Privacy Policy

This website sets no cookies, measures nothing and loads nothing from third-party servers. What data is nevertheless processed is described here in full.

This is a translation of the German original, which is the legally binding version: Datenschutzerklärung.

1. Controller

Ethikkommission Lippstadt e. V.
Rolevinckstrasse 31
59555 Lippstadt
Germany

Represented by its board: Prof. Dr.-Ing. Jan-Niklas Voigt-Antons, Dr. Francesco Vona and Miladin Ceranic. Further details in the legal notice.

Contact for data protection matters: info@ethikkommission-lippstadt.de

No data protection officer has been appointed. In our assessment the conditions of Art. 37 GDPR and § 38 BDSG are not met: there is no regular and systematic monitoring on a large scale, and processing special categories of personal data is not part of our core activity.

2. Visiting the website: server log files

This website is hosted on GitHub Pages, a service of GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA, a subsidiary of Microsoft Corporation.

When you open a page, your browser transmits technically necessary data which GitHub processes in log files: IP address, date and time of access, the address requested, the referring page, and information about your browser and operating system. We do not receive these log files and we do not analyse them.

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is being able to deliver this website at all — without processing these connection data that is technically impossible — and informing the public about the committee's work.

The transfer to the United States is based on the European Commission's adequacy decision of 10 July 2023 on the EU-U.S. Data Privacy Framework, in which GitHub, Inc. participates under its own certification. In addition, GitHub states that it uses standard contractual clauses under Art. 46(2)(c) GDPR. GitHub sets out its retention periods in its privacy statement (docs.github.com/site-policy).

3. Storage on your device

This website sets no cookies and stores nothing in your browser's local storage. There is therefore no consent banner: none would be required.

4. Third-party content

Nothing is loaded from third-party servers. Fonts, icons, scripts, styles and images are served from the same server as the page itself. There are no maps, videos, social media buttons, font services or analytics tools embedded.

5. Analytics and advertising

There is no audience measurement. No profiles are created, there is no automated decision-making within the meaning of Art. 22 GDPR, and no data is passed on for advertising purposes.

6. Contacting us by email

This website has no contact form. If you write to us, we process the information you provide — sender address, name, content of your message and any attachments — solely in order to deal with your enquiry.

The legal basis is Art. 6(1)(b) GDPR where your message concerns the initiation or performance of a contract — which includes commissioning a review — and otherwise Art. 6(1)(f) GDPR with the legitimate interest of answering enquiries.

Mail is encrypted in transit between mail servers according to current standards (TLS). That encryption is opportunistic, however — it only happens if both sides offer it — and on the servers themselves an email sits in plain text, readable by the provider, by administrators and in backups. To transmit documents with end-to-end encryption, please use our public PGP key: pgp-antrag.asc, fingerprint A9EF EFA2 759E 6933 23FA  C223 2769 B8A8 4B2A 3F34. The key belongs to antrag@ethikkommission-lippstadt.de and is valid until 19 August 2029. It is also published through the Web Key Directory, so most mail clients will find it without any action on your part.

7. Reviewing research projects

Anyone submitting an ethics application transmits personal data to us: the name and contact details of the applicant and the project lead, and the description of the project. An application should not contain data about the later study participants, only the treatment planned for them — please do not send any.

These data are passed on within the committee to the members carrying out the review and, where necessary for the assessment, to external experts consulted. The legal basis is Art. 6(1)(b) GDPR.

The application, the opinion issued and the associated correspondence are kept for as long as this is necessary to make the decision traceable and as long as statutory retention periods apply; for the commercial side these may be six or ten years under § 257 HGB and § 147 AO.

8. Encryption

This website is served exclusively over HTTPS. The connection between your browser and the server is therefore encrypted according to current standards.

9. Your rights

You have the following rights in relation to us:

• Access to information about whether and which data we process about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)

Please use the address above. As a rule we hold no data about visitors to this website that would allow us to answer an access request — the log files are held by GitHub, not by us.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany (ldi.nrw.de). You may also contact the authority where you habitually reside.

10. Changes to this policy

We will update this policy when the website changes — for instance if a contact form, appointment booking or audience measurement is added. The version published here applies.

Last updated: 20 August 2026