Transparency, professional credentials and GDPR privacy.

1. Data Controller:
Rok Stojan, Schustergasse 9, 88422 Bad Buchau, Germany, Email: info@rokstojan.com, Phone: +49 1520 1364454.

2. Hosting via Cloudflare Pages:
This static website is delivered globally via Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). Cloudflare processes technical network connection logs (IP address, timestamp, requested resource, user agent) to protect against cyber threats and ensure fast CDN delivery (Art. 6(1)(f) GDPR). Data transfers to the USA rely on EU Standard Contractual Clauses (SCC) and Cloudflare's certification under the EU-U.S. Data Privacy Framework (DPF).

3. Zero Tracking Cookies:
This website does not deploy any tracking, analytics, or behavioral marketing cookies (no Google Analytics, no Meta Pixel). Your visit is not analyzed for profiling purposes.

4. Local Language Storage (localStorage):
We store your preferred language selection (DE, EN, SI) in your browser's local storage. This storage contains no personal data and serves solely the technical purpose of providing the chosen interface language (§ 25 Para. 2 No. 2 TDDDG).

5. Contacting Us (Online Contact Form, Email, WhatsApp, Phone):

a) Online Contact Form:
On our website, we offer an online contact form allowing you to send appointment inquiries, consultation requests, or general messages. When submitting the contact form, the personal details entered in the input fields (your name, email address, subject/service requested, and message text) are transmitted to us and processed. The transmission between your web browser and our server is secured using TLS/HTTPS encryption to our endpoint (/api/contact), or via your local email program as a fallback mechanism. Processing of these data is conducted solely to handle and respond to your inquiry, coordinate appointments, and prepare your biomechanical consultation.

The legal basis for this processing is Art. 6(1)(b) GDPR (performance of pre-contractual measures or a contract upon request) as well as our legitimate interest in fast and reliable communication with patients and athletes (Art. 6(1)(f) GDPR). Insofar as you voluntarily disclose health-related details (e.g., pain symptoms, past surgeries, medical diagnoses, movement restrictions) in your inquiry, processing is grounded on your explicit consent (Art. 9(2)(a) GDPR) as well as for the purposes of preventive health care and diagnostic assessment (Art. 9(2)(h) GDPR).

Your data is kept strictly confidential and will never be shared with unauthorized third parties. Following final processing of your inquiry, data is deleted unless a doctor-patient treatment relationship is established requiring statutory retention (in particular, legal medical documentation duties under § 630f of the German Civil Code - BGB of at least 10 years).

b) Email, Telephone, and WhatsApp:
When you contact us by email, phone, or via the WhatsApp link on this site, the personal information you supply (name, phone number, email address, message contents) is processed exclusively to handle your request (Art. 6(1)(b) and Art. 6(1)(f) GDPR). For WhatsApp interactions, please review the privacy policy of WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland).

6. Your Rights:
You possess the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), and data portability (Art. 20), as well as the right to lodge a complaint with the competent supervisory authority (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Website: www.baden-wuerttemberg.datenschutz.de).