Privacy policy

Who is responsible

Dr. med. Stefan Lauterbach
Privatpraxis Dr. S. Lauterbach
Lychener Str. 18
10437 Berlin
Germany

Email: [email protected]
Phone: 0179 3266047

Visiting this website

Our website is served through Cloudflare Pages. When you visit, Cloudflare processes technical connection data such as your IP address, date and time, requested page, browser and device information, and response status. This is used to deliver the site and maintain its security and stability. The legal basis is our legitimate interest in providing a secure, functional website (Article 6(1)(f) GDPR).

The recipient is Cloudflare, Inc. Processing outside the European Economic Area may occur. See Cloudflare’s privacy policy and Data Processing Addendum for details on privacy and international transfers.

[Confirm the actual Cloudflare log settings and retention period before publication.]

Appointment waitlist with Kit

We use an embedded form from Kit, Inc. for the appointment waitlist. When you open a page containing the form, it loads from Kit. Technical data such as your IP address, browser details, page address and time of access may be sent to Kit. The embedded form also records form visits and may use browser storage.

When you sign up, we process your email address to send a confirmation message and, after you confirm, to let you know when our first appointments are available. Kit also processes technical delivery and confirmation data. The legal basis for sending waitlist messages is your consent (Article 6(1)(a) GDPR). You can withdraw it at any time for the future through the unsubscribe link in a message or by contacting us.

The recipient is Kit, Inc. in the United States. Kit describes its international transfer mechanisms in its Data Processing Addendum. We retain waitlist data until you unsubscribe or the waitlist purpose ends; records needed to demonstrate consent may be retained longer.

[Before publication, confirm Kit’s agreement and transfer arrangements, actual retention periods, browser storage access, and the legal basis or consent for automatic loading and recording of form visits.]

Appointment calendars with Cal.com

We provide pop-up appointment calendars through Cal.com. The Cal.com script loads when you open a page with a booking button. Technical data such as your IP address, browser details and page address may then be sent to Cal.com. The calendar itself opens when you select a booking button. If you make a booking, Cal.com processes the details you enter, such as your name, email address, selected treatment and appointment time, on our behalf. See Cal.com’s privacy policy.

[Before enabling bookings, confirm the Cal.com agreement, transfer arrangements, booking questions, legal basis and retention period. Avoid collecting medical history through booking questions until that processing has been reviewed.]

Event registration through Luma

Selecting RSVP opens our event page on Luma in a new tab. When you visit Luma, technical data such as your IP address, browser details and time of access may be sent to Luma. Luma’s privacy policy applies to its registration form.

If you register for our event, we receive the details you provide for registration so we can organise the event and your participation. The legal basis for processing registration details is Article 6(1)(b) GDPR.

[Before publication, confirm which attendee details Luma shares with Moments and when those details are deleted after the event.]

Contact by email or phone

If you contact us, we process your contact details and the content of your message to respond. Depending on your enquiry, the legal basis is taking steps before entering a contract (Article 6(1)(b) GDPR) or our legitimate interest in answering enquiries (Article 6(1)(f) GDPR). We delete enquiries when they are no longer needed unless legal retention duties apply. Please do not send sensitive health information by unencrypted email.

External links and local fonts

Links to stil-ch, Luma and other external services open their websites only when you select them. Those providers’ privacy policies then apply. We serve this website’s fonts and images from our own site; we do not load them from an external font provider.

Analytics and advertising

We do not currently use separate website analytics services or advertising pixels. The embedded Kit form does record form visits as described above. If we introduce other analytics or advertising services, we will update this policy and review any required consent before enabling them.

Your rights

Subject to the GDPR, you may request access, correction, erasure, restriction of processing and data portability, and object to processing. You may withdraw consent at any time for the future. Contact [email protected] to exercise these rights.

You may also lodge a complaint with a data protection authority, including the Berlin Commissioner for Data Protection and Freedom of Information.