Privacy Policy

1. Data Controller

2. Data, Processing Purposes, Legal Bases

Installation and Use of the App

You can download the Wexelcode App from the Google Play Store and Apple App Store. We have no control over any personal data processed during the download. For details, refer to the respective App Store's privacy policy.

Push Notifications

If you allow push notifications, they may be sent to remind you of incomplete screening processes. Push notifications require specific device identifiers (e.g., Push Token) and are only sent with your explicit consent (Art. 6(1)(a) GDPR). You can disable them via your device settings at any time.

Registration and Login

To register and create an account, we process your name, email address, and password. This enables full access to the App and its functionalities (e.g., running the screening process). Data processing here is based on Art. 6(1)(b) GDPR.

Screening Process

During the screening, we collect health-related information, such as:

• Age, gender, weight
• Medical history, regular medication
• Family medical history, lifestyle factors

Processing this data is based on your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR). The screening result is available within the App and can be saved as a PDF.

Data Transfer to Physiotherapists

You can opt to share your screening data and results with a selected Professional. This data sharing is based on your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR). Once shared, the Professional assumes responsibility for further data processing.

3. Automated Decision-Making Including Profiling

The App analyzes your answers during the screening to provide an initial recommendation (e.g., consult a doctor first). This analysis does not replace professional medical advice and does not constitute a legally binding decision.

4. Is the Use of the App Voluntary?

Yes, using the Wexelcode App and providing your data is voluntary. However, certain features (e.g., the screening process) may not function without providing specific information.

5. Data Recipients and Transfers to Third Countries

Data transfers are limited to cases where legally permissible. No data is transferred outside the EU/EEA unless appropriate safeguards (e.g., EU Standard Contractual Clauses) are in place.

6. Data Retention Periods

Screening data is stored for six months unless manually deleted. Other personal data is retained as long as your account remains active. Communication data is stored as necessary for legal obligations or dispute resolution.

7. Your Data Protection Rights

You have rights to access, rectify, delete, restrict, and port your data. Consent can be revoked at any time. Complaints can be filed with the relevant supervisory authority (e.g., Bavarian Data Protection Authority).

8. Amendments

We may update this privacy policy to reflect changes in services or legal requirements.