Controller
Tilman Finley Winter, Ausbau 1, 19300 Milow, Germany, email: tilman@synaptiklabs.org
In brief
This site sets no cookies, uses no analytics or tracking tools and loads no external fonts or scripts. All fonts, images and scripts are served from the same server.
Hosting and server log files
The website is hosted on Cloudflare Pages. When you visit, Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) processes technically necessary data: IP address, date and time, the address requested and your browser identifier (user agent). The purpose is to deliver the website securely and reliably, including protection against attacks; the legal basis is my legitimate interest (Art. 6(1)(f) GDPR). Cloudflare processes this data on my behalf (Art. 28 GDPR). Cloudflare does not state a fixed retention period for these logs; they are kept only as long as needed to operate and secure the service. Data may be transferred to the US in the process. Cloudflare is certified under the EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR) and additionally relies on standard contractual clauses. I do not use Cloudflare Web Analytics or cookies.
Storage in your browser
This website stores no data in your browser: no cookies, no localStorage, no sessionStorage. The language is determined by the address (/de/… or /en/…).
Newsletter
The website itself does not store anything you enter. Submitting simply opens your own email app with a pre-filled message. If you send that email, I will store your address solely to notify you when the newsletter launches. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by email (Art. 7(3) GDPR), after which I will delete your address.
Contact by email
If you write to me, I process your details to answer your inquiry (Art. 6(1)(b) GDPR for inquiries about working together, otherwise point (f)). I delete messages once they have been dealt with and no statutory retention obligations apply. My mailbox (tilman@synaptiklabs.org) runs on Google Workspace (Google Cloud EMEA Limited, Ireland); this may involve a transfer to the US based on the EU-US Data Privacy Framework. Below the forms there is also an “Open in Gmail” button: it passes the subject and text to Google (Gmail) only when you click it; without a click nothing is transferred.
External links
Links to scientific articles (doi.org, PubMed, publishers) and to LinkedIn, YouTube, Instagram and TikTok lead to external websites. Nothing from those sites is embedded here, so no data is transferred unless you click. Their privacy policies apply only once you click.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future. You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the German state where you live.