Privacy policy

In the following, we inform you about the processing of personal data when using our website and the services offered on it. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

§1 Controller and data protection officer

1. The controller pursuant to Art. 4 (7) GDPR is
   The Body Clinic – leichter leben GmbH
   Schöneberger Ufer 71
   10785 BerlinE-mail: [email protected]

• You can reach our data protection officer at [email protected].

§2 Processing purposes and legal bases

1. 1. Informational use of the website
      If you use our website purely for informational purposes, we process a range of data that your browser automatically transmits to our web server with each request. This is the IP address currently assigned to your device, the date and time of the request, the time zone, the specific page or file accessed, the http status code and the amount of data transferred, as well as the website from which your request came, the browser used, the operating system of your device and the language set. This data is processed for the purpose of enabling you to use our website (connection establishment) and to ensure system security and stability in the long term as well as to enable the technical administration of the network infrastructure and the optimization of our website. The legal basis is our legitimate interest in enabling you to have an optimal visit to our website, Art. 6 para. 1 sentence 1 lit. f GDPR. In addition, this data is only analyzed for internal statistical purposes and to improve the offer and then deleted, at the latest after one year. The legal basis for the processing here is our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. We also use cookies and third-party services when you visit our website. You can find more detailed explanations on this under §4.
   2. Contact
      If you contact us by e-mail, post or telephone or via our contact form, we process the following data:- Your contact details (depending on the type of contact, e-mail address, name and address, name and telephone number)
      – personal data that you provide to us as part of your inquiry; this data is processed exclusively for correspondence with you and for processing your request. The legal basis is our legitimate interest in being able to process your request (Art. 6 para. 1 sentence 1 lit. f GDPR). If your request contains special categories of personal data, such as health data, we process these on the basis of your consent (Art. 9 para. 2 lit. a GDPR) and if the data processing is no longer required for this purpose, your personal data will be deleted, provided that there is no legal obligation to retain it.We would like to point out that communication by unencrypted e-mail (i.e. without end-to-end encryption) always involves the risk that unauthorized third parties may gain access to the transmitted data during the transmission of the e-mail and possibly use it for their own purposes. If you wish to avoid this risk, please send us your inquiries, especially when sending health data, via our contact form or by post
   3. Newsletter
      If you register for our newsletter, we will process your e-mail address in order to send you marketing and advertising information. If you have also given your consent, we will also process other personal data (name, gender, age, zip code, program status) in order to address you personally in the newsletter and provide you with individually relevant content. The legal basis for the processing is your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. Since the program status may potentially involve health data, this information is also processed on the basis of Art. 9 para. 2 lit. a GDPR. We use the double opt-in procedure to send the newsletter: After your registration, you will receive a confirmation email with a link for verification. Only after your confirmation will your registration be completed and you will receive our newsletter. You can revoke your consent at any time with effect for the future – either via the unsubscribe link in the newsletter or by sending a message to the controller.
   4. Appointment, health questionnaire and initial consultation
      If you are interested in our services and make an appointment with us, we will store the personal data collected in this context (name and contact details, your request) in order to offer you our services and fulfill our contractual obligations. The legal basis for the processing of your personal data is Art. 6 para. 1 sentence 1 lit. b GDPR (fulfillment of contract). In this context, we also process special categories of personal data, in particular regarding your health, which we request from you via a questionnaire and/or in the initial consultation. The processing is carried out for the purpose of offering/providing you with further services and benefits (medical consultation, coaching). The processing of special categories of personal data is based on your consent (Art. 9 para. 2 lit. a GDPR) and appointments are made with us via Doctolib. Please note that you need an account with Doctolib to make an appointment. If you create or have an account with Doctolib and make an appointment via the platform, Doctolib is responsible for the processing of your personal data within the scope of your Doctolib account within the meaning of Art. 4 No. 7 GDPR. In this respect, please note Doctolib’s privacy policy.
   5. Payment processing/billing
      If you make use of a chargeable service, we use the payment service provider Adyen (Adyen N.V., Simon Carmiggeltstraat 6-50, 1011 DJ Amsterdam, Netherlands) to process your payments. The payment service provider collects the necessary personal data (claim data, bank/payment data) via the integrated payment screen in order to process the payment. In this case, the payment service provider is independently responsible for data processing. Further information on the processing of your personal data by the payment service provider can be found in Ayden’s privacy policy: https://www.adyen.com/de_DE/privacy-policy
   6. Transmission of prescriptions
      If you instruct us to transmit medical prescriptions to a pharmacy of your choice, we will process your prescription data and the necessary transmission data on the basis of your consent (Art. 6 para. 1 sentence 1 lit. a, Art. 9 para. 2 lit. a GDPR) for the purpose of transmission. We store this data and then delete the data unless we are obliged to store it for longer. The transmission of your prescription data to the pharmacy you have chosen is also based on your consent (Art. 6 para. 1 sentence 1 lit. a, Art. 9 para. 2 lit. a GDPR).

§3 Recipients of personal data

• We will only pass on your personal data to third parties if you have given your consent (Art. 6 para. 1 sentence 1 lit. a, Art. 9 para. 2 lit. a GDPR) or if we are otherwise obliged or entitled to pass on your data If medical and/or nutritional advice is indicated following the appointment with us and you request an appointment with one of our partner doctors or coaches, we will pass on your personal data, including your health data from the questionnaire and our appointment, to the partner doctors and/or coaches. The data is passed on to fulfill our contractual obligations to you (Art. 6 para. 1 sentence 1 lit. b GDPR) and on the basis of your consent, insofar as special categories of personal data, in particular health data, are affected (Art. 6 para. 1 sentence 1 lit. a, Art. 9 para. 2 lit. a GDPR). The processing of your personal data by the doctor and/or coach then takes place under the doctor’s/coach’s own responsibility. In this respect, we refer you to the privacy policy of your respective doctor/coach, which they will be happy to provide you with. We cannot offer you this service without your consent. If you have received a digital prescription, we will transmit the prescription data to the pharmacy you have chosen to fill the prescription. The transmission takes place in encrypted form. The legal basis for the transmission of your data is also your consent in this case (Art. 6 para. 1 sentence 1 lit. a, Art. 9 para. 2 lit. a GDPR) Insofar as we use service providers for the operation of our website who process personal data on our behalf as part of order processing in accordance with Art. 28 GDPR, they may be recipients of your personal data. For example, we use processors in the area of data storage and software use. For example, we use the services of Doctolib GmbH, Mehringdamm 51, 10961 Berlin, to manage our appointments. To send newsletters, we use Mailchimp from The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE Suite 5000, Atlanta, GA 30308 USA. We will be happy to provide you with a complete list of all current processors on request. The service providers have been and will be carefully selected by us and commissioned in writing. The service providers are strictly bound by our instructions and are regularly monitored. Your personal data will not be passed on to third parties or processed by the service providers outside the existing contractual relationship.

Storage period §4

• We only store your personal data for as long as is necessary for the performance and processing of the services requested by you and insofar as no more specific regulations are set out above or we are entitled or obliged to further storage on the basis of your consent or legal obligations (e.g. retention obligations under commercial and tax law).

§5 Cookies

• We use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware. Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity. Depending on the storage period, a distinction is made between transient cookies, which are deleted when the browser is closed or by logging out, and persistent cookies, which are only deleted after a specified period has expired. The use of cookies serves on the one hand to technically enable the website to be displayed. Without these cookies, our website cannot be displayed (completely correctly) and support functions cannot be enabled. The use of technically necessary cookies is in our legitimate interest in being able to make our website available to you. The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. f GDPR. On the other hand, we use cookies to make the use of our website more pleasant for you and to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you and to place advertisements. We only use these cookies with your consent, which you can give when you first visit our website using the cookie consent tool. The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website.
  1. Google Analytics
     We use Google Analytics, a web analysis service of Google Inc. https://www.google.de/intl/de/about/ (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google”) for the purpose of designing and continuously optimizing our pages to meet your needs. In this context, pseudonymized user profiles are created and cookies are used. The information generated by the cookie about your use of this website, such as browser type/version,
     – operating system used,
     – referrer URL (the previously visited page),
     – host name of the accessing computer (IP address).
     – time of the server request, is transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage for the purposes of market research and the needs-based design of this website. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Google states that under no circumstances will your IP address be merged with other Google data. We only use Google Analytics with standard IP anonymization. This means that the IP address of users is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area in such a way that a personal reference no longer exists. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. With the entry into force of the EU-US Data Privacy Framework and the certification of Google LLC (USA), an adequate level of data protection applies to data processing by Google US.the processing of your personal data by Google Analytics, in particular the transfer of your data to the USA, will only take place if you have given us your express consent to this via the cookie banner in accordance with Art. 6 Para. 1 S. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future.you can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on(https://tools.google.com/dlpage/gaoptout?hl=de). As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on https://tools.google.com/dlpage/gaoptout. An opt-out cookie will be set to prevent the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you will need to set the opt-out cookie again. You can find more information on data protection in connection with Google Analytics in the Google Analytics help section(https://support.google.com/analytics/answer/6004245?hl=de).
  2. Google Ads
     We have integrated Google Ads (conversion and remarketing) on our website in order to draw attention to our services on external websites and to determine how successful the individual advertising measures are. We are interested in showing you advertising that is of interest to you, making our website more interesting for you and measuring the success of our advertising measures. This advertising is delivered by Google via so-called “ad servers”. For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as the display of ads or clicks by users, can be measured. If you access our website via a Google ad, Google Ads will store a cookie on your device. A unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information are regularly stored for this cookie. This enables us to analyze your interactions on our website and, based on this, present you with interest-based advertising on other websites within the Google advertising network. The cookies enable Google to recognize your Internet browser, but they cannot be tracked via the websites of other Ads users. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google, which we can use to recognize the success of individual measures, and your browser automatically establishes a direct connection with the Google server due to the cookie. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: Through the integration of Ads Conversion, Google receives the information that you have accessed the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that Google will find out and store your IP address, and we cannot rule out the possibility that Google may also transfer personal data to the USA. With the entry into force of the EU-US Data Privacy Framework and the certification of Google LLC (USA), an adequate level of data protection applies to data processing by Google US.the legal basis for the processing is your consent given via the cookie banner (Art. 6 para. 1 sentence 1 lit. a GDPR. You can revoke your consent at any time with effect for the future.
  3. Facebook/Meta Pixel
     We have integrated the “Meta Pixel” of Meta Platforms Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) on our website. The “Meta Pixel” enables us to measure the success of our advertising campaigns on Facebook and Instagram, among others. In addition, the “meta pixel” enables us and Meta to assign visitors to our website to specific groups (e.g. visitors who come from our website or according to the areas of interest we have transmitted to Meta (Facebook), so-called “custom audiences”) for the display of specific advertisements and thus to recognize them. This ensures that these users are only shown advertisements that are in line with their interests and thus avoid annoyance from inappropriate advertising. During your website visit, the following data, among others, is transmitted to Meta:- Pages or URLs accessed
     – The achievement of “website goals” (e.g. contact requests and newsletter registrations) Contact requests and newsletter registrations)
     – Your Internet connection data (IP address)
     – Technical information such as browser, end device and screen resolution
     – A randomly generated user ID
     – A randomly generated advertising click ID if you have reached our website via an advertisementThis data may also be transferred to Meta servers in the USA. No directly personal data such as name, address or contact details are transferred to Facebook.Meta stores cookies in your web browser for a period of one year since your last visit. These cookies contain a randomly generated user ID with which you can be recognized on future visits to the website. If you are logged in to Meta platforms such as Facebook/Instagram, Meta can also assign the visit to your Facebook/Instagram account.

     The legal basis for the use of the meta pixel is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You give your consent by setting the use of cookies (cookie banner / Consent Manager). You can revoke your consent at any time with effect for the future. There is no legal or contractual obligation to provide your data. If you do not give us your consent, it will still be possible to visit our website, but not all functions may be fully available.

§6 Rights of data subjects

• You have the following rights towards us:
  • in accordance with Art. 15 GDPR, the right to free information about the processed personal data and to receive a copy of this data;
  • in accordance with Art. 15 GDPR, the right to information about the origin and recipient of the data as well as the purpose of the data processing and the duration of storage;
  • pursuant to Art. 16 GDPR, the right to immediate rectification of inaccurate data or completion of incomplete data;
  • in accordance with Art. 17 GDPR, you have the right to the erasure of your personal data stored by us;
  • in accordance with Art. 18 GDPR, you have the right to restrict the processing of your personal data;
  • in accordance with Art. 20 GDPR, you have the right to have the data provided to us transmitted to you or to a third party in a structured, commonly used and machine-readable format;
  • pursuant to Art. 19 GDPR, to be informed of all recipients to whom the personal data have been disclosed;
  • pursuant to Art. 21 GDPR, the right to object to processing,
  • in accordance with Art. 7 para. 3 GDPR, the right to withdraw your consent to the processing of personal data at any time with effect for the future, whereby the legality of the data processing carried out before the withdrawal remains unaffected.
• You can assert your rights at any time vis-à-vis the controller named under point 1 and, in accordance with Art. 77 GDPR, you can lodge a complaint with a supervisory authority, in particular at your place of residence, your place of work, the registered office of the controller or the place of the alleged infringement, if you believe that the processing of your personal data violates data protection regulations. The supervisory authority responsible at the controller’s registered office is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin. Telephone: 030 13889-0, e-mail: [email protected], website: www.datenschutz-berlin.de

Status of the privacy policy: February 2025