We don't use third-party cookies – just a single in-house cookie that remembers your language, plus your theme choice stored in your browser.
Only if you accept: anonymous usage statistics with PostHog, hosted in the EU, so we learn which pages actually help. No ads, no data sold to anyone.
Say no, and the only thing we track is stroke outcomes. (Ursula von der Leyen would be so proud.)
This privacy policy explains which personal data is processed when you visit this website, for which purposes and on which legal basis, and which rights you have.
This website is a private, non-commercial information service of the research group. The controller within the meaning of the General Data Protection Regulation (GDPR) is the private individual who maintains and publishes the group's website:
Moritz Kirschner
Robert-Koch-Str. 40
37075 Göttingen, Germany
Email: moritznikolai.kirschner@med.uni-goettingen.de
Data processed: connection and usage data (e.g. IP address, pages visited, time, browser and device information), settings (language, colour scheme, cookie choice), search terms and, if you contact us by email, your email address and the content of your message.
Data subjects: visitors to the website and people who email us.
Purposes: providing and securing the website, delivering content and images, site search, answering enquiries and – only with consent – measuring reach and improving the website.
Consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG): web analytics with PostHog.
Legitimate interests (Art. 6(1)(f) GDPR): providing the website securely and reliably (hosting, logs, images, search) and answering enquiries.
Strictly necessary storage (Section 25(2) no. 2 TDDDG): storing your language, colour scheme and cookie choice in your browser.
We use service providers that process data on our behalf (processors under Art. 28 GDPR): Cloudflare (hosting), Storyblok (content management and images) and – only with consent – PostHog (web analytics). Details are given in the following sections. Data is not passed on to anyone else.
Cloudflare and PostHog are companies based in the USA. Both are certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR); in addition, their data processing agreements include the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR).
We only keep personal data for as long as it is needed for the respective purpose and delete it afterwards. The specific retention periods are given with each processing activity.
The website is delivered over an encrypted connection (HTTPS/TLS). The website has no user accounts and does not collect data through forms.
You are not obliged to provide us with personal data. Without the technically necessary connection data, however, the website cannot be displayed. There is no automated decision-making, including profiling (Art. 22 GDPR).
The website runs on the Cloudflare Workers server platform. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Requests are answered by the nearest data centre of Cloudflare's global network.
When you open a page, Cloudflare processes the technically necessary connection data: your IP address, the requested address, date and time, and the information your browser sends along (e.g. browser type and preferred language). We use the preferred language only to redirect you to the German or English version when you open an address without a language prefix.
Requests and error messages are stored in logs (Cloudflare Workers Logs), which we use to find errors and keep the service secure. The logs are deleted automatically after three days. If you use the search, the search term is part of the logged address.
To deliver pages faster, Cloudflare keeps them in its cache for a short time. The cache only holds content that is the same for every visitor.
The website's fonts (Geist and Geist Mono) are served from our own server; no connection is made to Google Fonts or any other font provider. We compile the list of publications from public ORCID records and from Crossref and Europe PMC; our server fetches this data itself, and your browser does not connect to these services.
The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is providing the website securely, quickly and reliably. A data processing agreement with Cloudflare (Cloudflare Data Processing Addendum) is part of its terms of service. More information: www.cloudflare.com/privacypolicy/
The website's content is maintained in the Storyblok content management system. The provider is Storyblok GmbH, Peter-Behrens-Platz 2, 4020 Linz, Austria; the content is stored in Storyblok's EU region. Our server fetches the texts from Storyblok; no data about you is transmitted.
Images (e.g. photos, portraits and partner logos) are loaded by your browser directly from Storyblok (a.storyblok.com). Storyblok delivers them through the Amazon CloudFront content delivery network and thereby receives the technically necessary connection data, in particular your IP address, the requested image file and the information your browser sends along.
The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is managing the content conveniently and delivering the images quickly. A data processing agreement with Storyblok is part of its terms of service. More information: www.storyblok.com/legal/privacy-policy
The website links to other sites, for example to publications (via doi.org), ORCID profiles, partner institutions and social networks. They are only loaded when you click a link; the privacy policy of the respective provider then applies. No third-party content such as videos or maps is embedded.
If you choose “Accept all” in the cookie notice or switch on the “Analytics” category, we use the web analytics service PostHog to understand how the website is used and to improve it. Without your consent, PostHog is neither loaded nor contacted.
The provider is PostHog, Inc., 2261 Market St., #4008, San Francisco, CA 94114, USA. We use PostHog Cloud EU; the data is stored on servers in Frankfurt am Main, Germany. For this, your browser connects to eu.i.posthog.com and eu-assets.i.posthog.com.
After you consent, PostHog records:
page views and page leaves, with the address and the referring page
clicks on links and buttons, and click, mouse movement and scroll data for heatmaps – without the content of input fields
page load performance (Web Vitals) and technical errors in the browser
three custom events, each with the page's language: a click on an email address on the contact page (only the section, not the address), filtering the list of publications (type and number of entries) and completed searches (only the number of results, not the search term)
information about browser, operating system, device type and screen size
PostHog links this data to a randomly generated identifier and groups it into visits; a visit ends after 30 minutes of inactivity, at the latest after 24 hours. PostHog does not set cookies. PostHog discards your IP address and does not store it. We do not create user profiles and do not combine the data with other data about you. Session recordings and surveys are switched off. PostHog keeps the recorded events for one year.
For this, PostHog stores in your browser:
in localStorage ph_<project key>_posthog (random identifier and current visit) and __ph_opt_in_out_<project key> (records your consent),
in sessionStorage ph_<project key>_posthog, ph_<project key>_window_id, ph_<project key>_primary_window_exists and ph_<project key>_session_registered_properties; these are deleted when you close the tab.
The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). We have concluded a data processing agreement with PostHog. PostHog is certified under the EU-U.S. Data Privacy Framework; PostHog lists its sub-processors at posthog.com/subprocessors. More information: posthog.com/privacy
Withdrawal: you can withdraw your consent at any time with effect for the future: open “Cookie settings” in the footer and choose “Only necessary” or switch off “Analytics”. Recording then stops immediately, and all of the PostHog entries listed above are deleted from your browser without reloading the page.
When you use the search, your browser sends the search term to our server, which passes it on to Storyblok to find matching content. Storyblok only receives the search term, not your IP address. We do not store search terms separately or analyse them; the results are kept in the Cloudflare cache for up to two minutes. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a working site search.
The website has no contact form. If you email us, we process your email address, your name (if given) and the content of your message to answer your enquiry. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is answering your enquiry. We delete the data once your enquiry has been dealt with, unless statutory retention obligations apply.
Under the GDPR, you have the following rights:
access to the data processed about you (Art. 15 GDPR)
rectification of inaccurate data (Art. 16 GDPR)
erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
data portability (Art. 20 GDPR)
withdrawal of consent with effect for the future (Art. 7(3) GDPR); this does not affect the lawfulness of processing carried out before the withdrawal
Right to object: you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is based on Art. 6(1)(f) GDPR (Art. 21 GDPR).
To exercise your rights, an email to the controller (see above) is enough.
Right to lodge a complaint: you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority competent for us is:
Der Landesbeauftragte für den Datenschutz Niedersachsen (State Commissioner for Data Protection of Lower Saxony)
Prinzenstraße 5, 30159 Hannover, Germany
Phone: +49 511 120-4500, email: poststelle@lfd.niedersachsen.de
www.lfd.niedersachsen.de
We update this privacy policy whenever changes to the website or the law require it. The version published here applies.
Last updated: 26 September 2026