Data protection

Privacy policy

Status: 01.02.2026

1. data protection at a glance

General information

The following information provides an overview of what happens to your personal data when you visit this website. Personal data is all data with which you can be personally identified. Detailed information can be found in the following sections of this privacy policy.

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. The contact details can be found in the "Controller" section.

How do we collect your data?

On the one hand, your data is collected when you provide it to us. This happens in particular when you complete and send the queries provided (VitalCheck or SatisfactionCheck).

Further data is automatically collected by our IT systems when you visit the website (in particular technical access data such as browser, operating system, time of page view).

What do we use your data for?

Some of the data is collected to ensure the error-free provision and security of the website.

We process further data in order to evaluate the information provided by you as part of VitalCheck or SatisfactionCheck and - if intended - to enable us to contact you for sales purposes.

What rights do you have with regard to your data?

You have the right to information, correction or deletion of your data at any time. You can revoke your consent at any time for the future. You also have the right, under certain conditions, to request the restriction of processing and to object to processing. You also have the right to lodge a complaint with the competent supervisory authority.

⸻

2. responsible body

The controller responsible for data processing on this website is

Sven Neumann

Emil-Duborg-Kehre 7

21529 Kröppelshagen

Germany

E-mail: mail@einfachbegeistert.com

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

⸻

3. hosting

We host the content of this website at:

Hetzner Online GmbH

Industriestr. 25

91710 Gunzenhausen

Germany

The use of Hetzner is based on Art. 6 para. 1 lit. f GDPR (legitimate interest in a reliable and secure presentation of the website).

Order processing

An order processing contract (order processing contract) has been concluded with the hosting provider. This ensures that personal data is only processed in accordance with our instructions and in compliance with the GDPR.

⸻

4. general information on the legal basis of data processing

Unless otherwise stated in this privacy policy, we process personal data on the following legal bases:

• Art. 6 para. 1 lit. f GDPR (legitimate interest, in particular operation, stability and security of the website)

• Art. 6 para. 1 lit. b GDPR (contract or pre-contractual measures, if a request is directed to this)

• Art. 6 para. 1 lit. a GDPR (consent, in particular for active entries/queries)

• Art. 9 para. 2 lit. a GDPR (explicit consent, if special categories of personal data, in particular health-related information, are processed)

⸻

5. data collection when visiting the website (server log files)

When the website is accessed, the web server automatically processes access data, in particular:

• IP address

• Date and time of access

• Page or file accessed

• Browser type and browser version

• Operating system

• Referrer URL (if transmitted)

Purpose: Operation, technical stability, security and defense against abuse/attacks.

Legal basis: Art. 6 para. 1 lit. f GDPR.

Storage period: Log data is only stored for as long as is necessary to achieve the stated purposes; it is then deleted or anonymized, provided there are no legal obligations to the contrary.

⸻

6. subdomains and personalization by licensees

This website is also provided via technically mirrored subdomains (for example name.einfachbegeistert.com and name.simpleexcited.com). The fixed content of the subdomains cannot be changed.

Licensees can voluntarily provide information within a clearly defined area, in particular

• Bio-Text

• Profile picture

• Optionally a phone number to link to a WhatsApp contact

• Optional links to your own social media profiles

Responsibilities

We are responsible for the technical operation of the platform and for the storage and display of the information provided by licensees on the respective subdomain.

The respective licensee is obliged to ensure that the content provided is lawful and does not infringe any third-party rights (e.g. copyrights, personal rights or data protection rights) and that the necessary consents have been obtained (particularly in the case of profile pictures).

We reserve the right to remove or block user content in the event of legal violations or breaches of contractual provisions.

⸻

7. external links (WhatsApp and social media)

If a WhatsApp link or links to social media profiles are displayed on a subdomain, these are external links. When you click on them, you leave our website.

From this point onwards, data processing is the sole responsibility of the respective provider. The data protection provisions of the respective provider apply.

Important note: We only use WhatsApp on this website as a link (contact option). There is no automatic communication via WhatsApp on this website.

⸻

8 VitalCheck and SatisfactionCheck

When you complete VitalCheck or SatisfactionCheck, we process the data you enter in order to carry out and evaluate the survey.

Type of data

Depending on the configuration, the following data can be processed:

• Contact details (e.g. name, e-mail address, if requested)

• Self-assessments and answers to the survey

• if applicable, also health-related information, if you provide this voluntarily

Purpose of the processing

• Implementation of the respective query

• Evaluation to determine location

• If necessary, contact in a sales context, if this is provided for

No medical advice, diagnosis or treatment is provided.

Legal basis

• Art. 6 para. 1 lit. a GDPR (consent)

• for health-related information, additionally Art. 9 para. 2 lit. a GDPR (explicit consent)

Recipient / transfer to licensee

If provided for in individual cases, query results can be transmitted to the assigned licensee (e.g. based on the stored partner assignment) so that they can contact you on the basis of your query.

In this case, the licensee processes your data independently and is responsible for further processing outside this website.

⸻

9. cookies, tracking and embedded content

We do not use any tracking or analysis tools on this website.

We do not use embedded content from third-party providers (e.g. YouTube embeds).

Insofar as technically necessary functions are based on local storage technologies in individual cases (e.g. for the secure provision of the website), this is done exclusively for the technical provision and security of the website.

⸻

10. recipients of personal data

Personal data may be transmitted to the following categories of recipients as part of website operation:

• Hosting and IT service provider (as processor)

• Licensees, insofar as this is functionally provided for within the framework of VitalCheck/SatisfactionCheck and a legal basis exists

• Authorities, insofar as a legal obligation exists

⸻

11. storage period

Unless a more specific storage period is specified in this privacy policy, we only process and store personal data for as long as the purpose of the processing exists.

If you withdraw your consent or make a request for deletion, the data will be deleted, provided there are no statutory retention obligations or other legally permissible reasons for further storage.

⸻

12. your rights

You have the following rights at all times:

• Information (Art. 15 GDPR)

• Rectification (Art. 16 GDPR)

• Erasure (Art. 17 GDPR)

• Restriction of processing (Art. 18 GDPR)

• Data portability (Art. 20 GDPR)

• Objection to processing on the basis of Art. 6 para. 1 lit. f GDPR (Art. 21 GDPR)

• Revocation of consents granted (Art. 7 para. 3 GDPR)

Please send your inquiries to: mail@einfachbegeistert.com

⸻

13. right to lodge a complaint with the competent supervisory authority

In the event of data protection violations, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged violation.

⸻

14. amendment of this privacy policy

We reserve the right to amend this privacy policy if legal, technical or content-related changes make this necessary. The version published on the website shall apply.