The protection of your personal data is very important to us. We take the protection of your personal data very seriously and process it exclusively in accordance with applicable data protection regulations, particularly the General Data Protection Regulation (GDPR) and applicable national data protection laws.

As part of your use of our "Adon Care" service, we process personal data, including special categories of personal data (health data). This particularly concerns registration on our platform, the completion of medical questionnaires, the use of coaching services, and the processing of cooperation with your private health insurance.

With the following data protection information, we provide you with a transparent overview of what personal data we process, for what purposes, on what legal basis this is done, and what rights you have in this regard.

1. Name and contact details of the controller

The controller for the processing of your personal data is:

Adon Health UG (haftungsbeschränkt)

Falkenstraße 11F

81541 München

Email: hallo@adon-health.de

2. Contact details of the Data Protection Officer

For questions regarding data protection and the exercise of your rights, you can contact our external Data Protection Officer:

DATENDO GmbH

Hohenzollernring 55

50672 Köln

Email: datenschutz-531@anfragen.datendo.de

Web: www.datendo.de

3. Purposes of processing and legal basis

Your personal data is processed for the following purposes:

• Registration and management of your user account on our platform
• Implementation of the service, in particular the provision of educational content, the completion of medical questionnaires, and the organization and implementation of coaching services
• Processing of health data (e.g., symptom data from questionnaires) for the conceptual design and implementation of the service
• Verification of your eligibility to use the service with your private health insurance
• Billing for services rendered with your private health insurance
• Communication with you, particularly in connection with your registration and use of the service
• Ensuring the technical operation and security of our systems

Processing is carried out on the basis of the following legal grounds:

• Art. 6 (1) lit. b GDPR (performance of a contract)
• Art. 6 (1) lit. a GDPR (consent)
• Art. 6 (1) lit. b GDPR in conjunction with Art. 9 (2) lit. a GDPR (explicit consent)
• Art. 6 (1) lit. f GDPR (legitimate interest)

4. Categories of personal data

As part of the use of the service, we process the following categories of personal data:

• Master data (first name, last name, date of birth)
• Contact data (email address)
• Registration and authentication data (password, insurance number, etc.)
• Insurance-related data
• Health data (symptom data, information from questionnaires)
• Data on service utilization and billing
• Data on the use of the service
• Communication data
• Appointment and coaching data
• Consent and revocation data
• Technical usage data

Data subjects:

• Users of the service
• Insured persons of cooperating private health insurance companies

5. Categories of recipients of personal data

Access to your personal data is granted to:

• Private health insurance
• Internal departments
• Processors (hosting, IT, appointment management, email dispatch, CRM, patient administration)
• IT service providers and developers
• External doctors as independent controllers

6. Storage duration

Personal data is stored only as long as necessary for the respective purposes:

• Master data and contact data: duration of use
• Health data: duration of the service or legal deadlines
• Billing data: legal retention obligations (usually 6-10 years)
• Insurance data: duration of use
• Communication data: duration of communication + legal deadlines
• Appointment and coaching data: duration of implementation
• Consent data: until the expiry of legal limitation periods
• Technical data: only as long as technically necessary

After the expiry of legal deadlines, the data will be deleted, unless there are other legal reasons.

7. Your rights as a data subject

You have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to object (Art. 21 GDPR)
• Right to data portability (Art. 20 GDPR)

8. Withdrawal of consent

You can withdraw any consent given at any time with effect for the future.

9. Right to lodge a complaint with the supervisory authority

Bavarian State Office for Data Protection Supervision (BayLDA)

Promenade 18

91522 Ansbach

Phone: +49 981 180093-0

Email: poststelle@lda.bayern.de

Website: https://www.lda.bayern.de

10. Provision of data and necessity

The provision of personal data is generally voluntary but is necessary for the use of the service. Without this data, use is not possible.

11. Transfer to third countries

No transfer to third countries outside the EU/EEA takes place.

12. Automated decision-making

Automated decision-making, including profiling, does not take place.

Status: 22.04.2026

The terms for persons used in this document serve for linguistic simplification and apply to all genders.