TTkids Kinderphysiotherapie

Privacy policy

Protecting your personal data matters to us, especially because we work with health data as a practice. Below we inform you in accordance with Art. 13 GDPR which data we process when you visit this website and use our forms.

1. Controller

The controller within the meaning of the GDPR is TTkids Kinderphysiotherapie, owner Jacob Timmermann, Berliner Straße 73, 14169 Berlin, Germany. Full contact details can be found in the legal notice.

2. Data protection officer

We have not appointed a data protection officer because we are not required to do so. The threshold of § 38 BDSG of at least 20 people permanently engaged in automated processing is not met, and processing on a large scale within the meaning of Art. 37(1)(c) GDPR does not occur in a practice of our size, in line with Recital 91 GDPR. For any data protection questions, please contact us using the details in the legal notice.

3. Hosting and server log files

This website is operated by Baseline Media GmbH, Goerzallee 256, 14167 Berlin, as a processor pursuant to Art. 28 GDPR. The servers are provided by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, as a sub-processor in German data centres.

When you access the website, access data is automatically stored in server log files, in particular IP address, date and time, the requested resource, the volume of data transferred and browser and operating system identifiers. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and stable operation of the website and in defending against attacks. Log files are deleted after 30 days at the latest.

4. Cookies and storage on your device

We only use technically necessary storage entries, currently for the language choice between German and English. Access to your device is permitted for this purpose without consent under § 25(2) no. 2 TDDDG, because it is strictly necessary for the service you have expressly requested. A consent request in the form of a cookie banner is therefore not required. We do not use tracking, analytics or marketing cookies.

5. Fonts

The fonts used are served locally from our own server and are not loaded from third-party servers. Your IP address is not transmitted to providers of external fonts.

6. Intake form and health data

You can request treatment via our intake form. In doing so we process in particular the child's name and date of birth, diagnosis and secondary diagnosis, information on motor skills, the treating doctor, the social-paediatric centre, the orthopaedic supplier, information on speech and occupational therapy, your email address and phone number, as well as documents you upload voluntarily such as doctor's letters, findings, images or videos.

Some of this information constitutes health data and therefore special categories of personal data under Art. 9(1) GDPR. We process it on the basis of your explicit consent under Art. 9(2)(a) GDPR, which you give in the form, and to initiate the treatment contract under Art. 6(1)(b) GDPR. If treatment goes ahead, further processing is additionally based on Art. 9(2)(h) GDPR in conjunction with § 22(1) no. 1(b) BDSG.

The information is sent to us by email and is not stored in this website's database. Transmission from your browser to our server is TLS-encrypted. Please note that the subsequent email delivery is not end-to-end encrypted. If you would like to send particularly sensitive documents, please contact us and we will arrange another route.

You can withdraw your consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.

If no treatment goes ahead, we delete your enquiry and the submitted documents after six months at the latest. If treatment does go ahead, the retention periods for treatment records apply, generally ten years after the end of treatment pursuant to § 630f(3) of the German Civil Code (BGB).

7. Job applications

Via our application form we process your name, email address, phone number, your message and any application documents you upload voluntarily. The legal basis is § 26(1) BDSG in conjunction with Art. 6(1)(b) GDPR for the decision on entering into an employment relationship.

If no employment relationship comes about, we delete your documents at the latest six months after the procedure has been completed. If we are to keep your documents beyond that, we will obtain your consent under Art. 6(1)(a) GDPR.

8. Protection against automated submissions

Our forms contain a field that is invisible to you and serves solely to detect automated submissions. If this field is filled in, we discard the submission. Your usage behaviour is not analysed in the process.

9. Recipients of your data

Within the practice, only those people who need your data to handle your request have access to it. In addition, we pass data to processors acting on our behalf, in particular for hosting and email delivery. Data processing agreements pursuant to Art. 28 GDPR are in place with these service providers.

As members of a healthcare profession we are additionally bound by professional confidentiality under § 203 of the German Criminal Code (StGB).

10. Transfer to third countries

Your personal data is not transferred to countries outside the European Union or the European Economic Area.

11. Automated decision-making

Automated decision-making, including profiling, within the meaning of Art. 22 GDPR does not take place.

12. Your rights

You have the following rights in relation to us:

  • Access to the data processed about you (Art. 15 GDPR)
  • Rectification of inaccurate data and completion of incomplete data (Art. 16 GDPR)
  • Erasure, unless a statutory retention obligation applies (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing based on legitimate interests (Art. 21 GDPR)
  • Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

An informal message to the contact details given in the legal notice is sufficient to exercise your rights.

13. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, phone +49 30 13889-0, email mailbox@datenschutz-berlin.de.

14. Provision of your data

Providing your data is neither legally nor contractually required. However, without the information marked as mandatory in the form we cannot process your enquiry or prepare treatment.

15. Status and changes

We update this privacy policy when the processing or the legal situation changes. Last updated: July 2026.