Legal Notice

Service provider
Understanding Infection Dynamics
Science-based information and learning site

Responsible for content
Boris D. Rausch
c/o flexdienst #10910
Kurt-Schumacher-Straße 76
67663 Kaiserslautern
Germany

Contact
Email: info@infectiondynamics.eu

Languages of the service
German and English

Privacy Information

1. Controller

The controller responsible for data processing on this website is:

Boris D. Rausch
c/o flexdienst #10910
Kurt-Schumacher-Straße 76
67663 Kaiserslautern
Germany
Email: info@infectiondynamics.eu

2. Purposes and legal bases

Personal data is processed only to the extent necessary to provide the website technically, respond to enquiries, run interactive features, and operate optional AI support features.

Depending on the processing, we rely in particular on:

• Art. 6(1)(b) GDPR for contract-related or pre-contractual communication
• Art. 6(1)(f) GDPR for the secure and functional operation of the website and for answering general enquiries
• Art. 6(1)(a) GDPR where explicit consent is requested in individual cases

3. Accessing the website

When the website is accessed, the hosting or CDN provider used for deployment processes technical connection data. This may include the IP address, date and time of access, requested resource, referrer, browser type, operating system, and HTTP status.

This processing is carried out for the purpose of delivering the website, ensuring stability, and maintaining security. The legal basis is Art. 6(1)(f) GDPR.

According to the current implementation, we do not use analytics or marketing trackers.

4. Local browser storage for functional purposes

Interactive areas may use local browser storage such as localStorage to preserve user-requested interface states, for example overlay states or certain workspace settings.

This information remains on the end device until it is deleted in the browser or overwritten by the relevant feature. To the extent that access to end-device information is strictly necessary for a function expressly requested by the user, it is based on Section 25(2) no. 2 TDDDG. The related processing of personal data is based on Art. 6(1)(f) GDPR.

5. Contact form through our own webspace

When the contact form is used, the entered data, in particular name, email address, institution or context, topic, subject, and message, is transmitted to a form endpoint operated by us on our own webspace and forwarded to us by email from there.

The processing serves to handle the request. The legal basis is Art. 6(1)(b) GDPR for contract-related or pre-contractual enquiries and otherwise Art. 6(1)(f) GDPR. If a separate declaration of consent is given in exceptional cases, Art. 6(1)(a) GDPR also applies.

Recipients include our hosting provider for the webspace operation and the mail services used to receive the message. According to the current implementation, the form data is not forwarded to a separate third-party form service.

We store contact enquiries only for as long as necessary to process them and to comply with any applicable retention duties.

Please do not send sensitive health data or other especially confidential information through the contact form.

6. AI features via OpenAI

Where an AI helper or AI coach is activated on a page, entered questions are first sent to our AI endpoint at ai.infektionsdynamiken.de. This endpoint forwards the request server-side to OpenAI. This may include the question itself, recent conversation turns, page context, and technical request data.

The processing serves to provide context-aware answers and interactive learning support. The legal basis is Art. 6(1)(f) GDPR.

Recipients or categories of recipients are first the AI endpoint operated by us and then OpenAI, including affiliated entities and subprocessors used there. For customers located in the EEA, the current OpenAI DPA names OpenAI Ireland Ltd. as the contracting party. Processing outside the EEA is possible; OpenAI refers to Standard Contractual Clauses and adequacy decisions for such transfers. More information: OpenAI Data Processing Addendum, OpenAI Data Controls, and OpenAI Sub-processor List.

According to OpenAI’s current statements, data sent through the API is not used to train OpenAI models by default. OpenAI also states that abuse-monitoring logs for API usage may be retained for up to 30 days. For that reason, please do not enter special-category personal data or other confidential information into the AI feature.

Where the AI feature merely answers user questions, no solely automated decision with legal or similarly significant effect within the meaning of Art. 22 GDPR is intended.

7. Retention

Unless a more specific period is stated in the individual sections above, we store personal data only for as long as necessary for the respective purpose and then delete it, subject to statutory retention obligations.

8. Your rights

Under the GDPR, data subjects have in particular the following rights:

• access
• rectification
• erasure
• restriction of processing
• data portability
• objection to processing based on Art. 6(1)(f) GDPR
• withdrawal of consent with effect for the future

9. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority. For the Kaiserslautern location, the relevant authority is in particular:

The State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate
Hintere Bleiche 34
55116 Mainz
Email: poststelle@datenschutz.rlp.de
Web: datenschutz.rlp.de

Open Educational Resources

Unless stated otherwise, content on this website is provided under CC BY 4.0. When reusing content, please credit Understanding Infection Dynamics.

Updated: 2026-04-20