How we protect your data

Where it lives

Servers and database are in Frankfurt, in the European Union. The database has restore points kept by the hosting provider; a nightly copy on a second provider, also in Europe, is being set up — when it's running we'll say so here.

What we collect for a booking

Name, email, phone if you give it, and the appointment details. They're used to confirm it, remind you and let you cancel. The provider sees the data of your booking, not the others you made elsewhere.

Health data

Some services — an ambulance transfer, a medical visit — ask for health information: mobility, oxygen, special needs. We ask for it only where it is genuinely needed to provide the service, with explicit, versioned consent: if the consent text changes, you are asked again. It is encrypted at rest, read only by the staff who need it, and every access is logged. Once it is no longer needed, it deletes itself.

Reviews

Only someone who booked here and showed up can write one: it's not a rule in a policy, it's a constraint in the database. The provider can reply and cannot delete them. We don't buy or import reviews from other platforms.

What we don't do

• The map uses OpenStreetMap: opening it sends nothing to Google.
• We don't sell data to third parties and we don't run advertising based on your bookings.
• We don't know your password: we keep only a fingerprint that cannot be reversed.
• The emails and texts you receive are about your bookings. Nothing else.

Your rights

You can ask what we hold about you, correct it or have it deleted. With an account you see your bookings yourself and can cancel them. For anything else, write to us: we reply from the same address you receive confirmations from.