MONDAY, 17 AUGUST 2026

Privacy Policy

Please note: This English version is a convenience translation. Only the German version is legally binding.

1. Data Protection at a Glance

Summary of Data Processing

  • Automatic data collection: Server logs, cookies, usage statistics, IP addresses
  • Purpose: Website operation, analysis, user-friendliness, marketing, security
  • Legal basis: Legitimate interest (Art. 6 Abs. 1 lit. f DSGVO [Art. 6(1)(f) GDPR]), consent (Art. 6 Abs. 1 lit. a DSGVO [Art. 6(1)(a) GDPR])
  • Data protection officer: Simon Gütter (for contact details see the Legal Notice)
  • Transfer to third countries: USA (Google, Amazon, Facebook) – with appropriate safeguards
  • Automated decision-making: No automated decisions or profiling

General Notes

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified. For detailed information on the subject of data protection, please refer to our privacy policy set out below this text.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

Data Collection on this Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the Legal Notice of this website.

How do we collect your data?

On the one hand, your data is collected when you provide it to us. This may, for example, be data that you enter into a contact form.

Other data is collected automatically or upon your consent by our IT systems when you visit the website. This consists primarily of technical data (e.g. internet browser, operating system, or time of the page view). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Part of the data is collected to ensure the error-free provision of the website. Other data may be used to analyse your user behaviour.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipient, and purpose of your stored personal data. You also have the right to request the rectification or erasure of this data. If you have given consent to data processing, you can revoke this consent at any time with future effect. In addition, you have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

2. Controller

The controller within the meaning of the General Data Protection Regulation (Datenschutz-Grundverordnung) and other national data protection laws of the Member States as well as other data protection provisions is:

Simon Gütter
Buschmühlenweg 29
15230 Frankfurt (Oder)
E-Mail: kontakt@gesundefakten.com

3. Hosting and Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

This data is not merged with other data sources.

The collection of this data is based on Art. 6 Abs. 1 lit. f DSGVO. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website – for this purpose, the server log files must be collected.

4. Cookies

This website uses cookies. These are small text files that your web browser stores on your terminal device. Cookies help us make our offer more user-friendly, effective, and secure.

Some cookies are "session cookies." Such cookies are automatically deleted after the end of your browser session. In contrast, other cookies remain stored on your terminal device until you delete them yourself. Such cookies help us recognise you when you return to our website.

With a modern web browser, you can monitor, restrict, or prevent the setting of cookies. Many web browsers can be configured in such a way that cookies are automatically deleted when the program is closed. Deactivating cookies may result in limited functionality of our website.

The setting of cookies that are required to carry out the electronic communication process or to provide certain functions you have requested (e.g. shopping cart function) is carried out on the basis of Art. 6 Abs. 1 lit. f DSGVO. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services. Insofar as a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 Abs. 1 lit. a DSGVO; the consent can be revoked at any time.

Cookie Categories in Detail

We use different types of cookies on our website:

Necessary Cookies (Technically Required)

  • Session cookies: Enable navigation and the use of basic website functions
  • Security cookies: Protection against CSRF attacks and other security threats
  • Load-balancing cookies: Optimal distribution of server load
  • Cookie consent cookies: Store your cookie preferences

Functional Cookies

  • Language settings: Remember your preferred language
  • Theme cookies: Store design preferences (light/dark mode)
  • Shopping cart cookies: Maintain your selection in the shopping cart
  • Login status: Keep you logged in during repeated visits

Analysis Cookies

  • Google Analytics: _ga, _gat, _gid (Usage statistics)
  • Hotjar: _hjSessionUser_*, _hjSession_* (User behaviour)
  • Facebook Pixel: _fbp, _fbc (Conversion tracking)

Marketing Cookies

  • Google Ads: _gcl_au, _gcl_aw (Ad tracking)
  • Facebook: fr (Personalised advertising)
  • Amazon: amazon-pay-* (Affiliate tracking)

Cookie Management

Browser settings: You can block or delete cookies in your browser:

  • Chrome: Settings → Privacy and security → Cookies
  • Firefox: Settings → Privacy & Security → Cookies
  • Safari: Preferences → Privacy → Manage Cookies
  • Edge: Settings → Cookies and site permissions

Opt-Out Tools:

5. Contact Form and Email Contact

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not pass on this data without your consent.

The processing of this data is carried out on the basis of Art. 6 Abs. 1 lit. b DSGVO (Art. 6(1)(b) GDPR), provided that your enquiry is related to the performance of a contract or is required to take steps prior to entering into a contract. In all other cases, processing is based on our legitimate interest in the effective processing of enquiries addressed to us (Art. 6 Abs. 1 lit. f DSGVO (Art. 6(1)(f) GDPR)) or on your consent (Art. 6 Abs. 1 lit. a DSGVO (Art. 6(1)(a) GDPR)) if this has been requested.

The data entered by you into the contact form remains with us until you request that we erase it, revoke your consent to its storage, or the purpose for data storage no longer applies (e.g. after your enquiry has been fully processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Newsletter

If you would like to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter. Further data is not collected or is collected only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.

The processing of the data entered into the newsletter registration form takes place exclusively on the basis of your consent (Art. 6 Abs. 1 lit. a DSGVO). You may revoke your consent to the storage of the data, the email address, and their use for sending the newsletter at any time, for example via the "Unsubscribe" link in the newsletter. The lawfulness of the data processing operations that have already taken place remains unaffected by the revocation.

6. Analysis Tools and Advertising

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Irland.

Google Analytics enables the website operator to analyse the behaviour of website visitors. In doing so, the website operator receives various usage data, such as page views, duration of visit, operating systems used, and origin of the user. This data may be compiled by Google into a profile that is assigned to the respective user or their end device.

Collected data:

  • Anonymised IP address
  • Visited pages and duration of visit
  • Referrer URL (from which page you come)
  • Browser and operating system
  • Screen resolution
  • Geographical location (country/region)

The use of Google Analytics is based on Art. 6 Abs. 1 lit. f DSGVO (Art. 6(1)(f) GDPR). The website operator has a legitimate interest in analysing user behaviour in order to optimise both its web offering and its advertising. If a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 Abs. 1 lit. a DSGVO (Art. 6(1)(a) GDPR); this consent can be revoked at any time.

IP anonymisation: We have activated the IP anonymisation function on this website. As a result, your IP address will be truncated by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area prior to transmission to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.

Browser Plugin: You can prevent the storage of cookies by adjusting your browser software settings accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. Furthermore, you can prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/

Google Web Fonts

This page uses so-called web fonts provided by Google for the uniform display of fonts. When a page is called up, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

For this purpose, the browser you use must connect to Google's servers. Through this, Google gains knowledge that this website was accessed via your IP address. The use of Google WebFonts is based on Art. 6 Abs. 1 lit. f DSGVO. The website operator has a legitimate interest in the uniform display of the typeface on its website. If a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 Abs. 1 lit. a DSGVO; this consent can be revoked at any time.

Google Tag Manager

This website uses Google Tag Manager. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Irland.

Google Tag Manager is a tool with the help of which we can integrate tracking or statistical tools and other technologies on our website. Google Tag Manager itself does not create user profiles, does not store cookies, and does not carry out independent analyses. It only serves to manage and deploy the tools integrated via it. However, Google Tag Manager collects your IP address, which may also be transmitted to Google's parent company in the United States.

The use of Google Tag Manager is based on Art. 6 Abs. 1 lit. f DSGVO. The website operator has a legitimate interest in a fast and uncomplicated integration and management of various tools on its website. If a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 Abs. 1 lit. a DSGVO; this consent can be revoked at any time.

Google AdSense

This website uses Google AdSense, a service for integrating advertisements by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Irland.

Google AdSense uses so-called "cookies", text files that are stored on your computer and that enable an analysis of your use of the website. Google AdSense also uses so-called web beacons (invisible graphics). Through these web beacons, information such as visitor traffic on these pages can be evaluated.

The information generated by cookies and web beacons about the use of this website (including your IP address) and delivery of advertising formats is transmitted to a Google server in the USA and stored there. This information may be passed on by Google to contractual partners of Google. However, Google will not merge your IP address with other data stored by you.

Google Ads and Google Remarketing

This website uses the online advertising programme "Google Ads" and, in the context of Google Ads, conversion tracking. Google Conversion Tracking is an analysis service of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Irland.

When you click on an ad placed by Google, a cookie for conversion tracking is set. Cookies are small text files that the internet browser stores on the user's computer. These cookies lose their validity after 30 days and do not serve to identify users personally. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the ad and was redirected to this page.

Furthermore, we use Google Remarketing. With Google Remarketing, we can display targeted advertising to people who have already visited our website on other websites in the Google Display Network. This is done by means of cookies that store information about previous visiting behaviour.

Hotjar

This website uses Hotjar. The provider is Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta (Website: https://www.hotjar.com).

Hotjar is a tool for analysing user behaviour on this website. With Hotjar, we can, among other things, record your mouse and scroll movements as well as clicks. In doing so, Hotjar can also determine how long you remained with the mouse pointer on a certain spot. From this information, Hotjar creates so-called heatmaps, which can be used to determine which website areas are viewed preferentially by the website visitor.

Furthermore, we can determine how long you stayed on a page and when you left it. We can also determine at what point you abandoned your entries in a contact form (so-called conversion funnels).

In addition, direct feedback from website visitors can be collected using Hotjar. This serves to improve the web offering of the website operator.

Hotjar uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g. cookies or the use of device fingerprinting).

The use of Hotjar is based on Art. 6 Abs. 1 lit. f DSGVO. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its web offering and its advertising. Data transfer to the EU is based on an adequacy decision of the EU Commission.

Objection to Hotjar: You can object to data collection by Hotjar by clicking on the following link and following the instructions provided there: https://www.hotjar.com/legal/compliance/opt-out

Amazon Partner Programme

The operators of the pages participate in the Amazon EU Partner Programme. On our pages, advertisements and links to the page of Amazon.de are integrated by Amazon, through which we can earn money via advertising cost reimbursement. Amazon uses cookies for this purpose in order to trace the origin of orders. As a result, Amazon can recognise that you clicked the affiliate link on our website.

The storage of "Amazon cookies" is based on Art. 6 Abs. 1 lit. f DSGVO. The website operator has a legitimate interest in this, as the amount of its affiliate remuneration can only be determined through the cookies.

You can find further information on data use by Amazon in Amazon's privacy policy: https://www.amazon.de/gp/help/customer/display.html

7b. Webinar and Video Conferencing Tools

Zoom

We use Zoom for video conferences, online seminars and similar online meetings. The provider is Zoom Video Communications Inc., San Jose, 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA.

Data processing: When using Zoom, various types of data are processed. The scope of the data also depends on what data you provide prior to or during participation in an online meeting.

The following personal data is subject to processing:

  • User details: First name, last name, telephone (optional), e-mail address, avatar (optional), department (optional)
  • Meeting metadata: Topic, description (optional), participant IP addresses, device/hardware information
  • For recordings (optional): MP4 file of all video, audio and presentation recordings, M4A file of all audio recordings, text file of the online meeting chat
  • When dialling in by telephone: Information on the incoming and outgoing telephone number, country name, start and end time

The legal basis for data processing is Art. 6 Abs. 1 lit. b DSGVO (Art. 6(1)(b) GDPR), insofar as the processing serves the performance or initiation of a contract, and Art. 6 Abs. 1 lit. f DSGVO (Art. 6(1)(f) GDPR), insofar as the processing serves to safeguard legitimate interests (efficient conduct of online meetings).

WebinarJam/EverWebinar

This website uses WebinarJam and EverWebinar for conducting webinars. The provider is Genesis Digital LLC, 5600 Arapahoe Ave Boulder, CO 80303, USA.

WebinarJam/EverWebinar enables the hosting of live and automated webinars. When registering for a webinar, personal data such as name, e-mail address and, where applicable, further details are collected.

Collected data:

  • Registration data (name, e-mail address, telephone number)
  • Participation data (IP address, browser information, duration of participation)
  • Interaction data (chat messages, survey responses, clicks)

The data processing is carried out on the basis of your consent (Art. 6 Abs. 1 lit. a DSGVO (Art. 6(1)(a) GDPR)) or for the performance of a contract (Art. 6 Abs. 1 lit. b DSGVO). Data transfer to the USA takes place on the basis of standard contractual clauses.

7c. Payment Service Providers

PayPal

On this website, we offer, among other methods, payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal").

If you select payment via PayPal, the payment data you entered will be transmitted to PayPal. The transmission of your data to PayPal takes place on the basis of Art. 6 Abs. 1 lit. a DSGVO (consent) and Art. 6 Abs. 1 lit. b DSGVO (processing for the performance of a contract). You have the option to withdraw your consent to data processing at any time. A withdrawal does not affect the validity of past data processing operations.

Stripe

On this website, we offer, among other methods, payment via Stripe. The provider of this payment service is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Irland (hereinafter "Stripe").

If you select payment via Stripe, the payment data you entered will be transmitted to Stripe. The transmission of your data to Stripe takes place on the basis of Art. 6 Abs. 1 lit. a DSGVO (consent) and Art. 6 Abs. 1 lit. b DSGVO (processing for the performance of a contract).

Data collected by Stripe:

  • Credit card / payment information
  • IP address and browser information
  • Transaction details
  • Fraud detection data

Copecart

This website uses Copecart as a payment service provider. The provider is Copecart GmbH, Josephspitalstraße 15, 80331 München, Deutschland.

Copecart processes payments and handles the processing of orders. When placing an order via Copecart, your payment data is transmitted directly to Copecart. The data processing is carried out on the basis of Art. 6 Abs. 1 lit. b DSGVO for contract performance.

Data processed by Copecart:

  • Contact details (name, e-mail, address)
  • Payment information
  • Order details
  • IP address

8. External Content and Third-Party Providers

Google Maps

This site uses the map service Google Maps. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Irland.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission. If Google Maps is activated, Google may use Google Web Fonts for the purpose of uniform representation of fonts. When calling up Google Maps, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

OpenStreetMap

We use the map service of OpenStreetMap (OSM). The provider is the open-source community that jointly operates the OpenStreetMap project. When you visit a website on which OpenStreetMap is integrated, your IP address and other information about your behaviour on this website, among other things, are forwarded to the OSM servers. For this purpose, OpenStreetMap may store cookies in your browser or use comparable recognition technologies.

reCAPTCHA

We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Irland.

The purpose of reCAPTCHA is to check whether data entry on this website (e.g. in a contact form) is done by a human or by an automated programme. For this purpose, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, duration of the website visitor's stay on the website or mouse movements made by the user).

The data collected during the analysis is forwarded to Google. The reCAPTCHA analyses run entirely in the background. Website visitors are not notified that an analysis is taking place.

Jetpack (WordPress.com)

This website uses Jetpack, a plugin from Automattic Inc., 60 29th Street #343, San Francisco, CA 94110-4929, USA. Jetpack offers various functions such as statistics, backup, security and Content Delivery Network (CDN).

Data collected by Jetpack:

  • IP address and browser information
  • Visit statistics and page views
  • Referrer information
  • User-agent strings

The data processing is carried out on the basis of Art. 6 Abs. 1 lit. f DSGVO (legitimate interest in website optimisation and security).

Cloudflare

We use the Cloudflare service. The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare offers a globally distributed Content Delivery Network with DNS resolution.

Purpose of use: Cloudflare analyses the data traffic between your browser and our website for malicious content. If malicious content is identified, Cloudflare can display a warning before this content reaches you.

Collected data: IP address, performance data, security logs, HTTP requests. The data processing is carried out on the basis of Art. 6 Abs. 1 lit. f DSGVO (legitimate interest in secure website provision).

WP Rocket

This website uses WP Rocket for website optimisation. The provider is WP Media, 16 Rue du Sentier, 75002 Paris, Frankreich. WP Rocket creates cache files and optimises the loading speed of the website.

WP Rocket stores technical cookies to optimise website performance. These are required for the proper functioning of the website and are processed on the basis of Art. 6 Abs. 1 lit. f DSGVO.

Yoast SEO

We use Yoast SEO for search engine optimisation. The provider is Team Yoast B.V., Keizersgracht 313, 1016 EE Amsterdam, Niederlande.

Yoast SEO processes content to generate structured data (Schema.org) and meta tags. No personal data of website visitors is collected in the process. The processing is carried out on the basis of Art. 6 Abs. 1 lit. f DSGVO (legitimate interest in search engine optimisation).

Contact Form 7

We use Contact Form 7 for contact forms. When submitting the form, the data entered is sent to us and stored for processing your enquiry.

Collected data: Name, e-mail address, message and further optional fields depending on the form. IP address and timestamp of transmission are stored for spam prevention.

The data processing is carried out on the basis of Art. 6 Abs. 1 lit. b DSGVO (contract initiation) or Art. 6 Abs. 1 lit. f DSGVO (legitimate interest in customer enquiries).

9. Data Processing and Commissioned Processing

Hosting

We host the content of our website with the following provider:

External Hosting

This website is hosted externally. The personal data collected on this website is stored on the servers of the host / hosts. This may include, in particular, IP addresses, contact requests, meta and communication data, contractual data, contact details, names, website access, and other data generated via a website.

External hosting is carried out for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 Abs. 1 lit. b DSGVO [Art. 6(1)(b) GDPR]) and in the interest of a secure, fast, and efficient provision of our online offering by a professional provider (Art. 6 Abs. 1 lit. f DSGVO [Art. 6(1)(f) GDPR]). Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 Abs. 1 lit. a DSGVO [Art. 6(1)(a) GDPR]; consent may be revoked at any time.

Our host(s) will only process your data to the extent necessary to fulfil their performance obligations and will follow our instructions with regard to this data.

Content Delivery Network (CDN)

We use a Content Delivery Network (CDN). A CDN is a network of globally distributed servers capable of delivering content to the website user in an optimised manner. For this purpose, personal data may be processed in server log files. This concerns, in particular, IP addresses, which are necessary for delivering content to your browser.

The use of a CDN is based on our legitimate interests, i.e. interest in the secure and efficient provision as well as the optimisation of our web offering (Art. 6 Abs. 1 lit. f. DSGVO).

WordPress.com Stats

This website uses WordPress.com Stats for the statistical evaluation of visitor traffic. The provider is Automattic Inc., 60 29th Street #343, San Francisco, CA 94110-4929, USA.

WordPress.com Stats uses cookies and collects information about the use of the website. The information is transmitted to Automattic servers in the USA and stored there.

WP Super Cache

To speed up the website, we use WP Super Cache. This plugin creates static HTML files from dynamic WordPress pages. No personal data of visitors is processed in the process.

Wordfence Security

We use Wordfence Security for protection against malware and hacker attacks. The provider is Defiant Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA.

Data collected: IP addresses, login attempts, suspicious activity, firewall logs. Processing takes place to protect website security on the basis of Art. 6 Abs. 1 lit. f DSGVO.

9a. Affiliate Marketing and Partner Programmes

AWIN (Affiliate Window)

We participate in the affiliate programme of AWIN. The provider is AWIN AG, Eichhornstraße 3, 10785 Berlin, Deutschland.

AWIN uses cookies to determine via which partner website a user arrived at our website. This enables AWIN and us to track whether you came to us via an affiliate link.

Check24 Partnerprogramm

We participate in the Check24 partner programme. The provider is CHECK24 Vergleichsportal GmbH, Keplerstraße 5-11, 10589 Berlin, Deutschland.

Check24 uses tracking technologies to track affiliate commissions. In doing so, cookies may be set and IP addresses processed.

Digistore24

We use Digistore24 as an affiliate partner and payment processor. The provider is Digistore24 GmbH, St.-Godehard-Straße 32, 31139 Hildesheim, Deutschland.

Digistore24 processes data for affiliate commission settlement and payment processing. In the event of purchases, order and payment data are transmitted to Digistore24.

9b. GDPR Compliance and Commissioned Processing

Data Processing Agreements (DPA)

We have concluded data processing agreements pursuant to Art. 28 DSGVO [Art. 28 GDPR] with all third-party providers who process personal data on our behalf. This includes:

  • Hosting providers and CDN services
  • Email service providers
  • Analytics and tracking providers
  • Payment service providers
  • Marketing tool providers

Data Protection Impact Assessment (DPIA)

For high-risk data processing operations, we have conducted data protection impact assessments. This applies in particular to:

  • Extensive tracking and profiling
  • Transfers to third countries
  • Processing of special categories of personal data

Record of Processing Activities

We maintain a record of all processing activities pursuant to Art. 30 DSGVO [Art. 30 GDPR]. This contains information about:

  • Purposes of the processing
  • Categories of data subjects and data
  • Recipients of the data
  • Erasure periods
  • Technical and organisational measures

9c. Special Categories of Personal Data

Health Data

As a health and weight-loss website, we may process health data in certain cases:

  • Voluntary details: Information regarding weight, height, health status in forms
  • Blog comments: Health-related experience reports
  • Newsletter preferences: Indications of interests in health topics

Legal basis: Processing is carried out only with your explicit consent pursuant to Art. 9 Abs. 2 lit. a DSGVO [Art. 9(2)(a) GDPR] or if you have made the data public (Art. 9 Abs. 2 lit. e DSGVO [Art. 9(2)(e) GDPR]).

Revocation and Erasure

You can revoke your consent to the processing of health data at any time. In the event of a revocation, the corresponding data will be erased immediately, provided that no other legal bases exist.

9d. Monitoring and Logging

Uptime Monitoring

We use external services to monitor website availability. In doing so, HTTP requests are regularly sent to our website and response times are measured.

Data collected: Server response times, HTTP status codes, IP addresses of the monitoring servers. Processing takes place on the basis of Art. 6 Abs. 1 lit. f DSGVO (legitimate interest in reliable website operation).

Error Logging

For troubleshooting purposes, we log technical errors and exceptions. These logs may contain IP addresses, browser information, and error messages.

Retention: Error logs are automatically deleted after 30 days. In the event of critical security incidents, logs may be retained for up to 6 months.

10. Your Rights

You have the following rights regarding your personal data:

Right of access (Art. 15 DSGVO [Art. 15 GDPR])

You have the right to request confirmation as to whether personal data concerning you is being processed, and to obtain access to this personal data as well as the following information:

  • the purposes of the processing
  • the categories of personal data processed
  • the recipients or categories of recipients
  • the planned storage period

Right to rectification (Art. 16 DSGVO [Art. 16 GDPR])

You have a right to immediate rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data.

Right to erasure (Art. 17 DSGVO [Art. 17 GDPR])

You have the right to demand the immediate erasure of personal data concerning you, provided that one of the following reasons applies:

  • The data is no longer necessary for the purposes
  • You withdraw your consent
  • The data was processed unlawfully
  • The erasure is required to fulfil a legal obligation

Right to restriction of processing (Art. 18 DSGVO [Art. 18 GDPR])

You have the right to request the restriction of processing if one of the following conditions is met:

  • The accuracy of the data is contested by you
  • The processing is unlawful and you oppose the erasure
  • We no longer require the data, but you require it for the establishment, exercise or defence of legal claims
  • You have lodged an objection

Right to data portability (Art. 20 DSGVO [Art. 20 GDPR])

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. Furthermore, you have the right to transmit this data to another controller without hindrance from us.

Right to object (Art. 21 DSGVO [Art. 21 GDPR])

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 Abs. 1 lit. e oder f DSGVO [Art. 6(1)(e) or (f) GDPR]; this also applies to profiling based on these provisions.

Objection to promotional emails: The use of contact details published within the scope of the legal notice obligation for sending unsolicited advertising and information materials is hereby objected to. The operators of the website expressly reserve the right to take legal action in the event of unsolicited promotional information being sent.

Right to withdraw consent under data protection law (Art. 7 Abs. 3 DSGVO [Art. 7(3) GDPR])

You have the right to withdraw your consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Contact for exercising your rights: To exercise your rights, you can contact us at any time. You will find our contact details in the Legal Notice.

11. Storage Period and Erasure

We only store personal data for as long as is necessary to fulfil the respective purposes or as provided for by statutory retention periods.

Automatic erasure

  • Server-Log-Dateien: 7 days after recording
  • Cookies: Depending on the cookie type, between the end of the session and 24 months
  • Contact requests: 3 years after processing is completed
  • Newsletter subscriptions: Until withdrawal of consent
  • Analytics data: 26 months (Google Analytics standard)

Statutory retention periods

Insofar as statutory retention periods exist, we store your data until these periods have expired. Corresponding periods arise in particular from:

  • Handelsgesetzbuch (HGB) [German Commercial Code]: 6-10 years
  • Abgabenordnung (AO) [German Fiscal Code]: 6-10 years
  • Umsatzsteuergesetz (UStG) [German Value Added Tax Act]: 10 years

12. Data Security

During your website visit, we use the widespread SSL procedure (Secure Socket Layer) in conjunction with the highest level of encryption supported by your browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead.

In addition, we implement appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

Technical security measures

  • SSL/TLS encryption for all data transmissions
  • Regular security updates of server software
  • Firewall protection and intrusion detection
  • Secure authentication and access control
  • Regular backups with encryption

Organisational security measures

  • Training of employees in data protection
  • Confidentiality obligations
  • Access permissions based on the need-to-know principle
  • Regular review of security measures

13. Automated Decision-Making

We do not use automated decision-making or profiling within the meaning of Art. 22 DSGVO [Art. 22 GDPR]. Should we use such procedures in the future, we will inform you about this separately if required by law.

14. Data Transfer to Third Countries

A transfer of your personal data to third countries (countries outside the European Economic Area) only takes place if:

  • an adequacy decision by the EU Commission exists,
  • appropriate safeguards are in place (e.g. standard contractual clauses of the EU Commission),
  • you have given your consent, or
  • the transfer is necessary for the establishment, exercise or defence of legal claims.

Transfers to the USA

Some of the services we use are based in the USA or transfer data to the USA. These include in particular:

  • Google (Analytics, Web Fonts, AdSense)
  • Meta/Facebook (Facebook Pixel, Instagram)
  • Amazon (Partnerprogramm)
  • YouTube (Google)

The USA does not have a level of data protection comparable to that of the EU. The transfer takes place on the basis of standard contractual clauses of the EU Commission, which are intended to provide appropriate safeguards for the protection of your personal data.

Risks of US transfers: In the event of a data transfer to the USA, there is a risk that US authorities may access your data for surveillance purposes without you being informed and without effective legal remedies being available to you.

15. Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of violations of the DSGVO [GDPR], data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedy.

The supervisory authority responsible for us is:

Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg
Stahnsdorfer Damm 77
14532 Kleinmachnow
Telefon: 033203/356-0
E-Mail: poststelle@lda.brandenburg.de

16. Changes to this Privacy Policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your subsequent visit.

17. Questions Regarding Data Protection

If you have any questions about data protection, please write us an email or contact the person responsible for data protection in our organisation directly:

Simon Gütter
kontakt@gesundefakten.com

The reference work for science-based health facts

Navigation

Legal notice Privacy policy Sitemap

Disclaimer: The information on this website is not a substitute for medical advice. If you have health problems, please consult a doctor.

© 2026 GesundeFakten.com