1. General Information
This Privacy Policy explains how personal data is collected and processed when you visit and use this website.
Personal data is any information that can be used to identify you personally, such as your name, email address, IP address, phone number, or information you provide through a contact or appointment request form.
This website may collect personal data in two ways:
Some data is collected when you provide it voluntarily, for example by contacting me, filling out a form, or requesting a consultation.
Other data is collected automatically for technical reasons when you access the website, for example browser type, operating system, time of access, IP address, or server log data.
2. Controller
The controller responsible for data processing on this website is:
Sare Akyar
Huttenstraße 25
10553 Berlin
Germany
Email: info@sareakyar.de
The controller is the person who determines the purposes and means of processing personal data.
3. Hosting
This website is hosted by an external hosting provider:
netcup GmbH
Daimlerstraße 25
76185 Karlsruhe
Germany
When you visit this website, personal data may be processed on the servers of the hosting provider. This may include IP addresses, server log files, contact requests, communication data, website access data, and other data generated through the use of the website.
The use of the hosting provider is necessary to provide this website securely, reliably, and efficiently. The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in the secure and technically reliable provision of this website. Where processing is necessary for pre-contractual or contractual communication, the legal basis may also be Art. 6(1)(b) GDPR.
Where required, a data processing agreement has been concluded with the hosting provider.
4. Server Log Files
When you access this website, the server automatically collects and stores information in server log files. This may include:
browser type and browser version,
operating system,
referrer URL,
host name of the accessing device,
time of the server request,
IP address.
This data is processed to ensure the technical functionality, stability, and security of the website. The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in operating the website securely and preventing misuse.
This data is not merged with other data sources. Server log files are stored only for as long as necessary for technical and security purposes, unless longer storage is required to investigate security incidents or comply with legal obligations.
5. Contact and Consultation Forms
This website may use contact, application, or appointment request forms, including forms provided through WordPress plugins such as Forminator and/or WPForms.
When you submit a form, the information you provide is transmitted to me and may be stored in the WordPress database and/or sent to me by email. This may include:
your name,
email address,
phone number,
message content,
information about your current situation, goals, symptoms, cycle, nutrition, lifestyle, or health-related concerns, if you voluntarily provide such information.
I process this data to respond to your inquiry, prepare for a consultation, communicate with you, and, where applicable, take steps before entering into a contract.
The legal basis for general contact and consultation requests is Art. 6(1)(b) GDPR, where the processing is necessary for pre-contractual measures at your request. In other cases, the legal basis may be Art. 6(1)(f) GDPR, based on my legitimate interest in responding to inquiries efficiently.
6. Health-Related Information
If you voluntarily provide information about your health, cycle, hormones, symptoms, medication, supplements, diagnoses, fertility, digestion, emotional wellbeing, or similar topics, this may constitute special category data under Art. 9(1) GDPR.
Such information is processed only for the purpose of responding to your inquiry, preparing a consultation, or providing the service you requested.
Where special category data is processed, the legal basis is your explicit consent pursuant to Art. 9(2)(a) GDPR, together with Art. 6(1)(a) GDPR and/or Art. 6(1)(b) GDPR.
You are not required to provide health-related information through the website. If you prefer, you may keep your first inquiry general and share more sensitive information later in a more suitable setting.
You may withdraw your consent at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected.
7. Appointment Booking
If this website links to an external appointment booking service, such as Google Calendar appointment scheduling or another booking tool, you will be redirected to the respective provider when you click the booking link.
When using an external booking service, the data you enter there may be processed by that provider. This may include your name, email address, selected appointment time, communication details, and any additional information you provide.
The purpose of this processing is to allow you to book and manage appointments. The legal basis for processing appointment-related data is Art. 6(1)(b) GDPR.
Please note that the external provider may process data under its own responsibility. The privacy information of the respective provider applies in addition to this Privacy Policy.
8. Email Communication
If you contact me by email, the information you send will be processed for the purpose of handling your inquiry and any follow-up communication.
Please note that email communication may have security vulnerabilities. Complete protection against access by third parties cannot be guaranteed. Please avoid sending highly sensitive information by email unless you are comfortable doing so.
The legal basis is Art. 6(1)(b) GDPR if your message relates to a consultation, service, or pre-contractual inquiry. In other cases, the legal basis may be Art. 6(1)(f) GDPR, based on my legitimate interest in responding to messages.
9. Cookies and Similar Technologies
This website may use cookies and similar technologies. Cookies are small text files stored on your device. Some cookies are technically necessary for the website to function properly. Others may be used for analytics, form functionality, spam protection, or user experience features.
Technically necessary cookies are used on the basis of Art. 6(1)(f) GDPR and, where applicable, § 25(2) TDDDG. My legitimate interest lies in providing a functional and secure website.
Cookies or similar technologies that are not technically necessary, especially for analytics, tracking, or third-party services, are used only on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may withdraw your consent at any time.
You can also configure your browser to block cookies, delete cookies, or notify you before cookies are stored. Blocking cookies may limit the functionality of this website.
10. Popup Maker
This website may use the WordPress plugin Popup Maker to display popup windows, for example for appointment requests or contact forms.
Popup Maker may use a cookie or similar technology to remember whether a popup has already been displayed or whether you have already interacted with it. This helps avoid showing the same popup repeatedly.
This cookie is not used for advertising or cross-site tracking.
The legal basis is Art. 6(1)(f) GDPR, based on my legitimate interest in providing a user-friendly website. Where consent is legally required for storing or accessing information on your device, the processing is based on Art. 6(1)(a) GDPR and § 25(1) TDDDG.
11. Form Plugins: Forminator and WPForms
This website may use the WordPress form plugins Forminator and/or WPForms to provide contact, application, or appointment request forms.
When you submit a form, the information you enter is processed for the purpose of handling your request. Depending on the form, this may include your name, email address, phone number, message, and any additional information you choose to provide.
Submitted form data may be stored in the WordPress database and may also be sent to me by email notification.
The legal basis is Art. 6(1)(b) GDPR for pre-contractual inquiries and Art. 6(1)(f) GDPR for general communication. If you voluntarily provide health-related information, the additional legal basis is your explicit consent pursuant to Art. 9(2)(a) GDPR.
Form data is stored only for as long as necessary to process your request and any resulting communication or service relationship, unless statutory retention obligations apply.
12. Google reCAPTCHA
This website may use Google reCAPTCHA to protect forms from spam, automated submissions, and misuse.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Depending on the processing, data may also be transferred to Google LLC in the USA.
reCAPTCHA may process technical and usage-related data, such as IP address, browser information, device information, time spent on the website, mouse movements, and interaction patterns. This is used to determine whether a form submission is made by a human or by automated software.
The use of reCAPTCHA serves the security of this website and the protection of forms against misuse. The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in protecting the website from spam, abuse, and automated attacks.
Where reCAPTCHA stores or accesses information on your device and consent is required, the legal basis is Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent can be withdrawn at any time.
Google may process reCAPTCHA data as a processor under Google Cloud data processing terms. If data is transferred to the USA, this may be based on the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses, where applicable.
13. Analytics: WP Statistics
This website may use WP Statistics, a WordPress analytics plugin provided by VeronaLabs, to statistically evaluate website visits.
WP Statistics may process data such as pages visited, referrer, browser type, operating system, approximate location, search engine, clicks, and visit times.
Where configured in a privacy-friendly way, WP Statistics stores analytics data locally on the website server and does not use tracking cookies by default. IP addresses should be anonymized or hashed where possible.
The purpose of using WP Statistics is to understand how visitors use the website and to improve content, structure, and user experience.
The legal basis is Art. 6(1)(f) GDPR, based on my legitimate interest in analyzing and improving this website in a privacy-conscious way. Where consent is required because cookies or similar technologies are used, processing takes place only on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG.
14. Google Analytics
This website may use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics helps analyze how visitors use the website. For this purpose, Google may process information such as page views, session duration, interactions, device and browser information, approximate location, referrer, and IP address.
Google Analytics may use cookies or similar technologies. Google may also process data on servers outside the European Union, including in the USA.
Google Analytics is used only with your consent. The legal basis is Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may withdraw your consent at any time through the cookie settings or consent banner.
If data is transferred to the USA, this may be based on the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses, where applicable.
If Google Analytics is not active on this website, this section does not apply.
15. Social Media Links and Embedded Elements
This website may contain links to social media profiles, including Instagram and Pinterest.
If these are simple links, no personal data is transferred to the social media provider merely by visiting this website. Data may be processed by the respective provider only when you click the link and visit the external platform.
This website may also contain embedded social media elements, such as buttons, feeds, previews, or widgets. If such elements are active, your browser may establish a connection to the servers of the respective provider. This may allow the provider to receive information that you visited this website, including your IP address and technical browser data. If you are logged into your account with that provider, the provider may associate your visit with your user profile.
The providers may include:
Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, for Instagram.
Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland, for Pinterest.
Embedded social media elements that are not technically necessary are used only with your consent, where required. The legal basis is Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent can be withdrawn at any time.
Where no consent is required, the legal basis may be Art. 6(1)(f) GDPR. My legitimate interest lies in presenting my work and services and enabling visibility on social media.
16. Recipients and Processors
Personal data may be processed by service providers that support the operation of this website and communication with visitors. These may include:
hosting providers,
email providers,
WordPress and plugin infrastructure,
form tools,
analytics tools,
spam protection tools,
appointment booking providers, where used.
Where service providers process personal data on my behalf, data processing agreements are concluded where required.
Personal data is not sold.
17. International Data Transfers
Some service providers may process personal data outside the European Union or the European Economic Area, including in the USA.
Where data is transferred to third countries, this takes place only if the legal requirements are met. Transfers may be based on an adequacy decision, the EU-U.S. Data Privacy Framework, Standard Contractual Clauses, or your explicit consent, where applicable.
18. Storage Duration
Unless a more specific storage period is stated in this Privacy Policy, personal data is stored only for as long as necessary for the respective processing purpose.
Data may be stored for longer if legal retention obligations apply, for example under tax or commercial law, or if storage is necessary to establish, exercise, or defend legal claims.
If you withdraw consent or request deletion, your data will be deleted unless there is another legal basis or legal obligation requiring continued storage.
19. SSL/TLS Encryption
This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as inquiries sent through forms.
You can recognize an encrypted connection by the lock symbol in your browser and by the address beginning with “https://”.
20. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
the right of access pursuant to Art. 15 GDPR,
the right to rectification pursuant to Art. 16 GDPR,
the right to erasure pursuant to Art. 17 GDPR,
the right to restriction of processing pursuant to Art. 18 GDPR,
the right to data portability pursuant to Art. 20 GDPR,
the right to object pursuant to Art. 21 GDPR,
the right to withdraw consent at any time pursuant to Art. 7(3) GDPR.
If you wish to exercise your rights, you can contact me at:
21. Right to Object
If personal data is processed on the basis of Art. 6(1)(f) GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation.
If your personal data is processed for direct marketing purposes, you have the right to object at any time. If you object, your personal data will no longer be used for direct marketing.
22. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.
The supervisory authority responsible for Berlin is:
Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
Germany
Phone: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de
You may also contact any other competent data protection supervisory authority.
23. Objection to Unsolicited Marketing Emails
I hereby object to the use of contact details published as part of the legal notice or this Privacy Policy for sending unsolicited advertising or information materials.
I reserve the right to take legal action in the event of unsolicited advertising, including spam emails.
24. Updates to This Privacy Policy
This Privacy Policy may be updated if the website, services, tools, or legal requirements change. The current version is the version published on this website.
______
Last updated: July 2026