Privacy policy

This is a non-binding courtesy translation. Only the German version is legally binding: read the German original.

1. Data protection at a glance

General information

The following notes give you a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be identified personally.

Data collection on this website

Data on this website is processed by the website operator. You can find their contact details in the legal notice.

2. Hosting

This website is hosted by Hetzner Online GmbH. Please refer to that provider's privacy policy for details.

We use this host on the basis of Art. 6 (1)(f) GDPR. We have a legitimate interest in presenting our website as reliably as possible.

3. General information and mandatory disclosures

Data protection

The operators of this site take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

Controller

The controller responsible for data processing on this website is:

Johannes Müller
Simone-Veil-Straße 30
53121 Bonn
Germany
Email: [email protected]

4. Data collection on this website

Cookies

Our website uses cookies. Some of these are technically necessary, others are only set once you have given your consent (analytics cookies).

You can adjust your cookie settings at any time via the cookie banner. Technically necessary cookies are stored on the basis of Art. 6 (1)(f) GDPR. Analytics cookies are only set with your consent (Art. 6 (1)(a) GDPR).

Language selection (the “st_lang” cookie)

This website is offered in German and English. If you open the home page without specifying a language, we redirect you to the matching language version based on the language setting your browser sends (the Accept-Language header). This is evaluated only while serving the request; the header itself is not stored.

If you actively choose a language using the language selector in the navigation, we store that choice in a cookie named st_lang. It contains nothing but the code of the chosen language (“de” or “en”), has a lifetime of one year and does not allow any conclusions to be drawn about you personally. The legal basis is Art. 6 (1)(f) GDPR; our legitimate interest is to serve you the website in the language you selected on every visit. You can delete the cookie at any time in your browser settings.

Server log files

The provider of these pages automatically collects and stores information in what are known as server log files, which your browser transmits to us automatically. These are:

Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address

This data is not merged with other data sources. It is collected on the basis of Art. 6 (1)(f) GDPR.

5. Analytics tools and advertising

Google Analytics 4

This website uses features of the web analytics service Google Analytics 4, a service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses so-called “cookies”. These are text files stored on your computer that allow an analysis of how you use the website.

Purpose of processing: We use Google Analytics to analyse how our website is used, so that we can improve it and make it more user-friendly. Specifically, we record:

Page views and time on page
Clicks on app download buttons (as the event app_download_click)
Interest in the premium subscription (as the event premium_interest)
Interaction with FAQ elements (as the event faq_expand)
Scroll depth (as the event scroll_depth)

Legal basis: Google Analytics is used exclusively with your consent under Art. 6 (1)(a) GDPR. You can withdraw your consent at any time via the cookie banner.

Google Consent Mode v2: We use Google Consent Mode v2. This means Google Analytics only starts collecting data once you have actively agreed via the cookie banner. Without your consent, no analytics data is transferred to Google.

IP anonymisation: We have enabled IP anonymisation. Your IP address is truncated by Google within member states of the European Union.

Opt-out: You can prevent collection by Google Analytics by:

Choosing “Decline” in the cookie banner
Installing the browser add-on that disables Google Analytics: https://tools.google.com/dlpage/gaoptout

You can find more information on how Google Analytics handles user data in Google's privacy policy.

6. Your rights

You have the right at any time:

To obtain information about the personal data we hold about you (Art. 15 GDPR)
To request the rectification of incorrect data (Art. 16 GDPR)
To request the erasure of your data (Art. 17 GDPR)
To request the restriction of processing (Art. 18 GDPR)
To request data portability (Art. 20 GDPR)
To object to the processing (Art. 21 GDPR)
To withdraw consent you have given (Art. 7 (3) GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.

7. The PainTrack iOS app

The PainTrack iOS app stores all health data (pain definitions, entries, notes and tags) encrypted and exclusively on your own device. The app requires neither a user account nor a server; no health data is transferred to us or to any third party. You can optionally lock the app with Face ID or Touch ID. The app's privacy terms are available inside the app and on the Apple App Store.