Information pursuant to Article 13 of the General Data Protection Regulation (GDPR)
1. Controller
Christian Seifert · LomiVersum Practice
Groner-Tor-Straße 12
37073 Göttingen
Germany
Phone: 0551 2707 1519
Email: info@lomiversum.de
2. Hosting and server logs
This website and its email mailboxes are hosted by Febas, proprietor Roman Baumgärtner, Ostlandstraße 5, 49565 Bramsche, Germany. A data-processing agreement pursuant to Article 28 GDPR is in place with Febas.
When the website is accessed, the web server processes technically necessary data, including the IP address, time, requested page, referrer, browser, operating system and access status. This processing serves to provide, secure and stabilise the website. The legal basis is Article 6(1)(f) GDPR. The data is deleted when it is no longer required for these purposes and no statutory or security-related reasons require its retention.
3. Contact and enquiry form
When you contact me by phone, email or through the enquiry form, I process your details to respond to your enquiry and to take steps towards or perform a contract. The legal basis is Article 6(1)(b) GDPR and, for other enquiries, Article 6(1)(f) GDPR.
The form processes your name, phone number or email address, your selected contact channels and, optionally, your telephone availability, a broad treatment choice and a message. The enquiry is stored in the WordPress database on the Febas webspace and is also sent to me by email.
Open enquiries are retained for as long as they are needed for processing. Enquiries marked as completed in the dashboard are automatically deleted after 30 days. They may be deleted manually sooner. Statutory retention duties for any resulting contractual, billing or treatment records remain unaffected; these records are kept separately from the form database.
Please do not submit diagnoses, medical reports or other health data through the form or by unencrypted email.
4. Telephone and Fonial voicemail
For my published practice number, I use telephone services provided by fonial GmbH, Kaiser-Wilhelm-Ring 7–9, 50672 Cologne, Germany. When you call, Fonial processes connection data such as the transmitted telephone number, date and time, duration and connection status. I do not record ordinary telephone calls.
If you choose to leave a voicemail message, the audio recording is stored in my password-protected Fonial customer account and, depending on the selected setting, may also be sent to my email inbox. I use this information to identify your enquiry and return your call. The legal basis is Article 6(1)(b) GDPR and, for other enquiries, Article 6(1)(f) GDPR. Where information about your health is necessary for treatment, the additional legal basis is Article 9(2)(h) GDPR.
Please leave only the information required for a callback and do not use voicemail for urgent medical matters. I delete voicemail messages from the areas under my control when they are no longer required, unless statutory retention duties or the establishment, exercise or defence of legal claims require longer retention. Further information is available in Fonial’s privacy information for telecommunications services.
5. WhatsApp
You may voluntarily select WhatsApp as a contact channel or use the WhatsApp link on this website. You can use phone or email instead. The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Merely visiting this website does not establish a connection to WhatsApp. You are redirected to WhatsApp only after clicking the link.
According to its own privacy policy, WhatsApp processes account, usage, device, connection and metadata in particular. If you select WhatsApp in the form, your explicit consent is recorded together with the time of your enquiry. The legal basis is Article 6(1)(a) GDPR and, where the subsequent communication contains health data, Article 9(2)(a) GDPR. You may withdraw your consent at any time for the future and use phone or email instead. Please do not send diagnoses, medical reports or urgent medical concerns through WhatsApp.
6. Newsletter
If you subscribe to the newsletter, I process your email address and, if provided, your first and last name. The selected language, registration and confirmation time, subscription status and technical evidence of registration, such as the IP address and source page, are also stored. The data is processed using the Newsletter plugin in this website’s WordPress installation on the Febas webspace.
Subscription is voluntary and uses a double opt-in process: after registering, you receive an email containing a confirmation link. The newsletter is sent only after confirmation. The legal basis is your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time for the future by using the unsubscribe link in each newsletter or by contacting me.
Your newsletter data is generally retained until you unsubscribe. It is then deleted or blocked unless limited retention is required to demonstrate consent or to establish, exercise or defend legal claims. The data is not disclosed for third-party advertising.
7. Event registrations
If you register for an event through the website, I process the name and email address of the registering contact person, the selected number of people and, if provided voluntarily, a telephone number. The telephone number is used only for questions or short-notice changes relating to the event. No customer account is created and no payment data is collected through the registration form.
The data is processed in order to receive, reserve, confirm and organise registrations and to communicate information about the event. The legal basis is Article 6(1)(b) GDPR for pre-contractual and contractual arrangements and, where applicable, Article 6(1)(f) GDPR for reliable event organisation. Registrations are handled within the locally operated WordPress installation using the Events Manager plugin and are not transmitted to an external booking service.
Registration data is normally deleted no later than six months after the event once organisational questions have been settled, unless legal retention obligations or the establishment, exercise or defence of legal claims require a longer period.
8. Privacy-friendly audience measurement
I use a locally operated, cookie-free counter to obtain a rough picture of the reach of LomiVersum, Ohana and Mahina and to maintain the website in line with demand. No analytics service or other third party receives data for this purpose. The counter neither stores nor reads cookies, local-storage identifiers or comparable information on your device.
When a public page is accessed, the server briefly processes the IP address transmitted for technical reasons. The application never stores the raw IP address. It immediately uses a keyed HMAC protected by a secret not contained in the statistics database. The values change daily and use separate cryptographic contexts for the site-wide estimate and each page, so the database cannot use them to reconstruct an IP address, connect different pages into a visitor path or recognise anyone across days. Stored aggregate data consists only of the date, full hour, an internal identifier for the public page, page views, daily page visits and daily entry-page counts. Exact times, query parameters, referrers and user agents are not stored. Logged-in users, recognised bots, QR links and the protected MyLomiVersum area are excluded.
For the current counting day only, a separately keyed value holds the number of different pages attributed to the same estimated connection. This makes it possible to calculate anonymous daily totals, minimum, maximum and average pages per estimated visitor-day without storing which pages were viewed or in what order. These keyed values are deleted after the counting day changes; only aggregate daily, hourly and page totals remain. Shared internet connections may combine several people, while changing IP addresses, mobile networks or VPNs may count one person more than once. The legal basis is Article 6(1)(f) GDPR. My legitimate interest is the strictly limited measurement of reach and the demand-oriented, secure operation of my own website. Browser signals “Do Not Track” and “Global Privacy Control” are respected. You may also object to this processing at any time using the contact details above.
9. Cookies, fonts and external content
This website does not use external analytics or tracking services. Fonts are loaded locally from this server. Maps, videos and social-media content are not embedded automatically.
Polylang sets the technically necessary pll_language cookie for language selection. It stores the selected language for up to one year. Access is based on Section 25(2)(2) TDDDG; the subsequent processing serves the user-friendly provision of the website pursuant to Article 6(1)(f) GDPR.
10. Facebook and Instagram
I operate LomiVersum presences on Facebook and Instagram. The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. When you visit these presences or communicate with me there, Meta processes profile, usage, device and communication data in particular. I process your messages to respond to your enquiry on the basis of Article 6(1)(b) GDPR or, for other communication, Article 6(1)(f) GDPR. Please do not submit health data there. No Meta content or scripts are embedded on this website.
11. Retention and recipients
Personal data is retained only for as long as it is required for the respective purpose. Statutory retention duties and the establishment, exercise or defence of legal claims remain unaffected. Recipients are limited to service providers required to operate the website and communications, in particular Febas and the communication providers you choose.
12. Your rights
Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction, data portability and objection. You may withdraw consent at any time for the future.
You also have the right to lodge a complaint with a data-protection supervisory authority. The State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hannover, Germany, is one of the competent authorities.
13. Encryption
The website is transmitted via HTTPS. No automated decision-making or profiling takes place.
Last updated: 21 September 2026
