Privacy policy
1. Controller
Lea Wentritt Mobile Praxis für Physiotherapie und Osteopathie Alte Dorfstraße 18a 22397 Hamburg Germany Phone: 01737697807 Email: info@lea-wentritt.de
2. Hosting
This website is hosted by Railway Corporation (USA). The application runs in the Europe (Netherlands) region. In the course of hosting, IP addresses, access times, technical browser and device data and server log data may be processed. This processing is technically necessary in order to deliver the website. Where Railway processes personal data on my behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR. As the provider is based in the USA, access from a third country cannot be excluded; the transfer is based on standard contractual clauses pursuant to Art. 46(2)(c) GDPR.
3. Contacting us
If you contact me by email or phone, I will process the information you provide in order to handle your enquiry. Please do not send detailed health data by email unless this is necessary for your enquiry.
4. Online appointment booking via Calendly
For online appointment scheduling I use Calendly, Calendly LLC. When you book, the data required for the appointment arrangement is processed, in particular name, contact details and appointment/booking data. Calendly processes this data in the context of the booking and provides a Data Processing Addendum for this purpose. Calendly states that data may be stored and processed in the USA. For transfers from the EEA, Calendly cites Standard Contractual Clauses and the EU-US Data Privacy Framework. Please do not enter diagnoses, findings or other health data in free-text fields when booking an appointment.
5. Health data
In the course of my work as a physiotherapist and Heilpraktikerin, health data may be processed. This includes, for example, complaints, diagnoses, findings, previous illnesses, treatment histories and therapeutic measures. Processing only takes place where there is an appropriate data-protection basis and this is necessary in particular for anamnesis, examination, treatment, documentation, billing or legal obligations. Health data are special categories of personal data under Art. 9 GDPR.
6. Disclosure of data
Data is only disclosed where there is a legal basis or this is necessary to provide the respective service. Possible recipients include: • Hosting and IT service providers • Calendly • Google (Google Calendar) • Tax advisors/accounting • Billing service providers, where applicable • Legally authorised or obliged bodies
7. Storage period
Personal data is stored only as long as necessary for the respective purpose or where statutory retention obligations exist. Treatment and billing records are retained in accordance with the applicable statutory retention periods.
8. Your rights
Subject to the statutory requirements, you have the right to: • access • rectification • erasure • restriction of processing • data portability • object to certain processing Where processing is based on consent, this can be revoked with effect for the future.
9. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for Hamburg is: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit Ludwig-Erhard-Straße 22 20459 Hamburg
10. Cookies and external services
This website uses no analytics or marketing services. Fonts are served from this server; no external font service is embedded. The Calendly booking calendar is loaded only when you select a treatment type on the appointment page. You are informed about the data this transmits immediately before making that choice. Nothing is sent to Calendly before that. Once loaded, Calendly sets its own cookies and receives your IP address. Your decision is stored locally in your browser so that it can be respected on a later visit. You can withdraw your consent at any time on the appointment page. Technically necessary cookies may be used where this is required for the secure operation of the website. Your language choice is stored in a cookie so that the website appears in the language you selected.
11. SSL/TLS encryption
This website uses SSL/TLS encryption where provided by the hosting provider.
12. Updates
This privacy policy is updated when the services used or legal requirements change. Last updated: August 2026