Privacy Policy "BloodPressureDB"

1. Privacy at a glance

General information

BloodPressureDB helps an individual patient manage a diagnosed high blood pressure condition. To do this, BloodPressureDB allows the recording of blood pressure data and, optionally, other health data. The data is stored and can be retrieved; in addition, analyses are created, such as statistics and trend charts. By using and storing data, you give your consent to the processing. You can withdraw this consent at any time. The service also offers the option to delete your user account directly. In doing so, all stored data is deleted. Through the service, you can also access all your data directly and, if necessary, make corrections. Personal data is all data that can be used to identify you personally. For detailed information about data protection, please refer to the following sections of this privacy policy.

This privacy policy applies to the website and our app for the different operating systems. Since the web app is part of our website, we decided to create a shared and uniform privacy policy for the website and the app across the different operating systems. This is intended to make things easier for you to understand.

  1. No collection of data that is not absolutely necessary for the service or its operation (data minimization principle)
  2. You can use the BloodPressureDB service pseudonymously or anonymously*
  3. No disclosure of data to third parties without being asked
  4. We only collect anonymized usage statistics data, including anonymized analyses for the website and the appno so-called profiling

* A piece of data is considered personal if we can link it to the same person. Of course, we associate your data with youthat is the purpose of a user account. However, from an email address you provide and a username you choose, we cannot directly identify you. Thats why we treat access as pseudonymous. Youre welcome to use a new email address that has no other connection to you. With guest access, we also do not have this information and treat the usage as anonymous. When you contact our servers, we always have your IP address, which is personal data. However, we cannot use the IP address to identify a person.

Were happy to answer questions and receive feedback about data protection. 

Who is responsible for data collection on our website and in the app?

Data processing is carried out by the manufacturer. You can find their contact details in the imprint.

How do we collect your data?

Your data is collected partly because you provide it to us. This may include, for example, data you enter into a form. This also includes health data that is stored and processed in BloodPressureDB. Mainly, this is blood pressure databut optionally you can also collect other health-related data.
Other data is collected automatically when you visit the website and use the app through our IT systems. You can find more information in the section Server log files under Chapter 4.

What data is collected or can be collected in the app?

always including date and time


What do we use your data for?

Part of the data is collected to ensure the website and app are provided correctly. Other data may be used to analyze your user behaviour.

What rights do you have regarding your data?

You have the right at any time, free of charge, to request information about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of these data. If you have given consent to data processing, you can withdraw that consent at any time for the future. In addition, you have the right, under certain circumstances, to request that the processing of your personal data be restricted. You also have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time using the address provided in the imprint for this purpose and for any further questions about data protection.

Analytics tools and third-party tools

When you visit our website, your browsing behaviour may be analyzed statistically. This is done mainly using cookies and so-called analytics programmes. As a rule, your browsing behaviour is analyzed anonymously; it cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. You can find detailed information about this in the following privacy policy.

2. Hosting

External hosting

The services are hosted by an external service provider (hosting provider). The personal data collected on this website and in the app is stored on the hosting providers servers. This may primarily include IP addresses, contact requests, meta and communications data, contract data, contact details, names, website visits, and other data generated through a service.

The hosting provider is used for the purpose of fulfilling our contractual obligations toward our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of providing our online offering securely, quickly, and efficiently through a professional provider (Art. 6(1)(f) GDPR).

Our hosting provider processes your data only to the extent necessary to fulfil its service obligations and in accordance with our instructions regarding this data. The server location is Germany.

You can find more information on the hosting providers website here: https://docs.hetzner.com/de/general/general-terms-and-conditions/data-privacy-faq/

3. General information and mandatory information

Data protection

The operators of these pages and apps take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection laws and this privacy policy.

When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purposes this is done.

Please note that data transmission over the internet (e.g., when communicating by email) may have security vulnerabilities. Complete protection of your data against access by third parties is not possible.

Notice concerning the responsible party

The responsible party for data processing is:

klier.net International S.L., Arona, Spain

You can reach us at the following email address: dsb@klier.net.

The responsible party is the natural or legal person which alone or jointly with others determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Data Protection Officer:

Horst Klier, Avenida de Chayofita 18, Arona, Spain, dsb@klier.net

Notice about data transfer to the USA

On our website, among other things, tools provided by companies based in the USA are integrated. If these tools are active, your personal data may be transmitted to the US servers of the respective companies. We would like to point out that the USA is not a safe third country within the meaning of EU data protection law. US companies are required to hand over personal data to security authorities, without you as the data subject having a legal way to contest this.

Therefore, it cannot be ruled out that US authorities (e.g., intelligence services) process, analyze, and store your data located on US servers for surveillance purposes. We have no influence over these processing activities.

Withdrawal of your consent to data processing

Many data processing activities are only possible with your express consent. You can withdraw consent that you have already given at any time. A simple message by email to us is enough. The lawfulness of the processing carried out up to the point of withdrawal remains unaffected by the withdrawal.

Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)

IF DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. YOU CAN FIND THE RELEVANT LEGAL BASIS UPON WHICH THE PROCESSING IS BASED IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS OR THE PROCESSING SERVES THE PURPOSE OF ESTABLISHING, EXERCISING, OR DEFENDING LEGAL CLAIMS (OBJECTION UNDER ART. 21(1) GDPR). IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA RELATING TO YOU FOR SUCH DIRECT MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL THEREAFTER NO LONGER BE USED FOR THE PURPOSE OF SUCH DIRECT MARKETING (OBJECTION UNDER ART. 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of breaches of the GDPR involving data protection, the data subject has the right to lodge a complaint with the competent supervisory authority, in particular in the member state of their usual place of residence, their place of work, or the place where the alleged breach took place.

For companies based in Spain, the competent supervisory authority for data protection matters is the Agencia Española de Protección de Datos (AEPD). The contact details for the AEPD are as follows:

Agencia Española de Protección de Datos
C/ Jorge Juan, 6
28001 Madrid
Spain
Website: www.aepd.es

The right to lodge a complaint exists without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to receive the data that we process automatically based on your consent or in order to perform a contract, and to transmit it to yourself or to another party in a common, machine-readable format. If you request direct transmission of the data to another responsible party, this will only take place insofar as it is technically feasible.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential contentsuch as data entry, orders, or requests you send to us as the site operatorthis website uses SSL or TLS encryption. You can tell that the connection is encrypted because the browsers address bar changes from http:// to https:// and the lock symbol appears in your browser bar.

If SSL or TLS encryption is enabled, the data you send to us cannot be read by third parties.

Information, deletion, and correction

Within the scope of the applicable legal provisions, you have the right at any time to receive free information about your stored personal data, including its origin and recipients, and the purpose of data processing, as well as, where applicable, a right to correction or deletion of such data. For this and for any further questions regarding personal data, you can contact us at any time using the address provided in the imprint.

Right to restriction of processing

You have the right to request that the processing of your personal data be restricted. You can contact us at any time using the address provided in the imprint. The right to restriction of processing exists in the following cases:

If you have restricted the processing of your personal data, the dataother than their storagemay only be processed with your consent or for the establishment, exercise, or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.

Objection to promotional emails

The use of contact details published as required by the imprint for sending unsolicited advertising and information materials is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as via spam emails.

4. Data collection on our website and in the apps

Cookies

Our internet pages use so-called cookies. Cookies are small text files and do not cause damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Session cookies are automatically deleted when you end your visit. Persistent cookies remain on your device until you delete them yourself or automatic deletion by your web browser occurs.

In some cases, cookies from third parties may also be stored on your device when you enter our site (third-party cookies). This allows usor youto use certain services of the third party (e.g., cookies for handling payment services).

Cookies have different functions. Many cookies are technically necessary, because certain website features would not work without them (e.g., the shopping cart function or displaying videos). Other cookies are used to analyze user behaviour or to display advertisements.

Cookies required to carry out the electronic communication process (necessary cookies) or to provide certain functions requested by you (functional cookies, e.g., for the shopping cart function) or to optimize the website (e.g., cookies used to measure web audience) are stored on the basis of Art. 6(1)(f) GDPR unless another legal basis is stated. The website operator has a legitimate interest in storing cookies in order to provide its services technically error-free and optimized. If consent to store cookies has been requested, the cookies concerned are stored exclusively on the basis of that consent (Art. 6(1)(a) GDPR); you can withdraw your consent at any time.

You can set your browser so that you are informed about the setting of cookies, and cookies are only allowed in individual cases, you can exclude the acceptance of cookies for certain cases or in general, and you can activate automatic deletion of cookies when you close the browser. If you disable cookies, the functionality of this website may be limited.

To the extent that cookies from third parties or for analytics purposes are used, we will inform you separately about this within the scope of this privacy policy and, where necessary, ask for your consent.

Server log files

The website provider automatically collects and stores information in so-called server log files that your browser or our app automatically transmits to us. These are:

No merging of this data with other data sources is carried out.

The legal basis for data processing is Art. 6(1)(b) GDPR, which permits processing of data to fulfil a contract or pre-contractual measures. In addition, data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in technically correct presentation and optimization of its websitethis also requires the recording of server log files.

Technical log files

When you use our app, it creates technical log files (logs) that can either be transmitted to us automatically in the background or manually by the users. No merging of this data with other data sources is carried out.
What data is collected?

For what purposes do we process this data?
Legal basis
Processing is carried out on the basis of Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest is to provide an app that is technically error-free, stable, and secure, and to ensure compatibility with future devices, operating system versions, and BLE peripheral devices. In the balancing of interests, we considered that only the information required for these purposes is collected and processed.

Requests by email and phone

If you contact us by email or phone, we store the details you provide, including the contact information you have given, for the purpose of handling your request and, in case of follow-up questions, for us. We may use third-party providers to process your requests.

The processing of these data is carried out on the basis of Art. 6(1)(b) GDPR if your request is related to fulfilling a contract or if it is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effectively handling the requests addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested.

The data you provide will remain with us until you request deletion, withdraw your consent to storage, or the purpose for storing the data no longer applies (e.g., after we have finished processing your request). Mandatory legal provisionsespecially retention periodsremain unaffected.

Registration on the website or app and use of the service

You can register on our website or in the app to use our service. We use the data entered for this purpose only for the operation of the respective offer or service you registered for. The required details requested during registration must be provided completely. Otherwise, we will refuse the registration. The data entered when using the service is processed to provide and further develop the service. You can also use it within our protected systems to generate anonymized reports.  

The data is stored locally on the respective device in the areas provided for this purpose by the respective system or browser. Online, the data is stored on our own servers, which serve no other purpose than operating the service.

We use the email address you provide during registration to send you information related to using our service. This includes in particular:

This communication is carried out on the basis of Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(f) GDPR (legitimate interest in effectively using our service as well as privacy-compliant data minimization).
Where this information is necessary for operating and securing the service (e.g., notices about account deletion), it cannot be opted out of.

The processing of the data entered during registration and use is carried out on the basis of your consent (Art. 6(1)(a) GDPR). You can withdraw any consent you have given at any time. A simple message by email to us is sufficient. The lawfulness of the data processing that has already taken place remains unaffected by the withdrawal. Please note that if you withdraw your consent, you may not be able to use the app fully.

The data collected during registration and use is stored by us as long as you are registered with us and is then deleted. Statutory retention periods remain unaffected.

Unused accounts are deleted after 2 years of no use. Youll receive corresponding notices by email beforehand. Unused guest accounts are deleted after one year. Unfortunately, we cannot contact you in this case. 

You can delete your user account, including all data, at any time within the app. Important note: Uninstalling the app does NOT delete the account from us. We dont know on how many devices you use the app to access your account with us.
Since we create backups of all data, it is possible for us to restore accounts for a short time. We do not provide any guarantee for this.


To provide a high level of service, the app creates logs that can be transferred to us in support cases. These logs are only transferred to us by agreement with our support team or must be proactively sent by you to us via email. An exception is the detection of serious errors (exceptions). In this case, it is also possible to transmit the error details to us without prior agreement.

Anonymized reports

We can automatically analyze and compile the data stored in the service within our protected systems. Only the data required for the specific analysis is used. Only results that do not allow conclusions about individual people are published or passed on to third parties. No individual user profiles are created and no decisions are made about individual users.

Processing data (customer and contract data)

We only collect, process, and use personal data insofar as it is necessary for establishing, structuring, or changing the legal relationship (master data). This is done on the basis of Art. 6(1)(b) GDPR, which permits data processing to fulfil a contract or carry out pre-contractual measures. We also collect, process, and use personal data relating to the use of our websites (usage data) only to the extent necessary to enable the user to access the service or for billing. In addition, personal data may be collected to demonstrate positive care outcomes as part of a trial in accordance with Section 139e(4) of Book Five of the German Social Code (Sozialgesetzbuch).

The collected customer data is deleted after the order has been completed or the business relationship ends. Statutory retention periods remain unaffected.

Data transmission at the time of contract conclusion for shipping goods

We only transmit personal data to third parties if this is necessary in the course of handling the contract, for example to companies responsible for delivering the goods or service providers responsible for payment processing. No further transfer of the data takes place, or only if you have expressly agreed to the transfer. We do not share your data with third parties without your explicit consent, for example for advertising purposes.

The legal basis for data processing is Art. 6(1)(b) GDPR, which permits processing of data to fulfil a contract or pre-contractual measures.

Data transmission at the time of contract conclusion for services and digital content

We only transmit personal data to third parties if this is necessary in the course of handling the contract, for example to service providers responsible for payment processing.

No further transfer of the data takes place, or only if you have expressly agreed to the transfer. We do not share your data with third parties without your explicit consent, for example for advertising purposes.

The legal basis for data processing is Art. 6(1)(b) GDPR, which permits processing of data to fulfil a contract or pre-contractual measures.

5. Application of Telemonitoring

When using the telemonitoring feature to forward your data to your treating doctor, consent (Art. 6(1)(a) GDPR) is required beforehand. The type of data includes blood pressure and pulse values, including the time of capture, as well as statistics. Processing takes place exclusively in Germany.  When using the GDT export, the data is transferred directly to your doctor.

6. Speech data collection as well as collection via photo and AI-based analysis

Consent-based processing:

Your speech and image data is processed exclusively on the basis of your explicit consent in accordance with Art. 6(1)(a) GDPR. Since this also involves health data (e.g., vital parameters), additional consent under Art. 9(2)(a) GDPR is required. Before your data is collected, you will be asked explicitly to agree.

Processing activity:

After you give your consent, your speech or image data is anonymized via a secure proxy and transmitted to the AI provider OpenAI Ireland Limited. The AI processes this data exclusively to extract your vital parameters (e.g., blood pressure and pulse) using AI-supported analysis. The extracted vital parameters are then displayed in an input form and can be used or saved by you.

Security measures and data minimization:

We use extensive technical and organizational measuresamong them encryption (e.g., TLS/SSL) and strict access controlsto ensure the protection of your data during transmission and processing. Only the data that is absolutely necessary for the analysis is collected and processed (data minimization principle).

Withdrawal of consent:

You have the right at any time to withdraw your consent. Withdrawing consent means that the processing of your speech and/or image data will be stopped from the moment you withdraw it, without affecting the lawfulness of the processing that took place before (Art. 7(3) GDPR). For withdrawing your consent or if you have questions about data protection, you can contact our Data Protection Officer.

7. Use of Apple Health (HealthKit) and Google Health Connect

Our app canaccording to your explicit consentimport and export health data from Apple Health (HealthKit) and Google Health Connect. This allows health data (e.g., blood pressure and pulse data) to be synchronized between our app and the services mentioned above.

The transfer takes place exclusively through the interfaces provided by the respective operating system and is encrypted. The imported data may be stored on our servers to provide the apps functions. No sharing with third parties or use for advertising or tracking purposes takes place.

The processing takes place only with your consent in accordance with Art. 6(1)(a) and Art. 9(2)(a) GDPR. You can withdraw access rights at any time in your devices system settings.

8. Analytics tools and advertising

VG Wort count pixels

We use VG WORTs METIS access counting to measure access to online texts that we provide to you through our offering. We do this so that the probability of copying these texts can be recorded. The probability of copying a text forms the basis for the lawful payment of fees under copyright law (UrhG) by VG WORT to the authors and publishers of these texts.

To do this, within the scope of METIS access counting, a counting mark is embedded in the source code of the respective online text. This counting mark is an ID uniquely assigned to that specific text and makes it possible to count an access to this text when someone visits a text marked in this way. In addition, within the scope of METIS access counting, a client ID is created and a so-called METIS Session Cookie is set for the user of the marked text. Using this client ID and the session cookie, it can be determined whether within a browser session the text has already been accessed by this user or not. This is intended to prevent unlawful multiple counting of the text within the context of determining its copying probability. No personal data is processed either through the displayed session cookie or at any other time within the context of METIS access counting. METIS access counting is carried out for VG WORT by Kantar GmbH, Landsberger Straße 284, Munich 80687.

9. Infomail

Newsletter data

To save unnecessary data transfer, graphics in our Infomail are loaded only when they are viewed. We also note this to identify when a recipient hasnt opened the emails for a long time. 

The processing of the data entered during registration is carried out exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You can withdraw the consent you have given to store the data, the email address, and its use for sending the Infomail at any timefor example via the unsubscribe link at the end of the Infomail. The lawfulness of the data processing activities already carried out remains unaffected by the withdrawal. However, the email address remains stored in order to secure the history, including confirmation of the registration and the unsubscription, as well as emails that were sent.

The data you provide to us for the purpose of receiving the Infomail is stored by us until you unsubscribe from the Infomail and, for legal reasons, remains available even after you unsubscribe. Data stored for other purposes (e.g., email addresses for the members area) remains unaffected.

10. Plugins and tools

YouTube

Our website uses plugins from the YouTube site operated by Google. The operator of these pages is Google Ireland Limited, Gordon House, Barrow, Street, Dublin 4, Ireland.

We use YouTube in extended privacy mode. According to YouTube, this mode means that YouTube does not store information about visitors to this website before they watch the video. However, the extended privacy mode does not necessarily exclude the sharing of data with YouTube partners. In this way, YouTuberegardless of whether you watch a videoestablishes a connection to the Google DoubleClick network.

When you visit a page equipped with a YouTube plugin, a connection is established to YouTubes servers. At that time, the YouTube server is informed about which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.

In addition, after you start a YouTube video, YouTube may store various cookies on your end device or use comparable recognition technologies (e.g., device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to record video statistics, improve user-friendliness, and prevent fraud attempts.

If applicable, additional data processing activities may be triggered after starting a YouTube video, over which we have no influence.

The use of YouTube is in the interest of a compelling presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. If consent has been requested accordingly, processing takes place exclusively on the basis of Art. 6(1)(a) GDPR; consent can be withdrawn at any time.

For more information on how YouTube handles user data, please refer to YouTubes privacy policy here: https://www.google.de/intl/de/policies/privacy.

11. Online marketing and partner programmes

Amazon Partner Programme

The operators of the sites participate in the Amazon EU Partner Programme. On our sites, Amazon advertisements and links to Amazon.de are integrated, through which we can earn money from advertising cost reimbursement. Amazon uses cookies to trace the origin of the orders. This allows Amazon to recognize that you clicked on the partner link on our website.

The storage of Amazon cookies is carried out on the basis of Art. 6(f) GDPR. The website operator has a legitimate interest in this, because only through the cookies can the amount of their affiliate commission be determined.

Further information about Amazons use of data is available in Amazons privacy policy: https://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401.


As of: Rev 21 (01.08.2026)
Translation Disclaimer:
This content has been automatically translated. We strive for accuracy, but errors may occur. Please contact us if you find any inconsistencies or have questions.

BloodPressureDB.de

info@bloodpressuredb.com

Imprint | Privacy Policy

Press | BloodPressureDB App