Legal

Privacy Policy

Last updated: October 2026

1. Controller

2. Your rights

You have the right to request access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and to object to processing (Art. 21 GDPR) of your personal data. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

3. Hosting and server log files

This website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. When you visit this website, our hosting provider automatically collects technical access data transmitted by your browser in so‑called server log files (e.g. IP address, date and time of the request, page requested, referrer URL, browser type). This processing is based on our legitimate interest in the secure and stable operation of the website (Art. 6(1)(f) GDPR). Further information: all-inkl.com/datenschutzinformationen.

4. Contacting us

If you contact us by email, the information you provide (email address and, where applicable, your name and message) is stored in order to process your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre‑contractual measures) or Art. 6(1)(f) GDPR (our legitimate interest in responding to you).

5. Inquiry form

The multi‑step inquiry form on this website lets you tell us what you're interested in before we get in touch. When you submit it, the information you provide (name, email address, who the enquiry is for, team/organisation size, selected topics and any optional note) is sent by email to our own inbox at hello@andreafoth.com in order to respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre‑contractual measures) or Art. 6(1)(f) GDPR (our legitimate interest in responding to you). The form is processed by a script on our own server; no third‑party service receives this data, and it is not stored in a database — only in the resulting email. A hidden field and basic timing check are used to filter out automated spam submissions; this processing is based on our legitimate interest in keeping the form usable (Art. 6(1)(f) GDPR).

6. Newsletter via Brevo

If you sign up for our newsletter, your email address is transmitted to and stored by our email service provider, Brevo (Sendinblue GmbH), until you unsubscribe. Sign‑up uses a double opt‑in process: after signing up you receive a confirmation email and must actively confirm before you receive any newsletter emails. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the unsubscribe link included in every email. When the sign‑up form loads, Brevo sets technically necessary cookies (e.g. to secure the form); according to the provider, no cookies are used for advertising purposes. Further information: brevo.com/legal/privacypolicy.

7. Cookies

This website uses only technically necessary cookies, set in connection with the service named above (Brevo). We do not use analytics or marketing cookies. The legal basis is § 25(2) TTDSG and/or Art. 6(1)(f) GDPR.

8. Fonts

The fonts used on this website (Archivo, Source Serif 4) are hosted locally on our own server. No connection is made to Google's or any other third party's servers to load fonts, so no personal data is transmitted to third parties for this purpose.

9. Retention

Personal data is only stored for as long as necessary for the purpose for which it was collected, or as required by statutory retention periods.

10. Changes to this policy

We may update this privacy policy from time to time to reflect changes in the law or to this website and its data processing.

← Back to DEEP HEALTH