InterLymph hierarchical classification platform for i-CLASSi

Privacy Policy

Datenschutzerklärung

Last updated: June 16, 2026

1. Controller and Data Protection Officer

Controller (Data Controller)

German Cancer Research Center - Foundation under Public Law
(Deutsches Krebsforschungszentrum - DKFZ)
Im Neuenheimer Feld 280
69120 Heidelberg
Germany

Phone: +49 (0)6221 420
Email: kontakt@dkfz.de
Website: www.dkfz.de

Data Protection Officer

Data Protection Officer
German Cancer Research Center - Foundation under Public Law
Im Neuenheimer Feld 280
69120 Heidelberg

Phone: +49 (0)6221 420
Email: datenschutz@dkfz.de

2. General Information on Data Processing

Scope of Personal Data Processing

i-CLASSi Studio is a client-side web application that operates entirely in your browser. We collect minimal personal data. Processing only takes place where necessary to provide website functionality and only with your explicit consent where applicable.

Legal Basis for Data Processing

  • Article 6(1)(f) GDPR: Processing necessary for legitimate interests, including website security and functionality.
  • Article 6(1)(a) GDPR: Processing based on user consent, including analytics or optional features where applicable.

Data Retention

Personal data will be deleted or anonymized as soon as it is no longer necessary for the purposes for which it was collected. Log files are typically retained for up to 7 days. Aggregated analytics data may be retained for longer periods in anonymized form.

3. Provision of Website and Log Files

Data Collected

When you access our website, our system automatically collects the following data:

  • Browser type and version
  • Operating system
  • Internet service provider
  • IP address, anonymized where possible
  • Date and time of access
  • Websites from which you access our site

Purpose

This data is necessary to deliver the website to your device and ensure security of our IT systems. We do not analyze this data for marketing purposes.

Storage Duration

Log data is deleted after 7 days at the latest. IP addresses may be further anonymized after this period.

Right to Object

This data collection is necessary for website operation. There is no option to object, as it is required for technical functionality.

4. Cookies

i-CLASSi Studio does not use cookies by default. The application operates client-side in your browser with no persistent storage to remote servers.

Generated lookup metadata is loaded from static files. Any local browser state, such as UI filters or cached browser resources, remains in your browser and is not transmitted to our servers unless you explicitly export or share data yourself.

5. Web Analytics (If Enabled)

If this instance of i-CLASSi Studio has been configured with analytics, data may be collected using anonymized and privacy-respecting methods.

Any analytics tools used will be configured to anonymize IP addresses, avoid cookies, avoid personally identifiable information, and respect "Do Not Track" browser settings where possible.

6. Third-Party Services

i-CLASSi Studio does not integrate with external social media platforms or analytics services that would collect your personal data by default.

The tool may link to external biomedical resources, including UMLS/UTS metadata pages. If you follow such links, the privacy policies of the external providers apply.

7. Your Rights as a Data Subject

Under the General Data Protection Regulation (GDPR), you have the following rights:

  • Right to Information (Article 15): You can request confirmation whether personal data concerning you is being processed.
  • Right to Rectification (Article 16): You can request correction of inaccurate personal data.
  • Right to Erasure (Article 17): You can request deletion of your personal data.
  • Right to Data Portability (Article 20): You can request your data in a structured, commonly used, machine-readable format.
  • Right to Lodge a Complaint (Article 77): You have the right to lodge a complaint with the supervisory authority responsible for data protection in your jurisdiction if you believe your rights under the GDPR have been violated.

To exercise any of these rights, please contact our Data Protection Officer: datenschutz@dkfz.de.

8. Contact Information

If you have any questions about this privacy policy or how we handle your personal data, please contact us:

General Inquiries: kontakt@dkfz.de
Data Protection Issues: datenschutz@dkfz.de
Strategic Communications: kontakt@dkfz.de

9. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of any material changes by updating the "Last updated" date at the top of this policy. Continued use of the website following any changes constitutes your acceptance of the updated policy.