Privacy Policy

01Controller pursuant to GDPR

02General Data Processing

We process personal data in compliance with applicable data protection regulations, in particular the GDPR, BDSG, TTDSG and – where applicable – the EU AI Act.

Processing Principles (Art. 5 GDPR):

• Purpose limitation
• Data minimization
• Storage limitation
• Integrity & Confidentiality
• Transparency
• Accountability

Legal Bases pursuant to Art. 6 GDPR:

• lit. a – Consent
• lit. b – Contract or pre-contractual measures
• lit. c – Legal obligation
• lit. f – Legitimate interest

03Hosting

Our website is hosted by:

Processing on behalf pursuant to Art. 28 GDPR – Server location: Germany / EU

Data Collected:

• IP address
• Date/time of access
• URL & Referrer URL
• Browser type & version
• Operating system

Legal basis: Art. 6 para. 1 lit. f GDPR

04Cookies & Tracking

When visiting our website, we use cookies and similar technologies. Your consent is obtained transparently through a compliant Consent Management Platform (CMP).

05Google Analytics

This website uses Google Analytics 4 by Google Ireland Limited.

• IP address (truncated)
• User behavior (page views, clicks)
• Device/browser data
• Language, location (approximate)

06Calendly (Appointment Booking)

For booking appointments, we use Calendly LLC, Atlanta, USA.

• Name
• Email
• Appointment time
• Message text (if applicable)

Legal basis: Art. 6 para. 1 lit. b GDPR

07AI Components / AI Act

Where we use AI-powered modules, this is not based on high-risk systems pursuant to Art. 6-9 AI Act.

• Use of transparent, traceable AI
• No automated decisions with legal effect
• No profiling within the meaning of Art. 22 GDPR

08Your Rights (Art. 12-23 GDPR)

• Access (Art. 15)
• Rectification (Art. 16)
• Erasure (Art. 17)
• Restriction (Art. 18)
• Data portability (Art. 20)
• Objection (Art. 21)
• Withdrawal of consent (Art. 7 para. 3)
• Complaint to supervisory authority (Art. 77)

09Data Security

We implement technical and organizational measures (TOMs) pursuant to Art. 32 GDPR:

• SSL/TLS encryption
• Access restrictions
• Logging
• Data processing agreements
• Regular training

10Retention and Deletion