2026-06-05 — Cookie policy: live-chat disclosure
v1.1.0
- Cookie policy extended to cover the HubSpot live chat now offered on selected country/language pages of doctena.com.
- Added a Functional cookie category and a live-chat cookie register (messagesUtk, hs-messages-* and the HubSpot analytics cookies the chat loads) — all gated behind CookieFirst functional consent.
- Documented that the chat keeps some state in browser local/session storage (__hmpl, hublytics_events), which are not cookies.
- Sub-processor register: the HubSpot entry now covers website visitors via the live chat, alongside practitioner CRM data.
2026-05-15 — Trust Center launch
v1.0.0
- New trust.doctena.com replaces the locale-prefixed compliance pages on doctena.com.
- Privacy policy updated to v3.0.0 with full retention table, Article 6 + Article 9 legal-bases matrix, sub-processor cross-link.
- GDPR programme page (v2.0.0) with full role model, per-country supervisory authority routing, and DPO certificate renewal status.
- ISO/IEC 27001:2022 page with scope, Statement of Applicability v1.0, Annex A controls and audit cadence.
- Data Processing Agreement v2.0.0 (effective 1 February 2026) — DPA hub published.
- Sub-processor register reset against the Asana Suppliers Register (28 patient/customer-facing entries; 4 decommissioned removed).
- New DPO page — canonical address Dircksenstraße 51, 10178 Berlin (the doctena.com /gdpr/ centre had the stale Meinekestraße 13).
- New /cookies page with full register and live-banner re-open button.
- New /security/responsible-disclosure with CVSS-based SLA table, security.txt and safe-harbour language.
- New /complaints, /data-subject-rights, /legal/imprint, /legal/terms, /dsa, /ai, /accessibility, /status, /transparency.
- Imprint reconciled — single set of canonical addresses replaces the three Luxembourg and two Switzerland variants in the wild.