Privacy policy

This is an English translation for convenience. The German Datenschutzerklärung is legally binding.

Last updated: 17 October 2026

1. Controller

Dr. Bernadette Awankem, BoMedAC®, Carl-Benz-Straße 9–11, 68723 Schwetzingen, Germany. Email: info@bomedac.com, phone: +49 178 5304904.

2. Hosting and server log files

This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. When you visit, the host processes technically necessary data (IP address, date and time, page requested, referrer, browser and operating system) to deliver the website and keep it secure. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is secure and stable operation. A data processing agreement is in place with Netlify. Transfers to the USA rely on the EU-US Data Privacy Framework where the provider is certified, supplemented by the EU Standard Contractual Clauses.

3. Contact by email and phone

If you contact me, I process your details to handle your enquiry and any follow-up questions (Art. 6(1)(b) GDPR for pre-contractual enquiries, otherwise Art. 6(1)(f)). Data is deleted once it is no longer needed and no statutory retention obligations apply. Email is processed via Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) under a data processing agreement.

4. Appointment booking

To book an introductory call you are taken to a Google Calendar booking page, where you enter your name, email address and optionally a message. Processing is necessary for pre-contractual steps (Art. 6(1)(b) GDPR). The provider is Google Ireland Limited; transfers to the USA cannot be ruled out and rely on the EU-US Data Privacy Framework.

5. Statistics with Google Tag Manager and Google Analytics 4

Only if you select “Allow statistics” in the cookie notice does this website load Google Tag Manager and Google Analytics 4 (Google Ireland Limited). Cookies or similar technologies are then stored on your device and usage data (e.g. pages viewed, clicks on “Book a call”, device type, approximate location) is processed. Google Analytics 4 does not store full IP addresses. Advertising features are disabled. Legal basis: your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). You can withdraw consent at any time via “Cookie settings” in the footer. Transfers to the USA rely on the EU-US Data Privacy Framework. Analytics data is retained for 14 months.

6. Storing your cookie choice

Your choice in the cookie notice is saved in your browser’s local storage so that the notice does not reappear on every page. This is technically necessary (§ 25(2) no. 2 TDDDG).

7. Fonts and external links

This website only uses system fonts installed on your device; no third-party fonts are loaded. Links to LinkedIn are plain links; no data is transferred until you click them.

8. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21 GDPR), and the right to withdraw consent at any time. You may lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.