Privacy statement

1. Controller

Covendos GmbHGottlieb-Daimler-Str. 1268165 MannheimGermany

2. Hosting and provision of the website

This website is hosted by the following hosting provider, which acts on our behalf:

Host Europe GmbHc/o SpacesGertrudenstraße 30–3650667 CologneGermany

The pages are delivered as static files from a web server of the hosting provider; there are no user accounts and no database of visitor data.

When you access our website, the web server processes connection and log data (server log files) as a technical necessity. This may include in particular the IP address, date and time of the request, the page or file requested, referrer information, browser information, operating system, HTTP status and the amount of data transferred. This data is processed by the hosting provider on our behalf.

Processing takes place, to the extent technically required, to provide our website securely, reliably and efficiently.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and trouble-free provision of our online offering.

3. Consent management and cookies

This website currently does not use cookies or optional technologies, in particular no analytics, tracking or marketing services. A consent prompt is therefore not required at the moment.

The only technically required item is an entry in your browser’s Session Storage that records whether the opening animation of the homepage has already been shown in the current session. It remains exclusively in your browser, is not transmitted to us and expires when you close the browser window.

Should we use optional technologies in the future, we will ask for your consent beforehand and update this statement. You can find the current information at any time via “Privacy settings” in the footer.

4. Contacting us and the contact form

If you contact us via the contact form or by email, we process the data you provide. Via the contact form, this is:

• name
• company (optional)
• email address
• phone number (voluntary)
• selected area of expertise
• content of your enquiry

The purpose of the processing is to handle and respond to your business enquiry. Please do not submit patient or health data via the form.

Technical transmission: the form sends your details in encrypted form (HTTPS) to a script on our web server (/api/contact.php). The server processes your enquiry technically during transmission and forwards it by email to info@covendos.com; the sender of the email is website@covendoshealthcare.group and your email address is set as the reply address (Reply-To). The form content is not stored in an application database. It remains in the email received in our mailboxes and is kept there only as long as necessary to handle your enquiry. Your IP address is not included in the email.

To protect against misuse (spam), the form contains a field that is invisible to humans, and the number of submissions per period is limited. For this purpose, a check value (hash) derived from your IP address is held briefly in the server’s temporary storage; the IP address itself is not stored for this purpose. Independently of this, server log files may be created when the site is accessed (see “Hosting and provision of the website”).

The legal basis, depending on the case, is:

• Art. 6(1)(b) GDPR where your enquiry concerns pre-contractual measures or relates to a contract,
• Art. 6(1)(f) GDPR for other business enquiries; our legitimate interest lies in handling and responding to incoming enquiries.

5. External links

Our website contains links to websites of external providers. You only leave our website when you follow such a link. The respective provider is responsible for the processing of personal data on the linked sites.

6. Local fonts

The fonts used on this website are provided locally, i.e. via the infrastructure of the website. No connection to external font services such as Google Fonts is therefore established when the website is loaded.

7. Retention period

We store personal data only for as long as is necessary to achieve the respective purpose of processing. Where statutory retention obligations exist, data is stored for the duration of those obligations. Once the purpose no longer applies or statutory retention periods have expired, the data is deleted, unless another legal basis permits further storage.

8. Your rights

Under the GDPR you have in particular the following rights:

• access (Art. 15 GDPR)
• rectification (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection (Art. 21 GDPR)
• withdrawal of consent given, with effect for the future
• lodging a complaint with a data protection supervisory authority

To exercise your rights, please use the contact details given under “Controller”.

9. Data security

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. The website is transmitted in encrypted form via HTTPS/TLS.

10. Changes to this privacy statement

We may amend this privacy statement if our website, the technology used or the legal situation changes.

As of: October 2026