Privacy policy

This policy explains which personal data Dynamic Brain processes, why, and for how long. The service is built to work with as little data as possible: there is no password, no advertising, no tracking and no sale of data.

1. Controller

TAFRALI, sole proprietorship (Einzelunternehmen)
Owner: Deniz Tafrali
Speicherstrasse 29
9000 St. Gallen
Switzerland
E-mail: support@medizin-lernen.de

This policy follows the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP).

2. Hosting and server logs

The website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. Whenever a page is requested, the server processes technically necessary data: IP address, date and time, requested address, amount of data transferred, browser and operating system, and the referring page. This serves the secure and stable operation of the website (Art. 6 (1) (f) GDPR). Logs are deleted automatically after a short period. A data processing agreement under Art. 28 GDPR is in place with IONOS.

3. Sign-in with e-mail and code

To open the atlas you sign in with your e-mail address. We send you a six-digit code that is valid for 15 minutes; the code is stored only as a hash and deleted after use. On your first sign-in an account is created automatically. We store your e-mail address, the date of your first and most recent sign-in, and a randomly generated internal user name. This is necessary to provide the service you request (Art. 6 (1) (b) GDPR). The data is kept for as long as your account exists.

The e-mails are sent through the IONOS mail server. To prevent abuse, the number of code requests per e-mail address and per IP address is counted for at most one hour (Art. 6 (1) (f) GDPR); the counters then expire automatically.

To have your account and e-mail address deleted, a short e-mail to support@medizin-lernen.de is enough.

4. Cookies and local storage

After you sign in, WordPress sets technically necessary authentication cookies that keep you signed in for up to 14 days. Signing out removes them. These cookies are strictly necessary for the service you request (§ 25 (2) no. 2 TDDDG) and do not require consent. No analytics, marketing or third-party cookies are used.

5. No third-party services

Fonts, program libraries and all 3D data are delivered from our own server. No content is loaded from external servers and no analytics or advertising services are used.

6. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). An e-mail to support@medizin-lernen.de is enough. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, or in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC).

7. No automated decision-making

There is no automated decision-making or profiling within the meaning of Art. 22 GDPR.

Last updated: October 2026