Privacy Policy
Last updated: 2026-05-12
1. Controller
Dr. Greger & Collegen, Weltenburger Str. 70, 81677 München
089 / 49 00 92 18 · kanzlei-muenchen@dr-greger.de
Represented by: Dr. Stephan Greger
2. General notes
We process personal data exclusively in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
3. Hosting
This website is hosted at STRATO AG (Germany). The data is processed exclusively on servers located in Germany; there is no transfer to third countries. strato.de/datenschutz
4. Server logs
When the website is accessed, technically necessary data is collected (IP address, user agent, referer, timestamp). Storage duration: 30 days for security and abuse analysis. Legal basis: Art. 6(1)(f) GDPR.
5. Contact form
When you send us an inquiry via the contact form, we process the data you provide exclusively to process your inquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR.
Email is sent via the mail servers of STRATO AG (Germany). The data is processed on servers located in Germany; there is no transfer to third countries. strato.de/datenschutz
6. Anti-spam
To ward off automated requests we use technical measures without cookies or third-party services (honeypot fields, a time check and server-side rate limiting per IP).
7. Rate limiting
We use Upstash Redis to limit request frequency per IP. IP addresses are stored briefly (max. 24 hours). upstash.com/trust/privacy
8. Content Management System
Content is managed via Sanity Studio (Sanity Inc., USA). Sanity does not process personal data of website visitors. sanity.io/legal/privacy
9. Web analytics with GA4
With your consent (cookie banner) we use Google Analytics 4 with IP anonymization. Provider: Google Ireland Ltd. Data transfer to the US based on the EU-US Data Privacy Framework and Standard Contractual Clauses. policies.google.com/privacy
10. Google Tag Manager and Google Ads
With your consent we use Google Tag Manager and Google Ads conversion tracking.
11. Cookies and Consent Mode v2
We set cookies only with your consent — except technically necessary ones (security_storage). You can withdraw your consent at any time with effect for the future by deleting the stored cookies in your browser settings; the consent prompt will then appear again.
12. Your rights
You have the right to information, correction, deletion, restriction of processing, data portability, objection and complaint to a supervisory authority (Bavarian State Office for Data Protection Supervision).
13. List of data processors
- STRATO AG (Hosting & email delivery, Germany)
- Sanity Inc. (CMS, USA)
- Upstash Inc. (Rate limiting, EU/USA)
- Google Ireland Ltd. (Analytics + Ads, Ireland with US data transfer)
