Your rights in the EU and UK (GDPR)
How Uroanswers handles personal data of readers and members in the European Union and United Kingdom: legal bases, health data, transfers, and how to use your GDPR rights.
Updated: 6 October 2026
Anyone can read Uroanswers and anyone 18 or over can join the forum. If you are in the European Union, the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR, and the UK GDPR in the UK) gives you rights over your personal data. This page explains how they apply here. It adds to our privacy policy, which describes what we collect and how long we keep it.
Who the controller is
Uroanswers
contact@uroanswers.org
Data protection questions go to the email address above.
Why we use your data, and the legal basis for each use
| What we do | Legal basis |
|---|---|
| Deliver pages, keep the site secure, block attacks and spam (server and security logs, IP addresses) | Legitimate interests: running a secure website |
| Show the right crisis helpline using your approximate country | Legitimate interests: helping readers reach support in their own country. Your country is not stored against you. |
| Measure how pages are used through Google Analytics, Microsoft Clarity and Yandex Metrica | Consent, given in the cookie banner |
| Send publication updates to newsletter subscribers | Consent, given separately at newsletter signup |
| Create and run your account, send account and notification emails | Contract: providing the forum you signed up to |
| Health information you choose to share in posts | Your explicit consent, given when you accept the terms of use at registration. For posts you choose to make public, also the fact that you have made the information public yourself. |
| Health information in emails, reports and moderation records, and the automated crisis check on posts | Your explicit consent (members), or the fact that the information has been made public in a post. For emails from people without an account, your explicit consent, given by choosing to send it. |
| Record IP addresses with posts, handle reports, moderate and deal with appeals | Legitimate interests: keeping the forum safe, lawful and free of spam and multiple accounts |
| Check a clinician's credentials for a verified badge | Consent, given when you apply |
| Reply to emails and keep a record of decisions | Legitimate interests: responding to you and handling corrections and appeals |
| Keep records or disclose information when the law requires it | Legal obligation |
Where we rely on legitimate interests, we have weighed them against your rights. You can object at any time (see below).
Health information
Health information is a "special category" of personal data under the GDPR. On Uroanswers it comes only from what you choose to write. We don't infer health conditions from what you read, and we don't build profiles from forum activity.
We ask for your explicit consent to process health information when you register, through its own checkbox, separate from accepting the terms of use. You can withdraw it at any time by emailing contact@uroanswers.org. Because the forum can't work without it, withdrawing consent means we close your account.
Automated processing
We don't make decisions about you based solely on automated processing that have legal or similarly significant effects.
The main automated steps are these, and none of them profiles you:
- Some posts are held automatically for review before they appear, based on their content. A person makes the moderation decision, not a system.
- Posts are checked for words associated with crisis, so that a helpline panel can appear on them. The check isn't used to profile you or make decisions about your account.
- Our network provider automatically blocks traffic that looks like an attack or a bot.
Your rights
You have the right to:
- Access. Get a copy of the personal data we hold about you.
- Rectification. Have inaccurate data corrected.
- Erasure. Have your data deleted. Closing your account removes your identifying details and permanently replaces your pseudonym. If you ask, we also remove your posts.
- Restriction. Ask us to limit how we use your data while a concern is looked into.
- Portability. Receive the data you gave us, including your posts, in a commonly used machine-readable format.
- Object. Object to any use based on legitimate interests. We will stop unless we have compelling grounds that override your interests, or need the data for a legal claim.
- Withdraw consent. Withdraw consent for cookies or health information at any time, without affecting what was done before.
- Complain. Complain to a data protection authority. In the EU, that is the authority in the country where you live or work, or where you think the problem happened. In the UK, it is the Information Commissioner's Office. We'd appreciate the chance to fix the problem first, but you don't have to contact us before complaining.
Who receives your data
Our service providers (hosting, network and security, email delivery, and Google Analytics, Microsoft Clarity and Yandex Metrica if you consent) and, in limited cases, authorities or emergency services. The privacy policy lists them in section 8.
How to use your rights
Email contact@uroanswers.org and say which right you want to use. To protect your account, we will ask you to confirm the request from the email address linked to it. We will respond within one month. If a request is complex, we may extend that by up to two further months, and we will tell you why within the first month. Requests are free unless they are clearly unfounded or excessive.
International transfers
Some of our service providers may process data outside the European Economic Area and the United Kingdom. Where a provider participates in the EU-US Data Privacy Framework (and its UK Extension) or has adopted standard contractual clauses approved by the European Commission and the UK, we rely on that safeguard. For a provider where we have not yet confirmed which safeguard applies, we are reviewing the arrangement. You can ask us for details of the safeguard that applies to a particular provider.
Is giving us your data required?
You don't need to give us anything to read the site. To post, you need to give an email address and a pseudonym, and accept the terms. Without them we can't create an account.
How long we keep it
Retention periods for each type of data are set out in our privacy policy.
Changes
If we change how we handle data from Europe, we will update this page and the date at the top, and tell registered members about significant changes before they take effect.