Privacy policy

1. Data controller

2. Processed data and purposes

2.1 Hosting (Cloudflare Pages)

This website is hosted via Cloudflare Pages. Cloudflare processes technically necessary connection data (IP address, timestamp, accessed URL). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation). Data processing agreement concluded with Cloudflare.

2.2 Online booking (Belbo)

When booking an appointment, name, email address and other booking-related data are transmitted to Belbo. Legal basis: Art. 6(1)(b) GDPR (contract performance). Data processing agreement concluded with Belbo.

2.3 CMS (Sanity)

Website content is managed via Sanity. Sanity only processes editorial content, no customer data. EU Data Residency enabled. Data processing agreement concluded with Sanity.

2.4 Web analytics (Cloudflare Web Analytics)

We use Cloudflare Web Analytics — cookie-free and without personal data. No consent required under TDDDG §25.

3. Cookies and consent (TDDDG §25)

Session cookies (for appointment booking) are technically necessary and do not require consent. Additional cookies are only set with your consent.

4. Your rights

You have the right to information (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). Complaints can be filed with the State Commissioner for Data Protection of Baden-Württemberg: www.baden-wuerttemberg.datenschutz.de

5. Third-country transfers

Cloudflare and Sanity have offices in the USA. The transfer is based on the EU-US Data Privacy Framework (adequacy decision of the EU Commission of July 10, 2023).