Last updated: October 2026
The controller responsible for processing personal data in connection with this website is:
HEAL.THY FAMILY LLC
heal.thy SCHOOL
1430 SE 17th Ave, Unit A1
Cape Coral, FL 33990
USA
Email: contact@heal-thy-school.com
This policy describes how we process data when you visit our website, contact us, or book an appointment through our website. It does not cover the processing of student data in the course of regular school operations. Information on that is not part of this policy.
When you access the website, technical data is processed so that the pages can be displayed and operations can be protected. This includes in particular your IP address, the date and time of access, the page requested, browser and device information, and, where applicable, the previously visited page.
The website and email mailbox are provided by an IT service provider based in Austria engaged by us. This provider uses ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany, as its hosting provider. The servers are located in the provider’s data centres in Dresden and Friedersdorf, Germany. Server logs are stored with a shortened IP address (the last two digits are removed) and are automatically deleted after 30 days. In the event of a specific security incident, relevant data may be needed for longer; it will be deleted as soon as it is no longer required to investigate the incident.
Where the GDPR applies, this processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of the website and in detecting and preventing misuse.
If you write to us using the contact options offered on the website, we process the information you provide. This may include your name, email address, other contact details and the content of your message. We use this data to answer your request and, where necessary, to clarify any follow-up questions.
For requests made in preparation for a contract, the legal basis is Art. 6(1)(b) GDPR, where the GDPR applies. For other requests, we rely on Art. 6(1)(f) GDPR; our legitimate interest is handling and answering your message.
To handle requests, we use our email mailbox at ALL-INKL.COM (see section 2). There is no contact form on this website. Requests are deleted once they have been fully dealt with and no statutory retention obligations apply. If a contract is concluded, the retention periods applicable to it apply.
You are not obliged to provide us with any data for a contact request. However, without a contact address we can reach and the information needed to respond, we may not be able to deal with your request. Please do not send health data or other particularly sensitive information via general contact channels.
To book a personal information call, we use the appointment booking service YouCanBookMe. The provider is AI Software (Capacity) UK Ltd, Bedford Heights, Brickhill Drive, Bedford, MK41 7PH, United Kingdom. When you click a booking button, you are taken to our booking page on the provider’s site. There, YouCanBookMe, acting as our processor, processes the information you enter when booking, such as your name, email address, chosen appointment and, where applicable, your message. The data is stored on Amazon Web Services servers in the USA (see section 7). The legal basis is Art. 6(1)(b) GDPR, as the booking is made at your request in preparation for a possible school contract. YouCanBookMe is connected to our Google Calendar. The booked appointment is stored there as a calendar entry with your name, email address and, where applicable, your message. The calendar provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For the calendar, we currently use a Google account without a separate data processing agreement; processing by Google is subject to Google’s privacy policy (https://policies.google.com/privacy). We store the booking data in YouCanBookMe and in the calendar for as long as it is needed to organise and follow up on the call and for a possible subsequent admission to our school. It is then deleted unless statutory retention obligations apply.
The information call takes place as a video conference via Zoom, which we use through our school account. The provider is Zoom Communications, Inc., 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA. In particular, your name, email address, technical connection data such as IP address and device information, as well as video and audio during the call, are processed. Zoom processes this data as our processor. The legal basis is Art. 6(1)(b) GDPR.
Information calls are not recorded, either as audio or video. No AI-generated summaries or transcripts are created. We use the booking and call data exclusively to organise and conduct the information call and to answer your questions.
Cookies and similar technologies can store or read information on your device. Technically necessary functions serve in particular to operate the website and to store your privacy choices. For non-essential functions, such as certain analytics, advertising or external media, we obtain your consent where required by law.
Consent management is handled by Borlabs Cookie. The software provider is Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany. The software runs on our own web server. It sets the cookie “borlabs-cookie”, which stores a randomly generated identifier and your choices; it is valid for 182 days. To document your consent, your choices are logged in our website database together with this identifier. The legal basis for the required documentation of consent is, where the GDPR applies, Art. 6(1)(c) in conjunction with Art. 7(1) GDPR. Other technically necessary processing, such as storing your language selection, is based on Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021) and Art. 6(1)(f) GDPR; our legitimate interest is a functioning, multilingual website. Borlabs Cookie is used to store your consent decisions and take them into account on later visits.
Processing that requires consent is based on Art. 6(1)(a) GDPR and the applicable rules on storing and accessing information on end devices. You can change your choices at any time via the “Cookie settings” link in the footer of every page and withdraw your consent with effect for the future. This does not affect the lawfulness of processing carried out before withdrawal.
We currently use only technically necessary cookies: “borlabs-cookie” (provider: operator of this website; purpose: storing your privacy choices; duration: 182 days) and “pll_language” (provider: operator of this website, Polylang plugin; purpose: storing your selected language; duration: 1 year). We do not currently use any cookies that require consent.
We do not currently use any analytics, advertising or tracking services, and we do not embed any external content such as videos, maps or social media posts on our website. Fonts are loaded directly from our own server, and no data is transferred to third parties in the process.
Our website also contains links to external services, including Facebook, Instagram and WhatsApp. If you follow such a link, you leave our website. The privacy information of the respective provider applies on that service. A simple link is to be distinguished from embedded content or widgets; where such features are used, their data processing is explained in the service sections above.
For website operation, communication and appointment organisation, the service providers named in this policy may receive data to the extent necessary for their tasks. These are an IT service provider that handles hosting and maintenance of our website and has access to the website and its database in doing so, its hosting provider ALL-INKL.COM (website and email), YouCanBookMe (appointment booking), Google (calendar) and Zoom (video calls). Data processing agreements pursuant to Art. 28 GDPR are in place with YouCanBookMe and Zoom. Disclosure may also be necessary to comply with legal obligations or to establish, exercise or defend legal claims.
We are based in the USA. Some service providers also process data outside the European Economic Area. Where a transfer is subject to the GDPR requirements for international data transfers, the necessary conditions must be met.
ALL-INKL.COM and our IT service provider process data within the European Union. For YouCanBookMe, the transfer to the USA is based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) together with the UK International Data Transfer Addendum, which form part of the provider’s data processing agreement. Zoom Communications, Inc. and Google LLC participate in the EU-US Data Privacy Framework; transfers to them are based on the European Commission’s adequacy decision of 10 July 2023 (Art. 45 GDPR) and, in the case of Zoom, additionally on the EU Standard Contractual Clauses in the provider’s data processing agreement. You can request information and, where applicable, a copy of the relevant safeguards at contact@heal-thy-school.com.
Where the GDPR applies and the respective legal requirements are met, you can request access to your personal data as well as its rectification, erasure or the restriction of processing. You may also have a right to data portability.
Where processing is based on legitimate interests, you can object on grounds relating to your particular situation. You can object to processing for direct marketing purposes at any time.
You can withdraw any consent you have given at any time with effect for the future. For these matters, you can reach us at contact@heal-thy-school.com.
You can lodge a complaint with a competent data protection supervisory authority, in particular in the EU Member State where you habitually reside or work or where you suspect an infringement. In Austria, this is the Data Protection Authority (Datenschutzbehörde): https://www.dsb.gv.at/
The connection to our website is encrypted via HTTPS. We take appropriate measures to protect personal data. Nevertheless, completely risk-free transmission or storage cannot be guaranteed.
In connection with the website use and contact described here, we do not make any decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.
We update this policy when our website, the services we use or the legal requirements change. The current version is available on our website.
This is a translation of the German privacy policy. In case of doubt, the German version shall prevail.