Privacy policy

The controller within the meaning of Art. 4 (7) GDPR is:

Phone: +49 6232 621064
Email: podologie.annette@gmail.com

We process personal data only insofar as it is necessary to operate a functioning website, respond to enquiries and schedule appointments. Depending on the processing, the legal basis is your consent (Art. 6 (1) (a) GDPR), the initiation or performance of a treatment contract (Art. 6 (1) (b)), a legal obligation (lit. c) or our legitimate interest in the secure, user-friendly operation of the website (lit. f). Where health data is involved, processing is additionally based on Art. 9 (2) (h) GDPR in conjunction with § 22 BDSG.

When you load this website, our hosting provider processes technically necessary connection data in server log files: IP address, date and time, the resource requested, HTTP status code, transferred data volume, referrer and user agent. This data is needed to deliver the site, ensure its stability and security, and prevent abuse. The legal basis is Art. 6 (1) (f) GDPR. The data is stored only as long as necessary for that purpose and is then deleted; it is not merged with other data sets.

We use only strictly necessary cookies. There is no tracking, no analytics and no third-party advertising cookies. Consent under § 25 (1) TTDSG is not required, because storage is strictly necessary to provide the service you requested (§ 25 (2) Nr. 2 TTDSG).

You can delete cookies or restrict their acceptance in your browser settings at any time; without the session cookie, the chat assistant and language-dependent features will not work reliably.

When you contact us by phone or email, we process the data you provide — typically name, contact information and your concern — solely in order to respond to your enquiry or arrange an appointment. The legal basis is Art. 6 (1) (b) GDPR insofar as your enquiry concerns the conclusion or performance of a treatment contract; otherwise Art. 6 (1) (f) GDPR for efficient handling of enquiries.

We delete the data as soon as it is no longer needed to respond to your request, unless statutory retention obligations apply. If content becomes part of a patient file, the ten-year retention period under § 630f BGB applies; statutory retention obligations under tax and commercial law (e.g. § 257 HGB, § 147 AO) remain unaffected.

Please note that unencrypted email may expose information in transit; please prefer the phone or an in-person conversation for sensitive health information.

On Contact → How to find us we embed a map via an iframe from Google so you can locate the practice quickly. When you load that page, your browser connects directly to servers operated by Google Ireland Ltd. (Google Building, Gordon House, Barrow Street, Dublin 4, Ireland) or — for data transferred to the United States — Google LLC. IP address, browser information and the time of request may be processed. We have no control over the scope or content of this processing.

The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is showing you how to reach the practice. Transfers to the United States rely on the EU–US Data Privacy Framework. To avoid this data transfer, use the "Open Google Maps" / "Open Apple Maps" buttons on the same page — they become active only when clicked. For more information see Google's privacy policy: policies.google.com/privacy.

This website offers an optional chat assistant that answers general questions about the practice (e.g. services or opening hours). We use Google's Gemini language model (Google Ireland Ltd., or — for data transfers to the United States — Google LLC). Your prompts and the model's responses are sent to Google for inference. In addition we store the conversation in our own database, linked to your session, so you can continue the conversation later.

The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is providing low-threshold answers to general questions without burdening the phone line. Transfers to the United States rely on the EU–US Data Privacy Framework. Use of the chat is voluntary.

Please do not enter diagnoses, names of others or other sensitive information you would not share in an open email. For medical concerns, please contact the practice directly.

Phone, mailto and Apple Maps links on this site open third-party applications or websites (your phone app, your email client, or Apple Inc.). These actions are initiated by you; the resulting data processing is outside our control and is governed by the relevant providers' privacy policies.

We use carefully selected service providers to help us operate the website. We have data-processing agreements under Art. 28 GDPR with these processors. In particular we use a hosting provider for serving the site (server logs — see section 3) and Google for the embedded map and chat assistant (see sections 6 and 7). We do not share data with any further third parties unless legally obligated to do so.

With regard to the personal data concerning you, you have the following rights at any time:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR), in particular against processing based on legitimate interests
• Right to withdraw a given consent with effect for the future (Art. 7 (3) GDPR)

To exercise your rights, an informal message to the contact details given in section 1 is sufficient.

You have the right to lodge a complaint with a data-protection supervisory authority about our processing of your personal data (Art. 77 GDPR). The authority responsible for our practice is:

No automated decision-making within the meaning of Art. 22 GDPR and no profiling takes place.

We update this privacy statement when the underlying processing changes or new legal requirements need to be implemented. The current version is always available on this page.

Last updated: 13 June 2026