Medic Translate

Privacy Policy

1. Controller

Jan Nyboer
Geschwister-Scholl-Str. 11
48527 Nordhorn
Germany

Email: [email protected]

2. Privacy at a Glance

Medic Translate has no user accounts, uses no cookies or tracking, and does not send anything you enter to me or to third parties. Everything you enter in the app – in particular the patient's answers in the protocol – stays on your device. Personal data is only processed when the pages are delivered (hosting, section 4) and when you email me (section 5).

3. Storage on Your Device

The app stores the following in your browser's local storage (localStorage):

  • Settings: interface language, light or dark appearance, font size
  • Recently used patient languages and which languages are saved for offline use
  • The session protocol with the patient's answers. It is deleted automatically after 4 hours without input, or immediately via “New patient” or “Delete protocol”.

The app also keeps its program files and – if you choose to – the audio in the browser's cache storage so that it works without an internet connection.

This data never leaves your device and I have no access to it. Storing it is strictly necessary for the functions you use (§ 25 (2) no. 2 TDDDG). You can delete it at any time via “Delete protocol” in the app or by clearing the site data of medic-translate.org in your browser.

4. Hosting and Delivery (Cloudflare)

The app is delivered via Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you access it, Cloudflare processes technically necessary data:

  • IP address
  • Time of access and files requested
  • Browser and device information (user agent)

The purpose is to deliver the app and to protect it against attacks and abuse. The legal basis is my legitimate interest in providing it securely and reliably (Art. 6 (1) (f) GDPR). Cloudflare processes the data on my behalf (Art. 28 GDPR) and keeps it only as long as necessary for these purposes. Data may be transferred to the USA; Cloudflare is certified under the EU-U.S. Data Privacy Framework (adequacy decision, Art. 45 GDPR). More information: Cloudflare Privacy Policy.

The app does not load content from any other provider: no external fonts, scripts, analytics or advertising. Flags and audio are also delivered via Cloudflare.

5. Contact by Email and “Report translation”

If you write to me – including via “Report translation”, which opens your own email program with a prefilled message – I process your email address and the content of your message to handle your request (Art. 6 (1) (f) GDPR). The prefilled message only contains the question and language concerned, no patient data. Please do not send me any patient health data. I delete the message once it has been dealt with, unless statutory retention obligations apply.

6. Your Rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may object to processing based on Art. 6 (1) (f) GDPR on grounds relating to your particular situation (Art. 21). Please contact me at the address above.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the State Commissioner for Data Protection of Lower Saxony (Landesbeauftragte für den Datenschutz Niedersachsen), which is responsible for me.