Privacy Policy
Controller
healthspan GmbH, Gonzagagasse 11/25, 1010 Vienna, Austria
Email: contact@healthspan.eu
Principle
This website uses no cookies, no analytics, and no tracking. No data is shared with third parties beyond the hosting described below.
Hosting and server logs
The website is hosted by ALL-INKL.COM — Neue Medien Münnich (Hauptstraße 68, 02742 Friedersdorf, Germany). When pages are requested, the server processes technically necessary access data (IP address, time, requested file, transferred bytes, user agent) in log files; the IP address is stored in shortened form. The legal basis is our legitimate interest in operating the website securely (Art. 6 (1) (f) GDPR). A data processing agreement (Art. 28 GDPR) is in place with the host; processing takes place on servers in Germany. The log files are deleted after seven days.
Waitlist (“Join the list”)
If you join the list, we process your email address, the chosen language, the times of sign-up and confirmation, and a technical check value used to prevent abuse (the IP address is stored only as a non-reversible hash). If you arrive via one of our linked channels, we additionally store the channel tag from the link (for example, “linkedin”) — no cookies, no tracking.
- Purpose: one email telling you when Export Health Data becomes available in the App Store in your country — no newsletter, no advertising. The app is already available in Austria, Germany, Switzerland and Luxembourg.
- Legal basis: your consent (Art. 6 (1) (a) GDPR), given via double opt-in: the sign-up only becomes effective after you click the confirmation link in our email. Unconfirmed sign-ups are not kept.
- Storage location: the host’s servers in Germany; the data is not reachable from the web.
- Retention and withdrawal: you can withdraw your consent at any time — an informal email to contact@healthspan.eu is enough; we then delete your entry promptly. At the latest, we delete it once we have told you that the app is available in your country; if we stop the list before that, we delete it in full.
- Recipients: only our host, acting as processor — it stores the list on our behalf and delivers the confirmation email (see “Hosting and server logs”). The addresses are not passed on to anyone else.
Your rights
You have the rights of access, rectification, erasure, restriction of processing, data portability, and objection (Art. 15–21 GDPR); you can withdraw a consent you have given at any time (Art. 7 (3) GDPR). Contact contact@healthspan.eu. You also have the right to lodge a complaint with a supervisory authority — in Austria, the Datenschutzbehörde, dsb.gv.at.
Right to object: You can object at any time to the processing of the server log files, which we base on our legitimate interest (Art. 21 GDPR) — an informal email to contact@healthspan.eu is enough.
Privacy in the app
The iOS app “Export Health Data” processes health data locally on your device; it only leaves the device for destinations you set up yourself. Its own privacy policy: App Privacy Policy.