Data Protection Statement (updated January, 2019)
I am pleased you have visited my website. I am serious about protecting your personal data and adhere to the rules of statutory requirements, particularly data protection laws. The wording used in this statement is meant to be gender-neutral and encompasses both feminine and masculine gender.
1. Information on the collection of personal data
1.1. In this Data Protection Statement, I provide you with information about the collection of personal data when you use my website. Personal data includes all data that can be related to you personally, for example, your name, your address or your e-mail address.
1.2. The controller as defined in Art. 4 para. 7 of the EU General Data Protection Regulation (GDPR) is me,
Alternative Practitioner Heike Göring
Praxis für Atlaskorrektur
(Atlas Correction Practice)
Schweizer Platz 56
60594 Frankfurt am Main
You can find all the information about me under my Legal Information.
1.3. To initiate contact, you can send me an e-mail. You must provide a valid e-mail address so I can respond to your inquiry. When you write me an e-mail, I store the data that you share with me (e.g. your e-mail address as well as your name and telephone number if provided) in order to answer your questions. Once storage is no longer necessary, I delete all the personal data collected. If a statutory storage requirement exists, I will restrict the processing of your data. The legal basis for data processing for the purpose of initiating contact is Art. 6 para. 1 sentence 1 lit. f of the GDPR.
1.4. Please note that data transmission by e-mail can have security vulnerabilities. Complete protection of data against access by third parties is not possible in this case. Therefore, I recommend not sending health-related data by e-mail. If you are interested in corresponding by encrypted e-mail, please let me know.
1.5. For specific functions of my website, I require support from outside service providers. I provide information about the individual processes under point 6 of this Statement.
2. Collection and storage of personal data when my website is called up
2.1. When you use my website for information (i.e. merely view it), as the website is being called up, I (respectively, my hosting provider Strato AG as the party engaged for processing the data pursuant to article 28 of the GDPR) collect the personal data that your browser automatically transmits to my website’s server. This information is stored temporarily in a so-called log file and is deleted or anonymized after a maximum period of 7 days. The following information is recorded without your doing anything and is stored until it is automatically deleted or anonymized (logfile-data):
- IP address of the querying computer,
- date and time of the query or access,
- time zone difference from Greenwich Mean Time (GMT),
- content of the request (specific page),
- name and URL of the file called up,
- access status/HTTP status code,
- respective quantity of data transmitted,
- website from which the request or access originates (referrer URL),
- browser used,
- operating system of your computer and its surface and name of your access provider,
- language and version of the browser software.
2.2. I process the aforementioned data to display my website to you and to ensure stability and security in doing so – particularly in order to guarantee establishment of a smooth connection and comfortable use of my website as well as for analysis of system security and stability and for other administrative purposes.
2.3. The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. f of the GDPR. Our legitimate interest follows from the data collection purposes listed above.
3. Sharing of data/data transfer
I transfer your personal data to third parties exclusively for the following purposes:
3.1. after you grant explicit consent in accordance with Art. 6 para. 1 sentence 1 lit. a of the GDPR,
3.2. the sharing is required under Art. 6 para. 1 sentence 1 lit. f of the GDPR for the assertion, exercise or defense of legal rights and there is no reason to assume that you have an overriding interest worthy of protection in your data not being shared,
3.3. if a legal obligation to share the data exists under Art. 6 para. 1 sentence 1 lit. c of the GDPR,
3.4. insofar as this is legally permitted and is required under Art. 6 para. 1 sentence 1 lit. b of the GDPR for the performance of a contractual relationship with you.
4. Your rights
You have rights against me with regard to the personal data that concern you. These rights include the:
4.1. right to information: under Art. 15 GDPR you can demand information about your personal data that I process.
4.2. right to rectification: under Art. 16 GDPR you can demand the rectification of inaccurate data or the completion of your personal data stored with me without undue delay.
4.3. right to erasure: under Art. 17 GDPR you can demand erasure of your personal data stored with me.
4.4. right to restriction of processing: under Art. 18 GDPR you can demand restriction of the processing of your personal data stored with me.
4.5. right to object to processing: under Art. 7 para. 3 GDPR you can withdraw your previously given consent from me at any time.
4.6. right to data portability: under Art. 20 GDPR you can demand to receive your personal data, which you have provided to me, in a structured, commonly used and machine-readable format, or to have those data transmitted to another controller.
4.7. Under Art. 77 GDPR, you also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data by me.
5.1. In addition to the data mentioned in point 2, so-called cookies are stored on your terminal device (laptop, tablet, smartphone, etc.) when you use my website. These are small text files that are stored on your hard disk and are assigned to the browser that you use; cookies furnish certain information to the source that placed the cookies. Cookies are used to make my web offering more user-friendly and efficient. I do not receive any direct knowledge of your identity from cookies. Cookies cannot execute any programs or transmit viruses to your computer.
5.2. My website uses session cookies exclusively. They store a so-called session ID, by which various queries of your browser can be assigned to the session. Session cookies make it possible to detect that you have already visited individual pages on my website. Session cookies are automatically deleted when you leave my page or close your browser. You can also delete the cookies at any time in the security settings of your browser.
5.3. You can also visit my website without cookies. For this purpose, you must configure your browser setting so that cookies are not accepted. In this case, you might not be able to use all the functions of my website.
5.4. The data processed by cookies are required for the aforementioned purposes to protect our legitimate interests and that of third parties under Art. 6 para. 1 sentence 1 lit. f of the GDPR.
5.5. Under point 6 of this Statement, I provide information about cookies that are used by integrated services (e.g. YouTube).
6. Other functions and offerings of my website/integration of third-party services and contents (plug-in providers)
In addition to the use of my website for information purposes only, I offer various services that you can use actively if you are interested. This triggers further data processing operations. Generally you have to provide further personal data; these data are used to provide the respective service. The prerequisite for using the following services is that the third-party providers obtain your IP address; without the IP address, the content cannot be transmitted to your browser.
The following offerings/services from third-party companies are integrated in our website. The data processing described below is necessary for the purposes of pursuing our legitimate interests and those of third parties in accordance with Article 6 para. 1 sentence 1 lit. f of the GDPR. In particular, these interests involve the optimization and ease of use of our website as well as the design of our website. Integration is necessary in each case in order to be able to use the offerings of the third-party providers on our website.
6.1. Integration of YouTube videos (a service of Google Inc)
6.1.2. All videos are integrated by me in “expanded data protection mode.” Whenever this mode is activated, information is stored only when the integrated video is played, by you actively clicking on it. When you play the videos, additional data processing steps are triggered. The data mentioned in point 2 are transmitted. I have no influence on this data transfer.
6.1.3. By your visit to the website, YouTube receives information that you called up the corresponding subpage of my website. In addition, the data mentioned under point 2 of this Statement are transmitted. This will occur even if you do not have a YouTube/Google user account or are not logged into it.
If you are logged into your Google or YouTube account, the data will be assigned to your Google account. If you do not want the data to be assigned to your YouTube profile, you must log out of your account before the video is played.
6.1.4. YouTube stores your data as usage profiles and uses it for purposes of advertising, market research, statistical analysis and/or demand-oriented design of its website. This kind of analysis is done in particular (even for users not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on my website.
6.1.5. You have a right to object to the creation of these user profiles. To exercise this right, please contact YouTube.
6.1.6. You can receive further information about the purpose and scope of data collection and processing by YouTube in its data protection statement. There you will also obtain additional information about your rights and optional settings to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google processes your personal data in the United States as well, and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
6.1.7. YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, e-mail: email@example.com.
6.2. Integration of Google Maps
6.2.1. I use Google Maps on my website. This makes it possible for me to show you interactive maps directly on my website; in this way, you can comfortably use the map functions of Google Maps. When used, Google collects, processes and uses data about your use of the map functions.
6.2.2. By your visit to my website, Google receives information that you called up the corresponding subpage of my website. In addition, the data mentioned under point 2 of this Statement are transmitted. This happens both when you are logged into a Google user account and when no user account exists or you have logged out of it.
6.2.3. If you are logged into a Google account, your data will be assigned directly to this account. If you do not want the data to be assigned to your Google profile, you must log out of your Google account before use.
6.2.4. Google stores your data as usage profiles and uses it for purposes of advertising, market research, statistical purposes and/or demand-oriented design of its website. This kind of analysis is done in particular (even for users not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on my website.
6.2.5. You have a right to object to the creation of these user profiles; to exercise this right, please contact Google.
6.2.6. You can receive further information about the purpose and scope of data collection and processing by Google in the data protection statements of this provider. There you will also obtain additional information about your related rights and optional settings to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google processes your personal data in the United States as well, and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
6.2.7. Google Maps is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, e-mail: firstname.lastname@example.org.
7. Objection or withdrawal of consent to processing of your data
7.1. Insofar as I process your personal data based on legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, you can lodge an objection to the processing of your personal data in accordance with Art. 21 GDPR. In this case, please let me know the grounds – arising from your particular situation – on account of which I should not process your personal data. After a review of your objection, I will either discontinue the data processing, adjust it or continue the processing. In the latter case, I will explain to you my compelling grounds worthy of protection.
7.2. You can object to the processing of your personal data for purposes of advertising and/or data analysis at any time without providing grounds. I will comply with your rightful objection in this respect; an indication of grounds is not required for this.
7.3. If you have given consent to the processing of your data, you can withdraw this consent at any time with effect for the future.
7.4. To exercise your right to withdraw consent or to object, please send an e-mail to the following address: h.goering [at] atlasoptimal.com.
You can also notify me of your objection or withdrawal of consent using the following contact information:
Alternative Practitioner Heike Göring
Praxis für Atlaskorrektur
(Atlas Correction Practice)
Schweizer Platz 56
60594 Frankfurt am Main
E-mail: h.goering [at] atlasoptimal.com
To safeguard your data, I use SSL encryption on my website.
I regularly renew certificates for use of SSL encryption. You can tell whether a page on my website is transmitted in encrypted form by the locked image of the key/lock symbol in the status bar of your browser.
9. Further questions
Do you have a question that was not answered by my Data Protection Statement? Would you like further information about a point? Please let me know! I will be happy to provide further information at any time. For all inquiries on data protection, please contact the following e-mail address:
h.goering [at] atlasoptimal.com
This Data Protection Statement is updated as of January 2019.