Medformatik
Home

§ Privacy

Privacy Policy.

Introduction

I take the protection of your personal data very seriously. This privacy policy informs you about how I collect and process personal data when you visit this website.

Data Controller

The following person is responsible for data processing on this website:

// Data controller information

Responsible
Florian Rachmann
Address
Florian Rachmann Bergstraße 25 52062 Aachen Germany

Data Collection and Processing

When you visit this website, I collect and process only the minimum amount of personal data necessary for the operation of the website.

Server Logs

When you access this website, my web server automatically collects and temporarily stores certain technical information in server log files. This includes your IP address, the date and time of your request, the pages you visit, the referring website, your browser type and version, and your operating system. This data is necessary for the technical delivery of the website to your browser. The IP address and the rest of the log entry are automatically deleted after 7 days and are not combined with other data.

Contact Form and Email Communication

If you use the contact form on this website or contact me via email, I will collect and process the personal data you provide (such as your name, email address, and the content of your message) solely for the purpose of responding to your inquiry. This information is transmitted via encrypted connection and stored securely. I will retain this information only as long as necessary to complete our communication or to fulfill any legal obligations. You are not obligated to provide this information, but without it, I may not be able to respond to your inquiry.

Purpose of Data Processing

I process the data collected in server logs solely for the purpose of ensuring the functionality and security of the website, as well as for technical administration. Data provided through the contact form or email is processed exclusively to respond to your inquiry. This data is not used for marketing, profiling, or any other purposes.

Legal Basis for Processing

The legal basis for processing the server log data is Article 6(1)(f) of the General Data Protection Regulation (GDPR), which allows processing that is necessary for the purposes of the legitimate interests pursued by the controller. My legitimate interest is to ensure the proper functioning and security of my website. For data submitted through the contact form or email, the legal basis for processing is Article 6(1)(b) GDPR (processing necessary for the performance of a contract or in order to take steps at the request of the data subject prior to entering into a contract) and/or Article 6(1)(f) GDPR (legitimate interests).

Data Retention Period

The server logs containing your IP address are automatically deleted or anonymized after 7 days. This period is necessary to detect and prevent potential security incidents. Data provided through the contact form or email will be stored for as long as necessary to respond to your inquiry and for any follow-up questions, or as required by law. If no ongoing communication or legal obligation exists, this data will typically be deleted after 6 months.

Cookies and Tracking

This website does not use cookies, tracking tools, or analytics services. I do not collect any data about your browsing behavior beyond what is necessary for the technical delivery of the website. A single technical preference — your chosen colour theme (light or dark) — is stored locally in your browser via localStorage. This preference never leaves your device.

Third-Party Services

This website is self-hosted and does not use third-party services for content delivery, analytics, or other purposes. Your data is not shared with any third parties.

Your Rights

Under the General Data Protection Regulation (GDPR), you have several rights concerning the processing of your personal data. These rights are designed to give you greater control over your personal information. Below is a detailed explanation of each right you can exercise:

Right of Access (Art. 15 GDPR)

You have the right to obtain confirmation as to whether personal data concerning you is being processed, and, where that is the case, access to that personal data. You can request information about the purposes of processing, the categories of personal data concerned, the recipients to whom the data has been or will be disclosed, the envisaged period of storage, the existence of the right to request rectification or erasure of data or restriction of processing, and the right to lodge a complaint with a supervisory authority.

Right to Rectification (Art. 16 GDPR)

You have the right to obtain the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to Erasure ('Right to be Forgotten') (Art. 17 GDPR)

You have the right to obtain the erasure of personal data concerning you without undue delay where one of the following grounds applies: the data is no longer necessary for the purposes for which it was collected; you withdraw your consent on which the processing is based; you object to the processing and there are no overriding legitimate grounds for the processing; the personal data has been unlawfully processed; or the personal data must be erased for compliance with a legal obligation.

Right to Restriction of Processing (Art. 18 GDPR)

You have the right to obtain restriction of processing where one of the following applies: you contest the accuracy of the personal data; the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead; I no longer need the personal data for the purposes of processing, but you require it for the establishment, exercise or defense of legal claims; or you have objected to processing pursuant to Article 21(1) pending the verification whether my legitimate grounds override yours.

Right to Data Portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you, which you have provided to me, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from me, where the processing is based on consent or on a contract and the processing is carried out by automated means.

Right to Object (Art. 21 GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(e) or (f). I shall no longer process the personal data unless I demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

To exercise any of these rights, please contact me by email at contact@fwcr.de or via the contact form on this website. I will respond to your request without undue delay and at the latest within one month of receipt of the request. This period may be extended by two further months where necessary, taking into account the complexity and number of the requests.

Right to Lodge a Complaint

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement. This right is without prejudice to any other administrative or judicial remedy.

Changes to this Privacy Policy

I may update this privacy policy from time to time to reflect changes in technology, law, or my data practices. Any changes will be posted on this page with an updated revision date. If I make significant changes to this policy that affect your rights, I will provide a more prominent notice.

Last updated: 2 May 2026