Legal

Privacy policy (Datenschutz)

Portfolio demo: this business is fictional and this text is a sample, not legal advice. It describes what this demo site actually does, so the technology and the text match.

1. Who is responsible

Kinetra Physiotherapie, Lena Hofbauer, Example Street 12, 94032 Passau. Email: hello@kinetra.example

2. Hosting

This website is hosted on Cloudflare Pages (Cloudflare, Inc.). When you open a page, the server processes your IP address and technical data (browser, time, requested page) to deliver the site and protect it against attacks. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a secure, working website. Cloudflare is certified under the EU-US Data Privacy Framework.

3. No tracking, no analytics

We do not use analytics, advertising or tracking tools. Our fonts are stored on our own server, so no request is sent to Google Fonts or any other font service.

4. Your consent choice

Your choice in the consent banner is saved in your own browser (local storage) so we do not ask again on every page. It is not sent to us or anyone else. Legal basis: § 25(2) TDDDG, this storage is strictly necessary to remember your choice. You can change it any time under “Cookie settings” in the footer.

5. Contact form and email

When you contact us, we process the details you enter (name, email, optional phone, topic, message) only to answer your request. Legal basis: Art. 6(1)(b) GDPR for requests about treatment, otherwise Art. 6(1)(f) GDPR. Please do not send health information or medical reports through the form.

In this demo, form entries are checked on the server and then discarded. Nothing is stored or forwarded.

6. Google Maps (only with your consent)

Our contact page can show a map from Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The map loads only after you click “Load map” or allow external media in the consent banner. Google then receives your IP address and may transfer data to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework. Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG, your consent. You can withdraw it any time under “Cookie settings”.

7. Your rights

You have the right to:

  • access the data we hold about you (Art. 15 GDPR)
  • have it corrected or deleted (Art. 16 and 17 GDPR)
  • restrict its processing (Art. 18 GDPR)
  • receive it in a portable format (Art. 20 GDPR)
  • object to processing based on legitimate interest (Art. 21 GDPR)
  • withdraw consent at any time, with effect for the future (Art. 7(3) GDPR)

You can also complain to a data protection authority. For businesses in Bavaria this is the Bavarian State Office for Data Protection Supervision (BayLDA), Ansbach.

8. How long we keep data

We delete messages once your request is fully answered, unless legal retention periods require us to keep them longer.