Privacy Policy — SerahrRemind

Version 1.0 — effective from March 19, 2026

1. Data Controller

Thorsten Ahrens
Serahr — serahr.de
Email: contact@serahr.de

2. Overview: What Data Is Processed?

SerahrRemind is a SaaS platform for automated appointment reminders. In the demo version, the following data is processed:

3. Data Processing in Detail

3.1 Website Visits

When visiting serahrremind.serahr.de, the web server automatically collects:

• IP address (in server logs)
• Browser type, operating system, referrer URL
• Date and time of access

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing the website). No tracking cookies or third-party trackers are used.

3.2 Demo Usage

When using the demo, you can enter test data:

• Patient data: Name, email address, phone number (please use only fictitious data)
• Appointment data: Date, time, appointment type, assigned patient
• Reminders: Configuration of reminder sequences

This data is stored in the Supabase database (Frankfurt region, Germany) and automatically deleted every hour.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing a functional demo).

3.3 Email Sending (Reminders)

When you trigger an email reminder in the demo, an email is sent to the entered address. Emails are sent via Resend (Resend Inc., USA).

• Transmitted data: Recipient email address, reminder text (first name, appointment time)
• Note: Please use only your own or fictitious email addresses

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in demonstrating core functionality).

3.4 Disabled Features in the Demo

The following communication channels are disabled in the demo for cost reasons:

• SMS sending (normally via Spryng B.V., Netherlands)
• Phone calls / Text-to-Speech (normally via Microsoft Azure + Twilio)

These channels are available in the full version. The corresponding privacy information will be described in the full version's privacy policy.

4. Cookies and Local Storage

The application uses only technically necessary cookies:

No tracking cookies, analytics tools, or advertising trackers are used. No consent is required for technically necessary cookies (§ 25(2)(2) TDDDG).

5. Retention Periods

6. Disclosure to Law Enforcement

We may be legally required to disclose stored data to law enforcement authorities on the basis of a European Production Order or European Preservation Order pursuant to Regulation (EU) 2023/1543. Such disclosure is made exclusively on the basis of a lawful order and to the extent required by law. Legal basis: Art. 6(1)(c) GDPR (legal obligation).

7. Your Rights

Under GDPR: Access (Art. 15), Rectification (Art. 16), Erasure (Art. 17), Restriction (Art. 18), Data portability (Art. 20), Objection (Art. 21).

Direct requests to contact@serahr.de. Since all demo data is deleted hourly, typically no personal data is stored beyond the deletion period.

8. Right to Complain

You have the right to lodge a complaint with a data protection supervisory authority.

9. Processors

10. Changes

This privacy policy may be updated as needed. The current version is always available on this page.