Privacy Policy

We are very pleased about your interest in our company. Data protection is of particularly high importance to the management of Heilpraxis Walter. Using the websites of Heilpraxis Walter is generally possible without providing any personal data. However, if a data subject wishes to use special services of our company via our website, the processing of personal data may become necessary. If the processing of personal data is required and there is no legal basis for such processing, we generally obtain the consent of the data subject.

The processing of personal data, such as the name, address, email address, or telephone number of a data subject, is always carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with the country-specific data protection regulations applicable to Heilpraxis Walter. With this privacy policy, our company aims to inform the public about the nature, scope, and purpose of the personal data we collect, use, and process. Furthermore, this privacy policy informs data subjects of their rights.

Heilpraxis Walter, as the responsible party for processing, has implemented numerous technical and organizational measures to ensure the most complete protection possible of the personal data processed via this website. Nevertheless, internet-based data transmissions can generally have security vulnerabilities, so absolute protection cannot be guaranteed. For this reason, every data subject is free to provide personal data to us via alternative means, for example by telephone.

1. Definitions

The privacy policy of Heilpraxis Walter is based on the terms used by the European legislator when enacting the General Data Protection Regulation (GDPR). Our privacy policy is intended to be easily readable and understandable for the public, as well as for our customers and business partners. To ensure this, we would like to explain the terminology used.

We use the following terms in this privacy policy, among others:

a) Personal data
Personal data are all information relating to an identified or identifiable natural person (“data subject”). A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

b) Data subject
Data subject is any identified or identifiable natural person whose personal data is processed by the controller.

c) Processing
Processing is any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction.

d) Restriction of processing
Restriction of processing is the marking of stored personal data with the aim of limiting their future processing.

e) Profiling
Profiling is any form of automated processing of personal data consisting of using personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements of that natural person.

f) Pseudonymization
Pseudonymization is the processing of personal data in such a manner that the data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures that ensure the personal data are not attributed to an identified or identifiable natural person.

g) Controller
Controller or data controller is the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

h) Processor
Processor is a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.

i) Recipient
Recipient is a natural or legal person, public authority, agency, or another body to which personal data are disclosed, whether a third party or not. Authorities that may receive personal data in the context of a specific investigation task under Union or Member State law are not considered recipients.

j) Third party
Third party is a natural or legal person, public authority, agency, or body other than the data subject, controller, processor, or persons authorized to process personal data under the direct authority of the controller or processor.

k) Consent
Consent of the data subject is any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which they signify agreement to the processing of personal data relating to them.

2. Name and Address of the Controller

Controller in accordance with the GDPR, other data protection laws of the European Union Member States, and other regulations with data protection relevance is:

Heilpraxis Walter
Friedenstraße 62
10249 Berlin
Germany
Tel.: +49 (0)30 428 080 51
Email: info@heilpraxis-walter.de
Website: https://www.heilpraxis-walter.de

3. Cookies

The websites of Heilpraxis Walter use cookies. Cookies are text files placed on and stored in a computer system via an Internet browser.

Many websites and servers use cookies. Cookies often contain a so-called cookie ID, a unique identifier that allows the websites and servers to recognize the specific browser in which the cookie is stored. This enables the visited websites and servers to distinguish the individual browser from other browsers that contain other cookies.

By using cookies, Heilpraxis Walter can provide users of this website with more user-friendly services that would not be possible without the cookie setting. Cookies allow us to optimize the information and offers on our website in the sense of the user. For example, a cookie allows a user to remain logged in to the site without entering login details every visit or allows the website to remember items in a shopping cart.

The data subject can prevent the setting of cookies via a corresponding setting in the browser used and thus permanently object to the setting of cookies. Cookies already set can be deleted at any time using a browser or other software programs.

4. Collection of General Data and Information

Each time a data subject accesses the website of Heilpraxis Walter or an automated system accesses the site, a number of general data and information are collected and stored in server log files. These may include:

Browser type and version
Operating system used by the accessing system
Website from which an accessing system reaches our site (referrer)
Subpages accessed
Date and time of access
IP address
Internet service provider
Other similar data and information for defense against attacks on our IT systems

This data does not allow conclusions about the data subject and is used solely to deliver content correctly, optimize content and advertising, ensure the functioning of IT systems, and provide law enforcement with information in case of cyberattacks.

5. Routine Deletion and Blocking of Personal Data

Personal data is stored only as long as necessary for the storage purpose or as required by EU or national laws. When the purpose no longer applies or retention periods expire, data is routinely blocked or deleted.

6. Rights of the Data Subject

a) Right to confirmation – Right to ask the controller if data is being processed.
b) Right to access – Right to obtain free information about personal data stored about them and its processing details.
c) Right to rectification – Right to request correction of inaccurate personal data.
d) Right to erasure (“right to be forgotten”) – Right to have data deleted under specific conditions.
e) Right to restriction of processing – Right to restrict processing in certain cases.
f) Right to data portability – Right to receive data in a structured, commonly used, machine-readable format and transfer to another controller.
g) Right to object – Right to object to processing based on legitimate interest or for direct marketing.
h) Automated decisions including profiling – Right not to be subject to automated decisions with legal or significant effects unless specific conditions are met.
i) Right to withdraw consent – Right to withdraw consent at any time.

For all rights, the data subject can contact any employee of Heilpraxis Walter.

7. Google Analytics

We use Google Analytics with anonymization on this website. This collects data about visitor behavior, referrers, visited pages, time spent, etc., to optimize the website. IP addresses are anonymized before storage. Users may opt out using a browser add-on: https://tools.google.com/dlpage/gaoptout. More information: Google Privacy Policy, Google Analytics Terms.

8. Legal Basis for Processing

Article 6(1)(a) of the GDPR serves as the legal basis for our company for processing operations in which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, such as processing operations required for the delivery of goods or the provision of other services or consideration, the processing is based on Article 6(1)(b) GDPR. The same applies to processing operations necessary for the implementation of pre-contractual measures, for example in cases of inquiries regarding our products or services.

If our company is subject to a legal obligation that makes the processing of personal data necessary, such as fulfilling tax obligations, the processing is based on Article 6(1)(c) GDPR.

In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were injured on our premises and their name, age, health insurance details, or other vital information had to be passed on to a doctor, hospital, or other third parties. In such cases, the processing would be based on Article 6(1)(d) GDPR.

Finally, processing operations may be based on Article 6(1)(f) GDPR. This legal basis applies to processing operations that are not covered by any of the aforementioned legal bases when the processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights, and freedoms of the data subject do not outweigh those interests. Such processing operations are particularly permitted because they are explicitly mentioned by the European legislator, who considered that a legitimate interest could be assumed if the data subject is a customer of the controller (Recital 47, sentence 2 GDPR).

9. Legitimate Interests

If the processing of personal data is based on Article 6(1)(f) GDPR, our legitimate interest lies in the conduct of our business activities for the benefit and well-being of all our employees and our shareholders.

10. Duration of Data Storage

The criterion for the duration of storage of personal data is the respective statutory retention period. Once this period has expired, the corresponding data is routinely deleted, provided it is no longer required for contract performance or contract initiation.

11. Provision of Data

We inform you that the provision of personal data may be partly legally required (e.g., tax regulations) or may arise from contractual obligations (e.g., information about the contractual partner). In some cases, the conclusion of a contract may require that a data subject provides us with personal data, which must then be processed by us.

For example, the data subject is obliged to provide us with personal data if our company concludes a contract with them. Failure to provide the personal data would result in the contract not being concluded with the data subject.

Before providing personal data, the data subject must contact one of our employees. Our employee will provide case-specific information about whether the provision of personal data is legally or contractually required or necessary for the conclusion of the contract, whether there is an obligation to provide the personal data, and what consequences the non-provision of personal data would entail.

12. Automated Decision-Making

Heilpraxis Walter refrains from any automated decision-making or profiling.

This privacy policy was created using the privacy policy generator by DGD Deutsche Gesellschaft für Datenschutz GmbH, which acts as an external data protection officer in Freising, in cooperation with the privacy law attorney Christian Solmecke.