← Back to home

Privacy Policy

Note: This is a machine translation provided for your convenience. The legally binding version is the German one.

Protecting your data is important to us. This website is deliberately designed to be data-efficient: no cookies, no advertising, no sharing with third parties. Fonts and scripts are loaded exclusively from our own server. For anonymous reach measurement, we use a self-hosted, cookieless statistics tool (Umami) — the data remains on our server.

1. Controller

Ina Hoffmann
Augustinergasse 1, 35037 Marburg
Email: service@marburger-ki.de

2. Hosting & Server Log Files

This website is operated on a server of Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen) in Germany; a data processing agreement (Art. 28 GDPR) is in place with Hetzner. When you access the site, technically necessary access data is stored in server log files:

  • page/file accessed and time of access
  • amount of data transferred and status message on successful retrieval
  • browser type and operating system used
  • IP address

The legal basis is our legitimate interest in the secure and stable operation of the site (Art. 6 para. 1 lit. f GDPR). Log data is stored only for as long as is necessary for these purposes and is then deleted.

3. Encryption

The website is delivered exclusively encrypted via HTTPS (TLS). Your connection to us is thus protected against eavesdropping.

4. Contact by Email

If you contact us by email, we process your details exclusively to handle your inquiry (Art. 6 para. 1 lit. b or f GDPR). The data is deleted as soon as it is no longer required and no statutory retention obligations stand in the way.

5. AI Chatbot

On our website, you can use an AI chatbot. It answers questions about our services and can arrange a free initial consultation. Use is voluntary; before the conversation begins, a notice window informs you that you are interacting with an AI and not a human.

Purpose and legal basis. We process your inputs to answer your questions (Art. 6 para. 1 lit. f GDPR — legitimate interest in providing up-to-date consulting). If you book an appointment via the chatbot, we process your name and email address to carry out this pre-contractual measure (Art. 6 para. 1 lit. b GDPR).

Transfer to a third country. For the responses, we use the language model of a specialized provider based outside the European Union. Your messages are transferred there. There is no adequacy decision by the European Commission for this country pursuant to Art. 45 GDPR; a level of data protection equivalent to European law can therefore not be guaranteed. Upon request, we will name the provider used.

Protective measure. Before transfer, we automatically replace identifiable personal data with placeholders: email addresses, phone numbers, and names, insofar as they are recognizable as such. This recognition works with text patterns and cannot cover every case — a name in the middle of running text may not be recognized. Please therefore do not enter any sensitive data or information about other persons in the chat.

Storage duration. The conversation history is deleted as soon as you close the chat window or leave the page. If this notification does not reach us technically — for example, because the browser was closed unexpectedly — the following applies: After 30 minutes of inactivity, the chat is deleted during the next cleanup run; this runs every five minutes. Only anonymous usage figures without conversation content remain. If you have booked an appointment or sent an inquiry via the chatbot, this data is unaffected; it is deleted as soon as it is no longer required.

No storage on your device. The chatbot does not set cookies and stores nothing in your browser.

6. Cookies and Reach Measurement

We do not use cookies or advertising networks. To improve our offering, we collect anonymous usage statistics with Umami — a data-efficient analytics software that we operate ourselves on our own server (stats.marburger-ki-schmiede.com). The following applies:

  • No cookies are set and no data is stored on your device.
  • No IP addresses are stored permanently and no personal profiles are created.
  • Only aggregated information is collected, such as pages accessed, approximate region of origin, referring source, and browser and device type.

The legal basis is our legitimate interest in designing our website to meet user needs (Art. 6 para. 1 lit. f GDPR). Since no cookies or comparable technologies are used, no separate consent is required. You may object to reach measurement at any time with effect for the future.

7. Your Rights

You have the right at any time to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object (Art. 21) to the processing. To exercise these rights, please contact us at the address above.

You also have the right to lodge a complaint with a data protection supervisory authority — in Hesse: The Hessian Commissioner for Data Protection and Freedom of Information.

8. Embedded YouTube Videos

On the "YouTube" page, we embed videos in enhanced privacy mode (youtube-nocookie.com). A video is loaded only after a click — before that, no data is transmitted to YouTube. Only upon clicking do you establish a connection to servers of Google Ireland Ltd.; data such as your IP address may be processed in the process. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR).