Privacy Policy

Last reviewed: 13 August 2026

This Privacy Policy explains how personal data is processed when you visit medicalcooling.com, contact the Medical Cooling / AIRCHILL project, or deliberately open an external service linked from this website.

1. Controller

Ethical Saving gUG
Barthstr. 2
33330 Gütersloh
Germany
Managing Director: Fabian Temme
Email: privacy@medicalcooling.com
General contact: info@medicalcooling.com
Phone: +49 171 12 56 491

Further legal information is available in our Legal Notice / Impressum.

2. Website delivery and server logs

When the website is accessed, technical data required to deliver and secure the service may be processed. This can include IP address, date and time, requested resource, referrer, browser and operating-system information, response status and transferred data volume.

For visitors in the European Economic Area, processing is based in particular on Art. 6(1)(f) GDPR where necessary for secure, reliable operation, abuse prevention and troubleshooting. Log data is retained only for as long as reasonably required for those purposes or for the investigation and documentation of security incidents and is then deleted or anonymised unless a legal obligation requires longer retention.

3. Security

We use technical security measures and security software, including Wordfence, to protect the WordPress installation against unauthorised access, malicious requests and attacks. Security processing can involve IP addresses, request metadata, technical identifiers and security-event data. The legitimate interest is the protection of the website, its users and our IT systems.

4. Contact

The public contact routes on the current core pages primarily use email and telephone links. If you contact us, we process the information you provide, such as your name, contact details, organisation, role and message, to answer the request. Depending on the context, the legal basis can be Art. 6(1)(b) GDPR for pre-contractual or contractual communication, Art. 6(1)(f) GDPR for general project and business communication, or another applicable legal basis. We delete correspondence when it is no longer required for the purpose and no retention obligation or overriding legitimate reason applies.

5. Cookies, local storage and consent

Technically necessary storage or access may be used where required for security, WordPress operation, consent storage or a service that you explicitly request. Optional analytics, marketing and external-media technologies are separated from necessary functions.

As a privacy-first production baseline, known Jetpack Statistics, Blaze and WooCommerce Analytics modules are disabled. Site Agent Compliance 1.1 is active with a conservative default in which optional analytics, marketing and external media remain disabled until permitted. Global Privacy Control (GPC) is honored by the Site Agent runtime as an opt-out signal for marketing/sale-share processing where applicable.

More information and the current service categories are documented under Cookie & Privacy Choices.

6. Jetpack operational features

Selected Jetpack modules from Automattic are active for operational WordPress functions. Statistics, Blaze advertising and WooCommerce analytics modules are currently disabled. If a visitor deliberately uses an enabled Jetpack-supported function, technical connection or account-related data may be processed as required for that function. We review active modules as part of the Site Agent compliance inventory and disable functions that are not needed.

7. External content and links

Scientific sources, partner websites, donation services and development tools are generally linked as external destinations. Opening such a link transfers you to the third party, which is responsible for its own processing. The Medical Cooling UI prototype on the main homepage is no longer loaded automatically in an iframe; it is opened only after you follow the external link.

Where optional embedded third-party media is introduced in the future, it is intended to be blocked until the relevant consent or deliberate user action exists, unless the connection is strictly necessary for a service explicitly requested by you.

8. Donations and PayPal links

The website may link to donation campaigns operated by PayPal or other donation platforms. Merely viewing the Medical Cooling core page does not require the PayPal donation page to be embedded. If you choose an external donation link, the payment or donation provider processes the information required for its service under its own responsibility and privacy terms. Ethical Saving gUG may receive transaction information necessary to document and administer a donation and to meet legal accounting or tax obligations.

9. No current behavioural-advertising baseline

The current audited baseline does not intentionally activate the known Jetpack Blaze or Site Agent-registered cross-site advertising modules on medicalcooling.com. We do not intentionally sell personal information. If optional analytics or advertising functionality is introduced or re-enabled, this policy and the consent inventory must be updated before or with that change.

10. Recipients and processors

Personal data can be disclosed to service providers where needed for hosting, technical maintenance, IT security, communication or a service deliberately requested by the visitor. Where a provider acts as our processor, it is engaged under the applicable data-protection requirements. Some providers may also act as independent controllers for their own services, for example when you leave this website and use a payment or external platform directly.

11. International transfers

Some technical providers may process data outside the European Union or European Economic Area, including in the United States. Where the GDPR requires a transfer mechanism, we rely on an applicable adequacy decision or appropriate safeguards such as the European Commission’s standard contractual clauses, as appropriate for the provider and processing.

12. Your GDPR rights

Subject to the legal requirements, you may have rights of access, rectification, erasure, restriction of processing, data portability and objection. Where processing is based on consent, you can withdraw consent for the future without affecting the lawfulness of processing carried out before withdrawal. You also have the right to lodge a complaint with a competent data-protection supervisory authority.

13. United States privacy choices and Global Privacy Control

US privacy rights differ by state and depend on the applicability of the respective law. Where an applicable law provides an opt-out from sale, sharing, targeted advertising or similar processing, our Site Agent policy is to treat a recognised Global Privacy Control (GPC) signal as an opt-out signal for the relevant optional marketing processing. During the current staged deployment, known optional analytics and marketing modules identified above remain disabled by default, which is the more restrictive interim setting.

14. Accessibility of privacy controls

Our privacy controls are being standardised against WCAG 2.2 Level AA as an engineering target, including keyboard operation, visible focus, understandable labels and equivalent first-level choices to accept or reject optional technologies. The current accessibility status and known limitations are described under Accessibility Information.

15. Medical and research content

Visiting research and medical-information pages does not by itself mean that we infer or intentionally create a health profile about you. AIRCHILL is a development-stage project. The website is not a patient portal and should not be used to send confidential medical records or emergency information.

16. Changes to this policy

We update this Privacy Policy when the website, providers, consent architecture or legal requirements change. The review date at the top identifies the current published version.

Deutsch – Kurzüberblick

Verantwortlicher für medicalcooling.com ist die Ethical Saving gUG, Barthstr. 2, 33330 Gütersloh, vertreten durch Fabian Temme. Technisch notwendige Daten werden für sicheren Websitebetrieb verarbeitet. Bekannte optionale Jetpack-Statistik-, Blaze- und WooCommerce-Analytics-Module sind derzeit deaktiviert. Externe Prototyp- und Spendenangebote werden auf den aktuellen Kernseiten nicht automatisch als notwendige Bestandteile geladen, sondern über bewusste externe Links aufgerufen. Betroffenenrechte nach der DSGVO sowie anwendbare US-Opt-out-Rechte bleiben unberührt. Weitere Informationen: Cookie & Privacy Choices, Accessibility Information und Legal Notice / Impressum.