Privacy Policy for the mefilu Websites
Controller
The controller responsible for the processing of personal data in connection with our websites is:
Ulbrich-Löffler-Ulbrich GbR
D3 4
68159 Mannheim
Germany
represented by its partners authorised to represent the company
Email: data@mefilu.de
Scope
This Privacy Policy applies to the websites operated by us under the domains mefilu.com, mefilu.de, mefilu.net and mefilu-app.de, including the respective subpages, language versions and redirects, insofar as this Privacy Policy is referenced there.
On these websites, we provide information about mefilu, our team, our content, cooperation partners and contact options. In addition, you can currently use forms to be notified about the launch of the mefilu app and optionally receive the mefilu exercise cards by email.
Informational Use of the Website
If you use our website purely for informational purposes, i.e. without actively transmitting data to us, the data technically required for accessing the website is processed. This may include in particular:
- IP address
- date and time of access
- requested page or file
- browser type and browser version
- operating system
- language settings
- referrer URL
- technical log and status data
This processing is necessary in order to provide the website, deliver content correctly, ensure stability and security and detect abusive or faulty access.
The legal basis is Article 6(1)(f) GDPR.
Our legitimate interest lies in the secure, stable and technically functional provision of our website.
Hosting, Website Platform and Technical Provision
For hosting, technical provision, display of content and form features, we use services provided by Wix and technical infrastructures connected with Wix.
Insofar as personal data is processed in this context, this is carried out for the provision of the website and its functions.
Depending on the technical configuration, this may include in particular connection data, usage data, form submissions as well as security and diagnostic data, insofar as this is necessary for the operation, display, security and administration of the website.
The legal basis is Article 6(1)(f) GDPR.
Our legitimate interest lies in the reliable and secure operation of our website.
Cookies and Similar Technologies
Technically required cookies and similar technologies are used on our website insofar as this is necessary for the provision, security, stability and display of the website.
These may in particular serve to:
- technically provide sessions
- implement security functions and protection mechanisms
- enable page display
- detect system errors and load issues
- defend against abusive or automated access
Insofar as information is stored on or accessed from your end device through cookies or similar technologies and this is technically strictly necessary, this is carried out on the basis of Section 25(2) No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG).
Insofar as personal data is processed in this context, processing is carried out on the basis of Article 6(1)(f) GDPR.
Our legitimate interest lies in the technically proper, secure and user-friendly provision of the website.
Forms for Launch Notification and Optional Additional Content
If you use the form on our website, we process the data entered or selected by you, in particular:
- your email address
- the information as to whether you would additionally like to receive the mefilu exercise cards
- technical metadata of the transmission, such as timestamp or form reference, insofar as this is necessary for the processing
Processing is carried out in order to:
- send you the requested launch notification
- send you the mefilu exercise cards upon request
- technically manage your enquiry
- prevent abusive or faulty use of forms
Form submissions may be stored in the Wix form functions used by us as well as in connected form and contact management systems, insofar as this is necessary for processing and managing the enquiry.
The legal basis is Article 6(1)(a) GDPR, insofar as you voluntarily transmit personal data to us for notification or delivery.
Insofar as the processing is necessary for handling your specific enquiry, Article 6(1)(b) GDPR may additionally apply.
In addition, Article 6(1)(f) GDPR may apply for technical administration, system security and prevention of misuse.
We use the data transmitted via this form for processing your enquiry, for launch notification, for sending requested content and for information about mefilu, new functions, content, offerings and further developments.
You may withdraw any consent you have given at any time with effect for the future.
Contact by Email
If you contact us by email, we process the data transmitted by you, in particular:
- your email address
- the content of your message
- any attached files
- other information voluntarily provided by you
Processing is carried out in order to handle your enquiry and communicate with you.
The legal basis is Article 6(1)(b) GDPR, insofar as this concerns specific enquiries regarding the use of our offerings or the initiation of a contractual relationship.
Otherwise, processing is carried out on the basis of Article 6(1)(f) GDPR.
Our legitimate interest lies in the proper processing of enquiries and communication with interested persons and users.
Please generally do not transmit any sensitive personal data to us via the website or by email, as mefilu does not constitute an offering of medical, physiotherapeutic, psychotherapeutic or other healthcare-related professional advice, diagnosis or treatment.
External Links, Social Media and Partner Offerings
Our website contains simple external links, in particular to:
- our social media profile
- partner pages
- third-party discount or offering pages
- email addresses or email functions
When you merely visit our website, these external contents are not automatically loaded as embedded social media plugins. If you actively click such a link, you leave our website and establish a direct connection with the respective third-party provider.
In this context, in particular your IP address, browser data, device information, timestamps and, depending on your browser configuration, referrer information may be transmitted to the respective provider.
In the case of discount or partner links, the target provider may be able to recognise that access originated via our website.
The respective third-party provider is solely responsible for the subsequent data processing.
The legal basis for providing such links on our website is Article 6(1)(f) GDPR.
Our legitimate interest lies in providing supplementary information, contact options and partner offerings.
Recipients of Personal Data
Recipients or categories of recipients of personal data may in particular include, insofar as this is technically or organisationally necessary:
- Wix as hosting and website platform service provider
- form and contact management systems provided by Wix, in particular for processing form submissions and sending automated emails
- Strato, insofar as you contact us directly by email
- operators of external websites, platforms or shops, if you actively click on a corresponding link
Transfers to Third Countries
In connection with hosting, the website platform, technical service providers or externally linked platforms, personal data may be processed in countries outside the European Union or the European Economic Area.
This may in particular concern services provided by Wix, technical infrastructure service providers or linked third-party providers.
Such processing takes place within the framework of the applicable data protection requirements pursuant to Articles 44 et seq. GDPR.
Where required, the respective providers rely on adequacy decisions of the European Commission, standard contractual clauses or other legally recognised safeguards.
The privacy information of the respective providers is authoritative for the specific structure and implementation of the processing.
Storage Period
We store personal data only for as long as this is necessary for the respective purpose.
In particular, the following applies:
- technically required log and connection data is stored only for as long as this is necessary for operation, security, error analysis and defence against misuse
- data from form submissions is stored only for as long as this is necessary for processing your registration, for launch notification, for sending requested content, for information about mefilu, new functions, content, offerings and further developments, for any follow-up communication, for safeguarding legitimate interests (in particular documentation, quality assurance, prevention of misuse and legal protection) or for fulfilling statutory obligations
- data from email enquiries is stored only for as long as this is necessary to process your enquiry, for any follow-up communication, for safeguarding legitimate interests (in particular documentation, quality assurance and improvement of our offering) or for fulfilling statutory obligations
Insofar as data is processed by external service providers, their storage periods are determined by the respective privacy information of those service providers.
Your Rights
Subject to the applicable legal requirements, you are entitled in particular to the following rights:
- right of access under Article 15 GDPR
- right to rectification under Article 16 GDPR
- right to erasure under Article 17 GDPR
- right to restriction of processing under Article 18 GDPR
- right to data portability under Article 20 GDPR
- right to withdraw consent granted with effect for the future under Article 7(3) GDPR
- right to object to processing based on Article 6(1)(f) GDPR under Article 21 GDPR
- right to lodge a complaint with a data protection supervisory authority
Privacy Contact
If you have any questions regarding data protection, you may contact us at any time:
Ulbrich-Löffler-Ulbrich GbR
D3 4
68159 Mannheim
Germany
Email: data@mefilu.de
Updates to this Privacy Policy
We update this Privacy Policy where necessary due to technical changes, new functions or changed legal requirements.
The currently valid version published on our websites shall be authoritative.
Language Versions
This Privacy Policy is provided in several languages. In the event of discrepancies between different language versions of this Privacy Policy, the German version shall prevail.
Version date: 09 May 2026