Privacy policy
This privacy policy explains which personal data we process on this website (www.heyfoot.de) and for which purposes. A separate privacy policy applies to the HeyFoot app and is available within the app. Before enrolment in the clinical study, you will receive separate, detailed study information with its own declaration of consent.
1. Controller
Valipes Medical Solutions GmbH
Schlierseestr. 10b, 83101 Rohrdorf, Germany
Email: info@heyfoot.de
2. Data protection officer
The appointed external data protection officer is: heyData GmbH, Schützenstraße 5, 10117 Berlin, www.heydata.eu, email: datenschutz@heydata.eu.
3. Hosting and server log data
This website is hosted by IONOS SE (Elgendorfer Str. 57, 56410 Montabaur) in Germany. When you visit the website, the host automatically processes technically necessary data (e.g. IP address, date and time of access, page accessed, browser type) to deliver the website and ensure secure operation. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). Log data is automatically deleted after a short period. A data processing agreement pursuant to Art. 28 GDPR is in place with IONOS.
4. Pre-registration for the clinical study
If you pre-register for the clinical study via the pre-registration form, we process the data you provide: name, email address and phone number, as well as the time and version of your consent and your selected language. The purpose of this processing is to contact you when the study starts, send you detailed information about the study and prepare your possible participation.
Your pre-registration may indicate that you are affected by hallux valgus. This means health data within the meaning of Art. 9 GDPR may be concerned. The legal basis for the processing is your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR), which you give via the checkbox in the form. You may withdraw your consent at any time with effect for the future, e.g. by emailing info@heyfoot.de; we will then delete your pre-registration. Unless withdrawn, we store the data until study recruitment is completed and delete it afterwards, unless statutory retention obligations apply.
5. Waitlist
If you join the waitlist, we process your name, email address and phone number, as well as the time and version of your consent and your selected language. The purpose is to inform you as soon as HeyFoot becomes available. The legal basis is your consent (Art. 6(1)(a) GDPR). You may withdraw it at any time with effect for the future, e.g. by emailing info@heyfoot.de; we will then delete your entry. Unless withdrawn, we delete waitlist entries once the purpose has been fulfilled, at the latest a few months after the availability notification.
6. Contact form
If you use our contact form, we process your name, email address and message in order to handle and answer your request. Our team is notified of your request by email. The legal basis is your consent (Art. 6(1)(a) GDPR); where your request is aimed at a contract, additionally Art. 6(1)(b) GDPR. We delete contact requests once they have been fully processed, unless statutory retention obligations apply.
7. Storage, email dispatch and spam protection
Data submitted via the forms is transmitted to our server in encrypted form and stored in a database with our hosting provider IONOS in Germany. After you sign up, we send you a confirmation email; dispatch takes place via our hosting provider's mail servers. To document your consent, we log its time and the version of the consent text (Art. 7(1) GDPR).
To protect against automated spam submissions, our forms contain a control field invisible to humans; no additional personal data is processed in this context (Art. 6(1)(f) GDPR – legitimate interest in preventing misuse). Your data is not shared with third parties, except for processing by our processors (hosting). No data is transferred to third countries outside the EU/EEA.
8. No cookies, no tracking
This website does not use cookies and does not store any information on your device (§ 25 of the German TDDDG). No third-party analytics, marketing or tracking services are embedded. Fonts, images and videos are served locally from our server. A cookie banner is therefore not required.
9. Encryption
This website uses TLS encryption (recognisable by “https://” in the address bar). Data you submit via the forms cannot be read by third parties in transit.
10. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). You may object to processing based on legitimate interests on grounds relating to your particular situation (Art. 21 GDPR). To do so, simply contact info@heyfoot.de or our data protection officer. You also have the right to lodge a complaint with a data protection supervisory authority; the authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach.
11. Voluntary provision and automated decisions
Using our forms is voluntary; however, without the details marked as required we cannot process your request or sign-up. No automated decision-making, including profiling (Art. 22 GDPR), takes place.
12. Version and changes
This privacy policy was last updated in July 2026. We will amend it whenever data processing on this website changes.