Privacy policy patient and coaches

In the following we inform you about the processing of your personal data in the context of your nutritional advice. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

§1 Controller and data protection officer

The controller pursuant to Art. 4 (7) GDPR is the nutrition coach you have chosen. The respective contact details of the controller and its data protection officer (if any) can be found in the attached list.

If you are under the care of both a doctor and a nutritionist, your treating doctor and your nutritionist coach are each solely responsible for the data processing that occurs in their area of competence.

§2 Processing purposes and legal bases

We (the controller named above) process your personal data in order to provide and process nutritional advice. For this purpose, we also process special categories of personal data, in particular your health data (e.g. from the medical history, the health questionnaire and therapy suggestions). You can either provide us with this data yourself or have it provided by third parties, e.g. doctors with whom you are receiving treatment. The processing of your personal data, such as name and contact details, is based on Art. 6 para. 1 sentence 1 lit. b GDPR (fulfillment of contract). The processing of special categories of personal data, in particular regarding your health, is based on your consent (Art. 9 para. 2 lit. a GDPR).

In individual cases, we process your personal data on the basis of your consent. This will be obtained with separate information. You have the right to withdraw your consent at any time with effect for the future.

§3 Storage period

We will only store your personal data for as long as is necessary to carry out the coaching. Your health data and any additional information that you provide to us on the basis of your consent will only be stored until you withdraw your consent, but no longer than until the end of the contractual relationship on which the consultation is based. After the end of this contractual relationship, your personal data will be deleted, provided that the deletion does not conflict with any statutory or professional retention obligations (e.g. we have a standard retention period of 10 years after completion of treatment for medically prescribed nutritional therapies (in accordance with Section 630f BGB and GDPR)).

§4 Recipients of personal data

In addition to your chosen nutrition coach, the practice employees who are directly involved in the provision of services also have access to your data. The employees may only process your data in accordance with the strict instructions of the controller.

Your personal data will only be passed on to third parties if we are entitled or obliged to do so on the basis of statutory provisions or your consent.

Insofar as we are supported by external service providers who process personal data on our behalf as part of order processing in accordance with Art. 28 GDPR, they may be recipients of your personal data. For example, we use processors in the area of data storage and software use. For example, we use the services of The Body Clinic – leichter leben GmbH, Schöneberger Ufer 71, 10785 Berlin, Germany, to manage our appointments. We will be happy to provide you with a complete list of all current processors on request. The service providers have been and will be carefully selected by us, commissioned in writing and bound to secrecy. The service providers are strictly bound by our instructions and are regularly monitored. Your personal data will not be passed on to third parties or processed by the service providers outside the existing contractual relationship.

§5 Place of processing

We process your data within the EU, the EEA. Your personal data will not be transferred to a third country (a country outside the EU and the EEA). If a third country transfer should take place in individual cases, it is ensured that the legal requirements pursuant to Art. 44 et seq. GDPR are complied with.

§6 Rights of data subjects

You have the following rights vis-à-vis the controller named above:

  • a right to free information about the personal data processed about you and to receive a copy of this data as well as information about its origin and recipients, the purpose of the data processing and the duration of storage (Art. 15 GDPR);
  • if applicable, a right to rectification of incorrect or incomplete data (Art. 16 GDPR), erasure (Art. 17 GDPR) or restriction of processing (=blocking; Art. 18 GDPR) of your personal data;
  • to be informed in accordance with Art. 19 GDPR of all recipients to whom the data concerning you have been disclosed;
  • to object to the processing, pursuant to Art. 21 GDPR;
  • the right to request that the data provided by you be transferred to you or another controller (Art. 20 GDPR)
  • the right to withdraw your consent to the processing of your personal data at any time with effect for the future (Art. 7 (3) GDPR). The lawfulness of the data processing carried out before the revocation remains unaffected.

Compliance with a special form is not required for the assertion of your data subject rights. You can address such requests to the respective controller or their data protection officer.

In addition, you have the right to lodge a complaint about alleged breaches of data protection law with a supervisory authority, for example at the registered office of the controller, your place of residence, your place of work or the place of the alleged breach (Art. 77 GDPR).

Status: February 2025

Appendix List of nutrition coaches

Scroll to Top