exclusively in your browser and are not stored on our servers.
  • Mystery Echo notification (email subscription): If you sign up to be notified about a Mystery Echo case, we store your email address to send the answer. Legal basis: Art. 6(1)(a) GDPR (consent). Sending is handled by our processor Resend (see section 4). You may unsubscribe at any time via the link in each email.

3. Your Rights

Under the GDPR, you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17) and to object to processing (Art. 21). You may contact the competent data protection authority at any time: Landesbeauftragte für Datenschutz NRW.

4. Services and Recipients

  • Resend (email delivery): We use the email service provider Resend (Plus Five Five, Inc., USA) to send Mystery Echo notifications. This may involve a transfer of data to a third country (USA). More information: Resend's privacy policy.
  • Bunny Fonts: Fonts are served via Bunny Fonts, a GDPR-compliant, European-hosted service that does not log IP addresses.
  • Web analytics (optional): Where active, we use a self-hosted, cookie-free analytics solution (Umami) for anonymised traffic measurement. No profiling or disclosure to third parties takes place.
  • EchoMastery Pro (app.echokardio.de): Booking and payment for EchoMastery Pro take place on the separate application app.echokardio.de. Its own privacy policy applies to data processing there, including payment processing.

5. EU Data Act (2025)

In accordance with the EU Data Act, we guarantee your right to data portability. On request, we provide your data in a structured, machine-readable format within 30 days.