Legal

Privacy policy

This English text is a translation for convenience; the legally binding version is the German one.

Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Getting Digital GmbH Am Niederanger 4 A 99428 Grammetal Germany

Email: info@wellnessroyal.net Telephone: +49 (0) 176 70121322

For further provider details see the imprint.

General information on data processing

As a matter of principle we process our users' personal data only to the extent necessary to provide a functioning website and our content. Processing regularly takes place only with the consent of the data subject or on one of the legal bases named in Art. 6 (1) GDPR.

Wellness Royal takes no bookings and operates no user accounts.

Server log files

When the pages are called up, our hosting provider logs technically necessary data in server log files: IP address, date and time of access, the URL called up, the HTTP status code, the amount of data transferred, the referrer URL, and the browser and operating system used.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the stable, secure operation of the website). The data are deleted after a short time unless they are needed for security analysis.

Hosting

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Delivery takes place via a global edge network with nodes in the EU; processing may, however, also take place in the USA.

The transfer to the USA is based on the European Commission's adequacy decision under the EU-U.S. Data Privacy Framework (DPF) and, in addition, on standard contractual clauses pursuant to Art. 46 (2) (c) GDPR. Vercel is certified under the DPF.

Fonts

We use the typefaces “Montserrat” and “Cormorant Garamond” via next/font. The font files are bundled locally at build time and delivered from our own server. No connection to Google Fonts or other external font servers is made when the page is called up.

Contact by email

If you send us enquiries by email, the details from your email including the contact data given there are stored for the purpose of handling the enquiry and in case of follow-up questions.

The legal basis is Art. 6 (1) (b) GDPR for contract-related enquiries and Art. 6 (1) (f) GDPR for other matters (legitimate interest in handling incoming enquiries).

Cookies

This website sets no tracking or marketing cookies of its own. Technically necessary session cookies may be set by the hosting provider for the operation of the site; these contain no personal data and are deleted when the browser is closed.

Web analytics (Fathom Analytics)

To measure reach we use Fathom Analytics, a privacy-friendly, cookieless analytics service. Fathom sets no cookies, creates no cross-device profiles and stores no personal data; IP addresses are not stored permanently. Only aggregated, anonymous usage statistics are collected (such as the pages called up and approximate origin).

The legal basis is our legitimate interest in data-minimising reach measurement (Art. 6 (1) (f) GDPR). Since no cookies are set and no personal data are processed, no consent is required for this.

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the browser's address bar beginning with “https://”.

Your rights as a data subject

You have the following rights against us with regard to the personal data concerning you:

  • The right of access (Art. 15 GDPR)
  • The right to rectification (Art. 16 GDPR)
  • The right to erasure (Art. 17 GDPR)
  • The right to restriction of processing (Art. 18 GDPR)
  • The right to data portability (Art. 20 GDPR)
  • The right to object (Art. 21 GDPR)

To assert these rights an informal message to the email address given above is sufficient.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Art. 77 GDPR). For Getting Digital GmbH the competent authority is the Thuringian Commissioner for Data Protection and Freedom of Information.