Wissenswertes aus der Welt der Medizin

Medizin Aktuell

Privacy Policy

Privacy Policy

Last updated: October 2026

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Dr. med. Görkem Atalay
Neumarkt 36–38
50667 Köln (Cologne)
Telephone: 0800 / 5874672
Email: gatalay76@hotmail.com

No data protection officer has been appointed, as the statutory requirements for doing so are not met.

2. General information and legal bases

We process personal data only insofar as this is necessary to provide this website and our content, or where you have given your consent. The legal bases are in particular:

  • Art. 6(1)(a) GDPR (consent), in conjunction with Section 25(1) TDDDG (German Telecommunications and Digital Services Data Protection Act) for storing and accessing information on your device,
  • Art. 6(1)(b) GDPR (contract or pre-contractual measures, e.g. for a newsletter subscription),
  • Art. 6(1)(c) GDPR (legal obligation),
  • Art. 6(1)(f) GDPR (legitimate interest, e.g. in the secure and stable operation of the website), in conjunction with Section 25(2) TDDDG for access to your device that is strictly technically necessary.

You may withdraw any consent you have given at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected.

3. Hosting

This website is hosted by GoDaddy (GoDaddy Operating Company, LLC, 2155 E. GoDaddy Way, Tempe, AZ 85284, USA, or its European companies). When you visit the website, the data listed in Section 4 is processed on the host’s servers. This is based on a data processing agreement pursuant to Art. 28 GDPR and on our legitimate interest in the reliable provision of the website (Art. 6(1)(f) GDPR). Where data is transferred to the USA, this is done on the basis of the EU-US Data Privacy Framework, provided the provider is certified, or on the basis of the European Commission’s Standard Contractual Clauses.

4. Server log files

Each time the website is accessed, the server automatically records information transmitted by your browser: IP address, date and time of access, page requested, referrer URL, browser type and version, operating system and amount of data transferred. This data is technically necessary to display the website and to ensure its security and stability (Art. 6(1)(f) GDPR). Log files are generally deleted after 30 days at the latest, unless they are needed to investigate a security incident.

5. SSL/TLS encryption

For security reasons, this website uses SSL or TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.

6. Cookies and consent management (Real Cookie Banner)

We use cookies and similar technologies. We set technically necessary cookies on the basis of Section 25(2) TDDDG and Art. 6(1)(f) GDPR. All other cookies, for example for statistics or marketing, are only set with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR).

To manage your consent, we use the WordPress plugin Real Cookie Banner from devowl.io GmbH, Tannet 12, 94539 Grafling, Germany. The plugin runs on our own server; consent data is not transmitted to the manufacturer. As proof of your consent, we store a pseudonymous identifier (UUID), date and time, the truncated IP address, browser information and the content of your choice. Your choice is also stored in a cookie on your device. The legal basis is Art. 6(1)(c) GDPR (obligation to provide evidence under Art. 7(1) GDPR) and Section 25(2) TDDDG. You can change or withdraw your settings at any time via the “Privacy settings” link or the cookie icon on this website.

7. Web analytics with Google Analytics

If you have given your consent, we use Google Analytics 4, integrated via the “Site Kit by Google” plugin. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies to analyse how the website is used, e.g. pages viewed, time spent on the site, approximate location, device and browser. IP addresses are truncated within the EU and are not stored.

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. We have concluded a data processing agreement with Google. The data is deleted in accordance with the retention periods set in Google Analytics. Further information: Google Privacy Policy.

7a. Advertising with Google AdSense

This website is partly financed by advertising. For this purpose we use Google AdSense, integrated via the “Site Kit by Google” plugin. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

AdSense uses cookies and similar technologies to deliver ads, limit how often they are shown, prevent fraud and measure ad performance. With your consent, ads can also be tailored to your interests (personalised advertising). This involves processing, among other things, your IP address, device and browser information, the page viewed and interactions with ads. Google may combine this data with data from other Google services and works with advertising partners for this purpose.

We obtain your consent via Google’s consent message (“Privacy & messaging”), a Google-certified consent management platform based on the IAB Transparency & Consent Framework. Without consent, only limited, non-personalised ads are delivered, where legally permissible. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw or change your consent at any time via the privacy settings link on this website.

Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. Further information: How Google uses data for advertising and Personalised advertising settings.

8. Jetpack and WordPress.com services

We use the Jetpack plugin from Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA, or Aut O’Mattic A8C Ireland Ltd., Grand Canal Dock, 25 Herbert Place, Dublin, D02 AY86, Ireland. Jetpack provides the following functions:

  • Statistics: recording of page views in pseudonymised form to measure reach.
  • Image delivery (CDN): images are delivered via WordPress.com servers to improve loading times. In the process, your IP address is transmitted to Automattic.
  • Security functions: protection against attacks on the login and monitoring of the website’s availability.
  • “Like” function, share buttons and related posts: when you click a share button, you are forwarded to the respective network; only then is data transmitted to it.
  • Email subscription to new posts: if you subscribe to posts, Automattic processes your email address in order to send them. The subscription is confirmed by a confirmation email (double opt-in) and can be cancelled at any time via the unsubscribe link in every email.

The legal basis is our legitimate interest in a fast, secure and convenient website (Art. 6(1)(f) GDPR), your consent for the email subscription (Art. 6(1)(a) GDPR) and, where information is stored on your device, the consent given via Real Cookie Banner. Automattic is certified under the EU-US Data Privacy Framework. Further information: Automattic Privacy Policy.

9. Comments, Akismet and Gravatar

If you write a comment, we store the comment, the name provided, the email address, the website (if given), the time and your IP address. Storing the IP address serves our security in case someone publishes illegal content (Art. 6(1)(f) GDPR). Comments are stored until you request their deletion or the purpose no longer applies.

To combat spam, comments are checked using the Akismet service from Automattic Inc. In the process, the comment content, name, email address, IP address and browser information are transmitted to Akismet (Art. 6(1)(f) GDPR). In addition, a pseudonymised string (hash) generated from your email address may be transmitted to Automattic’s Gravatar service in order to display a profile picture if you are registered there.

10. Security firewall (Wordfence)

To protect the website against attacks, we use Wordfence from Defiant Inc., 1700 Westlake Ave N Ste 200, Seattle, WA 98109, USA. Wordfence checks incoming requests, processing among other things the IP address, requested URL, time and browser information, and compares them with lists of known attackers. For this purpose Wordfence may set technically necessary cookies. The legal basis is our legitimate interest in the security of the website (Art. 6(1)(f) GDPR). Transfers to the USA are based on Standard Contractual Clauses. Further information: Wordfence Privacy Policy.

11. Images

The images in our articles are delivered from our own server or via the Jetpack image CDN described in Section 8. Some of the photos come from the image platform Pexels and are used under the Pexels licence; no data is transmitted to Pexels when these images are displayed.

12. Contact by email or telephone

If you contact us by email or telephone, we process your details in order to handle your enquiry (Art. 6(1)(b) or (f) GDPR). The data is deleted once the enquiry has been fully dealt with, unless statutory retention obligations apply.

13. Links to social networks

On our website you will find links to WhatsApp, X (Twitter) and Facebook. These are simple links; data is only transmitted when you click on a link and visit the respective network. The privacy policy of the respective provider applies there.

14. Your rights

Within the framework of the statutory provisions, you have the right at any time to:

  • access the data stored about you (Art. 15 GDPR),
  • rectification of inaccurate data (Art. 16 GDPR),
  • erasure (Art. 17 GDPR),
  • restriction of processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR),
  • withdraw consent you have given (Art. 7(3) GDPR).

Right to object (Art. 21 GDPR): Where we process data on the basis of a legitimate interest, you may object to this processing at any time on grounds relating to your particular situation.

Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, www.ldi.nrw.de.

To exercise your rights, a message to the contact address given above is sufficient.

15. Storage period

Unless a more specific period is stated in this policy, we store personal data only for as long as is necessary for the respective purpose or as required by statutory retention periods.

16. Changes to this Privacy Policy

We will update this Privacy Policy whenever the website, the services used or the legal situation change. The version published here at any given time applies.