Privacy

The controller responsible for data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is:

This website consists of static pages. It sets no cookies, stores nothing in your browser, runs no analytics or tracking scripts, shows no advertising and has no user accounts.

Fonts, scripts and graphics are delivered from our own web space. Opening a page does not send a request to any other company, and no content from third parties is embedded.

When you open a page, your browser sends technical data to the server that hosts this site, which the server needs in order to deliver the page. This includes your IP address, the date and time of the request, the address of the page or file requested, the amount of data transferred, the status of the request, the page you came from, and the type and version of your browser and operating system.

The server records these requests in log files. IP addresses are shortened before they are stored (11.22.33.44 becomes 11.22.0.0), so an entry can no longer be traced to an individual connection. Log files are deleted automatically after 30 days.

We process this data to deliver the website and to keep it stable and secure. The legal basis is our legitimate interest in operating the site reliably (Art. 6(1)(f) GDPR). We do not combine it with other data or use it to identify individual visitors.

The hosting provider compiles access statistics from these log files, such as the number of pages requested per day. This involves no cookies and no scripts in your browser.

The website is hosted by a web hosting provider in Germany, which processes this data on our behalf. Personal data is not transferred to countries outside the European Union.

If you write to us by email, we process your address and the content of your message in order to answer you. The legal basis is our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR). We delete the correspondence once it is no longer needed, unless the law requires us to keep it.

The Briefing is not sent by email. The site has no sign-up form, collects no email addresses and keeps no list of readers.

New editions, and the calendar of events, can be followed with an RSS feed. A feed reader requests the feed from our server like any other page of the site; nothing more is processed, and what the server records of a request is described under “Server log files” above.

Our pages link to external sources such as journals, trial registries and code repositories. Those sites receive data only when you follow a link, and their own privacy policies apply.

Under the GDPR you have the right to access the personal data we hold about you (Art. 15), to have it corrected (Art. 16) or deleted (Art. 17), to have its processing restricted (Art. 18), to receive it in a portable format (Art. 20) and to object to processing that is based on our legitimate interests (Art. 21). To exercise any of these rights, write to the address above.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the authority where you live or the Hamburg Commissioner for Data Protection and Freedom of Information.

We do not use automated decision-making or profiling.

We update this policy when the website or the law changes. Last updated: 8 October 2026.