Tino Both
Angewandte Neurofunktion
Allinger Straße 18
94474 Vilshofen an der Donau
Germany
Privacy
Privacy notice
Find out which data is processed when you visit this website, get in touch or book an appointment.
Last updated: October 2026
Responsibility & guidance
Who is responsible for your data?
The controller within the meaning of the General Data Protection Regulation and other data protection legislation is Tino Both.
Contents of this notice
Our principle: We process only the data needed to operate the website securely, handle your enquiry, booking or contract — and data from optional services if you have consented beforehand.
Technical operation
Hosting, server data and secure transmission
Technically necessary connection data is generated so that the website can be delivered reliably and securely.
ALL-INKL.COM
This website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. When you visit, the hosting provider processes technically necessary connection data in server logs.
A page request may involve processing your IP address, date and time, requested file, amount of data transferred, referrer URL, browser, operating system and access status in server logs.
Processing is based on Article 6(1)(f) GDPR. The legitimate interest is the stable, secure and technically reliable provision of the website.
Only for as long as necessary
Server and usage data is deleted when it is no longer needed for its purpose. Longer retention may be necessary to investigate a security incident, prevent misuse or comply with legal obligations.
Where a provider processes data on our behalf, the arrangement is placed on the contractual basis required by data protection law.
SSL or TLS encryption
The website is transmitted over an encrypted connection. An encrypted connection can be identified by ‘https://’ and the lock symbol in the browser.
General deletion rule: Personal data is deleted once its purpose no longer applies and no statutory retention periods or legitimate grounds for further storage remain.
Audience and outcome measurement
Google Analytics and Google Ads
These services help us understand how the website is used and whether a Google advertisement led to a desired action.
Matomo — our own website statistics
Matomo statistics on our own ALL-INKL webspace only load after your consent. The controller is Tino Both. Recorded information includes page views and their sequence, times, referring website without its subpages or search terms, browser information, scroll depth and clicks on contact options. Form entries, messages and personal URL parameters are not recorded. A contact click proves neither a sent enquiry nor a booking.
Matomo uses a random visitor identifier. Visitor and referral cookies last up to 30 days; the session cookie lasts 30 minutes. Statistics for Angewandte Neurofunktion and Neuroathletik Bayern remain separate; we do not link visitor identifiers between the two websites. ‘Do Not Track’ is respected.
Processing takes place after your consent (Article 6(1)(a) GDPR; section 25(1) TDDDG for storing and reading non-essential information). You can withdraw consent at any time through your privacy settings.
The IP address is shortened by two bytes before storage; location assignment also uses the shortened address. Individual visit and action data is regularly deleted once it is older than 90 days, and aggregated reports after 24 months. Deletion runs weekly.
Google Ads and advertising statistics
Google Ads only loads after you consent to advertising statistics. Information about advertising interactions and website use may be sent to Google. The Ads cookies we configure last for a maximum of 90 days; personalised advertising remains disabled.
Tracking of actual completed enquiries or bookings is not yet connected. A click or booking in the local demo is not reported to Google as a successful customer contact. Before going live, the conversion events and storage settings used are defined in the Google account.
Google Ireland Limited
The provider in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing by Google LLC and other Google companies in the USA cannot be ruled out.
Transfers to the USA may rely on the adequacy decision for the EU–US Data Privacy Framework and, where necessary, standard contractual clauses approved by the European Commission.
The specific duration of the cookies and similar identifiers used is shown in the privacy settings. You can withdraw your consent there at any time with effect for the future.
When you get in touch
Enquiries, bookings and contracts
The data needed depends on whether you ask a question, book an appointment or order a service or voucher.
Getting in touch
When you contact us, we process the information you provide, particularly your name, contact details, message content and any information about the desired appointment or service.
Processing is carried out to respond to your enquiry. The legal basis is Article 6(1)(b) GDPR for contracts or pre-contractual steps, and Article 6(1)(f) GDPR in other cases.
The data is deleted once the enquiry has been fully handled, unless statutory retention periods or other legitimate reasons prevent deletion.
Health-related information
If you voluntarily include symptoms, diagnoses or other health information in a message or booking field, this is specially protected data.
Such information is only processed if you have expressly consented. The legal basis is Article 9(2)(a) GDPR. Consent can be withdrawn at any time with effect for the future.
For enquiries concerning minors, information should be provided by a person with parental responsibility.
Booking with Zeitfenster
Our own appointment management system, zeitfenster-buchen.org is embedded on the appointment pages. It also runs on our ALL-INKL webspace. When the booking calendar loads, technically necessary connection data, particularly your IP address and browser information, is sent to this domain to display available times and the booking form.
When you submit an appointment request, we process the selected appointment type and time, together with the contact and booking information you enter, to handle your request, organise the appointment and send confirmations or changes. Processing serves pre-contractual steps or the agreed service (Article 6(1)(b) GDPR).
Our Google Calendar is connected to check availability. Google Meet may be used for online appointments. Appointment emails are connected and sent through the services configured in the appointment management system. Necessary information is processed to organise each appointment; please do not enter diagnoses, medical findings or other sensitive health information in the booking form. General information about your rights, deletion and statutory retention requirements is available in the relevant sections of this notice.
The embed serves the booking you have chosen to access. It is independent of consent to website or advertising statistics. You can alternatively arrange an appointment by phone or email.
Contract and payment data
For an order or booking, we process the personal, contact, contract, order and payment data needed to fulfil and bill the service. The legal bases are Article 6(1)(b) and (c) GDPR.
Documents relevant to commercial and tax law are retained for the statutory periods, generally six to ten years.
PayPal
If you select PayPal as your payment method, the information required for payment is sent to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. PayPal processes payment data as a separate controller.
The legal basis for the transfer is Article 6(1)(b) GDPR. PayPal privacy policy
Connections with other providers
External content and further links
Most references to social networks, maps and review services are ordinary links. In principle, data transfer to the respective provider only begins when you open the link.
Social media, WhatsApp and reviews
The website links to services including Facebook, Instagram, LinkedIn, YouTube, WhatsApp, Google Maps, Google reviews and Trustpilot. No social media plugins are embedded on the main pages.
When you open a link, the respective provider's privacy rules apply. Information processed may include your IP address, device information and the referring page.
Map links
The website does not load an embedded Google map. The provider is only contacted when you click a map link. Its privacy information applies to its further processing.
Spotify
On ‘About me’, you can listen to the song ‘Millionen Sensoren’ through an embedded Spotify player. Before you allow Spotify, only a locally created placeholder is shown. Giving permission establishes a connection to Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden. Spotify receives information including your IP address, device and usage details and may use cookies or similar storage technologies. If you are signed in to Spotify, information may be associated with your account.
Permission is voluntary, based on your consent and can be withdrawn at any time in the privacy settings. Spotify may also process data outside the EU, for example in the USA. The provider determines storage periods and details: Spotify privacy policy. Without permission, you can use the external link instead.
Locally stored fonts
The web fonts used are delivered with the website. Displaying them therefore does not establish a connection to Google Fonts.
For Google services: Processing in the USA cannot be ruled out. Further information is available in the Google privacy policy.
Your data — your rights
Access, correction and objection
You can contact the controller named above at any time to exercise your data protection rights.
- Access to the personal data processed
- Rectification of inaccurate or incomplete data
- Erasure, unless legal grounds prevent it
- Restriction of processing under the conditions set by law
- Data portability for processing to which that right applies
- Objection to processing based on legitimate interests
- Withdrawal of consent with effect for the future
- Complaint to a data protection supervisory authority
Objection under Article 21 GDPR
Where processing is based on Article 6(1)(e) or (f) GDPR, you may object on grounds relating to your particular situation. If data is processed for direct marketing, you may object at any time without giving particular grounds.
No automated decision-making
Tino Both does not carry out solely automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.
Tino Both
Allinger Straße 18
94474 Vilshofen an der Donau
Bavarian State Office for Data Protection Supervision
Promenade 18
91522 Ansbach
Germany
Keeping this notice up to date: The privacy notice is updated when services, technical processes or legal requirements change. The version published on this page applies.
Basic statistics without a visitor identifier
We also count page views directly on our server. We store only daily totals for each public page visited and totals for explicitly approved campaign values. We do not set statistics cookies, read device characteristics using an analytics script or assign a visitor or session identifier for this purpose. The count does not link views into an individual visitor journey.
IP addresses, complete browser identifiers, referrer addresses, freely entered search terms and form entries are not stored in these basic statistics. The browser identifier transmitted with the HTTP request is only used briefly to filter recognisable automated requests. Totals are deleted after 24 months. Separately, the hosting provider processes technically necessary server logs as described in the hosting section.
The aggregated figures help us assess website use and content. To the extent that personal connection data is processed to receive and technically filter requests, we rely on our legitimate interest in data-minimising audience measurement (Article 6(1)(f) GDPR). Information about your right to object is available in the privacy notice. These stored totals cannot identify individual people again.
The ‘Website statistics’ choice controls the more detailed Matomo recording of page journeys and contact clicks. It remains disabled until you consent. Anonymous counting on the server is independent of this choice.