Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Matthias Schilling
Sperlingstr. 2
91056 Erlangen
Germany

Email: info@appsolutelyhealthy.com
Phone: +49 (0) 1573 / 5280088

2. General Information

We process personal data only to the extent necessary to provide our website, to arrange appointments, to conduct online consultations, and to process contracts and issue invoices.

3. Hosting (Hetzner)

Our website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.

When accessing our website, so-called server log files are automatically processed by the hosting provider. These may include the following data in particular:

IP address (shortened or complete, depending on system configuration)
Date and time of the request
Accessed page/file
Referrer URL
Browser type and version
Operating system
HTTP status code

The purpose of the processing is the technical provision of the website, ensuring IT security and system stability, and error analysis.
The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure and stable operation of the website).
The log files are stored only as long as necessary to ensure operation and to comply with legal requirements.

4. Cookies / Tracking

Our website does not use tracking or marketing cookies. Only technically necessary data is processed that is required for the operation of the website.

5. Appointment Booking / Consultation Appointment

If you book a consultation appointment via our website, we process the data you provide for scheduling and managing the appointment.

Processed data:

Email address
Selected day / time slot

Purposes of the processing:

Scheduling and managing appointments
Sending confirmation, change, and cancellation emails
Conducting the consultation

The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures / performance of a contract).
The data is generally stored until the appointment has taken place and then deleted, unless statutory retention obligations apply.

6. Booking Paid Services (Premium BGM Suite)

If you book paid services via our website (e.g. Premium BGM Suite), we process the data you provide for contract execution and invoicing.

Processed data (in particular):

Company
Branding name (for the app)
Community name (for the app)
Title
First name, last name
Email address
Phone number
Street, house number
Postal code, country
VAT ID
if applicable, booked consultation appointment (day/time slot)

In addition, a security check (e.g. “7 + 3 = ?”) is processed in order to prevent automated submissions (spam/bots).

Purposes of the processing:

Processing the booking and performing the contract
Providing and activating the booked services
Customer communication
Invoicing and accounting
Conducting any booked consultation appointments

The legal basis is Art. 6 (1) (b) GDPR (performance of a contract). To the extent processing is required to fulfill legal obligations (e.g. retention obligations under tax law), the legal basis is Art. 6 (1) (c) GDPR.

Data is stored in accordance with statutory retention periods and then deleted, unless further legal obligations or legitimate interests prevent deletion.

7. Email Communication (STRATO)

For sending and receiving emails, we use mail servers of STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. Automated emails are sent server-side; for other communication, an email client is used.

Processed data (in particular):

Email address
Email content (e.g. appointment confirmations, appointment changes, cancellations, invoice information)
Communication metadata (e.g. timestamp, sender/recipient)

The purpose is communication in connection with appointment bookings, service bookings, and contract processing.
The legal basis is Art. 6 (1) (b) GDPR (performance of a contract / pre-contractual measures) as well as Art. 6 (1) (f) GDPR (legitimate interest in efficient communication).
Emails are archived and stored in accordance with legal requirements.

8. Online Consultation / Video Conferences (Zoom)

For online consultations we use Zoom (video conferencing software). The provider is Zoom Video Communications, Inc.. When using Zoom, personal data is processed. This includes in particular:

Name (depending on Zoom settings or display name in the meeting)
Email address (if used)
Meeting metadata (e.g. meeting ID, date/time, duration)
Technical data (e.g. IP address, device/connection information)

The purpose of the processing is conducting online consultations and communication via video conference.
The legal basis is Art. 6 (1) (b) GDPR (performance of a contract / pre-contractual measures).

When using Zoom, personal data may also be transferred to countries outside the European Economic Area (e.g. the USA). Zoom is a participant in the EU-US Data Privacy Framework (DPF) and uses appropriate safeguards such as EU Standard Contractual Clauses to ensure an adequate level of data protection.

Recordings: Our video conferences are generally not recorded. If recording is required in exceptional cases, this will only take place after prior information has been provided.

9. Invoicing / Accounting

For paid bookings, we create invoices automatically based on the data entered in the booking form. In particular, we process:

Company data
Address
Contact person (name)
Email address
Phone number
VAT ID

The purpose is invoicing and compliance with statutory retention obligations.
The legal basis is Art. 6 (1) (b) GDPR (performance of a contract) as well as Art. 6 (1) (c) GDPR (legal obligation, in particular requirements under tax law).
Data is stored in accordance with statutory retention periods.

10. Recipients / Data Processors

To provide our website and services, we use service providers (data processors), in particular:

Hetzner Online GmbH (hosting)
STRATO AG (email servers)
Zoom Video Communications, Inc. (video conferences)

Data processing agreements pursuant to Art. 28 GDPR have been concluded with the aforementioned service providers (in particular Hetzner, STRATO and Zoom).

11. Requirement to Provide Data

Providing the data is necessary in order to book appointments or order paid services and to process them. Without this data, no contract can be concluded and no appointment organization can be carried out.

12. Storage Period

We store personal data only as long as necessary for the stated purposes. In addition, we store data insofar as statutory retention obligations (in particular tax and commercial law requirements) apply.

13. Your Rights

You have the right at any time to:

Access (Art. 15 GDPR)
Rectification (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Object to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR)

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

This Privacy Policy is provided in multiple languages. The German version shall be authoritative for interpretation.