This English translation is provided for your convenience. Only the German version is legally binding.
1. Controller
The controller responsible for data processing on this website is:
Podologische Praxis Altona
Große Bergstraße 219, 22767 Hamburg
Phone: 040 – 55 89 55 98
Email: info@podologie-altona.de
2. General information on data processing
2.1 Scope of processing of personal data
As a matter of principle, we only process our users’ personal data to the extent necessary to provide a functional website and our content and services.
This website is deliberately designed to collect as little data as possible: it uses no cookies, no analytics or tracking tools and no contact form. Third-party content (the OpenStreetMap map) is only loaded if you explicitly trigger it with a click.
2.2 Legal basis for processing personal data
Where we obtain the data subject’s consent for processing personal data, Art. 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
Where processing is necessary for the performance of a contract, Art. 6(1)(b) GDPR serves as the legal basis.
Where processing is necessary to fulfil a legal obligation, Art. 6(1)(c) GDPR serves as the legal basis.
Where processing is necessary to protect a legitimate interest of our practice or a third party, and the interests, fundamental rights and freedoms of the data subject do not override that interest, Art. 6(1)(f) GDPR serves as the legal basis.
2.3 Erasure of data and storage period
The data subject’s personal data will be erased or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by European or national legislators in EU regulations, laws or other provisions. Data will also be blocked or erased when a storage period prescribed by those provisions expires, unless further storage is necessary for concluding or performing a contract.
3. Provision of the website
3.1 Description and scope of data processing
Each time you access our website, the web server necessarily processes the IP address of your device and the information your browser sends automatically (e.g. requested address, browser type and version, operating system, date and time of access). Without this data, the website cannot be delivered to your device.
Our web server keeps no access logs (server log files). The data listed above is processed in memory only for as long as it takes to deliver the page and is not stored afterwards. It is not merged with other data sources or analysed.
3.2 Legal basis and purpose
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in delivering the website securely and without technical errors. Data is transmitted encrypted (HTTPS).
4. Hosting
The web server of this website is located in a data centre of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Data is processed exclusively in Germany; no data is transferred to third countries.
The server is operated on our behalf and according to our instructions. Processing is based on Art. 6(1)(f) GDPR (legitimate interest in a secure and efficient provision of our website).
More information on data protection at Hetzner: https://www.hetzner.com/legal/privacy-policy/
5. Contacting us by phone or email
5.1 Description and scope of data processing
You can contact us by phone or email. This website does not have a contact form. When you contact us, we process the data you provide (e.g. name, phone number, email address and the content of your message) in order to deal with your request.
5.2 Legal basis
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in responding to your enquiry). If your enquiry relates to treatment or the conclusion of a contract, Art. 6(1)(b) GDPR is an additional legal basis. Where you share health data with us, we process it on the basis of Art. 9(2)(h) GDPR.
Please note that unencrypted emails may be read by third parties in transit. For sensitive health information we therefore recommend contacting us by phone.
5.3 Storage period
The data is erased as soon as it is no longer required for the purpose for which it was collected. This is the case when the conversation with the user has ended and the circumstances indicate that the matter has been conclusively resolved. Statutory retention obligations – in particular for treatment records – remain unaffected.
5.4 Right to object
If you contact us by email, you can object to the storage of your personal data at any time. In that case, the conversation cannot be continued. A message to the contact details above is sufficient to object.
6. Map display with OpenStreetMap
6.1 Description and scope of data processing
On our website you can display an OpenStreetMap map showing our location. The map is not loaded automatically; until then you only see a placeholder with a corresponding notice. Only when you click “Load map” is a connection made to the servers of the OpenStreetMap Foundation. Your IP address and technical information are transmitted in the process, in particular:
- Browser type and version
- Operating system used
- Referrer URL
- Date and time of the server request
According to our review, the embedded map does not set any cookies. The map data is delivered via a content delivery network (Fastly, Inc., USA), so processing of your IP address in the USA cannot be ruled out. Fastly is certified under the EU-US Data Privacy Framework (European Commission adequacy decision, Art. 45 GDPR).
6.2 Legal basis
The map is embedded on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG), which you give by clicking “Load map”. Consent applies only to the respective page view; you can withdraw it at any time by not loading the map again.
6.3 Purpose of data processing
The map is embedded to show our location and make it easier for you to find our practice.
6.4 Information on OpenStreetMap
OpenStreetMap is operated by the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. The European Commission has adopted an adequacy decision for the United Kingdom.
More information on data protection at OpenStreetMap: https://osmfoundation.org/wiki/Privacy_Policy
6.5 Directions via Google Maps
The “Get directions” button is a plain link to Google Maps. Nothing from Google is loaded on our website and no data is sent to Google unless you click the link. Only when you click it do you leave our website; from then on the privacy policy of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland applies: https://policies.google.com/privacy
7. Fonts
The fonts used on this website (Inter and Fraunces) are served locally from our own server. No connection is made to third-party servers (such as Google Fonts).
8. No cookies, local preferences
This website does not use cookies. If you change the language or colour scheme (light/dark), this choice is stored only in your browser’s local storage (“localStorage”) so that it is kept on your next visit. This information contains no personal data, is not transmitted to us and can be deleted at any time via your browser settings. Storage is strictly necessary for the service you have explicitly requested (§ 25(2) No. 2 TDDDG).
9. No analytics or tracking
We do not use web analytics tools (such as Google Analytics) or other tracking technologies. No profiling or tracking of your behaviour across websites takes place.
10. Rights of the data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and have the following rights against the controller:
10.1 Right of access
You can request confirmation from the controller as to whether personal data concerning you is being processed. If so, you can request information about:
- the purposes for which the personal data is processed;
- the categories of personal data being processed;
- the recipients or categories of recipients to whom the personal data has been or will be disclosed;
- the planned storage period of the personal data concerning you;
- the existence of a right to rectification or erasure of the personal data concerning you;
- the existence of a right to lodge a complaint with a supervisory authority;
- all available information about the source of the data, if it was not collected from the data subject.
10.2 Right to rectification
You have the right to have inaccurate or incomplete personal data concerning you rectified and/or completed by the controller.
10.3 Right to erasure
You can request that the controller erase personal data concerning you without undue delay, provided one of the statutory grounds applies and the processing is not necessary.
10.4 Right to restriction of processing
Under the statutory conditions, you can request the restriction of processing of personal data concerning you.
10.5 Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format.
10.6 Right to object
You have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you that is based on Art. 6(1)(f) GDPR.
10.7 Right to withdraw consent
You have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
10.8 Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
The competent supervisory authority for Hamburg is:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Str. 22
20459 Hamburg, Germany
Phone: +49 40 428 54 - 4040
Email: mailbox@datenschutz.hamburg.de
Website: https://datenschutz-hamburg.de
11. Validity and changes to this privacy policy
This privacy policy is currently valid and was last updated in October 2026.
As our website and services evolve, or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The current version can be accessed and printed at any time on this website under “Privacy”.