Privacy Policy

1. Controller

The controller responsible for this website within the meaning of Art. 4(7) GDPR is:

2. Hosting

Sections 2 and 3 apply only if you visited this website at spannowsky-lab.com. The same website is also available at spannowsky-lab.de, which is hosted by IONOS SE in Germany; its privacy policy describes that hosting.

We use the following hosting provider to make this website available at spannowsky-lab.com:

GitHub is the recipient of your personal data. Using it is in our legitimate interest within the meaning of Art. 6(1)(f) GDPR, namely not having to maintain a server on our own premises. The server is located in the USA.

GitHub Inc. is certified under the EU-U.S. Data Privacy Framework (DPF). For data transfers to companies certified under the DPF, the European Commission has determined in its adequacy decision of 10 July 2023 that the USA ensures an adequate level of data protection (Art. 45 GDPR). More information: GitHub Privacy Statement, Data Privacy Framework.

In addition, GitHub has put compliance measures in place for international data transfers. They apply to all of GitHub’s global activities in which it processes personal data of individuals in the EU, and are based on the EU Standard Contractual Clauses (SCCs). More information: GitHub Privacy Statement, International data transfers.

Further information on how to object to the processing of your data by GitHub and have it removed can be found in the GitHub Privacy Statement.

3. Server log files

Our hosting provider collects the following data, which your browser transmits, in so-called log files:

• your IP address,
• the address of the previously visited website (referrer),
• date and time of the request and the time zone difference to Greenwich Mean Time (GMT),
• content of the request (the page or file requested),
• HTTP status code and amount of data transferred,
• the website from which the request originates,
• information about your browser and operating system.

This is necessary to display our website and to ensure its stability and security. This is in our legitimate interest within the meaning of Art. 6(1)(f) GDPR. There is no tracking, and we have no direct access to this data.

You have the right to object to the processing of your data. Whether the objection is successful is determined by weighing the interests involved. The data is deleted as soon as the purpose of the processing no longer applies.

The processing of the data described in this section is neither legally nor contractually required. However, the website cannot function without it.

4. No cookies, tracking or third-party services

This website sets no cookies and uses no analytics, tracking or advertising tools. Fonts and scripts are served from this website itself, so apart from the hosting provider named above, visiting it does not connect your browser to third parties such as Google.

5. Language setting

When you choose a language with the language switch, your choice (“en” or “de”) is saved in your browser’s local storage under the key site-lang, so that the website appears in the same language on your next visit. Nothing else is stored, the value does not identify you, and it is never sent to the server. It is saved only because you asked for it (§ 25(2) no. 2 TDDDG). You can delete it at any time by clearing your browser’s site data.

6. Contact by email

If you contact us by email, we use your email address and message only to answer your enquiry. The legal basis is Art. 6(1)(f) GDPR; if your enquiry relates to a contract, Art. 6(1)(b) GDPR. The email addresses listed on this website are KIT addresses, so messages are processed on KIT’s mail systems. We delete your message once it is no longer needed, unless legal retention periods apply.

7. Team members and publications

The Team page shows names, photos, roles and work contact details of group members. Members can ask at any time for their information to be corrected or removed. The publication list is compiled from the public INSPIRE-HEP database in advance; viewing it does not connect your browser to INSPIRE-HEP.

8. External links

This website links to external sites such as KIT, INSPIRE-HEP, arXiv, Google Scholar and Google Maps. No data is sent to them unless you click a link. After that, the privacy policy of the respective provider applies.

9. Your rights

You have the right to:

• access your personal data (Art. 15 GDPR),
• have it corrected (Art. 16 GDPR) or erased (Art. 17 GDPR),
• restrict its processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing based on Art. 6(1)(f) GDPR, on grounds relating to your particular situation (Art. 21 GDPR).

To exercise these rights, contact the controller named above.

10. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Last updated: September 2026. A German version of this policy is available: Datenschutzerklärung.