Legal

Datenschutzerklärung

Privacy policy pursuant to the EU General Data Protection Regulation (GDPR / DSGVO). It explains what personal data we process when you use this website, why, and which rights you have.

1. Controller

The controller responsible for data processing on this website within the meaning of Art. 4 No. 7 GDPR is:

Veres Health UG (haftungsbeschränkt)
Timon Grosch
Franziskanerstr. 28
81669 München, Germany
Email: support@veres-health.com

2. Your rights as a data subject

Under the GDPR you have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to withdraw consent at any time with effect for the future (Art. 7 (3) GDPR)

To exercise any of these rights, contact us at support@veres-health.com. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.

3. Hosting and server log files

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you access the site, your browser automatically transmits technical information that is stored in server log files: IP address, date and time of the request, requested page/file, the referring URL, and your browser and operating system. This data is processed to deliver the website securely and reliably and to ensure its stability. The legal basis is our legitimate interest in a secure and functional website (Art. 6 (1) (f) GDPR). Vercel processes this data as our processor (Auftragsverarbeiter) under Art. 28 GDPR.

4. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognize an encrypted connection by the “https://” prefix and the lock symbol in your browser's address bar.

5. Contact form and email contact

When you use our contact form, the data you enter (name, email address, subject, and message) is transmitted to us to process your request. If you contact us by email, the data you provide is processed for the same purpose. The legal basis is Art. 6 (1) (b) GDPR where your request relates to a contract or pre-contractual steps, and otherwise our legitimate interest in answering enquiries (Art. 6 (1) (f) GDPR). We retain this data until your request has been fully handled and no statutory retention periods require longer storage.

6. Newsletter

If you sign up for our newsletter, we use the email address you provide to send you product news and updates. Processing is based on your consent (Art. 6 (1) (a) GDPR). You can withdraw your consent and unsubscribe at any time with effect for the future — for example via the unsubscribe link in each email or by emailing support@veres-health.com. After you unsubscribe, your email address is deleted from the newsletter distribution list.

7. Recipients and transfer to third countries

Data you submit through the contact and newsletter forms is forwarded to and stored in a Google service (Google Sheets / Google Apps Script) operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which acts as our processor (Auftragsverarbeiter) under Art. 28 GDPR.

Both Google and our hosting provider Vercel may process data on servers in the USA. Such transfers are safeguarded by the EU Standard Contractual Clauses pursuant to Art. 46 GDPR and, where applicable, the providers' certification under the EU-U.S. Data Privacy Framework. We do not sell your personal data or share it with third parties for their own purposes.

8. Cookies and analytics

This website does not use tracking cookies, advertising cookies, or third-party web-analytics tools. Web fonts are self-hosted, so no font data is requested from external servers when you browse. Only technically necessary data required to operate the site is processed (see “Hosting and server log files” above).

9. Changes to this privacy policy

We may update this privacy policy to reflect changes to our processing activities or to comply with new legal requirements. The current version always applies. Last updated: June 2026.