Privacy policy

1. Data controller

The data controller responsible for data processing on this website is:

Klinik St. Georg GmbH
Rosenheimer Str. 6–8
83043 Bad Aibling, Germany
Telephone: +49 8061 398-0
Email: privacy@lyme-treatment-germany.com

2. Data we collect

2.1 Automatically collected data

When you visit our website, the following data is automatically collected by our web server:

• IP address (anonymized where possible)
• Date and time of access
• Pages visited and referring URL
• Browser type and version
• Operating system
• Screen resolution

This data is collected for the purpose of ensuring website functionality, security, and improving user experience. The legal basis is Art. 6(1)(f) GDPR (legitimate interest).

2.2 Data you provide voluntarily

When you use our consultation form, symptom assessment tool, or contact us directly, you may voluntarily provide:

• Name and contact information (email, telephone)
• Country of residence
• Medical history and symptom information
• Previous test results and treatment history
• Any other information you choose to share

This data is processed for the purpose of responding to your inquiry, evaluating your case, and providing medical consultation. The legal basis is Art. 6(1)(a) GDPR (consent) and Art. 6(1)(b) GDPR (pre-contractual measures).

2.3 Health data

Medical information you share through our forms constitutes special category data under Art. 9 GDPR. We process this data only with your explicit consent (Art. 9(2)(a) GDPR) and for the purposes of medical diagnosis and treatment (Art. 9(2)(h) GDPR). You may withdraw your consent at any time.

3. Cookies

3.1 Essential cookies

We use essential cookies that are necessary for the basic functionality of the website. These include session cookies and security cookies. These cookies do not require consent under the GDPR as they are strictly necessary.

3.2 Analytics cookies

We may use analytics tools to understand how visitors use our website. If analytics cookies are used, they are deployed only with your explicit consent. You can manage your cookie preferences at any time through the cookie settings panel on our website.

3.3 No advertising cookies

We do not use advertising or tracking cookies. We do not sell or share your data with advertising networks or data brokers.

4. How we use your data

We use the data we collect for the following purposes:

• Responding to consultation and contact form inquiries
• Evaluating medical cases for potential treatment at Klinik St. Georg
• Scheduling and coordinating consultations and treatment
• Improving our website and educational content
• Ensuring the security and functionality of our website
• Complying with legal obligations

5. Data sharing

We share personal data only with:

• Klinik St. Georg medical team — for the purpose of case evaluation and treatment coordination, when you have submitted a consultation inquiry
• Website hosting providers — who process data on our behalf under a data processing agreement
• Legal authorities — when required by law

We do not sell personal data to third parties. We do not share personal data with marketing companies or advertising networks.

6. Data retention

We retain personal data only as long as necessary for the purposes for which it was collected:

• Contact form data: retained for 12 months after the last communication, unless treatment is initiated
• Medical data: retained in accordance with German medical record retention requirements (typically 10 years after the last treatment)
• Website analytics data: retained for a maximum of 26 months in anonymized form
• Server log data: retained for 30 days

7. International data transfers

Our website is hosted within the European Economic Area (EEA). If any data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

8. Your rights under the GDPR

Under the General Data Protection Regulation, you have the following rights:

• Right of access (Art. 15 GDPR) — You may request a copy of the personal data we hold about you.
• Right to rectification (Art. 16 GDPR) — You may request that we correct inaccurate personal data.
• Right to erasure (Art. 17 GDPR) — You may request that we delete your personal data, subject to legal retention requirements.
• Right to restrict processing (Art. 18 GDPR) — You may request that we limit the processing of your data.
• Right to data portability (Art. 20 GDPR) — You may request your data in a machine-readable format.
• Right to object (Art. 21 GDPR) — You may object to processing based on legitimate interests.
• Right to withdraw consent (Art. 7(3) GDPR) — Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at: privacy@lyme-treatment-germany.com

9. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority. The competent supervisory authority for Klinik St. Georg is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach, Germany
Website: www.lda.bayern.de

10. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encrypted data transmission (TLS/SSL), access controls, and regular security reviews.

11. Changes to this policy

We may update this privacy policy periodically to reflect changes in our data practices or legal requirements. The date of the most recent revision is indicated below. We encourage you to review this page periodically.

Last updated: April 2026