Privacy policy

This English version is provided for convenience. The German version (Datenschutzerklärung) is legally binding.

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Institute for Mental Health and Translational Neurosciences
[Legal form, e.g. e. V., gGmbH or GmbH]
Markt 3
34369 Hofgeismar
Germany
Phone: [phone number]
E-mail: info@mhtn-institute.org

Represented by: [name of the authorised representative(s)]

[If appointed: name and contact details of the data protection officer. An appointment is required in particular if, as a rule, at least 20 persons are constantly engaged in the automated processing of personal data (§ 38 BDSG) or if the core activity consists of large-scale processing of health data (Art. 37 GDPR). Otherwise remove this section.]

This website does not use cookies, analytics or tracking tools, contact forms or embedded third-party content such as external fonts, maps or videos. Personal data is processed only to the extent described below.

This website is hosted on Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you visit the website, Cloudflare processes technically necessary data, in particular your IP address, the date and time of access, the page requested, the previously visited page (referrer) and information about your browser and operating system.

This processing is necessary to deliver the website and to ensure its security and stability, for example to defend against attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and reliable provision of the website.

We have concluded a data processing agreement with Cloudflare pursuant to Art. 28 GDPR. Cloudflare is certified under the EU-US Data Privacy Framework; transfers to the USA are based on the adequacy decision of the European Commission (Art. 45 GDPR). Further information: www.cloudflare.com/privacypolicy

[Please check once hosting is set up: provider, data processing agreement and log file retention period.]

If you change the language using the switch on this website, your choice (“en” or “de”) is saved in your browser’s local storage (localStorage) so that the website is shown in this language on your next visit. This information stays on your device and is not transmitted to us. The legal basis is § 25(2) no. 2 TDDDG, as storing it is strictly necessary for the function you requested. You can delete the entry at any time in your browser settings.

If you contact us by e-mail, we process the information you provide (e.g. name, e-mail address and content of the message) in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR insofar as your enquiry relates to a contract or pre-contractual measures, and otherwise Art. 6(1)(f) GDPR. If your message contains health data, we process it on the basis of Art. 9(2)(h) GDPR in conjunction with § 22(1) no. 1(b) BDSG.

Please note that e-mails are not always encrypted in transit. We therefore recommend that you do not send us health data or other confidential information by e-mail.

We delete your data as soon as it is no longer required to handle your enquiry and no statutory retention obligations apply.

[Please add: e-mail provider (name and registered office) and, if applicable, a note on data processing.]

As a scientific institute, we conduct research projects. This website does not collect personal data from study participants. If you take part in a study, we will inform you separately beforehand about the purpose, legal basis, retention period and your rights; processing is generally based on your consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR) or on the research provisions of Art. 9(2)(j) GDPR in conjunction with § 27 BDSG.

Personal data that we process in the course of treatment, counselling or coaching is not covered by this privacy policy. We will inform you about this separately before treatment or counselling begins.

This website contains links to websites of other providers, such as profiles of our advisors or PsyMulator. When you click a link, you leave our website; the operator of the linked website is responsible for the data processing there.

You have the right of access to your personal data (Art. 15 GDPR), to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR).

Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object to the processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

You may withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). To exercise your rights, simply send a message to info@mhtn-institute.org.

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (Hessian Commissioner for Data Protection and Freedom of Information)
Gustav-Stresemann-Ring 1
65189 Wiesbaden
datenschutz.hessen.de

October 2026