Privacy policy
1) Controller
The controller within the meaning of the General Data Protection Regulation (DSGVO/GDPR) is:
Petar Jakovljevic
Physiotherapie Petar Jakovljevic
In den Geistgärten 16
59387 Ascheberg-Herbern
Germany
Telephone: 02599 / 1600
Email: praxis@physio-herbern.de
2) Accessing the website and server log files
When you access this website, the web server processes technically necessary access data so that the website can be delivered, operated reliably and protected against misuse. Such data may include, in particular, the IP address, date and time of access, requested file, amount of data transferred, referrer URL, browser type, operating system and HTTP status code.
The legal basis is Art. 6 Abs. 1 lit. f DSGVO (GDPR). Our legitimate interest is in providing this website securely, reliably and without errors. Server log files are not evaluated for marketing purposes and are not combined with other data sources.
3) Hosting
This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. Where required, a data processing agreement pursuant to Art. 28 DSGVO (GDPR) is in place with the hosting provider. Processing by the hosting provider serves the technical provision and security of the website.
4) Cookies, Local Storage and consent
According to the current technical configuration, this website does not use optional tracking cookies or any analytics or marketing services. Therefore, no general cookie consent banner is used.
The website may use your browser's Local Storage to save a language you actively select. This storage is functional and serves solely to restore your chosen language setting on your next visit. You can delete stored website data at any time through your browser settings.
Under § 25(2) no. 2 TDDDG, consent is not required for storage strictly necessary to provide a digital service you expressly requested. Optional tracking, analytics or marketing technologies would instead require prior consent; we do not use such technologies.
For the internal AI certificate, a timestamp is saved in Local Storage after a passed test has been successfully submitted. The storage key contains the first and last name entered. This lets the browser indicate that the test has already been completed. Session Storage also records whether the test was opened for the duration of the browser session.
You can open the privacy settings at any time using the link in the footer. They show the current status of the embedded Google map and let you withdraw consent for the open page. Map consent is not saved for later visits; the map is off at the start of every new page load.
In the privacy settings you can delete the saved language choice specifically. The language currently displayed stays until you leave or reload the page. Other local storage, especially for the internal test, is not deleted.
5) Locally hosted fonts and media
The fonts and image files used on this website are loaded locally from our own web space. Merely visiting the page therefore does not establish a connection to external font providers such as Google Fonts.
6) Contact by telephone or email
If you contact us by telephone or email, we process the data you provide to handle your enquiry. This may include, in particular, your name, contact details, the content of your message and organisational appointment details.
The legal basis is Art. 6 Abs. 1 lit. b DSGVO (GDPR) insofar as your enquiry concerns treatment, an appointment or another contract. In all other cases, the legal basis is Art. 6 Abs. 1 lit. f DSGVO (GDPR); our legitimate interest is in handling and answering your enquiry.
We process health data within the meaning of Art. 9 DSGVO (GDPR) only insofar as necessary for healthcare, appointment organisation, treatment, billing or statutory documentation obligations. In these cases, the legal basis is Art. 9 Abs. 2 lit. h DSGVO in conjunction with § 22 BDSG and, depending on the matter, Art. 6 Abs. 1 lit. b DSGVO.
Please do not send health data, medical findings, diagnoses or photos of prescriptions unsolicited by ordinary email or WhatsApp. For such content, please agree on a suitable communication channel with us in advance by telephone or email.
7) Job applications
If you apply to us by email or through an external communication service, we process the application data you submit to carry out the application process. This may include, in particular, contact details, your CV, qualifications, certificates and other information you provide voluntarily.
The legal basis is § 26 BDSG in conjunction with Art. 6 Abs. 1 lit. b DSGVO (GDPR). If no employment relationship is established, we delete application data after the application process ends once no statutory retention periods or legitimate interests in further storage remain.
8) Internal AI proficiency certificate for employees
The password-protected internal test form for the AI proficiency certificate is intended exclusively for employees. In this context, we process the entered name, department, an optional email address for a copy of the result, the answers given, score, pass status and technical security information such as the time taken to complete the test.
Processing is carried out for internal training and proof-of-completion records. The legal basis is § 26 BDSG in conjunction with Art. 6 Abs. 1 lit. b DSGVO, as well as Art. 6 Abs. 1 lit. f DSGVO; our legitimate interest is in traceable documentation of mandatory training content and in protecting the form against automated misuse.
Passed tests are sent to the practice by email. A copy of the result is sent to the email address provided only if that option is actively selected.
9) WhatsApp
The website contains links to WhatsApp. WhatsApp is not loaded automatically. Only after you actively select the WhatsApp link and confirm the notice will WhatsApp or WhatsApp Web open. You will then leave our website; the privacy terms of WhatsApp Ireland Limited or Meta will also apply.
If you contact us via WhatsApp, we process the telephone number, name, message and any further information you voluntarily provide to handle your enquiry. The legal basis is Art. 6 Abs. 1 lit. b DSGVO if the communication is necessary to arrange an appointment or provide treatment; otherwise it is Art. 6 Abs. 1 lit. f DSGVO.
WhatsApp may also process metadata and communication data outside the European Union. Therefore, please do not use WhatsApp for health data, medical findings, diagnoses or photos of prescriptions. Telephone and email are available as alternatives.
Further information is available in WhatsApp's privacy notice: https://www.whatsapp.com/legal/privacy-policy-eea
10) Google Maps and route links
The Google map on the home and contact pages is blocked at first. Simply opening the website does not load a Google Maps iframe or establish a connection to Google Maps. “Show map” first opens the privacy settings. The map loads only after you confirm your consent there.
When the map loads or you open a route link, a connection is established to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In this process, your IP address, technical browser data, date and time of access and, where applicable, location or account data may be processed if you are signed in to Google or use location functions.
The integration takes place only following your active selection on the basis of your consent pursuant to Art. 6 Abs. 1 lit. a DSGVO (GDPR) and, where information is stored on or read from your device, § 25 Abs. 1 TDDDG. The route links open Google Maps, Apple Maps or, on Android devices, the navigation function only after you click.
Further information about data processing by Google is available at https://policies.google.com/privacy?hl=de.
Removing the map in the privacy settings immediately removes the Google Maps iframe from the open page and restores the placeholder. Withdrawal applies to the future; it does not undo data already sent to Google. We cannot delete Google's cookies from your browser. You can remove them in your browser settings.
11) External links and webmail providers
This website contains external links, for example to Google Maps, WhatsApp or, optionally, webmail providers if you wish to prepare an email in your browser. External services are not loaded automatically but only when you actively select the respective link. The respective provider is responsible for subsequent data processing.
12) Storage period
Personal data is stored only for as long as necessary for the respective purpose or as long as statutory retention periods apply. We delete communication and application data once processing is complete and no statutory obligations or legitimate interests require further storage.
13) Your rights
Subject to the statutory requirements, you have the right of access under Art. 15 DSGVO, rectification under Art. 16 DSGVO, erasure under Art. 17 DSGVO, restriction of processing under Art. 18 DSGVO, data portability under Art. 20 DSGVO and objection under Art. 21 DSGVO.
If processing is based on your consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing before withdrawal remains unaffected.
You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is, in particular, the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2-4, 40213 Düsseldorf, https://www.ldi.nrw.de.
14) Right to object
If we process personal data on the basis of Art. 6 Abs. 1 lit. f DSGVO (GDPR), you may object to that processing at any time on grounds relating to your particular situation. We will then no longer process the data concerned unless there are compelling legitimate grounds for processing or the processing serves to establish, exercise or defend legal claims.
As of: 04.10.2026
