Privacy policy

Draft – will be legally reviewed and completed before launch.

1. Controller

Leon Hildebrandt, [Anschrift], kontakt@leon-hildebrandt.de

2. What data we process

• Your email address – for signing in with a code and for appointment confirmations and reminders.
• Your mobile number – for contacting you about the consultation.
• Your match game answers – including goals, training preferences and, where given, information about aches or pains. The latter is health data (Art. 9 GDPR).
• Booked consultations and your optional message.
• Technically necessary data (IP address in server logs, session cookie).

3. Purposes and legal bases

• Storing your match answers including health information, the consultation and trainer matching: your explicit consent (Art. 6(1)(a), Art. 9(2)(a) GDPR).
• Carrying out the booked consultation: Art. 6(1)(b) GDPR.
• Preventing abuse (e.g. limiting code requests): legitimate interest, Art. 6(1)(f) GDPR.

4. Recipients

• Hosting: server in Germany (Contabo GmbH).
• Email delivery: via the controller's mailbox at the provider [add provider].
• Personal trainers: only after the consultation and only with your agreement.

5. Retention

Verification codes are deleted after one day. Your data is deleted when you ask or withdraw your consent, and at the latest 12 months after your last visit if no further appointment is booked.

6. Cookies

We only use technically necessary cookies (session, language, CSRF protection). No tracking, no ads, no external fonts or scripts.

7. Your rights

You have the right to access, rectification, erasure, restriction, data portability and to withdraw your consent with effect for the future. Under “My data” you can view and delete everything yourself. You can also lodge a complaint with a data protection supervisory authority.