Privacy policy

This is a courtesy translation; the German version is legally binding.

1. Controller

Yesha Z. Karmeli, Natura Heilpraxis
Auguste-Viktoria-Straße 91, 14193 Berlin
Phone 030 886 633 73 · praxis@natura-heilpraxis.de

There is currently no legal obligation to appoint a data protection officer.

2. Visiting this website

When you access the site, our hosting provider stores technically necessary data (IP address, date, time, page accessed, browser) for a maximum of 14 days in order to provide the site securely (Art. 6(1)(f) GDPR). Hosting provider: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Vercel is certified under the EU-US Data Privacy Framework; the European Commission’s standard contractual clauses also apply. The connection is encrypted via TLS.

3. Fonts and maps

Fonts are loaded from our own server; there is no connection to Google Fonts. Google Maps only loads once you actively click on it.

4. Cookies and audience measurement

We only use technically necessary cookies. No audience measurement or tracking takes place.

5. Contact by email, phone or form

We only use your details to answer your enquiry (Art. 6(1)(b) GDPR). Messages from the contact form are stored in our practice management system (database at Supabase, data centre in Frankfurt) and deleted once the enquiry has been dealt with, unless we are required to keep them. Please do not send health information via the form or unencrypted email; discuss it with us at your appointment.

6. Online appointment booking

For online appointment booking we use the dimedi calendar (natura.dimedi.me). Your information is processed only for scheduling appointments and sending appointment reminders. The calendar is operated on our behalf by a technical service provider (data processing under Art. 28 GDPR).

7. Health data in treatment

We process health data from your medical history, laboratory results and treatment in order to perform the treatment contract (Art. 9(2)(h) GDPR); this data is subject to professional confidentiality. We pass on laboratory tests to the commissioned laboratory only with your consent. We retain treatment records for ten years in accordance with § 630f of the German Civil Code (BGB).

8. Newsletter

You only receive the newsletter with your consent (Art. 6(1)(a) GDPR) and only after confirming your email address (double opt-in). We store your email address, optionally your first name, and the time of subscription and confirmation as proof. You can unsubscribe at any time via the link in every issue; afterwards your address is kept only on a block list so that you receive no further mail. For storage and sending we use technical service providers on our behalf (data processing under Art. 28 GDPR). We only measure whether an issue was delivered, not whether it was opened or clicked.

9. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), as well as the right to withdraw any consent you have given. Please direct complaints to the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin.

AS OF 10/2026