Privacy Policy
How TerminJet processes personal data, transparently, under the GDPR and the German Federal Data Protection Act. Hosted in Germany at Hetzner. WhatsApp notifications run through Meta only with explicit consent.
Controller and principles
Controller within the meaning of the GDPR
Coding Partners GmbH · Graefestr. 11 · 10967 Berlin · daniel@codingpartners.com · +49 176 21003634. Responsible for the processing of personal data on this website and in the TerminJet platform. TerminJet is a brand of Coding Partners GmbH.
Data protection officer
No data protection officer has been appointed, as there is no legal obligation to do so under Art. 37 GDPR or Section 38 of the German Federal Data Protection Act. Please send data protection enquiries to daniel@codingpartners.com.
Allocation of roles: controller and processor
For its own website, the operating entity is the controller. Where TerminJet is run as a white-label solution for a client business (for example a practice, workshop, or law firm), that client business is the controller for the end-customer and patient data processed there; TerminJet acts as a processor on the basis of a contract under Art. 28 GDPR.
Data minimisation as a principle
We collect only the data needed for scheduling, rescheduling, cancelling, and the agreed communication. Sensitive details are kept to the minimum necessary; in particular, for therapy and practice templates we do without publicly visible treatment reasons.
What data we process and why
Server log files when visiting the website
When you access our pages, the host provider automatically records access data (IP address, date and time, file requested, volume of data transferred, referrer, browser type, and operating system). The legal basis is our legitimate interest in operational security and error analysis (Art. 6(1)(f) GDPR). The logs are usually deleted after 7 to 14 days. Server log data is kept only as long as required for operation and security, and is then deleted.
Appointment booking and intake data
When you book, we process your name, contact details, and the intake fields requested in the template (for example appointment type, vehicle data, area of law, your request). The legal basis is the performance of the appointment or treatment relationship or pre-contractual measures (Art. 6(1)(b) GDPR). For health data in practice and therapy templates, the processing is additionally based on Art. 9(2)(h) GDPR and the relevant professional confidentiality rules.
Appointment and reminder communication
We send confirmations, reminders, and rescheduling and cancellation notices by email and, with consent, by WhatsApp. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR) or, in the case of WhatsApp, your explicit consent (Art. 6(1)(a) GDPR), which can be withdrawn at any time.
Contact and audit enquiries
When you request a demo, we process your details to handle the enquiry on the basis of your consent or to initiate a contract (Art. 6(1)(a) and (b) GDPR). The data is deleted once the enquiry has been fully dealt with and no retention obligations stand in the way.
Cookies and reach measurement
We set technically necessary cookies without consent on the basis of Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). We set analytics or marketing cookies and conversion tracking (for example for individual customisations) only with your consent via the consent banner (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). We currently do not use any analytics or marketing cookies on this website.
Processors and hosting
- Anbieter
- Controller (business / agency)
- Kund:in
- Data subject (end customer / patient)
- Termin
- Processing operation
Retention period and your rights
Retention period
We store personal data only for as long as it is needed for the relevant purpose or as long as statutory retention periods require (in particular commercial and tax-law periods of 6 or 10 years, as well as professional documentation obligations in the healing professions). After that, the data is deleted or anonymised in a data-protection-compliant way.
Your rights as a data subject
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and a right to object (Art. 21 GDPR). Any consent you have given, for example to WhatsApp or tracking, can be withdrawn at any time with effect for the future.
Right to lodge a complaint with the supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence or of the alleged infringement. The competent authority for the controller is the Berlin Commissioner for Data Protection and Freedom of Information.
How to exercise your rights
An informal message to the data protection contact address named above is sufficient. We handle requests without undue delay, at the latest within the statutory period of one month. To verify identity, we may request additional details in justified cases.
Frequently asked questions about data protection
Where is our data stored?
Hosting is provided by Hetzner Online GmbH in data centres in Germany. No transfer to third countries takes place for hosting. A data processing agreement under Art. 28 GDPR is in place with Hetzner.
Are appointment reminders sent automatically via WhatsApp?
Only with explicit consent. WhatsApp messages run through Meta's WhatsApp Business Platform. Without consent, we send reminders exclusively by email. Consent can be withdrawn at any time.
Do you sell or broker our customer data?
No. TerminJet is not a portal and not a directory with a brokerage model. There is no marketing or sharing of your end-customer data with third parties for their own purposes. Processing takes place solely to provide the service.
For practice and therapy templates, is health data given special protection?
Yes. Health data is kept to the minimum necessary, is not made publicly visible (no public treatment reason), and is processed on the basis of Art. 9(2)(h) GDPR and medical or therapeutic confidentiality.