Privacy Policy

The protection of your personal data is very important to D4L data4life gGmbH (in the following “Data4life”, “we”, “our” and “us”). We treat this topic with a great deal of care and therefore inform you in the following about the handling of your personal data when visiting our website d4l.io.

Personal data means any information relating to an identified or identifiable natural person, such as name, address and email address.

1. Controller and data protection officer

The responsible controller according to Art. 4 para. 7 of the General Data Protection Regulation (GDPR) is D4L data4life gGmbH, c/o Digital Health Cluster (DHC) im Hasso-Plattner-Institut (HPI), Rudolf-Breitscheid-Straße 187, 14482 Potsdam, Germany, we@data4life.help.

You can reach our data protection officer at dataprotection@data4life.help or our postal address by writing to the attention of "The data protection officer".

2. Purpose and legal basis for the processing of personal data

a. When visiting our website

When you visit the website d4l.io, the following data is automatically transferred to our server:

  • IP address of the device used for the retrieval
  • Web address (URL) of the page from which the file was requested (referrer)
  • Date and time of the request
  • Amount of data transmitted
  • Description of the type of web browser used

The processing of this data, which contains a (pseudonymized) personal reference via the IP address, is technically necessary and is carried out in order to provide you with the Data4Life offering. The legal basis for the aforementioned processing is Art. 6 para. 1 sentence 1 lit. b GDPR (processing is necessary for the fulfillment of a contract with the data subject).

b. Support/Contact

When you contact us through one of our contact options, for example, email, post, or telephone, we process the data you provide (for example your email address and the content of your enquiry) necessary for us to answer your question. If your enquiry contains optional personal data, e.g. your name, we will process that data in order to provide improved support. The legal basis for this collection of data is Art. 6 para. 1 sentence 1 lit. b GDPR (processing is necessary for the fulfillment of a contract with the data subject) when we are in the process of entering into or already have a contractual relationship. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR (processing is necessary to safeguard the legitimate interests of the controller) if we do not have or do not plan a contractual relationship, e.g., when the contact is of a general nature. Our legitimate interest in the latter case is to answer your inquiry by providing appropriate and useful information.

We anonymize the data arising in this context after the storage is no longer necessary (usually four weeks after we fully answered your request), or restrict the processing if there are legal storage obligations. The legal basis for the processing described above is Art. 6 para. 1 sentence 1 lit. f GDPR (processing is necessary to safeguard the legitimate interests of the controller). Data4Life has a legitimate interest in collecting key performance indicators as part of a quality management system for continuous improvement of the services offered. For this purpose, we systematically evaluate the number of contacts and the reasons for them, the processing time of inquiries and other key figures.

3. Recipients or categories of recipients

For the purpose of providing the necessary server infrastructure to run our website and enabling faster loading speeds of our website we use the service IONOS Deploy Now from IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. We have concluded a data processing agreement pursuant to Art. 28 para. 3 GDPR with IONOS.

For the purpose of facilitating email communication for general requests and communication through the email address we@data4life.help and contacting you regarding your contact information and content data, for example, email contents, are disclosed to our email service provider Heinlein Hosting GmbH, Schwedter Straße 9a, 10119 Berlin, Germany. We have concluded a data processing agreement pursuant to Art. 28 para. 3 GDPR with Heinlein Hosting.

For the purpose of managing contact and support requests we disclose the contact information and email content to our processor Zammad GmbH, Marienstraße 18, 10117 Berlin, Germany. We have concluded a data processing agreement pursuant to Art. 28 para. 3 GDPR with Zammad.

We regularly audit our processors on the level of protection provided by the standard contractual clauses and, if necessary, take additional measures to ensure an appropriate level of protection.

In all of the above mentioned cases, D4L data4life gGmbH remains responsible for the processing of personal data.

4. Use of cookies

When you use the Data4Life offer via our website, we use cookies. Cookies are small text files that are stored on your end device (laptop, tablet, smartphone or similar) when you use our web app.

a) Cookies necessary for the website functionality

We use technically necessary cookies to provide basic functionalities of the website. In the following, for the sake of uniformity, we refer to cookies when other cookie-like technologies are used, such as the storage of data as a "local storage item" in the browser. The purpose of using these cookies necessary for the operation of the website is to simplify the website usage for users. Some functions of our website cannot be offered without the use of cookies. Technically necessary cookies do not collect information about you for marketing purposes. The legal basis for the processing of data from technically necessary cookies is Section 25 para. 2 no. 2 of the “Telecommunications and Telemedia Data Protection Act” (TTDSG) in conjunction with Art. 6 para. 1 sentence 1 lit. f GDPR (processing is necessary to safeguard the legitimate interests of the controller) based on our legitimate interest in a user-friendly design of our web app.

We require cookies to provide the following functions:

  • Saving cookie preferences
  • Correct display of the top banner

b) Cookies not necessary for the website functionality In addition, Data4Life uses cookies to improve the offers of our website on the basis of statistical evaluations and to be able to identify occurring errors. The legal basis for this processing is in each case your consent pursuant to Section 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 sentence 1 lit. a GDPR (processing based on the consent of the data subject).

5. Analysis of user behavior and troubleshooting

a. Use of Matomo for analytics purposes

With your consent, we use the technology of the provider Matomo in our web offer for analysis purposes. Matomo uses cookies that enable the recognition of your browser and an analysis of your use of our web app as well as your interaction with our service, for example, which parts/functionalities you view and use. The following data is collected by Matomo if you consent to the analysis:

  • Page views
  • Mouse clicks
  • Movements of the mouse
  • Current position of the cursor
  • Scrolling
  • Changes in window size
  • Zoom on mobile devices (smartphone, tablet)
  • Change of website within our domain, e.g. pop-up windows
  • IP address

Your IP address is anonymized immediately after processing and before storage. The data collected using Matomo technology is processed exclusively on servers in Germany by Data4Life. The listed usage analysis of our products helps us to continuously optimize our products and improve your experience when using our website. The mentioned personal data is deleted two years after its collection.

If you have set the "Do Not Track" setting in your browser, our website will be signaled that it should not create a usage profile about the visitor's activities. In this case, no tracking cookies are created either.

The legal basis for the use of Matomo is your consent (Art. 6 para. 1 sentence 1 lit. a GDPR). You can revoke your consent at any time with effect for the future under section 4 c.

b. Error reporting using Sentry

In order to understand the source and causes of potential errors and crashes in our services, to gain the knowledge necessary to reproduce and resolve such crashes, and to provide our users with the best possible experience when using our services, we use, with your consent, Sentry, which enables us to track errors in real time. In this context, and if you discover a bug or crash in our website, user data, such as information about the device you are using and the time at which the bug or crash occurred will be collected and analyzed solely for the purpose of identifying the bug or crash and resolving it, and not for any other purpose, and then deleted once the bug or crash has been resolved. The data collected with the Sentry technology is processed exclusively on Data4Llife servers in Germany. Personal data collected through Sentry is deleted 90 days after its collection.

The legal basis for the use of Sentry is your consent (Art. 6 para. 1 sentence 1 lit. a GDPR). You can revoke your consent at any time with effect for the future under section 4 c.

c. Withdrawing or granting consent for cookies, usage analytics and error reporting

You can revoke or give your consent for the use of optional cookies as well as Matomo and Sentry at any time with effect for the future. To change your consent settings, click the button below.

Current setting: Consent for cookies, bug reports & usage analysis is granted Do-not-track

Note: Withdrawing the consent does not delete cookies that have been previously set. You can delete existing cookies at any time in your browser settings.

6. Online platforms

To communicate with interested parties and to provide information about our products and services, we use the following online platforms: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. The responsible party for the data processing of users located in the European Union, is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. GitHub Inc., 88 Colin P Kelly Jr St, San Francisco, CA 94107, USA. The responsible party for the data processing of users located in the European Union is GitHub BV, Vijzelstraat 68-72, 1017 HL Amsterdam, The Netherlands.

We would like to point out that you use the services offered by the online platforms and its functions under your own responsibility. This applies in particular to the use of the interactive functions (e.g. sharing, rating).

The extent of the processing of personal data depends on the online platform. We have no control over the type and scope of the data processed by the platforms, the way in which it is processed and used, or the transfer of this data to third parties. We also have no effective control possibilities in this respect. The details about the collection and storage as well as the type, scope and purpose of the use of your data can be found in the respective privacy statement: Twitter: https://twitter.com/de/privacy GitHub: https://docs.github.com/en/site-policy/privacy-policies/github-privacy-statement

We do not collect and store any data from your use of the service. However, as the operator of an online platform, we process the content you share on our site. The data you enter, in particular your username and the content published under your account, will be processed by us. The data freely published and disseminated by you on the online platform is thus included in our offer and made accessible to our followers.

We would like to point out that you should generally not share sensitive personal data, e.g. health data, through online services, especially social media sites, as this simultaneously involves a transfer of the data to the respective social media platforms and the data may be transferred to unsafe third countries outside the European Union. The purposes of processing your profile and content data on online platforms are the external presentation of Data4life and the provision of a contact opportunity with customers, partners and interested persons who want to learn more about Data4Life. The legal basis for the described processing activity is Art. 6 para. 1 sentence 1 lit. f GDPR (processing is necessary to protect the legitimate interests of the controller). Our legitimate interest is to improve the user experience of our online service sites.

Insofar as we receive your personal data through online platforms, you are entitled to the rights stated in this data protection notice. If you also wish to assert your rights against the online platform, the easiest way to do this is to contact the operator directly. The operator knows both the details of the technical operation of the platform and the associated data processing as well as the specific purposes of the data processing and can implement appropriate measures upon request if you exercise your rights. We will be happy to support you in asserting your rights, insofar as this is possible for us, and forward your requests to the operator of the online platform.

7. Your rights

You have the following rights with regard to personal data related to you:

  • Right of access (Art. 15 GDPR),
  • Right to rectification (Art. 16 GDPR),
  • Right to erasure (Art. 17 GDPR, “right to be forgotten”),
  • Right to restriction of processing (Art. 18 GDPR),
  • Right to object to processing (Art. 21 GDPR),
  • Right to data portability (Art. 20 GDPR).

You also have the right to complain to a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement if you consider that the processing of personal data related to you is unlawful. The supervisory authority responsible for us is:

Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Stahnsdorfer Damm 77 14532 Kleinmachnow Germany

Telephone: 0049 (0)33203/356-0 Telefax: 0049 (0)33203/356-49 Email: poststelle@lda.brandenburg.de

If you have given us consent to the processing of your data, you can revoke it at any time with effect for the future. The lawfulness of processing your data until revocation remains unaffected by this. For the assertion of your rights or if you have any other data protection concerns, you can contact us at any time via the contact details listed in section 1 above and/or in our imprint.

8. Additional information on your right of objection

Please note that if your personal data is processed on the basis of a legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR and/or if your personal data is processed for the purposes of direct marketing, you have the right to object to the processing of your personal data at any time.

Last updated: April 2023

With your consent, we will analyze your behavior on our website (d4l.io) to improve our offering for all users. If you consent to the transmission of analysis data, click “Accept”. You can withdraw your consent at any time in the privacy policy. More info: privacy policy).