Information on data processing
Privacy Policy
1. Controller
trust7 Consulting e.K.
Rue Capitaine Maridor 15
13405 Berlin
Germany
Represented by: Detlef von Hellfeld
Telephone: +49 30 555756560
E-Mail: dvh@trust7.com
2. General information
We process personal data only where necessary to provide this website, ensure its technical security or respond to voluntary enquiries.
“Aurelia Private Clinic” is a fictional demonstration clinic. No real medical services are offered through this website.
3. Hosting and server log files
When this website is accessed, the web server processes technically necessary data. This may include in particular:
- IP address of the accessing device,
- date and time of access,
- file or page accessed,
- Referrer-URL,
- browser type, operating system and amount of data transferred.
Processing is carried out to provide the website securely and reliably on the basis of Article 6(1)(f) GDPR. Our legitimate interest is the secure operation of the website and error analysis. Log data is stored only for as long as necessary for these purposes.
4. Use of the digital patient advisor Ava
When you enter a question in the Ava chat window, the text you provide, together with the selected language and a limited history of the current conversation, is transmitted to and processed by the technical chat interface at aurelia.trust7.ai so that a response can be generated.
Processing is carried out to provide the chat function actively requested by you on the basis of Article 6(1)(b) GDPR or, where no contractual relationship is being initiated, on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in demonstrating and technically providing the digital advisory service.
In particular, you should not submit full names, contact details, identification data, medical findings, photos, diagnoses or other health data in the chat. Ava is a demonstration and does not replace medical advice or emergency care.
The content of the conversation is used in the browser during the current session to maintain context. There is no entitlement to permanent storage or later recovery of the chat history.
5. Contacting us
If you contact us by email or telephone, we process the data you provide in order to respond to your enquiry. The legal basis is Article 6(1)(b) GDPR where your enquiry relates to the initiation or performance of a contract. In other cases, processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in handling your enquiry.
The data will be deleted once it is no longer required for handling the enquiry and no statutory retention obligations prevent deletion.
6. Cookies and local storage
In its current form, this website does not use analytics or marketing cookies. Technically necessary functions may temporarily use data in the browser’s working memory. If the website uses additional cookies, analytics tools or external services in the future, this privacy policy will be updated accordingly.
7. Recipients of data
Personal data is disclosed to technical service providers only where necessary for hosting, operation, maintenance or provision of the chat function. Where required by law, data processing agreements are concluded with service providers acting on our instructions.
8. Storage period
We store personal data only for as long as necessary for the relevant purpose or as required by statutory retention obligations. The data is then deleted or anonymised.
9. Your rights
Subject to the statutory requirements, you have in particular the right to:
- obtain information about personal data processed about you,
- have inaccurate data corrected,
- request deletion or restriction of processing,
- data portability,
- object to processing based on legitimate interests,
- withdraw consent with effect for the future.
10. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. In particular, the competent authority is the supervisory authority of the German federal state in which our company is established.
11. Data security
This website uses an encrypted HTTPS connection. We take appropriate technical and organisational measures to protect personal data against loss, manipulation and unauthorised access.
12. Current version of this privacy policy
Last updated: 28 July 2026. We will update this privacy policy if functions, technical processes or legal requirements change.