User Accounts

Users can optionally create a user account where they can, in particular, view their orders. As part of the registration process, the required mandatory information will be communicated to the users. User accounts are not public and cannot be indexed by search engines. If users have terminated their user account, their data with regard to the user account will be deleted, subject to retention for commercial or tax reasons as per legal obligations. Information in the customer account will remain until its deletion followed by archival in case of legal obligation or our legitimate interests (e.g., in the event of legal disputes). It is the responsibility of users to save their data before the end of the contract if they terminate their account.

 

As part of registration and logins, as well as the use of our online services, we store the IP address and the time of the respective user action. This storage is based on our legitimate interests, as well as those of the users, to protect against misuse and other unauthorized use. This data is not passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so.

 

Data deletion occurs after the expiration of legal warranty and comparable obligations; the necessity of retaining the data is reviewed every three years. In the case of legal archiving obligations, deletion occurs after their expiration.

 

Agency Services

We process the data of our clients as part of our contractual services, which include conceptual and strategic consulting, campaign planning, software and design development/consulting or maintenance, campaign implementation and processing, server administration, data analysis/consulting services, and training services.

 

Here, we process inventory data (e.g., customer master data, such as names or addresses), contact data (e.g., email, phone numbers), content data (e.g., text entries, photographs, videos), contract data (e.g., contract subject, duration), payment data (e.g., bank details, payment history), usage data, and metadata (e.g., as part of evaluating and measuring the success of marketing measures). We generally do not process special categories of personal data unless these are components of a commissioned processing.

 

The affected individuals include our clients, prospects, and their customers, users, website visitors, or employees, as well as third parties. The purpose of processing is to provide contractual services, billing, and customer service.

 

The legal basis for processing is derived from Art. 6(1)(b) GDPR (contractual services) and Art. 6(1)(f) GDPR (analysis, statistics, optimization, security measures). We process data necessary for the establishment and fulfillment of contractual services and indicate the necessity of their provision unless this is evident to the parties concerned.

 

Disclosure to external parties only takes place if it is required as part of an order. When processing data disclosed to us within an order, we act in accordance with the instructions of the clients and the legal requirements.

 

We delete the data upon the expiration of legal warranty and comparable obligations; the necessity of data retention is reviewed every three years. In the case of legal archiving obligations, deletion occurs after their expiration (6 years per § 257(1) HGB, 10 years per § 147(1) AO). If data is provided to us by the client within an order, it will be deleted as per the specifications of the order, typically upon completion.

 

Therapeutic Services and Coaching

We process the data of our clients and interested parties, as well as other commissioning parties or contractual partners (collectively referred to as “clients”), in accordance with Art. 6(1)(b) GDPR to provide them with our contractual or pre-contractual services.

 

The data processed, its type, scope, and purpose, as well as the necessity of its processing, are determined by the underlying contractual relationship. In principle, the processed data includes inventory and master data of clients (e.g., name, address, etc.), contact data (e.g., email address, phone, etc.), contract data (e.g., services used, fees, names of contact persons, etc.), and payment data (e.g., bank details, payment history, etc.).

 

As part of our services, we may also process special categories of data as per Art. 9(1) GDPR, particularly information about the health of clients, possibly with reference to their sexual life or orientation, ethnic origin, or religious or ideological beliefs.

 

Such data is processed either based on the explicit consent of the clients in accordance with Art. 6(1)(a), Art. 7, Art. 9(2)(a) GDPR or for health care purposes on the basis of Art. 9(2)(h) GDPR, § 22(1)(1)(b) BDSG.

 

If required for contractual fulfillment or legally mandated, we disclose or transmit client data as part of communication with other professionals, necessary or typically involved third parties, such as billing agencies or comparable service providers. This is done to the extent required for our services as per Art. 6(1)(b) GDPR, legally required as per Art. 6(1)(c) GDPR, or in the interest of efficient and cost-effective healthcare as a legitimate interest per Art. 6(1)(f) GDPR.

 

Data deletion occurs when the data is no longer required for fulfilling contractual or legal obligations, including care duties or dealing with warranty or similar obligations. The necessity of retaining data is reviewed every three years.