Privacy Policy
Information on the processing of personal data pursuant to Articles 13 and 14 GDPR. Status: September 2026.
1. Controller
PD Dr. med. dent. Adham Elsayed
Heinrich-Seliger-Straße 57
60528 Frankfurt am Main, Germany
[email protected]
A data protection officer is not required and has not been appointed.
2. Overview
This website uses no cookies, no analytics and no tracking, and no advertising or social-media plugins. Fonts, images and videos are delivered from this website’s own server; no content is loaded from third-party servers such as Google Fonts or YouTube while you browse. Personal data is only processed as described below.
3. Hosting and server log files
This website is hosted and delivered by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (Cloudflare Pages and content delivery network). When you visit the site, the technically necessary access data is processed: IP address, date and time of the request, the page requested, referrer URL, browser and operating system. This is necessary to deliver the website and to protect it against attacks and misuse.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website). A data processing agreement is in place with Cloudflare. Cloudflare is certified under the EU–US Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR); in addition, the EU standard contractual clauses apply. Log data is deleted by Cloudflare after a short period and is not combined with other data.
4. Contact form and email
When you contact me by form or by email, I process the data you provide (name, organisation, email address, date or timeframe, type of enquiry and your message) solely to answer your enquiry. Before sending the form you confirm that you have read this privacy policy.
Legal basis: Art. 6(1)(b) GDPR where your enquiry relates to a treatment, course, lecture or other contract; otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).
Form submissions are transmitted by the form service Tally BV, Belgium (within the EU), under a data processing agreement, and delivered to my mailbox.
Please do not send medical records, clinical photographs or other health information through the form or by unencrypted email. If you nevertheless provide health information, it is processed only to answer your enquiry (Art. 9(2)(a) GDPR).
Storage period: your data is deleted once your enquiry has been fully dealt with, unless statutory retention obligations apply (e.g. for invoices under German commercial and tax law, up to 10 years).
5. Updates (“Join and stay updated”)
If you register for updates, I use your name, email address and the audience you select to inform you about courses, lectures, publications and professional activities. Registration uses the double opt-in procedure: you receive a confirmation email and are only added once you have confirmed. The registration and confirmation are logged as proof of consent.
Legal basis: your consent, Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future, via the unsubscribe link in every email or by writing to [email protected]. Your data is then deleted. Registration and sending are handled by the mailing service MailerLite Limited, 88 Harcourt Street, Dublin 2, Ireland (within the EU), under a data processing agreement; subscriber data is stored on servers within the EU.
6. Links to social networks
This website contains plain links to LinkedIn, Instagram, Facebook, YouTube and ResearchGate. No data is transmitted to these services when you view this website. Only when you click a link are you taken to the respective platform, whose own privacy policy then applies.
7. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw consent at any time with effect for the future (Art. 7(3)).
Right to object (Art. 21 GDPR): where processing is based on Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation.
To exercise your rights, an informal message to [email protected] is sufficient.
8. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany, www.datenschutz.hessen.de.
9. Further information
There is no obligation to provide personal data; without it, however, I cannot answer your enquiry. No automated decision-making or profiling takes place. This website uses TLS encryption (recognisable by “https://” and the padlock symbol in your browser).
The German version of this privacy policy is authoritative.