Privacy policy

Controller

Controller within the meaning of Art. 4 (7) GDPR and the party responsible under Canadian privacy law (PIPEDA) is:

LabMed Alliance Inc.
L'Assomption, Quebec, Canada
Federal corporation number 1491582-8
Contact: experts@labmedalliance.com

What we collect

This site is intentionally privacy-light:

• Server access logs at our hoster (Uberspace, Germany): IP address, requested URL, user agent, referrer, and timestamp. Retained for up to 14 days for security and operational diagnostics, then deleted.
• Web fonts are served directly from our own server — no font files are loaded from Google or any other third party.
• Tile imagery for the lectures map is loaded by your browser directly from the OpenStreetMap Foundation's tile server (tile.openstreetmap.org), which therefore sees your IP address. See the OSMF privacy policy. No API key or account is involved, and nothing else is shared.
• No analytics, no marketing trackers, no advertising cookies. Only a single technical session cookie is set if you log in to the editor area.

Editor area

Access to app.labmedalliance.com and /admin/ is restricted to LabMed Alliance team members and authenticates via Microsoft Entra ID (Azure AD). Authentication tokens and Django session cookies are stored for the duration of the session.

Your rights

You have the right to obtain information about, correct, or have deleted any personal data we hold about you, as well as the right to data portability and to lodge a complaint with a supervisory authority. Contact us at experts@labmedalliance.com to exercise any of these rights.

Cookies

We do not set cookies for visitors of the public website. Editors who log in receive a single technical session cookie that is required for the login mechanism to work and is removed automatically on logout. The same applies to the password-protected attendee area of the D4 Summit (talks and photos): its login page sets a technical security cookie (csrftoken), and after login a session cookie that expires after two hours. Neither is used for tracking.

Changes

We may update this policy as the site evolves; the date below indicates the version you are reading.

Last updated: 17 September 2026.