Loading...
Lyntra Health Logo Lyntra Health
DE | EN | FR

Privacy Policy

pursuant to Art. 13, 14 GDPR and § 25 TDDDG | As of: October 2026

1. Controller

The controller within the meaning of the GDPR is:
Christoph Jaschke
Ansgarstr. 10B
33098 Paderborn, Germany
Email: contact@lyntra.health
Phone: +49 1523 5871164

2. Data Protection Officer

As a sole trader, the appointment of a data protection officer is not legally required (Art. 37 GDPR in conjunction with § 38 BDSG) provided that fewer than 20 persons are permanently engaged in the automated processing of personal data. For data protection questions, please contact the address above directly.

3. General Information on Data Processing

3.1 Scope of Processing

Personal data of users is processed only to the extent necessary to provide a functioning website and its content and services. Processing takes place only on the basis of a legal permission or after the user’s consent.

3.2 Legal Bases

Where the consent of the data subject is obtained for processing operations, Art. 6(1)(a) GDPR serves as the legal basis. For processing to fulfil a contract, Art. 6(1)(b) GDPR applies. For legal obligations, Art. 6(1)(c) GDPR applies. For legitimate interests, Art. 6(1)(f) GDPR applies.

3.3 Data Deletion and Retention Period

Personal data is deleted or blocked as soon as the purpose of storage no longer applies and no statutory retention obligations (e.g. tax law: 10 years, commercial law: 6 years) prevent deletion.

4. Hosting and Technical Operation

This website is hosted by: Uberspace, Kaiserstr. 15, 55116 Mainz
The use of the hosting provider is based on Art. 6(1)(f) GDPR (legitimate interest in the reliable provision of the website).

5. Server Log Files

The hosting provider automatically collects and stores information in server log files, which your browser automatically transmits. These include: browser type and version, operating system used, referrer URL, hostname of the accessing computer, time of server request, IP address.

This data cannot be assigned to specific persons and is not merged with other data sources. Legal basis: Art. 6(1)(f) GDPR. Retention period: typically 7 days.

6. Cookies and Consent Management (§ 25 TDDDG)

6.1 What are Cookies?

Cookies are small text files stored on your device. They enable your browser to be recognised on your next visit.

6.2 Technically Necessary Cookies

Technically necessary cookies are essential for the operation of the website. They are set without consent (§ 25(2) TDDDG). These include, for example, session cookies for the technical operation of the website.

7. Contact Form, Email Contact and Appointment Booking

If you use the contact form or send an email, the data you provide (name, email address, message) will be stored to process your enquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or (f) (legitimate interest). Retention period: until final processing, then deletion unless a statutory retention obligation exists.

7.1 Appointment Booking via Cal.com

The scheduling tool Cal.com, provided by Cal.com, Inc. (USA), is used to book consultation appointments. When you make a booking, your name, email address, the selected appointment and any details you provide voluntarily (e.g. phone number or comments) are processed, along with technical data such as your IP address. Cal.com checks bookings against the controller’s calendar, enters the appointment and sends the confirmation by email. For video calls, a Google Meet link is generated.

Cal.com processes the data on behalf of the controller under a data processing agreement pursuant to Art. 28 GDPR. Storage exclusively within the EU is not guaranteed, and processing in the United States cannot be ruled out. The transfer is safeguarded by EU Standard Contractual Clauses. A copy of the agreed safeguards (Standard Contractual Clauses) is available on request at the address stated in section 1.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures or performance of a contract). Storage period: until the purpose no longer applies, followed by deletion except to the extent that a statutory retention obligation applies.

Cal.com privacy policy: https://cal.com/privacy

7.2 Email, Calendar and Video Calls via Google Workspace

Google Workspace is used for email communication, the calendar and video calls (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). This includes receiving messages submitted via the contact form and all emails sent to addresses on the lyntra.health domain, managing booked appointments in Google Calendar, and generating Meet links. In particular, name, email address, message content and appointment data are processed.

A data processing agreement pursuant to Art. 28 GDPR is in place with Google. Processing in the United States cannot be ruled out, and the transfer is safeguarded by EU Standard Contractual Clauses. A copy of the agreed safeguards (Standard Contractual Clauses) is available on request at the address stated in section 1.

Legal basis: Art. 6(1)(b) GDPR insofar as it concerns handling your enquiry or an appointment, and otherwise Art. 6(1)(f) GDPR (legitimate interest in efficient communication). Storage period: until the purpose no longer applies, followed by deletion except to the extent that a statutory retention obligation applies.

8. Web Analytics with Plausible Analytics

This website uses Plausible Analytics, a privacy-friendly web analytics service provided by OÜ Plausible Insights, Västriku tn 2, 50403 Tartu, Estonia.

Plausible Analytics does not set cookies and does not store any information on your device. No personal data is collected. For anonymous analysis of user behaviour, a daily hash is generated from the IP address, user agent, and a rotating random key. This hash is not stored — cross-day tracking is technically impossible. No cross-site tracking takes place.

As no access to the end device occurs and no personal data is processed, § 25 TDDDG does not apply. All data is processed exclusively on servers within the European Union. No transfer to third countries takes place.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the anonymous analysis of user behaviour to improve the website). A data processing agreement pursuant to Art. 28 GDPR is in place with Plausible Analytics.

Plausible Analytics Privacy Policy: https://plausible.io/privacy

9. Payment Service Providers

If you make payments via PayPal, the privacy policy of PayPal (Europe) S.à r.l. et Cie, S.C.A. applies: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

10. Your Rights as a Data Subject

You have the following rights against the controller:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent given (Art. 7(3) GDPR)
  • Right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR)

Competent supervisory authority: State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Postfach 20 04 44, 40102 Düsseldorf, https://www.ldi.nrw.de

11. Currency and Amendments to this Privacy Policy

This privacy policy is current as of October 2026. The right to amend this privacy policy in the event of changes to the legal situation or the data processing procedures is reserved. The current version is always available on this website.

As of: October 2026