1. Introduction

This Privacy Policy explains what personal data we collect when you visit our website, how we process it, and what rights you have under the General Data Protection Regulation (GDPR).

Controller (Art. 4 No. 7 GDPR):

Charité – Universitätsmedizin Berlin
Charitéplatz 1
10117 Berlin
Germany
+49 30 450 50
Website: https://www.charite.de

2. Data We Collect

a) When visiting our website

When you access our website, your browser automatically sends information to our server. This information is temporarily stored in a log file. The following data may be collected automatically:

• IP address of the requesting device
• Date and time of access
• Name and URL of the accessed file
• Website from which the access occurs (referrer URL)
• Browser type and version, operating system, and device type

This data is processed for technical reasons to ensure the stability, security, and proper functioning of the website.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

b) Contact form or email contact

If you contact us via email or a contact form, we will store and process the personal data you provide (e.g., name, email address, message) for the purpose of handling your inquiry.

Legal basis: Art. 6(1)(b) GDPR (contract initiation) and Art. 6(1)(f) GDPR (legitimate interest).

c) Content management via Payload CMS

Our website uses Payload CMS, a self-hosted content management system running on our own servers. No personal data is transmitted to third parties unless required for hosting or technical maintenance.

d) Cookies and analytics

We may use cookies to ensure website functionality and to analyze usage in anonymized form. If analytical or marketing cookies are used, they are only set after your explicit consent via our cookie banner.

Legal basis: Art. 6(1)(a) GDPR (consent).

3. Hosting

Our website and CMS are hosted on our own servers located in the European Union. All data is stored securely and is not transferred to third-party hosting providers or non-EU countries.

4. Data Sharing

Your data will not be shared with third parties unless:

• You have given explicit consent (Art. 6(1)(a) GDPR)
• It is necessary to fulfill a contract (Art. 6(1)(b) GDPR)
• We are legally obligated to do so (Art. 6(1)(c) GDPR)
• Processing is necessary for legitimate interests (Art. 6(1)(f) GDPR)

5. Storage Duration

We only store personal data for as long as necessary to fulfill the purpose of collection or as required by law (e.g., tax or commercial retention periods).

6. Your Rights

You have the following rights under the GDPR:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent (Art. 7(3) GDPR)

Protection Contact
If you have any questions regarding the processing of your personal data or your rights in relation to data protection, please contact:

Data Protection at Charité – Universitätsmedizin Berlin
Charitéplatz 1
10117 Berlin
+49 30 450 580 016
datenschutzbeauftragte(at)charite.de

You also have the right to lodge a complaint with a supervisory authority, for example: Berliner Beauftragte für Datenschutz und Informationsfreiheit.

7. Data Security

We use technical and organizational measures to protect your data against accidental or intentional manipulation, loss, destruction, or unauthorized access. These measures are regularly reviewed and updated.

8. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy to comply with current legal requirements or to reflect changes to our website or data processing. The updated version will always be available on this page.

Last updated:23 March 2026