Privacy policy

This page explains which personal data is processed when you visit this website, and what rights you have.

In short: the site sets no cookies, uses no analytics or tracking, and loads no fonts or scripts from other companies, unless you start one of the YouTube videos on the Join us page yourself. To show it to you, your browser has to contact two services: Cloudflare, which hosts the site, and Sanity, which stores its movies and images.

Who is responsible

The controller under the EU General Data Protection Regulation (GDPR) is:

Jakub Sędziński
Max-Planck-Zentrum für Physik und Medizin
Kussmaulallee 2
91054 Erlangen
Germany
Email: jakub.sedzinski@mpzpm.mpg.de

Hosting by Cloudflare

This website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you open a page, your browser sends Cloudflare the technical data that every website receives: your IP address, the date and time, the page requested, the page you came from, and your browser and operating system. Cloudflare uses this data on our behalf to deliver the site and to protect it against attacks, and keeps it only as long as these purposes require.

Legal basis: our legitimate interest in delivering the site securely and reliably (Art. 6(1)(f) GDPR).

Cloudflare may process this data in the USA. It is certified under the EU–US Data Privacy Framework, which the European Commission recognises as giving adequate protection (Art. 45 GDPR), and it also uses the EU Standard Contractual Clauses. More in Cloudflare’s privacy policy: https://www.cloudflare.com/privacypolicy/

Movies and images from Sanity

The lab edits this site with Sanity, a content management system. The movies, pictures and portraits on the site are stored there, and your browser loads them directly from Sanity’s content delivery network (cdn.sanity.io). Sanity therefore also receives your IP address and the technical data listed above. Sanity is run by Sanity AS (Oslo, Norway) and Sanity US Inc. (USA) on Google Cloud. According to Sanity, it deletes or anonymises request logs within 90 days, and it transfers data outside the European Economic Area under the EU Standard Contractual Clauses.

Legal basis: our legitimate interest in showing the lab’s movies and images reliably (Art. 6(1)(f) GDPR). More in Sanity’s privacy policy: https://www.sanity.io/legal/privacy

Videos from YouTube

The Join us page shows videos and recorded talks from YouTube. Until you press play, each is only a still picture stored on this site, and your browser does not contact YouTube. When you press play, the video loads from YouTube in its privacy-enhanced mode (youtube-nocookie.com). From then on, YouTube, run in the EU by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, receives your IP address and the technical data listed above. It may store information on your device and link what you watch to a Google account you are signed in to.

Legal basis: your consent, which you give by pressing play (Art. 6(1)(a) GDPR, and § 25(1) TDDDG for information stored on your device). You can withdraw it at any time for the future by leaving or reloading the page, which stops the player.

Google may process this data in the USA. Google LLC is certified under the EU–US Data Privacy Framework (Art. 45 GDPR). More in Google’s privacy policy: https://policies.google.com/privacy

Fonts

The typeface is delivered with the site itself. Your browser does not contact Google or any other font service.

No cookies or tracking

This site sets no cookies and uses no analytics, tracking, advertising or social media plugins. Only a YouTube video you start yourself may store information on your device (see above).

Email

If you email us, we use your address and message only to deal with your request. Legal basis: Art. 6(1)(b) GDPR if your message is about a position, a collaboration or another agreement with the lab; otherwise our legitimate interest in answering you (Art. 6(1)(f) GDPR). We delete the correspondence when it is no longer needed, unless the law requires us to keep it.

Links to other websites

Links to journals, preprint servers, ORCID and other websites take you to services we do not control. Their own privacy policies apply once you follow a link.

Your rights

You have the right to:

• find out which personal data we hold about you (Art. 15 GDPR);
• have it corrected (Art. 16 GDPR) or deleted (Art. 17 GDPR);
• have its processing restricted (Art. 18 GDPR);
• receive it in a common, machine-readable format (Art. 20 GDPR);
• object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests (Art. 21 GDPR).

To use these rights, email us at jakub.sedzinski@mpzpm.mpg.de. You can also complain to a data protection supervisory authority (Art. 77 GDPR), in particular in the EU country where you live or work, or where you believe the infringement took place.

Do you have to provide data?

Your browser has to send the technical data described above for the site to load. Beyond that, you do not have to give us any personal data. We make no automated decisions about you, including profiling.

Changes

We update this page when the site or the law changes. The date at the top shows the current version.