Data Protection

1. Data Protection at a Glance (Overview)

General Information

The following information provides a simple overview of what happens to your personal data when you visit our website and use our online services. Personal data is any data that can be used to personally identify you.

This privacy policy also applies to the following online services:
– https://assessment.inch.de/
– https://calendly.com/dominic-inch/30min

Data Collection on This Website

Who is responsible for data collection?
Data processing is carried out by the entities listed below. Further details can be found in the section “Controllers”.

How do we collect your data?
Your data is collected when you provide it to us, for example by entering information into forms, as part of an assessment, or when booking an appointment. Other data is collected automatically or with your consent when visiting the website (e.g. browser, operating system, time of access).

What do we use your data for?
Some data is collected to ensure the proper functioning of the website. Other data is used to process inquiries, conduct assessments, organize appointments, and – if you have consented – analyze and improve our services.

What rights do you have?
You have the right to obtain information about your stored personal data at any time, as well as the right to rectification, deletion, restriction of processing, and data portability. You may withdraw your consent at any time. You also have the right to lodge a complaint with a supervisory authority.

The competent supervisory authority for our organizations is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit Friedrichstr. 219 10969 Berlin https://www.datenschutz-berlin.de

2. Hosting

Our website is hosted by netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany.

When visiting our website, netcup collects technical data (e.g. IP address) to ensure the secure operation of the website.

Legal basis: Art. 6(1)(f) GDPR
A data processing agreement (DPA) has been concluded.

Further information:
https://www.netcup.com/en/contact/data-privacy

3. Controllers

Initiative for Innovation and Collaboration in Healthcare (INCH) e.V.

Represented by:
Merve Sarica (Chairwoman)
Jasper Wagnitz (Deputy Chair)
Prof. Dr. Akira Poncette (Treasurer)
Dr. Katarina Braune (Deputy Chair)
Joscha Hofferbert (Deputy Chair)

Address:
Breite Str. 49
13187 Berlin
Germany

Email: hello@inch.de

AND

INCH Health GmbH

Represented by the Managing Director:
Prof. Dr. med. Akira-Sebastian Poncette

Address:
Chausseestraße 86
10115 Berlin
Germany

Email: info@inch.de

Commercial Register: Charlottenburg District Court (Berlin)
Registration Number: HRB 274252 B

4. Joint Controllership

INCH e.V. and INCH Health GmbH work closely together in the context of our services.

In certain cases, personal data collected via this website may be processed by both organizations. This particularly applies to:
– the execution and evaluation of assessments
– handling of contact requests
– appointment scheduling (e.g. via Calendly)
– preparation and execution of projects and services

In these cases, data processing is carried out under joint controllership in accordance with Art. 26 GDPR.

The parties have internally defined their respective responsibilities. You may exercise your rights with either entity.

5. General Information on Data Processing

Storage Duration
Personal data is stored only as long as necessary for the respective purpose or as required by legal retention obligations.

Legal Bases
Processing is based on:
– consent (Art. 6(1)(a) GDPR)
– contract or pre-contractual measures (Art. 6(1)(b) GDPR)
– legal obligations (Art. 6(1)(c) GDPR)
– legitimate interests (Art. 6(1)(f) GDPR)

Data Transfers to Third Countries
When using external services, personal data may be transferred to countries outside the EU (e.g. USA). Such transfers are based on appropriate safeguards, in particular standard contractual clauses.

6. Cookies and Consent Management

Our website uses cookies.

Some cookies are technically necessary to operate the website. Others are only used with your consent and serve purposes such as improving our services.

When you first visit our website, you will be asked to provide your consent via a cookie banner. You can change or withdraw your consent at any time.

Legal bases:
– necessary cookies: Art. 6(1)(f) GDPR
– other cookies: Art. 6(1)(a) GDPR and § 25 TTDSG

You can also prevent the storage of cookies through your browser settings.

7. Data Collection on This Website

Contact Form

If you send us inquiries via a contact form, your data will be stored for the purpose of processing your request and for follow-up questions.

Legal basis:
Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR

Contact via Email or Phone
If you contact us, your request including all resulting personal data will be stored and processed for the purpose of handling your request.

Assessment

We provide an online assessment at https://assessment.inch.de/.

The following data may be processed:
– contact details
– organizational data
– responses and assessments

Purpose:
– conducting and evaluating the assessment
– improving our services
– possible follow-up contact

Legal bases:
– consent (Art. 6(1)(a) GDPR)
– pre-contractual measures (Art. 6(1)(b) GDPR)
– legitimate interests (Art. 6(1)(f) GDPR)

For the implementation of the assessment, we use the service ScoreApp. The provider is ScoreApp Ltd., United Kingdom.

The data you enter as part of the assessment is processed via the systems of ScoreApp.

We have concluded a data processing agreement (DPA) with ScoreApp. Processing is carried out exclusively in accordance with our instructions and in compliance with applicable data protection laws.

The United Kingdom is considered a country with an adequate level of data protection based on an adequacy decision by the European Commission. Data transfers are therefore carried out on the basis of Art. 45 GDPR.

Appointment Booking (Calendly)

We use Calendly LLC (USA) to schedule appointments.

Processed data:
– name
– email address
– appointment details

Legal basis:
The use of Calendly is based on your consent (Art. 6(1)(a) GDPR) as well as for the performance of pre-contractual measures (Art. 6(1)(b) GDPR).

Data transfers to the USA are based on standard contractual clauses.

https://calendly.com/privacy

Content Management System (Elementor)

We use Elementor to design and display our website.

Technical data may be processed to ensure proper functionality.

Legal basis:
Art. 6(1)(f) GDPR

8. Newsletter

We use CleverReach (Germany) to send newsletters.

Processed data:
– email address
– usage data (e.g. open and click rates)

Legal basis:
Art. 6(1)(a) GDPR

You can unsubscribe at any time.

A data processing agreement has been concluded.

Further information:
https://www.cleverreach.com/en/privacy-policy/

9. Your Rights

You have the right to:
– access your data
– rectify inaccurate data
– request deletion
– restrict processing
– data portability
– object to processing
– withdraw consent

You also have the right to lodge a complaint with a supervisory authority.

10. SSL/TLS Encryption

This website uses SSL/TLS encryption to ensure secure data transmission.

Last updated: April 2026