Privacy policy

1. Controller

The controller responsible for data processing on this website is:

Erik Weisphal
Mettlerkampsweg 31
20535 Hamburg
Email: info@nowmatters.health

We have not appointed a data protection officer because we are not required to do so. If you have any questions about data protection, please write to us at the email address above.

2. Summary

• We do not set any cookies.
• We do not use any analytics or tracking tools and no advertising services.
• Fonts and all other files are loaded from our own server, not from third parties.
• We only process personal data when you visit the website (technically necessary server logs) and when you write to us via the contact form or by email.

3. Hosting and server logs

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. The website is delivered from a data centre in Frankfurt am Main.

When you visit the website, Vercel automatically processes data that your browser transmits:

• IP address
• date and time of the visit
• page visited
• referrer (the page you came from)
• browser and operating system (user agent)

This data is technically necessary to deliver the website and is used for security and troubleshooting. The legal basis is Art. 6 Abs. 1 lit. f DSGVO (GDPR). Our legitimate interest lies in the secure and stable operation of the website. The logs are deleted after 30 days.

We have concluded a data processing agreement with Vercel in accordance with Art. 28 DSGVO (GDPR). As Vercel is a company based in the USA, data may be transferred to the USA. Vercel is certified under the EU-US Data Privacy Framework. The transfer is therefore based on the adequacy decision of the European Commission (Art. 45 DSGVO). In addition, standard contractual clauses of the European Commission have been agreed (Art. 46 Abs. 2 lit. c DSGVO).

4. Contact form and email

If you write to us via the contact form or by email, we process the information you provide:

• first and last name, email address
• voluntary: phone number, organization, type of facility, federal state, topic
• your message
• the language of the page and the time of the request

We use this data only to process your request and to get in touch with you.

Legal basis: If your request is aimed at a contract with us, such as a pilot partnership or a collaboration, the legal basis is Art. 6 Abs. 1 lit. b DSGVO (GDPR). In all other cases, it is Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest lies in answering requests.

Sending: The form data is not stored in a database. It is sent to our mailbox via the email service Lettermint (Lettermint B.V., Willemsvaart 16 B, 8019 AB Zwolle, the Netherlands). We have concluded a data processing agreement with Lettermint under Art. 28 DSGVO. Lettermint processes the data exclusively within the European Union.

Mailbox: Our email mailbox is operated via Google Workspace. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We have concluded a data processing agreement with Google. It cannot be ruled out that data is transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework (Art. 45 DSGVO); in addition, standard contractual clauses have been agreed (Art. 46 Abs. 2 lit. c DSGVO).

Protection against misuse: To protect the form against automated mass requests, your IP address is briefly held in the server's memory, and the number of requests from it is counted. It is not stored permanently and is discarded after 60 minutes at the latest. The legal basis is Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest lies in protection against misuse.

Storage period: We delete your request once it has been dealt with and there is no longer any reason to keep it, after six months at the latest. If a contract results from the request, the statutory retention periods apply.

Please do not send us certificates, ID documents, health data or other particularly sensitive documents via the form or by email.

Providing your data is voluntary. However, we cannot process your request without your name, email address and message.

5. No cookies, no tracking

This website does not set any cookies and does not store any information on your device. We do not use any analytics or tracking services, social media plugins or embedded third-party content such as videos or maps. Fonts are loaded from our own server.

6. Links to other websites

Our website contains links to websites of other providers. Data is only transferred to the other provider when you click on such a link. The respective provider is responsible for its own data processing.

7. Your rights

You have the following rights towards us with regard to your personal data:

• access (Art. 15 DSGVO)
• rectification (Art. 16 DSGVO)
• erasure (Art. 17 DSGVO)
• restriction of processing (Art. 18 DSGVO)
• data portability (Art. 20 DSGVO)

Right to object (Art. 21 DSGVO): Where we process your data on the basis of Art. 6 Abs. 1 lit. f DSGVO, you may object at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.

To exercise your rights, write to us at info@nowmatters.health.

Right to lodge a complaint: You can lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement. The authority responsible for us is der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (the Hamburg Commissioner for Data Protection and Freedom of Information), Ludwig-Erhard-Straße 22, 20459 Hamburg.

8. No automated decision-making

No automated decision-making, including profiling within the meaning of Art. 22 DSGVO (GDPR), takes place on this website.

9. Changes

We update this privacy policy when the website or the legal situation changes. The version published here applies.