Privacy policy
Here you can find out which personal data is processed when you visit this website and when you contact my practice, for what purpose, and which rights you have.
This English version is a convenience translation. The German version (Datenschutzerklärung) is legally binding.
1. Who is responsible for the data processing?
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Swantje Law
Praxis für Osteopathie Swantje Law
Gänsewinkel 7
37191 Katlenburg-Lindau
OT Wachenhausen
Phone: 0179 47 48 641
Email: mail@osteopathie-swantjelaw.com
If you have questions about data protection, you can contact this address at any time.
2. What rights do you have?
You have the following rights towards the practice with regard to your personal data:
- access to your stored data (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure (Art. 17 GDPR), unless a legal retention obligation prevents it
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- objection to processing based on a legitimate interest (Art. 21 GDPR)
- withdrawal of consent you have given, with effect for the future (Art. 7(3) GDPR)
You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for the practice is the State Commissioner for Data Protection of Lower Saxony (Landesbeauftragter für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hanover.
3. Hosting and server log files
This website is operated by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. When the pages are accessed, the server automatically stores information that your browser transmits: IP address, date and time, the page accessed, the amount of data transferred, browser and operating system, and the previously visited page. I need this data so that the website runs securely and reliably.
The legal basis is my legitimate interest in secure operation (Art. 6(1)(f) GDPR). A data processing agreement exists with IONOS. The log files are deleted after at the latest after eight weeks. The connection to the website is encrypted with TLS.
4. Cookies and consent
This website does not set cookies and does not measure audience. Only your choice in the consent banner is stored: in the local storage of your browser (localStorage), not on the server and not with third parties, for 180 days. This is necessary to implement your decision (section 25(2) TDDDG).
I only load services that transfer data to third parties when you consent (section 25(1) TDDDG, Art. 6(1)(a) GDPR). This only concerns the Google Maps map (section 6). The banner is a solution of my own without a tool from a third-party provider. You can change or withdraw your choice at any time via the “Cookie settings” link in the footer of every page.
5. Fonts and explainer video
The fonts of this website and the IHHT explainer video are stored on my own server. No connection to Google or other providers is established when they load.
6. Map (Google Maps)
A Google Maps map can be shown on the “Home” and “Contact” pages. The map is only loaded when you choose “Allow map” in the banner or click “Load map” at the map. Only then is data such as your IP address transferred to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and possibly passed on to servers of Google LLC in the USA. The legal basis is your consent (Art. 6(1)(a) GDPR). Google LLC is certified under the EU-US Data Privacy Framework. You can withdraw your consent at any time via “Cookie settings” in the footer; the map is then hidden again. Further information: Google’s privacy policy.
7. Online appointment booking (Lemniscus)
For online appointment booking I use the service Lemniscus (pgt technology scouting GmbH, Ruschgraben 51, 76139 Karlsruhe, Germany). With a click on “View available appointments” you switch to the Lemniscus booking page. There you enter your name, your contact details and the desired appointment. I use this data to plan your appointment and to reach you if necessary (Art. 6(1)(b) GDPR). Lemniscus processes the data on my behalf. Please do not enter detailed information about your health when booking. The privacy policy of Lemniscus also applies to the booking page.
8. Gift vouchers (SumUp)
You can buy gift vouchers online via SumUp (SumUp Limited, Block 8, Harcourt Centre, Charlotte Way, Dublin 2, D02 K580, Ireland). With a click on the voucher link you switch to the SumUp page. There the data needed for the purchase and payment is processed (Art. 6(1)(b) GDPR). The privacy policy of SumUp applies.
9. Contact by phone, email and WhatsApp
If you call me or write me an email, I process your details to answer your enquiry and to arrange appointments (Art. 6(1)(b) GDPR). I delete the data when it is no longer needed for this purpose, unless a retention obligation exists.
You can also reach me via WhatsApp. WhatsApp is operated by WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, a company of the Meta group. Data can also be transferred to the USA in the process. The messages themselves are end-to-end encrypted, but Meta receives information about who writes with whom and when. If you do not want this, please call me or write an email.
Please send me only your appointment request by email or WhatsApp and no detailed information about your health. We will discuss that in person.
10. External links
This website links to other sites, for example professional associations, information sites and the booking and voucher pages. If you follow a link, the privacy policy of that site applies. Simply visiting this website does not transfer any data to those sites.
11. Health data at the practice
For your treatment I also collect information about your health at the practice. This is necessary for treatment and documentation (Art. 9(2)(h) GDPR in conjunction with the treatment contract). You will receive detailed information at your first appointment at the practice.
12. Currentness
Status of this privacy policy: 24 October 2026. I adapt it when the services used or the legal requirements change.