Privacy Policy

1. Data controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

AZH – Abrechnungszentrale für Hebammen GmbH
Alois-Moser-Straße 7
89415 Lauingen
Deutschland
Phone: +49 907 295 840
Email: support@hebammen-azh.org

2. Overview of processing

This website is informational in nature. We do not sell products or paid services through it, and we keep the amount of personal data we collect to a minimum. Personal data is processed only in the situations described below: when the website is accessed (server logs), when cookies are set, and when you voluntarily submit the contact form.

3. Hosting and server logs

When you visit this website, our hosting provider automatically records technical information in server log files, such as your browser type and version, the operating system used, the referring page, the date and time of the request, and an anonymised or shortened version of your IP address where technically possible. This data is used solely to ensure the stability and security of the website and is not combined with other data sources.

4. Contact form

If you use the contact form, the information you provide — such as your name, email address, phone number and message — is used exclusively to process and respond to your enquiry. This demonstration form does not transmit data to a live backend; in a production deployment, submissions would be sent securely to our support mailbox and retained only for as long as necessary to handle the enquiry.

5. Cookies

This website uses a small number of cookies, described in detail in our Cookie Policy. Strictly necessary cookies are set automatically; optional cookies are only set with your consent, given through the cookie banner shown on your first visit.

6. Legal basis for processing

Where we process personal data, we rely on one of the following legal bases under Art. 6(1) GDPR:

Processing activity	Legal basis
Server log files necessary for secure operation	Art. 6(1)(f) GDPR — legitimate interest in website security and stability
Contact form submissions	Art. 6(1)(b) GDPR — pre-contractual enquiry, or Art. 6(1)(f) — legitimate interest in responding to enquiries
Optional (non-essential) cookies	Art. 6(1)(a) GDPR — your consent

7. Storage duration

Server log data is typically retained for a limited period necessary for security monitoring before being deleted or anonymised. Contact form data is retained only for as long as needed to handle your enquiry, unless a longer retention period is required by law.

8. Recipients of data

Personal data is not sold or passed on to third parties for marketing purposes. Data may be shared with technical service providers (for example, hosting providers) strictly to the extent necessary to operate this website, under appropriate data processing agreements.

9. Your rights

Under the GDPR, you have the right to request access to, correction of, or deletion of your personal data, to restrict or object to certain processing, and to data portability where applicable. You also have the right to withdraw consent at any time and to lodge a complaint with a supervisory authority. To exercise any of these rights, please contact us using the details above.

10. Data security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page indicates when it was last revised.