Privacy Policy

We take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with statutory data protection regulations (GDPR, BDSG) and this privacy policy.

Information on the processing of your data in the context of your medical care — in particular the full list of recipients and the retention periods — can be found in our patient data protection information.

1. Controller

Zentrum für klinische Forschung
Berliner Straße 895, 51069 Köln-Dünnwald
E-mail:

2. Access data / server logs

When this website is accessed, technical access data is stored in server logs (IP address, date, time, requested URL, referrer, user agent). The legal basis is Art. 6(1)(f) GDPR (legitimate interest in stability and security). Logs are deleted after 14 days.

3. Contact form

When you send us enquiries via the contact form, your details — including the contact information you provide — are stored solely for the purpose of processing your enquiry. Legal basis: Art. 6(1)(b) GDPR. The data will not be passed on without your consent.

4. Cloudflare Turnstile

To prevent spam submissions we use the anti-bot service "Turnstile" provided by Cloudflare, Inc. Cloudflare does not process personal tracking data. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in spam prevention).

5. Clinical studies

The processing of personal data in the context of study participation takes place exclusively on the basis of your separate, written consent pursuant to Art. 6(1)(a) and Art. 9(2)(a) GDPR. The study-specific data protection notices will be provided to you during the informed consent process and before the study begins.

6. Audience measurement (Umami)

We use Umami, an open-source, privacy-friendly analytics tool, to see how often pages are visited and which sources visitors come from. Umami runs on our own server within the EU — the data never leaves our infrastructure; no data is transferred to third parties and in particular no data is transferred to the USA. Umami works without cookies and without persistent identification: your IP address is not stored; it is only used briefly (hashed with a daily rotating salt) to recognise the visit history of a single day. Only aggregated metrics are collected (page visited, approximate location at city level, browser, screen resolution); tracking across days or across websites is technically impossible. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in privacy-friendly audience measurement); as no cookies are set and no profile is created, no consent is required. Your browser's Do-Not-Track signal is respected.

7. Your rights

You have the right at any time to request information, correction, deletion, restriction of processing, data portability and to object to processing. Complaints may be lodged with the supervisory authority (Landesbeauftragte für Datenschutz und Informationsfreiheit NRW — State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia).

8. SSL encryption

For security reasons this site uses SSL encryption. You can recognise an encrypted connection by the fact that the browser address bar changes from "http://" to "https://".