PV
تسجيل الدخول انضم مجاناً

Draft for legal review

Privacy policy

Last updated: 28 October 2026

1. Controller

VariaX Solutions (Kuwait) is the data controller for PET Vision Community.

2. Legal framework

We process personal data in line with the EU General Data Protection Regulation (GDPR) for members in the EEA and UK, with Kuwait's data-protection regulations (including the Data Privacy Protection Regulation issued by the Communication and Information Technology Regulatory Authority), and with other applicable local laws.

3. What we collect

  • Account data: name, email, profession, country, institution, password hash, optional ORCID iD.
  • Verification data: institutional email domain, ORCID confirmation or uploaded licence/ID documents (encrypted at rest, deleted 90 days after a decision).
  • Professional content: posts, comments, messages, manuscripts, reviews, tumour-board participation.
  • Technical data: security logs (IP address, user agent) kept in our audit log for up to 2 years.

4. Purposes and legal bases

  • Running your account and the community (contract).
  • Verification, security, fraud prevention and audit (legitimate interests, legal obligation).
  • Editorial processing of manuscripts and reviews (contract; legitimate interest in scholarly publishing).
  • Optional news emails (consent - you can withdraw at any time).

5. Separate consents

At registration you accept the terms, this policy and data processing separately. Marketing is off by default.

6. Sharing

We do not sell personal data. Processors (hosting, email delivery) act on our instructions. Published articles and public profiles are visible to everyone; you can hide your profile from search engines.

7. Retention

  • Verification documents: 90 days after the decision.
  • Raw email submissions: 30 days.
  • Audit log: 2 years.
  • Tumour-board chat: 1 year (outcomes and minutes are kept).
  • Published articles remain part of the scholarly record.

8. Your rights

You can access and export your data (Settings → Privacy → export as ZIP), correct it, object, restrict processing and delete or anonymise your account. You may complain to your supervisory authority.

9. International transfers

Where data leaves your country we use appropriate safeguards such as standard contractual clauses.