While answering the questions
Your choices initially remain in the memory of the open view. Answers are not stored in analytics tools or browser storage. Leaving or reloading discards answers that have not been saved. The PDF preview is initially created locally too.
Automatic code, QR and PDF
After a complete round, your code and QR are created automatically on your device. The personal link contains your choices in encrypted form in the URL fragment after the # symbol. This fragment is not sent to the server when the page opens. The full link also contains the necessary key: anyone who has it can open your answers. Share the PDF and QR only deliberately. Preview and download require neither contact details nor submission of your answers to HPA.
When you submit your dossier to HPA
With your express consent, we store your sport, adult status, selection of man or woman, chosen answers and personal wishes. These may reveal health-related interests. We also store the dossier code, access verification value, timestamp, expiry date and consent version. The purpose is to identify your dossier later without filling it in again. Storage is a separate, voluntary decision and is not required to download the PDF.
If you would like a recommendation
Only a separate request adds your email address or mobile number, chosen delivery method and express contact preference. HPA can review your answers personally using the code. Requests are stored for personal processing. The contact verification you request is sent automatically; your personal recommendation is prepared individually.
Verifying your mobile number
We use Descope to send the SMS verification link you request. This involves processing your mobile number and technical verification data. Your dossier answers, health-related interests and contact preferences are not shared with Descope. The link can be used once and is valid for ten minutes. Verifying your mobile number does not replace a personal identity check.
Descope privacy notice
Our contact commitment to you
Unless you make an additional selection, you receive only the recommendation requested. No advertising, calls or follow-ups.
SMS is used solely to verify your contact method. Do not include your answers in the text message. Any further contact requires your separate opt-in.
Access & retention period
The local QR access can be used on this website for 180 days from creation. A copy voluntarily stored with HPA is available for 180 days from storage. Access is then blocked; expired records are cleared the next time the dossier service is accessed. You can delete the copy stored with HPA and the contact request earlier through your personal QR link. The downloaded PDF and the local answers it contains remain with you; server-side deletion does not remove them from your file.
The QR link is a personal access key: anyone who has it can open your dossier. The printed code alone does not allow online access. Only a verification value of the access key is stored on the server.
Technical processing
The website is operated by Linevast in Germany. Your authorised dossier data is stored with server-side encryption. Once you authorise it, the stored copy is processed on the server; it is not end-to-end encrypted. Authorised HPA representatives and technical providers necessary for operation may require access. Storage exclusively in Monaco or the EU is not guaranteed.
Technical hosting access data must be considered separately from your selected answers. The dossier contains no clinical findings, medicine lists, treatment photographs or exact travel plans.