Privacy policy
People who contact us often share very personal information. Here we explain clearly what we do with it.
1. Controller
The controller responsible for data processing on this website is Wendepunkt Gesundheit GmbH, Musterstraße 12, 10115 Berlin, Germany, represented by Dr. med. Max Mustermann. Further details can be found in the legal notice.
You can reach our data protection officer at datenschutz@beispiel.de.
2. What data we process
When you visit the website, our hosting provider automatically stores technical data in server log files: IP address, date and time, the page requested, browser and operating system.
Through the contact form, we only process the details you send us yourself:
- your name (a first name is enough), phone number and/or email address;
- the reason for your enquiry and your preferred contact method and time;
- the content of your message, which may include information about your health or that of a family member if you choose to share it;
- to prevent misuse: IP address, browser identifier, and the date and time of sending.
The self-test is scored entirely in your browser. Your answers are neither transmitted nor stored.
Treatment data arising from appointments is kept in your patient record in accordance with professional and healthcare regulations, and is not processed through this website.
3. Purposes and legal bases
- Handling your enquiry and booking appointments: your consent and steps taken at your request before entering into a contract (Art. 6(1)(a) and (b) GDPR). For health data, your explicit consent (Art. 9(2)(a) GDPR) and the provision of healthcare (Art. 9(2)(h) and (3) GDPR).
- Operating and securing the website, spam protection: our legitimate interest in providing a secure service (Art. 6(1)(f) GDPR).
- Compliance with legal obligations, for example under tax or healthcare law (Art. 6(1)(c) GDPR).
We do not use your data for advertising, we do not sell it and we do not make automated decisions.
4. How long we keep data
Enquiries that do not lead to treatment are deleted no later than 12 months after the last contact. If you start treatment, the information becomes part of your patient record and is kept for the period required by law (usually 10 years after treatment ends, Section 630f of the German Civil Code, BGB). Server log files are deleted after 14 days at the latest.
5. Recipients
Only the staff who handle your enquiry have access, and all of them are bound by professional confidentiality (Section 203 of the German Criminal Code, StGB). Our website is hosted by a provider in the European Union under a data processing agreement pursuant to Art. 28 GDPR.
We will not contact your family, employer, bank or any other party without your written consent, unless we are legally obliged to do so or there is an acute risk to life and limb.
6. Data security
The website uses an encrypted connection (TLS). Enquiries are stored in a password-protected database with restricted access. Internal notifications of new enquiries contain no content. We review access rights regularly.
7. Your rights
You have the right, at any time and free of charge, to:
- access the data we hold about you (Art. 15 GDPR);
- have inaccurate data corrected (Art. 16 GDPR);
- have your data erased or its processing restricted (Art. 17 and 18 GDPR);
- data portability (Art. 20 GDPR);
- object to processing based on legitimate interests (Art. 21 GDPR);
- withdraw your consent with effect for the future (Art. 7(3) GDPR).
To exercise these rights, write to datenschutz@beispiel.de. We will reply within one month. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR); the authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information.
8. Cookies
We only use cookies that are strictly necessary (Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act, TDDDG). They are not used for advertising or to track your browsing:
| Cookie | Purpose | Duration |
|---|---|---|
| wdp_sess | Keeps your session and protects forms against misuse | Until you close your browser |
| cookie_ok | Remembers that you have seen the cookie notice | 12 months |
| lang | Remembers the language you chose (German or English) | 12 months |
We do not use analytics tools, social media pixels or advertising cookies. Fonts are loaded from our own server. You can delete cookies in your browser settings.
9. Third-party content
Some images are loaded from Unsplash and the map on the contact page from OpenStreetMap. When this happens, your browser sends your IP address to these providers, who process it under their own privacy policies. The legal basis is our legitimate interest in an attractive presentation and easy-to-find directions (Art. 6(1)(f) GDPR).
10. Changes
We update this privacy policy when the law or our services change. The date of the current version is shown at the top of this page.