Legal Notice & Privacy Policy

Legal notice

Provider

Anna Milaknis
Spinal Energetics practitioner
Belfortstr. 14
81667 Munich

Contact

Phone: 015679 654315
Email: milaknis@annamilaknis.com

Image credits

Photography: Lisa Carbone
Graphics: AI-generated

Privacy policy

1. Data controller

The controller responsible for data processing on this website is:

Anna Milaknis
Belfortstr. 14
81667 Munich
Phone: 015679 654315
Email: milaknis@annamilaknis.com

2. Hosting and server logs

This website was created with ChatGPT Sites and is hosted by OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland. OpenAI processes personal data generated through the operation of the published website on my behalf. This processing is governed by the ChatGPT Sites Data Processing Addendum.

When you access this website, data including your IP address, date and time of access, requested URL, referring page, browser, operating system, device information, and log and usage data may be processed. This processing is necessary to provide the website securely, reliably and without technical errors. The legal basis is Article 6(1)(f) GDPR. My legitimate interest is the secure and reliable operation of this website.

OpenAI may engage subprocessors. Processing outside the European Economic Area cannot be ruled out. Under the Data Processing Addendum, such transfers take place on the basis of an adequacy decision or the European Commission’s Standard Contractual Clauses. Processing continues while the website is provided and afterwards for as long as necessary to meet contractual or legal obligations and delete the data.

3. Built-in audience measurement

ChatGPT Sites automatically records page views and the number of unique visitors. I receive this information as aggregated statistics. I use it to understand how the website is used and to improve its content. The legal basis is Article 6(1)(f) GDPR. My legitimate interest is measuring reach and optimising the website. I do not integrate my own analytics system or set additional analytics or marketing cookies.

4. Strictly necessary cookies

The hosting service uses Cloudflare as a subprocessor. When the site is accessed, the strictly necessary cookie __cf_bm is currently set. It helps detect and prevent automated access and expires after approximately 30 minutes of inactivity. The legal basis for accessing your device is Section 25(2)(2) TDDDG; subsequent processing is based on Article 6(1)(f) GDPR. My legitimate interest is the security and availability of the website.

I do not set my own advertising or analytics cookies. As part of hosting, OpenAI may process technical usage and log data.

5. Contact and session enquiries

If you contact me through the form, I process the information you provide—particularly your name, email address, optional mobile number and message, and the session you are interested in—to respond to your enquiry and arrange an appointment. The legal basis is Article 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual steps. In other cases, the legal basis is Article 6(1)(f) GDPR. My legitimate interest is responding to your enquiry.

For technical transmission, I use Form.taxi, operated by wrkt*biz Reinhard Söllradl, 4070 Eferding, Austria. According to the provider, hosting takes place in a data centre in Dresden. Transfers to third countries are not intended. Form.taxi processes form submissions and technical connection data on my behalf and uses Mailjet for email delivery. A data processing agreement is in place. Further information is available in the Form.taxi privacy policy. Depending on the selected plan, form submissions are stored in the submission archive for no longer than one year.

Form.taxi is not intended for special categories of personal data under Article 9 GDPR. General information is therefore sufficient for an initial enquiry. We can discuss health-related details personally if needed. Alternatively, you can send your enquiry directly to milaknis@annamilaknis.com. Please do not send particularly sensitive information by unencrypted email either.

5a. Event registrations

When you register through the event form, I process your first name, email address, event, registration time and acknowledgement of the participation notes. I use these details to organise your booking and communicate with you about the event under Article 6(1)(b) GDPR.

Your registration is first stored in this website’s database, operated as part of the hosting described in section 2. I use Brevo to manage the event contact list and send booking confirmations. Necessary contact and booking details are transmitted to Brevo, which also processes technical delivery logs, including sending times and delivery errors.

Event registration is independent of the newsletter. Event details are not used for newsletters without separate consent. Please do not submit health information through this form. Booking data is deleted once it is no longer needed for organising and following up on the event, subject to statutory retention requirements.

5b. Optional newsletter

If you select the optional, unchecked newsletter checkbox, I may send you email updates and insights about sessions and events once you confirm your subscription. The legal basis is consent under Article 6(1)(a) GDPR. Subscribing is not a condition of booking.

I use double opt-in: you receive a separate email with a confirmation link and are added to the newsletter list only after confirming. The request, its time and consent-text version, and the confirmation are documented as evidence. Article 6(1)(f) GDPR is the basis for retaining evidence and preventing misuse.

Brevo also manages and sends the newsletter. You can withdraw consent at any time through the newsletter’s unsubscribe link or by emailing milaknis@annamilaknis.com. Your event booking is unaffected. Newsletter data is processed until consent is withdrawn; evidence and suppression records may be retained where necessary to demonstrate consent or respect an unsubscribe request.

Brevo acts as a processor under the processing provisions included in its terms of service. Details about the provider, service providers and possible international transfers are available in Brevo’s privacy policy. Processing is subject to these contractual data-protection provisions and, where applicable, the transfer safeguards described there.

6. Locally hosted media and fonts

Videos, images and fonts are loaded directly from this website. Accessing the site therefore does not transmit data to video platforms or font providers such as YouTube, Vimeo or Google Fonts.

7. External links

This website contains links to external services, including Instagram, WhatsApp, Amazon and the official Spinal Energetics website. A connection to the relevant provider is established only when you click such a link. From that point onwards, the provider’s privacy information applies.

8. Retention period

I retain personal data only for as long as necessary for the relevant purpose. I delete enquiries once they have been fully processed, unless statutory retention obligations or legitimate interests require further storage. Where statutory retention periods apply, the data is restricted for their duration and then deleted.

9. Your rights

Subject to the statutory requirements, you have the right of access under Article 15 GDPR, rectification under Article 16 GDPR, erasure under Article 17 GDPR, restriction of processing under Article 18 GDPR, data portability under Article 20 GDPR and objection under Article 21 GDPR. You may withdraw consent at any time with future effect. To do so, use the contact details above.

10. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is, in particular, the Bavarian State Office for Data Protection Supervision, Promenade 18, 91522 Ansbach. Further information is available at lda.bayern.de.