Privacy
Privacy policy
Protecting your data matters to me. Below I explain which data are processed when you visit this website and when you get in touch.
Controller
The controller for data processing on this website is Sergey Kolesov, Heilpraktiker, Erfurt. Full contact details are given in the legal notice.
Visiting the website
When you open the website, the hosting provider processes technically necessary data (including IP address, date and time of access, page requested and browser type). The legal basis is Art. 6(1)(f) GDPR — the legitimate interest in secure and stable operation. These server logs are stored only briefly and are not combined with other data.
Contact form and email
When you use the contact form, the details you enter — name, email address, optional phone number and your message — are transmitted over an encrypted HTTPS connection to this website's server and forwarded from there by email to the practice so that I can answer your enquiry. The data is not used for any other purpose; the legal basis is Art. 6(1)(b) or (f) GDPR. Your enquiry and my reply remain in the practice mailbox for as long as this is necessary to deal with the matter. Please do not send extensive health information or medical documents through the form or by unencrypted email.
Patient data
Health data collected in the course of treatment are processed on the basis of Art. 9(2)(h) GDPR in conjunction with § 630f of the German Civil Code and retained for the statutory periods. These data are not collected via the website.
Fonts and external content
The fonts used are served locally from this server; no connection to Google Fonts is established. Map links open Google Maps in a new window; data are transferred to Google only at that point.
Google reviews via Elfsight
On the homepage, you can choose to load Google reviews through a widget provided by Elfsight. Unless you actively select the button, the widget is not loaded and no connection to Elfsight or Google is made for this purpose. Only after your consent does your browser connect to Elfsight and Google services. In particular, your IP address, browser and device data, and information about the page visited may be processed and transferred to third countries. The respective providers, Elfsight and Google, are responsible for this processing under their own privacy policies. The legal basis for loading the widget is your consent under Art. 6(1)(a) GDPR. Consent applies to the current page view; reloading the page disables the widget again.
Cookies and analytics
No marketing cookies are set. Your language choice is stored locally in your browser and is not transmitted to me. For audience measurement I use Matomo, self-hosted at analytics.sergeykolesov.de — no Matomo Cloud and no Google Analytics. Matomo is configured without analytics cookies and respects your browser's Do Not Track setting. Technical connection and usage data, including your IP address, may be processed by this analytics server. Contact form content and health information are not sent to Matomo. The legal basis is Art. 6 (1) (f) GDPR.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a data protection authority. For Thuringia this is the Thuringian Commissioner for Data Protection and Freedom of Information.
If you have questions about how your data are handled, you can reach me at any time using the contact details in the legal notice.