Privacy Policy

The controller responsible for data processing on this website is:

• Prevoo Health UG (haftungsbeschränkt) i.G.
• Strassburger Str. 55, 10405 Berlin, Germany
• Represented by its managing director, Dogan Küncekli
• Email: info@prevoo.health
• Phone: +49 30 60607815

When you open our website, your browser necessarily sends data to our servers. This includes your IP address, the date and time of access, the page requested, the previously visited page (referrer), browser type and version, and your operating system. Without this data we cannot deliver the website or protect it against attacks.

The website is built and hosted with Lovable. Lovable processes the access data on our behalf. The site sits behind the content delivery and security network of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare filters malicious requests and delivers the site faster, processing the access data listed above in the course of this.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and fast provision of the website. Server log files are deleted once they are no longer needed for this purpose, unless they are needed longer to investigate a security incident.

We do not use cookies for analytics, marketing or advertising. Only two technically necessary items are stored:

• __cf_bm: a Cloudflare cookie that tells automated traffic (bots) apart from real visits. It is deleted after 30 minutes.
• Language setting: when you switch the website language, we keep this setting in your browser’s local storage so it is still there on your next visit. This information never leaves your device.

Under Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG), technically necessary storage does not require consent. Any further processing is based on Art. 6(1)(f) GDPR. You can delete cookies and local storage at any time in your browser settings.

All fonts are loaded directly from our own server. No connection is made to Google or any other font provider.

On the PREV∞ aTM page we show a map of the pharmacies that have a station. Map data and map fonts are stored in our own storage at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, with servers located in Germany. When the map loads, Hetzner necessarily receives your IP address and the map sections requested. Hetzner processes this data on our behalf under a data processing agreement pursuant to Art. 28 GDPR. The legal basis is Art. 6(1)(f) GDPR; our interest is to show you our locations without passing data to external map services. The map data comes from OpenStreetMap. None of your data is sent to OpenStreetMap.

The “Find a pharmacy near me” button lets you look for the nearest station. Only after you click it does your browser ask whether it may share your location. If you allow it, the distance is calculated solely on your device. Your location is neither sent to us nor to third parties and is not stored. You can withdraw the permission at any time in your browser settings.

To book demo appointments we use the scheduler of Cal.com, Inc., USA. The scheduler only loads once you click a booking button. When you book, Cal.com processes the details you enter (such as name, email address, preferred time and, where applicable, a message) as well as technical connection data. Cal.com may set its own cookies required for the booking.

The legal basis is Art. 6(1)(b) GDPR, as the processing serves to arrange and hold the appointment you requested. A data processing agreement is in place with Cal.com. For transfers to the USA, see section 10.

On our page for patients you can join the waitlist with your email address. We use your address solely to let you know when PREV∞ launches. Sign-ups are processed via the automation service n8n of n8n GmbH, Berlin.

The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw it at any time by emailing info@prevoo.health. We delete your address after you withdraw consent or once it is no longer needed for this purpose.

If you contact us by email or phone, we process your details to answer your request. The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract or its preparation, otherwise Art. 6(1)(f) GDPR; our interest lies in responding to your enquiry.

We link to our Instagram profile with a plain link. No Instagram content is embedded, and no data flows to Instagram when you visit our website. Only once you click the link do the privacy terms of Meta Platforms Ireland Ltd. apply.

We do not sell personal data. We share data only with the service providers named in the sections above, which process it on our behalf: Lovable, Cloudflare, Hetzner, Cal.com and n8n. Beyond that, we disclose data only where we are legally required to or where it is necessary to establish, exercise or defend legal claims.

Cloudflare and Cal.com are based in the USA, so data may be transferred there. Such transfers rely on the European Commission’s adequacy decision for the EU-US Data Privacy Framework, insofar as the company is certified under it, and additionally on the European Commission’s Standard Contractual Clauses.

We keep personal data only as long as necessary for the respective purpose or as required by statutory retention periods. The specific periods are given in the individual sections. We generally delete enquiries and appointment data three years after the last contact. Commercial and tax retention obligations of up to ten years remain unaffected.

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR).

Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then stop processing the data unless we can demonstrate compelling legitimate grounds or the processing serves legal claims.

For any of these requests, an email to info@prevoo.health is all it takes.

You can lodge a complaint with a data protection supervisory authority if you believe we are not processing your data lawfully. The authority responsible for us is:

• Berlin Commissioner for Data Protection and Freedom of Information
• Alt-Moabit 59-61, 10555 Berlin, Germany

You are not obliged to provide us with personal data. Without the technical access data, however, we cannot deliver the website, and without your contact details we cannot arrange an appointment or tell you about the launch. No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

All connections to our website are encrypted with TLS. In addition, we protect data against loss, manipulation and unauthorised access with technical and organisational measures.

This privacy policy applies to the website. The PREV∞ app and the platform for physicians, which also process health data, are covered by a separate privacy policy.

We update this privacy policy when our website, our service providers or the legal situation change. The version published here is the one that applies.