Your data at Moments
Privacy policy
Draft for review: Before publication, confirm the retention settings for Cloudflare, Kit, Luma and the email service, and the legal basis for loading the Kit form when an appointment page opens. Future appointment booking and treatment records are not yet covered.
Who is responsible
Dr. med. Stefan Lauterbach
Privatpraxis Dr. S. Lauterbach
Lychener Str. 18
10437 Berlin
Germany
Email: [email protected]
Phone: 0179 3266047
Visiting this website
Our website is served through Cloudflare Pages. When you visit, Cloudflare processes technical connection data such as your IP address, date and time, requested page, browser and device information, and response status. This is used to deliver the site and maintain its security and stability. The legal basis is our legitimate interest in providing a secure, functional website (Article 6(1)(f) GDPR).
The recipient is Cloudflare, Inc. Processing outside the European Economic Area may occur. See Cloudflare’s privacy policy and Data Processing Addendum for details on privacy and international transfers.
[Confirm the actual Cloudflare log settings and retention period before publication.]
Appointment waitlist with Kit
We use an embedded form from Kit, Inc. for the appointment waitlist. When you open a page containing the form, it loads from Kit. Technical data such as your IP address, browser details, page address and time of access may be sent to Kit. The embedded form also records form visits and may use browser storage.
When you sign up, we process your email address to send a confirmation message and, after you confirm, to let you know when our first appointments are available. Kit also processes technical delivery and confirmation data. The legal basis for sending waitlist messages is your consent (Article 6(1)(a) GDPR). You can withdraw it at any time for the future through the unsubscribe link in a message or by contacting us.
The recipient is Kit, Inc. in the United States. Kit describes its international transfer mechanisms in its Data Processing Addendum. We retain waitlist data until you unsubscribe or the waitlist purpose ends; records needed to demonstrate consent may be retained longer.
[Before publication, confirm Kit’s agreement and transfer arrangements, actual retention periods, browser storage access, and the legal basis or consent for automatic loading and recording of form visits.]
Event registration through Luma
Pages with an RSVP button load Luma’s checkout script from embed.lu.ma. When you open one of these pages, technical data such as your IP address, browser details, page address and time of access may be sent to Luma. Selecting RSVP opens Luma’s registration form in an overlay on our website. Luma’s privacy policy applies to that form.
If you register for our event, we receive the details you provide for registration so we can organise the event and your participation. The legal basis for processing registration details is Article 6(1)(b) GDPR.
[Before publication, confirm the legal basis for automatically loading Luma’s script, which attendee details Luma shares with Moments, and when those details are deleted after the event.]
Contact by email or phone
If you contact us, we process your contact details and the content of your message to respond. Depending on your enquiry, the legal basis is taking steps before entering a contract (Article 6(1)(b) GDPR) or our legitimate interest in answering enquiries (Article 6(1)(f) GDPR). We delete enquiries when they are no longer needed unless legal retention duties apply. Please do not send sensitive health information by unencrypted email.
External links and local fonts
Links to stil-ch, Luma and other external services open their websites only when you select them. Those providers’ privacy policies then apply. We serve this website’s fonts and images from our own site; we do not load them from an external font provider.
Analytics and advertising
We do not currently use separate website analytics services or advertising pixels. The embedded Kit form does record form visits as described above. If we introduce other analytics or advertising services, we will update this policy and review any required consent before enabling them.
Your rights
Subject to the GDPR, you may request access, correction, erasure, restriction of processing and data portability, and object to processing. You may withdraw consent at any time for the future. Contact [email protected] to exercise these rights.
You may also lodge a complaint with a data protection authority, including the Berlin Commissioner for Data Protection and Freedom of Information.