The following information provides an overview of what happens to your personal data when you visit this website.
Personal data means any information relating to an identified or identifiable natural person. Detailed information regarding data protection and the processing of personal data can be found in this Privacy Policy.
The processing of personal data on this website is carried out by the website operator. The contact details of the responsible controller can be found under “Controller” below.
Some data is provided directly by you, for example when you enter information into a contact form, contact us by email or telephone, book an appointment, or otherwise communicate with us.
Other data is collected automatically, or following your consent, when you visit the website. This primarily includes technical information such as your browser, operating system, IP address, device information and time of access.
Some information is processed to ensure the technically correct and secure operation of the website.
Other information may be used to respond to enquiries, arrange appointments, administer prospective patients and customers, provide our services, communicate with you, or, where permitted, analyse how the website is used and measure the effectiveness of advertising.
Under applicable data protection laws, you may have the right to obtain information concerning your personal data, request correction or deletion, restrict processing, object to certain processing, withdraw consent and receive certain data in a portable format.
You also have the right to lodge a complaint with a competent data protection supervisory authority.
This website is hosted and operated using the HighLevel / GoHighLevel platform.
HighLevel provides technical infrastructure for the operation of this website and may also provide related functionality such as website and landing-page hosting, forms, funnels, appointment scheduling, communication tools, automation and customer relationship management (“CRM”).
In connection with hosting and operating this website, personal data may be processed by HighLevel. Depending on how you use the website, this may include:
IP address;
date and time of access;
browser and device information;
operating system;
requested pages and URLs;
technical log information;
information submitted through website forms;
contact information;
appointment information;
communication data; and
other information generated through your interaction with the website.
The processing of technical information necessary to provide the website is based on our legitimate interest in providing a secure, stable and efficient online service pursuant to Article 6(1)(f) GDPR.
Where processing is necessary in order to take steps at your request before entering into a contractual or treatment relationship, or for the performance of such a relationship, Article 6(1)(b) GDPR may apply.
Where the storage of information on your terminal device or access to information already stored on your device requires consent under applicable law, such processing takes place only on the basis of your consent.
HighLevel may process personal data on our behalf as a processor. Where required, processing is governed by a data processing agreement pursuant to Article 28 GDPR.
Because HighLevel is a provider based in the United States, personal data may be processed in or transferred to the United States or other countries outside the European Economic Area. Such transfers are made only where the requirements of Chapter V GDPR are met, for example on the basis of an applicable adequacy decision, the EU-U.S. Data Privacy Framework, the European Commission's Standard Contractual Clauses or another legally recognised transfer mechanism.
Further information regarding the use of HighLevel for CRM and communication purposes can be found under “CRM System – GoHighLevel / HighLevel” below.
We take the protection of your personal data seriously and process personal data confidentially and in accordance with applicable data protection legislation, in particular the General Data Protection Regulation (“GDPR”), as well as this Privacy Policy.
When you use this website, various categories of personal data may be processed. This Privacy Policy explains what information we process, the purposes for which we process it, and the legal bases on which the processing takes place.
Please note that communication over the internet, including email communication, cannot be guaranteed to be completely secure.
The controller responsible for processing personal data in connection with this website is:
Sabine Linek
Heilpraktikerin
Konrad-Adenauer-Str. 11
38518 Gifhorn
Germany
Telephone: 0 53 71 – 1 88 30
Fax: 0 53 71 – 1 88 31
Email: [email protected]
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
The Data Protection Officer for the Naturheilpraxen Sabine Linek in Gifhorn, Travemünde and Bayerbach is:
Svenja Hohnstock
Hohnstock GmbH
Borsigstrasse 12
38446 Wolfsburg
Germany
Email: [email protected]
You may contact the Data Protection Officer directly regarding questions concerning the processing of your personal data and the exercise of your data protection rights.
Unless a more specific retention period is stated in this Privacy Policy, personal data will generally be retained only for as long as necessary to fulfil the purpose for which it was collected.
If you submit a legitimate request for deletion or withdraw consent, the relevant information will be deleted unless we have another lawful basis or legal obligation requiring continued retention, including statutory tax, commercial, professional or documentation obligations.
Depending on the circumstances, we process personal data on one or more of the following legal bases:
Article 6(1)(a) GDPR – consent;
Article 6(1)(b) GDPR – performance of a contract or pre-contractual measures;
Article 6(1)(c) GDPR – compliance with a legal obligation;
Article 6(1)(f) GDPR – legitimate interests pursued by us or a third party, provided those interests are not overridden by your interests, fundamental rights or freedoms;
Article 9(2) GDPR – where special categories of personal data, including health data, are processed, an applicable legal basis under Article 9 GDPR is additionally required.
As naturopathic practices, we may process information concerning health where this is necessary in connection with treatment, healthcare services or related professional activities.
Health information constitutes a special category of personal data under Article 9 GDPR and is subject to enhanced protection.
Such information is processed only where an appropriate legal basis exists and in accordance with applicable confidentiality, professional and statutory requirements.
Detailed medical information should not be submitted through general website forms, CRM forms, chat functions or ordinary email unless we expressly request that information through a communication channel suitable for that purpose.
We use external service providers where necessary for our operations. Where providers act as processors, appropriate agreements pursuant to Article 28 GDPR are concluded where required.
Where personal data is transferred outside the European Economic Area, the requirements of Chapter V GDPR apply.
You have, subject to the applicable statutory requirements, rights including access, rectification, erasure, restriction of processing, data portability and objection.
Where processing is based on consent, you may withdraw that consent at any time with effect for the future.
WHERE PERSONAL DATA IS PROCESSED PURSUANT TO ARTICLE 6(1)(E) OR ARTICLE 6(1)(F) GDPR, YOU HAVE THE RIGHT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA.
WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO PROCESSING FOR SUCH MARKETING, INCLUDING RELATED PROFILING.
You also have the right to lodge a complaint with a competent data protection supervisory authority.
Our website uses cookies and comparable technologies.
Some technologies are technically necessary for the provision and security of the website. Other technologies may be used for analytics, marketing, personalisation, conversion measurement or integration of third-party services.
Where consent is legally required, optional cookies and comparable technologies are activated only after you have provided the relevant consent.
You may withdraw or modify your consent at any time through the cookie settings available on our website.
We use Cookiebot as our consent-management platform to obtain, manage and document your decisions regarding cookies and similar technologies.
Cookiebot is a consent-management service provided by Usercentrics A/S.
When you visit our website, Cookiebot may process information necessary to determine and document your consent status. Depending on the configuration, this may include information such as:
your consent or withdrawal of consent;
your IP address or information derived from it;
date and time of consent;
browser and device information;
website/domain information;
consent identifier; and
information concerning the cookie categories and services you have accepted or rejected.
The purpose of this processing is to comply with our legal obligations concerning the use of cookies and similar technologies and to maintain evidence of the consent choices made by website visitors.
To the extent processing is necessary to fulfil our legal obligations, the legal basis is Article 6(1)(c) GDPR. Where necessary, our legitimate interest in maintaining reliable records of consent decisions may additionally apply under Article 6(1)(f) GDPR.
Cookiebot stores the information necessary to remember your consent preferences so that your choices do not have to be requested again on every page visit.
You may change or withdraw your consent at any time using the cookie settings provided on this website. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
When you contact us using a form provided on this website, we process the information you enter, including your contact details and the content of your enquiry, in order to handle your request and any follow-up communication.
Because the website and its forms are operated through HighLevel, information submitted through these forms may be transmitted to and stored within our HighLevel CRM system.
Where your enquiry concerns an appointment, treatment, contract or pre-contractual measures, processing is based on Article 6(1)(b) GDPR. In other cases, processing may be based on Article 6(1)(f) GDPR or, where requested, your consent under Article 6(1)(a) GDPR.
Where an enquiry contains health information or other special categories of personal data, the requirements of Article 9 GDPR additionally apply.
Please do not submit detailed diagnoses, medical records, laboratory results or other sensitive health information through a general contact or marketing form unless we have expressly requested that you do so through an appropriate communication channel.
If you contact us by email, telephone or fax, we process your enquiry and associated personal data in order to respond to your request.
The applicable legal basis depends on the nature of the enquiry and may include Article 6(1)(a), (b), (c) or (f) GDPR.
Where WhatsApp is offered as a communication channel, the service is provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
WhatsApp may process communication metadata and other information associated with use of the service.
WhatsApp should not be used to transmit detailed medical records or sensitive health information unless expressly requested through an appropriately protected process.
Where Google Forms is actually used, information submitted through the relevant form may be processed by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Depending on the purpose of the form, processing may be based on Article 6(1)(a), (b) or (f) GDPR.
Where chatbots or ManyChat are used, information entered into the relevant communication interface and associated technical information may be processed to respond to enquiries and manage communications.
Users should not enter detailed medical or treatment information into automated chatbot systems unless expressly requested through an appropriate secure process.
Where appointment-booking functionality is provided through our website or HighLevel, information such as your name, contact information, requested appointment, date and time, and information necessary to administer the booking may be processed.
The information is used to arrange, confirm, administer and, where appropriate, follow up appointments.
Processing is generally based on Article 6(1)(b) GDPR where the appointment relates to requested services or pre-contractual measures.
In addition to hosting our website, we use the HighLevel / GoHighLevel platform as a customer relationship management (“CRM”), communication, appointment and automation system.
HighLevel may therefore be used to manage enquiries, prospective patients, customer contacts, appointments, communications and related administrative processes.
Depending on your interaction with us, information stored or processed in the CRM may include:
name;
postal address;
email address;
telephone number;
enquiry and communication history;
appointment and scheduling information;
source of an enquiry;
status of an enquiry or customer relationship;
consent and communication preferences;
website and form interactions;
technical information; and
other information voluntarily provided to us.
We use HighLevel to organise and respond to enquiries, manage contacts, coordinate appointments, administer communications and efficiently operate our practices.
Where processing relates to an enquiry, appointment, requested treatment or other contractual or pre-contractual relationship, processing is based on Article 6(1)(b) GDPR.
Administrative processing may also be based on our legitimate interest in efficient practice and contact management pursuant to Article 6(1)(f) GDPR.
Where consent is required, particularly for certain marketing communications, processing is based on Article 6(1)(a) GDPR.
HighLevel may also be used to manage or automate communications, for example appointment confirmations, reminders, responses to enquiries and, where legally permitted, marketing communications.
The applicable legal basis depends on the purpose of the communication.
Marketing messages requiring consent are sent only where the necessary consent has been obtained. Consent can be withdrawn at any time with effect for the future.
HighLevel is primarily used for website operation, contact management, CRM, appointment coordination and communication.
Detailed medical records, diagnoses, findings, laboratory reports, treatment documentation or comparable sensitive healthcare information should not ordinarily be submitted through general HighLevel forms, chats, SMS functions or marketing workflows.
If health information is processed through the system in an individual case, such processing requires an appropriate legal basis under Article 9 GDPR in addition to the applicable legal basis under Article 6 GDPR and appropriate technical and organisational safeguards.
For personal data that we process through HighLevel for our own purposes, we generally act as the controller.
HighLevel generally processes customer personal data on our behalf as a processor within the meaning of Article 28 GDPR.
Where required, this processing is governed by a data processing agreement.
HighLevel is a U.S.-based service provider. Consequently, personal data may be transferred to or processed in the United States or other countries outside the European Economic Area.
International transfers are made only where an appropriate transfer mechanism under Chapter V GDPR is available, such as an applicable adequacy decision, participation in the EU-U.S. Data Privacy Framework, Standard Contractual Clauses approved by the European Commission or another legally recognised safeguard.
Information stored in the CRM is retained only for as long as necessary for the relevant enquiry, appointment, communication, customer or administrative purpose, subject to statutory, professional, tax, commercial and documentation obligations.
Where X, Instagram or LinkedIn functions are integrated into this website, the relevant provider may receive technical information concerning your interaction with the website.
Where consent is required, such integrations are activated only after you have provided consent through our consent-management system.
Where Meta services result in joint controllership for the collection and transmission of data, the applicable arrangements under Article 26 GDPR apply.
Where the website uses analytics or advertising technologies such as Google Analytics, Google Ads, Google Conversion Tracking, Meta Pixel, TikTok Pixel, LinkedIn Insight Tag, Microsoft Advertising or Hotjar, these services may process information concerning your use of the website.
Where such technologies require consent, they are activated only after you have given the relevant consent through Cookiebot.
You may withdraw or modify your consent through the cookie settings at any time.
Google Tag Manager may be used to technically manage tags and integrations. The legal basis applicable to each service deployed through Google Tag Manager depends on the relevant processing operation.
Where YouTube, Vimeo, Google Maps or similar external content is embedded, connecting to the relevant third-party provider may result in processing of technical information such as your IP address.
Where consent is required, third-party content is loaded only after the relevant consent has been provided.
Google Fonts may be hosted locally. Where fonts are exclusively loaded locally, no connection to Google is established solely for loading those fonts.
Where Google reCAPTCHA or comparable anti-abuse technology is used, technical and interaction information may be processed to protect forms and website functionality against automated misuse.
Where paid services are offered and external payment providers such as PayPal or Stripe are actually used, the relevant payment provider processes information required to execute the transaction.
Processing necessary for payment and performance of a contract is generally based on Article 6(1)(b) GDPR.
The relevant payment provider's own privacy terms additionally apply.
Where we process personal data for direct marketing, this takes place only where an appropriate legal basis exists.
Where marketing is based on consent, you may withdraw your consent at any time.
Where direct marketing is lawfully based on legitimate interests, you have the right to object at any time pursuant to Article 21(2) GDPR.
After such an objection, your personal data will no longer be processed by us for the objected-to direct marketing.
We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful loss, destruction, alteration, unauthorised disclosure and unauthorised access.
This website uses SSL/TLS encryption to protect information transmitted between your browser and the website.
We may update this Privacy Policy where necessary to reflect changes to our website, technical systems, services, processing activities or legal requirements.
The version published on this website at the relevant time applies.
Last updated: September 2026