Cookie declaration

Version 1.1 · As of 12 August 2026

1. Which cookies we actually set

This platform sets strictly necessary cookies only: • Sign-in session cookie (authjs.*): keeps you signed in; lifetime at most 12 hours; HttpOnly, Secure. • CSRF protection cookie (authjs.csrf-token): protects forms against forgery; session duration. • Language cookie (NEXT_LOCALE): stores your language choice (German/English/Arabic); 12 months. • Cookie choice (bggi-cookie-consent): stores your decision in the cookie banner; 12 months.

Legal basis: § 25(2) TDDDG (strictly necessary) and Art. 6(1)(b) and (f) GDPR.

2. What we do NOT use

No statistics, analytics or marketing cookies. No third-party tracking. No advertising. Error diagnostics (Sentry) works without cookies and without session replays; personal content is removed before transmission.

3. Changing your choice

Via "Cookie settings" in the footer you can reopen the banner at any time. As no optional cookies currently exist, choosing "Accept all" has no additional effect — should this change, this declaration will be updated BEFORE the introduction and your consent will be requested again.

Change history

2026-08-12 — Version 1.1 — processors specified, retention periods added, transfer to treating hospitals abroad, payment/cancellation/refund rules, new documents (withdrawal, telemedicine, health-data consent, cookies).
2026-08-08 — Version 1.0 — initial publication.