1. Privacy at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. Detailed information on the subject of data protection can be found in our full privacy policy listed below this text.

Data Collection on this Website

• Who is responsible for data collection on this website?
  The data processing on this website is carried out by the website operator. You can find their contact details in the section "Information on the Responsible Party" in this privacy policy.

• How do we collect your data?
  On the one hand, your data is collected when you communicate it to us. This can be, for example, data that you enter into a contact form or send to us via email. Other data is collected automatically or after your consent when you visit the website by our IT systems. This is mainly technical data (e.g., internet browser, operating system, or time of the page view). This data is collected automatically as soon as you enter this website.

• What do we use your data for?
  Part of the data is collected to ensure the error-free provision of the website. Other data can be used to analyze your user behavior if you have given your consent.

• What rights do you have regarding your data?
  You have the right to receive information about the origin, recipient, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data violates applicable data protection laws, including the General Data Protection Regulation (GDPR), you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.

As our practice is located in Germany, the competent supervisory authority is:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI Baden-Württemberg)

Lautenschlagerstraße 20
70173 Stuttgart
Germany

Telephone: +49 (0)711 615541-0
Email: poststelle@lfdi.bwl.de
Website: https://www.baden-wuerttemberg.datenschutz.de/

2. Information on the Responsible Party (Data Controller)

The responsible party for data processing on this website under the General Data Protection Regulation (GDPR) is:

Health Practice Anthanako
Vaubanallee 47
79100 Freiburg
Germany

Represented by:
Katharina Sonneborn & Michael Welk

Contact:
Phone: 0049-761-7072608
Email: katharinasonneborn@yahoo.de

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).

3. Hosting and Content Delivery Networks (CDN)

Squarespace

Our website is hosted by Squarespace, Inc., 8 Clarkson St, New York, NY 10014, USA

When you visit this website, Squarespace collects personal data to securely serve the website to you and to analyze site traffic, including:

• Information about your browser, network, and device

• Web pages you visited prior to coming to this website

• Web pages you view while on this website

• Your IP address

Legal Basis

The data processing is based on Art. 6 (1) lit. f GDPR (Legitimate Interest). We have a legitimate interest in the technically error-free, secure, and optimized presentation of our website. If a corresponding consent was requested (e.g., consent to store cookies), the processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR; the consent can be revoked at any time.

Data Processing Agreement & International Transfer

We have concluded a Data Processing Addendum (DPA) with Squarespace. This ensures that Squarespace processes user data strictly in accordance with the GDPR and our instructions.

The transfer of data to the USA is legally secured. Squarespace, Inc. is certified under the EU-U.S. Data Privacy Framework (DPF), which establishes an adequate level of data protection recognized by the European Commission. Additionally, EU Standard Contractual Clauses (SCCs) are integrated into the DPA to protect data transfers.

4. Cookies and Consent Technology

This website uses cookies. Some cookies are required for secure operation (necessary cookies). Other cookies (analytics and performance cookies) are only used if you actively acknowledge and accept our cookie banner.

Legal Basis

• Necessary Cookies: Art. 6 (1) lit. f GDPR (Legitimate Interest).

• Analytics Cookies: Art. 6 (1) lit. a GDPR (Consent).

You can change your cookie preferences or withdraw your consent at any time via the cookie settings link in the footer of this website.

Contact Requests and Communication

When you contact us by email, telephone, contact form, or other means of communication, we process the personal data you voluntarily provide (such as your name, contact details, and the content of your inquiry) for the purpose of responding to your request and communicating with you.

Legal Basis

The processing of your personal data is based on:

• Article 6(1)(b) GDPR, where the processing is necessary to take steps at your request prior to entering into a contract or to provide requested services; and/or

• Article 6(1)(f) GDPR, based on our legitimate interest in responding to inquiries and maintaining effective communication with prospective and existing clients.

Where special categories of personal data (including health-related information) are voluntarily provided, processing may additionally be based on Article 9(2)(a) GDPR (explicit consent) or Article 9(2)(h) GDPR where applicable under professional healthcare or therapeutic services.

Retention Period

We retain inquiry-related data only for as long as necessary to process and respond to your request and to comply with any applicable legal obligations.

If no contractual relationship is established, personal data from inquiries will generally be deleted within 12 months after the final communication unless a longer retention period is required by law or justified by legitimate interests.

If a contractual or therapeutic relationship is established, the data may be retained for the duration of that relationship and thereafter in accordance with applicable statutory retention requirements.

Deletion

Personal data will be securely deleted or anonymized once it is no longer required for the purposes for which it was collected and no legal retention obligations apply.