Privacy Policy

1. Controller

Florian Schöning, Nordstraße 8, 37603 Holzminden, Germany
Phone: +49 5531 127 46 60
Email: heilpraxis@gesundheitsloesungen-schoening.de

2. Data processed on booking

When you book a seminar we collect your name, email, phone number, professional details and payment data (processed by Stripe). Legal basis: Art. 6 (1) (b) GDPR (performance of a contract).

When you purchase on-demand videos we store your email address, the purchased videos, the payment status and your consent to immediate performance (§ 356 (5) BGB) — to provide your access and for the duration of statutory retention periods. Legal basis: Art. 6 (1) (b) and (c) GDPR.

To evidence your acceptance of the confidentiality agreement (NDA) during booking, we log the time of acceptance, the version and checksum of the accepted text, and the IP address and browser identifier of the device used. This data is used solely to prove the conclusion of the agreement and is retained for 10 years from the last seminar day. Legal basis: Art. 6 (1) (b) and (f) GDPR (establishment and defence of legal claims).

3. Patient registration for the patient day (health data)

If you register as a patient for a patient day, we collect your name, email address and phone number, and — based on your explicit consent (Art. 9 (2) (a) GDPR) — information about your complaints (affected region and a short description). This information is used exclusively to select patients and organise the appointment; it is never used for marketing and never transmitted by email. Only the practice and treatment team has access.

You may withdraw your consent at any time with effect for the future (informally, to the address above). Registrations that are not selected are deleted no later than 30 days after the respective seminar; in the event of participation, statutory retention periods apply.

4. Payment processing (Stripe)

Payment data is processed exclusively by Stripe and never reaches our servers. Stripe is PCI-DSS Level 1 certified and registered under the EU-US Data Privacy Framework. A data processing agreement is in place.

5. Email communication and contact management (Brevo)

Booking confirmations, purchase/access emails and preparation material are sent via Brevo (Sendinblue SAS, Paris). Your email address and booking/purchase history are stored as a contact profile in Brevo (EU hosting, data processing agreement in place). Legal basis: Art. 6 (1) (b) GDPR. Marketing emails are only sent with your separate consent (double opt-in, Art. 6 (1) (a) GDPR), which you can withdraw at any time via the unsubscribe link.

6. Video streaming (Bunny Stream)

Purchased on-demand videos and trailers are delivered via Bunny Stream (BUNNYWAY d.o.o., Ljubljana, Slovenia — EU). Your IP address is processed to the extent technically necessary for delivery. A data processing agreement is in place. Legal basis: Art. 6 (1) (b) GDPR.

7. Hosting

Vercel Inc., certified under the EU-US Data Privacy Framework.

8. Your rights

Access, rectification, erasure, objection: by email to the address above. You have the right to lodge a complaint with the Data Protection Commissioner of Lower Saxony, Prinzenstraße 5, 30159 Hannover, Germany, phone: +49 511 120-4500, email: poststelle@lfd.niedersachsen.de.