Privacy Policy (Datenschutzerklärung)

Last updated: March 5, 2026

Controller
Overview of Processing Activities
Applicable Legal Bases
Transfer of Personal Data
International Data Transfers
Rights of Data Subjects
Use of Cookies
Provision of the Online Service and Web Hosting
Blogs and Publication Media
Contact and Inquiry Management
Newsletters and Electronic Notifications
Advertising Communication via Email, Post, Fax or Telephone
Affiliate Programs and Affiliate Links
Customer Reviews and Rating Procedures
Presence on Social Networks (Social Media)
Plugins and Embedded Functions and Content

Controller

HealthDaily24 LLC 8 The Green, Suite B Dover, DE 19901 United States of America

Overview of Processing Activities

The following overview summarizes the types of data processed and the purposes of their processing, and refers to the data subjects involved.

Types of Data Processed

Master data
Contact data
Content data
Contract data
Usage data
Meta, communication and procedural data

Categories of Data Subjects

Customers
Communication partners
Users

Purposes of Processing

Provision of contractual services and fulfillment of contractual obligations
Contact requests and communication
Security measures
Direct marketing
Affiliate tracking
Management and response to inquiries
Feedback
Marketing
Profiles with user-related information
Provision of our online service and user experience
Information technology infrastructure

Applicable Legal Bases

Where we process your personal data, we do so on the basis of the following legal grounds under the GDPR: consent (Art. 6(1)(a) GDPR), performance of a contract (Art. 6(1)(b) GDPR), and legitimate interests (Art. 6(1)(f) GDPR), as specified in each section below.

Transfer of Personal Data

In the course of processing personal data, it may be necessary to transfer or disclose data to other entities, companies, legally independent organizational units or persons. Recipients of such data may include, for example, service providers entrusted with IT tasks or providers of services and content integrated into a website. In such cases, we comply with the legal requirements and in particular conclude appropriate contracts or agreements that serve to protect your data with the recipients of your data.

International Data Transfers

Where we process data in a third country (i.e., outside the European Union or the European Economic Area) or where this occurs in the context of the use of third-party services or the disclosure or transfer of data to other persons, entities or companies, this is only done in accordance with the applicable legal requirements.

Rights of Data Subjects

As a data subject, you have the following rights under the GDPR:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal
Right to lodge a complaint with a supervisory authority

To exercise your rights, please contact us at: [email protected]

Use of Cookies

Cookies are small text files or other storage markers that store information on end devices and read information from them — for example, to save login status in a user account, the contents of a shopping cart, accessed content, or functions used in an online service. Cookies may also be used for various purposes, such as ensuring the functionality, security and convenience of online services, and for creating analyses of visitor flows.

Notes on consent: We use cookies in accordance with legal requirements. Where required by law, we obtain prior consent from users. Consent is not required where the storage and reading of information — including cookies — is strictly necessary to provide the online service explicitly requested by the user. Strictly necessary cookies include those whose functions relate to the display and operation of the online service, load balancing, security, storing user preferences, and similar purposes.

Legal bases: Legitimate interests (Art. 6(1)(f) GDPR); Consent (Art. 6(1)(a) GDPR).

Storage duration:

Temporary cookies (session cookies): Deleted at the latest after a user leaves the online service and closes their device (browser or mobile application).
Permanent cookies: Remain stored after the device is closed — for example, to save login status or preferred content on repeat visits. Unless we provide explicit information on the type and duration of cookies, users should assume cookies are permanent and may be stored for up to two years.

General opt-out: Users may revoke given consents at any time and object to processing in accordance with legal requirements. Users may restrict cookie use in their browser settings (which may also limit the functionality of our online service). Objection to the use of cookies for online marketing purposes can also be declared at https://optout.aboutads.info and https://www.youronlinechoices.com/.

Provision of the Online Service and Web Hosting

We process user data in order to provide our online services. For this purpose, we process the user’s IP address, which is necessary to transmit the content and functions of our online services to the user’s browser or device.

Types of data processed: Usage data; meta, communication and procedural data. Data subjects: Users. Purposes: Provision of online service and user experience; information technology infrastructure; security measures. Legal bases: Legitimate interests (Art. 6(1)(f) GDPR).

Collection of access data and log files: Access to our online service is logged in the form of server log files. Server log files may include the address and name of the accessed pages and files, date and time of access, data volumes transferred, notification of successful retrieval, browser type and version, the user’s operating system, referrer URL, and typically IP addresses and the requesting provider. Log file information is stored for a maximum of 30 days and then deleted or anonymized. Data whose further retention is required for evidentiary purposes is exempt from deletion until the incident is finally resolved.

Blogs and Publication Media

We use blogs or comparable means of online communication and publication. Readers’ data is processed for the purposes of the publication medium only to the extent necessary for its display and communication between authors and readers, or for security reasons.

Types of data processed: Master data; contact data; content data; usage data; meta, communication and procedural data. Data subjects: Users. Purposes: Provision of contractual services; feedback; provision of online service; security measures; management of inquiries. Legal bases: Legitimate interests (Art. 6(1)(f) GDPR).

Comments and posts: When users leave comments or other posts, their IP addresses may be stored on the basis of our legitimate interests, for security purposes in the event that unlawful content is posted. We also reserve the right to process user data for spam detection purposes. Information provided in comments — including personal details, contact information, website details and content — is stored permanently until objected to by the user.

Contact and Inquiry Management

When contacting us (e.g., by post, contact form, email, telephone or via social media) and in the context of existing user and business relationships, the information provided by the inquiring parties is processed to the extent necessary to respond to contact inquiries and any requested measures.

Types of data processed: Contact data; content data; usage data; meta, communication and procedural data. Data subjects: Communication partners. Purposes: Contact requests and communication; management and response to inquiries; feedback; provision of online service. Legal bases: Legitimate interests (Art. 6(1)(f) GDPR); performance of a contract and pre-contractual inquiries (Art. 6(1)(b) GDPR).

Contact form: When users contact us via our contact form, email or other communication channels, we process the data provided to handle the submitted request.

Newsletters and Electronic Notifications

We send newsletters, emails and other electronic notifications only with the consent of the recipients or where permitted by law. Where the content of a newsletter is specifically described at the time of registration, that description is decisive for the user’s consent. Our newsletters also contain information about our services and offers.

To subscribe to our newsletter, it is generally sufficient to provide your email address. We may, however, ask you to provide a name for personalized salutation, or further details where required for the newsletter’s purposes.

Double opt-in procedure: Registration for our newsletter is carried out using a double opt-in procedure — after registering, you receive an email asking you to confirm your registration. This confirmation is necessary to prevent registration with third-party email addresses. Newsletter registrations are logged to demonstrate the registration process in accordance with legal requirements, including storage of the registration and confirmation timestamp and IP address.

Deletion and restriction of processing: Unsubscribed email addresses may be retained for up to three years on the basis of our legitimate interests before deletion, in order to demonstrate a previously given consent. Processing of these addresses is limited to the purpose of defending against potential claims.

Opt-out: You may cancel receipt of our newsletter at any time by using the unsubscribe link at the end of each newsletter or by contacting us at the address provided above.

Types of data processed: Master data; contact data; meta, communication and procedural data; usage data. Data subjects: Communication partners. Purposes: Direct marketing. Legal bases: Consent (Art. 6(1)(a) GDPR).

Measurement of open and click rates: Our newsletters contain a web beacon — a pixel-sized file retrieved from our server when the newsletter is opened. Technical information including browser, system, IP address and retrieval time is collected. This information is used to improve our newsletter and analyze reader behavior. Legal bases: Consent (Art. 6(1)(a) GDPR).

Advertising Communication via Email, Post, Fax or Telephone

We process personal data for the purposes of advertising communication, which may take place via various channels such as email, telephone, post or fax, in accordance with legal requirements.

Recipients have the right to withdraw given consents at any time and to object to advertising communication at any time. Following withdrawal or objection, we may retain data required to demonstrate prior authorization for up to three years after the end of the year of withdrawal or objection. Processing is limited to the purpose of defending against potential claims.

Types of data processed: Master data; contact data. Data subjects: Communication partners. Purposes: Direct marketing. Legal bases: Consent (Art. 6(1)(a) GDPR); legitimate interests (Art. 6(1)(f) GDPR).

Affiliate Programs and Affiliate Links

We include so-called affiliate links or other references (which may include search masks, widgets or discount codes) to the offers and services of third-party providers in our online service (collectively referred to as “affiliate links”). If users follow affiliate links and subsequently make use of the offers, we may receive a commission or other benefits from these third-party providers (collectively referred to as “commission”).

In order to track whether users have made use of the offers of an affiliate link we use, it is necessary for the respective third-party providers to know that users have followed an affiliate link used within our online service. The assignment of affiliate links to the respective transactions or other actions is solely for the purpose of commission settlement and is cancelled as soon as it is no longer required for that purpose.

For the purposes of the aforementioned assignment, affiliate links may be supplemented with certain values that form part of the link or may be stored elsewhere, e.g., in a cookie. These values may include the source website (referrer), time, an online identifier of the operator of the website on which the affiliate link was located, an online identifier of the respective offer, the type of link used, the type of offer, and an online identifier of the user.

Types of data processed: Contract data; usage data; meta, communication and procedural data. Data subjects: Users. Purposes: Affiliate tracking. Legal bases: Consent (Art. 6(1)(a) GDPR); legitimate interests (Art. 6(1)(f) GDPR).

Customer Reviews and Rating Procedures

We participate in review and rating procedures to evaluate, optimize and promote our services. Where users rate us via the involved rating platforms or procedures, or otherwise provide feedback, the general terms and conditions and privacy notices of the respective providers also apply. As a rule, rating also requires registration with the respective provider.

To verify that reviewing persons have actually used our services, we transmit — with customer consent — the necessary data regarding the customer and the service used to the respective rating platform (including name, email address and order or item number). This data is used solely to verify the authenticity of the user.

Types of data processed: Contract data; usage data; meta, communication and procedural data. Data subjects: Customers; users. Purposes: Feedback; marketing. Legal bases: Legitimate interests (Art. 6(1)(f) GDPR).

Presence on Social Networks (Social Media)

We maintain online presences within social networks and process user data in this context in order to communicate with users active there or to provide information about us.

We note that user data may be processed outside the European Union, which may pose risks for users — for example, making it more difficult to enforce their rights.

User data within social networks is generally also processed for market research and advertising purposes. For example, usage profiles may be created based on user behavior and resulting interests. These profiles may in turn be used to place advertisements inside and outside the networks that presumably correspond to users’ interests.

Types of data processed: Contact data; content data; usage data; meta, communication and procedural data. Data subjects: Users. Purposes: Contact requests and communication; feedback; marketing. Legal bases: Legitimate interests (Art. 6(1)(f) GDPR).

Individual services:

Instagram: Social network. Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Privacy policy: https://instagram.com/about/legal/privacy
Facebook Pages: Profiles within the Facebook social network. We are jointly responsible with Meta Platforms Ireland Limited for the collection (but not further processing) of data from visitors to our Facebook page. Privacy policy: https://www.facebook.com/about/privacy. Data transfer basis: EU-US Data Privacy Framework (DPF), Standard Contractual Clauses.
LinkedIn: Social network. Provider: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. Privacy policy: https://www.linkedin.com/legal/privacy-policy. Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Pinterest: Social network. Provider: Pinterest Europe Limited, 2nd Floor, Palmerston House, Fenian Street, Dublin 2, Ireland. Privacy policy: https://policy.pinterest.com/en/privacy-policy
X (formerly Twitter): Social network. Provider: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland. Privacy policy: https://twitter.com/privacy

Plugins and Embedded Functions and Content

We integrate functional and content elements into our online service that are sourced from the servers of their respective providers. These may include, for example, graphics, videos or maps.

The integration always requires that the third-party providers of this content process the IP address of users, as without the IP address they could not send the content to users’ browsers. Third-party providers may also use pixel tags (invisible graphics, also referred to as “web beacons”) for statistical or marketing purposes.

Types of data processed: Usage data; meta, communication and procedural data; master data; contact data; content data. Data subjects: Users. Purposes: Provision of online service; marketing; profiles with user-related information. Legal bases: Legitimate interests (Art. 6(1)(f) GDPR).