Privacy Policy

In the following, we inform you about the processing of personal data when using our website and the services offered on it. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

§1 Data Responsibility and Data Protection Officer

1. Data responsibility pursuant to Art. 4 (7) GDPR jas
   The Body Clinic – leichter leben GmbH
   Schöneberger Ufer 71
   10785 Berlin
   E-mail: [email protected]

• You can reach our data protection officer at [email protected].

§2 Processing purposes and legal bases

1. Informational Use of the Website
   If you use our website for informational purposes only, we process certain data that your browser automatically transmits to our web server with each request. This includes the IP address currently assigned to your device, the date and time of the request, the time zone, the specific page or file requested, the HTTP status code, and the amount of data transferred. We also collect the website from which your request came, the browser used, the operating system of your device, and the language setting.We process this data to enable your use of our website (establishing the connection) and to ensure the long-term security and stability of our systems. This also allows us to perform technical administration of our network infrastructure and to optimize our online offering. The legal basis is our legitimate interest in providing you with an optimal website visit (Art. 6(1)(f) GDPR).

   Additionally, we evaluate this data for internal statistical purposes and to improve our offerings, and then delete it – at the latest after one year. The legal basis for this processing is also our legitimate interest pursuant to Art. 6(1)(f) GDPR. Furthermore, we use cookies and third-party services when you visit our website. More detailed explanations can be found under Section 4.

2. Contact
   If you click the “Book appointment online” button on our website, you will be redirected to a booking page provided by the Calendly service. In this case, the information under Section 2(4) also applies. If you contact us by email, post, phone, or via our contact form, we process the following data:
   • Your contact details (depending on the method of contact, this may include your email address, name and postal address, or name and telephone number)
   • Personal data that you provide to us as part of your inquiry

   We process this data exclusively for the purpose of corresponding with you and handling your request. The legal basis is our legitimate interest in being able to process your request (Art. 6(1)(f) GDPR). If your inquiry contains special categories of personal data, such as health data, we process those on the basis of your consent (Art. 9(2)(a) GDPR). Once processing of your inquiry is no longer necessary, your personal data will be deleted unless a statutory retention obligation prevents this.
   Please note that communication via unencrypted email (i.e., without end-to-end encryption) always carries the risk that unauthorized third parties could gain access to the transmitted data and potentially use it for their own purposes. If you wish to avoid this risk, please send us your inquiries – especially when sending health-related information – through our contact form or by postal mail.

3. Newsletter
   If you sign up for our newsletter, we will process your email address to send you marketing and promotional information. If you have additionally given consent, we will also process further personal data (name, gender, age, postal code, program status) so that we can address you personally in the newsletter and provide you with content that is individually relevant to you. The legal basis for this processing is your explicit consent pursuant to Art. 6(1)(a) GDPR. Since the program status could potentially constitute health data, processing this information is additionally based on Art. 9(2)(a) GDPR.

   We use a double opt-in procedure for the newsletter: After you register, you will receive a confirmation email with a verification link. Only after you click this link to confirm will your registration be completed and you will begin receiving our newsletter. You can withdraw your consent at any time with effect for the future – either via the unsubscribe link in the newsletter or by notifying the controller.

4. Appointment Scheduling, Health Questionnaire and Initial Consultation
   If you are interested in our services and schedule an appointment with us, we will store the personal data collected in that context (your name and contact details, and the details of your request) in order to provide our service and fulfill our contractual obligations. The legal basis for processing your personal data is Art. 6(1)(b) GDPR (performance of a contract).

   In this context, we also process special categories of personal data – in particular, health data – which we collect from you via a questionnaire and/or during the initial consultation. This processing is done for the purpose of offering or arranging further services and benefits (medical consultation, coaching). Processing of these special categories of data is carried out based on your consent (Art. 9(2)(a) GDPR).

   Appointment scheduling for the free initial consultation as well as for nutrition coaching is handled via the online scheduling service Calendly (Calendly LLC, 115 E Main St., Ste A1B PMB 123, Buford, GA 30518, USA). Calendly processes the data required for booking the appointment (name, email address, possibly telephone number, desired appointment time) on our behalf in accordance with Art. 28 GDPR. When using Calendly, data may be transmitted to the USA. Calendly is certified under the EU–US Data Privacy Framework and additionally relies on the EU Standard Contractual Clauses together with supplementary security measures. Further information about Calendly’s data processing can be found in Calendly’s Privacy Notice.

   Scheduling appointments for medical consultations is done via Doctolib. Please note that you will need an account with Doctolib to schedule an appointment. If you create or already have a Doctolib account and book an appointment through their platform, Doctolib is – for the scope of your interactions on their platform – independently responsible for the processing of your personal data (as the controller in terms of Art. 4 No. 7 GDPR). Please refer to Doctolib’s privacy policy for details on their data processing practices.

5. Patient Service (Reminders & Postal Delivery)
   We aim to support you as best as possible throughout your program. For this reason, we use:
   • Your email address to send you appointment and program reminders, notices about missing documents (e.g. medical findings or health questionnaires), and treatment-related service information (e.g. aftercare tips). This processing is based on Art. 6(1)(b) GDPR in conjunction with § 7(3) UWG. You can object to this at any time; an unsubscribe link is included in every email.
   • Your postal address to send you informational materials, goodie bags, and – depending on the medication – any necessary needles by mail. The legal basis for this is also Art. 6(1)(b) GDPR (performance of contract).

   Any further use of your data for marketing newsletters will only take place with your explicit consent (see the “Newsletter” section above).

6. Payment Processing/Billing
   If you make use of a paid service, we employ the payment service provider Adyen (Adyen N.V., Simon Carmiggeltstraat 6-50, 1011 DJ Amsterdam, Netherlands) to handle your payment. Through the integrated payment form, the payment service provider collects the necessary personal data (such as billing information and bank/payment details) in order to process the payment. In this case, the payment service provider is independently responsible for the data processing. Further information on the handling of your personal data by the payment provider can be found in Adyen’s Privacy Policy.
7. Prescription Transmission
   If you instruct us to forward medical prescriptions to a pharmacy of your choice, we will process your prescription data and the data required for transmission on the basis of your consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR). We do this for the purpose of transmitting your prescription. We store these data and delete them afterward unless we are legally required to retain them longer.

   The transmission of your prescription data to the pharmacy you have chosen also takes place on the basis of your consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR).

   In this context, we use the qualified electronic signature solution from Yousign SAS, Rue de Suède, Avenue Pierre Berthelot, 14000 Caen, France (“Yousign”) to carry out the transmission process in a privacy-compliant and secure manner. Yousign processes the data exclusively as part of your request and for the purpose of secure and traceable delivery of the medical prescription to the pharmacy. Further information on data processing by Yousign can be found in Yousign’s Privacy Policy.

§3 Recipients of personal data

• We only share your personal data with third parties if you have provided your consent to do so (Article 6(1)(a) and Article 9(2)(a) GDPR), or if we are otherwise obligated or authorized by law to disclose your data.

  Partner Physicians and Coaches
  If, following your appointment with us, a medical and/or nutritional follow-up is recommended and you wish to schedule an appointment with one of our partner doctors or coaches, we will forward your personal data – including the health data from your questionnaire and our appointment – to these partner physicians and/or coaches.

  The transfer of data is carried out to fulfill our contractual obligations to you (Article 6(1)(b) GDPR). Where special categories of personal data are involved (in particular health data), the transfer is additionally based on your explicit consent (Article 6(1)(a) and Article 9(2)(a) GDPR).

  After this transfer, the partner doctor or coach will process your personal data under their own responsibility. Please refer to the privacy notice of the respective doctor or coach for details, which they will gladly provide. Without your consent to this data sharing, we cannot offer you the associated service.

  Digital Prescriptions and Pharmacies
  If you receive a digital prescription from us, we will transmit the prescription data to the pharmacy of your choice so that the prescription can be filled. This transmission is carried out in encrypted form. The legal basis for this transfer is also your consent (Article 6(1)(a) and Article 9(2)(a) GDPR).

  Service Providers and Data Processors
  In operating our website, we engage external service providers under data processing agreements (pursuant to Article 28 GDPR) to process personal data on our behalf. These service providers may be recipients of your personal data. We utilize such data processors particularly for data storage and software services.

  • Appointment Management: We use the services of Doctolib GmbH (Mehringdamm 51, 10961 Berlin, Germany) and Calendly, LLC (115 E Main St., Ste A1B, Buford, GA 30518, USA) for managing appointments. Data transfers to the USA are based on the EU–US Data Privacy Framework and EU Standard Contractual Clauses.
  • Electronic Signatures: For qualified electronic signatures in prescription transmission, we use Yousign SAS (Rue de Suède, Avenue Pierre Berthelot, 14000 Caen, France) as a data processor.
  • Newsletter Distribution: To send our newsletters, we use the Mailchimp service operated by The Rocket Science Group, LLC (675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA).
  • Postal Mailings: We provide your postal address to commissioned shipping service providers (e.g. Deutsche Post AG / DHL Paket GmbH) for sending informational materials, goodie bags, and other correspondence. The legal basis for these mailings is Article 6(1)(b) GDPR.

§4 Storage period

• We only store your personal data for as long as is necessary for the performance and processing of the services requested by you and insofar as no more specific regulations are set out above or we are entitled or obliged to further storage on the basis of your consent or legal obligations (e.g. retention obligations under commercial and tax law).

§5 Cookies

• We use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware. Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity. Depending on the storage period, a distinction is made between transient cookies, which are deleted when the browser is closed or by logging out, and persistent cookies, which are only deleted after a specified period has expired. The use of cookies serves on the one hand to technically enable the website to be displayed. Without these cookies, our website cannot be displayed (completely correctly) and support functions cannot be enabled. The use of technically necessary cookies is in our legitimate interest in being able to make our website available to you. The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. f GDPR. On the other hand, we use cookies to make the use of our website more pleasant for you and to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you and to place advertisements. We only use these cookies with your consent, which you can give when you first visit our website using the cookie consent tool. The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website.
  1. Google Analytics
     We use Google Analytics, a web analysis service of Google Inc. https://www.google.de/intl/de/about/ (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google”) for the purpose of designing and continuously optimizing our pages to meet your needs. In this context, pseudonymized user profiles are created and cookies are used. The information generated by the cookie about your use of this website, such as browser type/version,
     – operating system used,
     – referrer URL (the previously visited page),
     – host name of the accessing computer (IP address).
     – time of the server request, is transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage for the purposes of market research and the needs-based design of this website. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Google states that under no circumstances will your IP address be merged with other Google data. We only use Google Analytics with standard IP anonymization. This means that the IP address of users is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area in such a way that a personal reference no longer exists. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. With the entry into force of the EU-US Data Privacy Framework and the certification of Google LLC (USA), an adequate level of data protection applies to data processing by Google US.the processing of your personal data by Google Analytics, in particular the transfer of your data to the USA, will only take place if you have given us your express consent to this via the cookie banner in accordance with Art. 6 Para. 1 S. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future.you can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on(https://tools.google.com/dlpage/gaoptout?hl=de). As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on https://tools.google.com/dlpage/gaoptout. An opt-out cookie will be set to prevent the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you will need to set the opt-out cookie again. You can find more information on data protection in connection with Google Analytics in the Google Analytics help section(https://support.google.com/analytics/answer/6004245?hl=de).
  2. Google Ads
     We have integrated Google Ads (conversion and remarketing) on our website in order to draw attention to our services on external websites and to determine how successful the individual advertising measures are. We are interested in showing you advertising that is of interest to you, making our website more interesting for you and measuring the success of our advertising measures. This advertising is delivered by Google via so-called “ad servers”. For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as the display of ads or clicks by users, can be measured. If you access our website via a Google ad, Google Ads will store a cookie on your device. A unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information are regularly stored for this cookie. This enables us to analyze your interactions on our website and, based on this, present you with interest-based advertising on other websites within the Google advertising network. The cookies enable Google to recognize your Internet browser, but they cannot be tracked via the websites of other Ads users. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google, which we can use to recognize the success of individual measures, and your browser automatically establishes a direct connection with the Google server due to the cookie. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: Through the integration of Ads Conversion, Google receives the information that you have accessed the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that Google will find out and store your IP address, and we cannot rule out the possibility that Google may also transfer personal data to the USA. With the entry into force of the EU-US Data Privacy Framework and the certification of Google LLC (USA), an adequate level of data protection applies to data processing by Google US.the legal basis for the processing is your consent given via the cookie banner (Art. 6 para. 1 sentence 1 lit. a GDPR. You can revoke your consent at any time with effect for the future.
  3. Facebook/Meta Pixel
     We have integrated the “Meta Pixel” of Meta Platforms Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) on our website. The “Meta Pixel” enables us to measure the success of our advertising campaigns on Facebook and Instagram, among others. In addition, the “meta pixel” enables us and Meta to assign visitors to our website to specific groups (e.g. visitors who come from our website or according to the areas of interest we have transmitted to Meta (Facebook), so-called “custom audiences”) for the display of specific advertisements and thus to recognize them. This ensures that these users are only shown advertisements that are in line with their interests and thus avoid annoyance from inappropriate advertising. During your website visit, the following data, among others, is transmitted to Meta:- Pages or URLs accessed
     – The achievement of “website goals” (e.g. contact requests and newsletter registrations) Contact requests and newsletter registrations)
     – Your Internet connection data (IP address)
     – Technical information such as browser, end device and screen resolution
     – A randomly generated user ID
     – A randomly generated advertising click ID if you have reached our website via an advertisementThis data may also be transferred to Meta servers in the USA. No directly personal data such as name, address or contact details are transferred to Facebook.Meta stores cookies in your web browser for a period of one year since your last visit. These cookies contain a randomly generated user ID with which you can be recognized on future visits to the website. If you are logged in to Meta platforms such as Facebook/Instagram, Meta can also assign the visit to your Facebook/Instagram account.The legal basis for the use of the meta pixel is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You give your consent by setting the use of cookies (cookie banner / Consent Manager). You can revoke your consent at any time with effect for the future. There is no legal or contractual obligation to provide your data. If you do not give us your consent, it will still be possible to visit our website, but not all functions may be fully available.

  4. Meta Lookalike Audiences
     In addition, we use the “Lookalike Audiences” function of Meta Platforms Ireland Limited (Facebook/Instagram). For this purpose, only event data collected via the Meta Pixel implemented on our website (e.g. appointment bookings) are processed. This event data does not contain directly identifiable information such as names or email addresses but is used exclusively to create statistical user groups to which similar target groups for advertising campaigns can then be addressed. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR, which you grant via our cookie consent tool. You may withdraw your consent at any time with effect for the future.

§6 Rights of data subjects

• You have the following rights towards us:
  • in accordance with Art. 15 GDPR, the right to free information about the processed personal data and to receive a copy of this data;
  • in accordance with Art. 15 GDPR, the right to information about the origin and recipient of the data as well as the purpose of the data processing and the duration of storage;
  • pursuant to Art. 16 GDPR, the right to immediate rectification of inaccurate data or completion of incomplete data;
  • in accordance with Art. 17 GDPR, you have the right to the erasure of your personal data stored by us;
  • in accordance with Art. 18 GDPR, you have the right to restrict the processing of your personal data;
  • in accordance with Art. 20 GDPR, you have the right to have the data provided to us transmitted to you or to a third party in a structured, commonly used and machine-readable format;
  • pursuant to Art. 19 GDPR, to be informed of all recipients to whom the personal data have been disclosed;
  • pursuant to Art. 21 GDPR, the right to object to processing,
  • in accordance with Art. 7 para. 3 GDPR, the right to withdraw your consent to the processing of personal data at any time with effect for the future, whereby the legality of the data processing carried out before the withdrawal remains unaffected.
• You can assert your rights at any time vis-à-vis the controller named under point 1 and, in accordance with Art. 77 GDPR, you can lodge a complaint with a supervisory authority, in particular at your place of residence, your place of work, the registered office of the controller or the place of the alleged infringement, if you believe that the processing of your personal data violates data protection regulations. The supervisory authority responsible at the controller’s registered office is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin. Telephone: 030 13889-0, e-mail: [email protected], website: www.datenschutz-berlin.de

Status of the privacy policy: September 2025

Only the German text is legally binding; this English version is for informational purposes only.

Read the German text here.