Privacy Policy
1. General Information
We take the protection of your personal data very seriously. This Privacy Policy explains what personal data we collect, how we process it, and which rights you have under the GDPR.
2. Controller
The controller responsible for data processing on this website is:
University of Leipzig
Faculty of Medicine
04109 Leipzig
Germany
Responsible operating unit:
Department of Cardiology – Boeckel Lab
Max-Bürger Research Center (MBFZ)
Johannisallee 30
04103 Leipzig
Germany
Contact for website inquiries: contact@boeckel-lab.com
3. Data Protection Officer
Ronald Speer
University of Leipzig – Faculty of Medicine
Philipp-Rosenthal-Straße 27
04103 Leipzig
Germany
Phone: +49 341 97 16105
Email: dsbmf@medizin.uni-leipzig.de
4. Data Collection and Processing
4.1 Server Log Files
When you access our website, the server automatically collects:
- Browser type and version
- Operating system
- Referrer URL
- Hostname of the device
- Date and time of request
- IP address (anonymized when possible)
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation).
5. Contact Form
If you contact us via the contact form, we process:
- Name
- Email address
- Message
Processing is carried out solely to handle your inquiry (Art. 6(1)(b) GDPR).
Form data is sent to contact@boeckel-lab.com and not stored on the server unless explicitly enabled.
6. Google reCAPTCHA
We use Google reCAPTCHA v3 to protect the website from spam and misuse.
Provider: Google Ireland Limited.
Data that may be processed:
- Behavioral analysis
- Browser and device information
- Time spent on page
- Mouse movement patterns
Legal basis: Art. 6(1)(f) GDPR.
Google Privacy Policy: https://policies.google.com/privacy
7. Cookies & Consent Management
Necessary Cookies
Required for the operation of essential website functions.
Legal basis: Art. 6(1)(f) GDPR.
Google Maps Cookies
Loaded only on the basis of user consent (Art. 6(1)(a) GDPR).
Real Cookie Banner
We use Real Cookie Banner to manage consents for cookies and similar technologies.
Details: https://devowl.io/rcb/data-processing/
Legal basis:
- Art. 6(1)(c) GDPR (legal obligation)
- Art. 6(1)(f) GDPR (legitimate interest in proper consent management)
8. Embedded Content (Google Maps)
When the map is displayed, Google may process:
- IP address
- Browser/device information
- Time of access
Legal basis: Art. 6(1)(a) GDPR.
9. External Links
Links to external scientific platforms are subject to the respective providers’ privacy policies.
10. Your Rights
Under the GDPR, you have the right to:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object (Art. 21 GDPR)
- Lodge a complaint with a supervisory authority
11. Data Security
We use SSL/TLS encryption for secure data transmission.
12. Changes
This policy may be updated as necessary.
Last updated: 24 November 2025