Health & Performance Lab Free intro call

LEGAL

Privacy policy

Last updated: October 2026. This is a translation of the German Datenschutzerklärung. If the versions differ, the German version applies.

1. Controller

Melvin Heijmerikx, Health & Performance Lab, Kuhkamp 6A, 48455 Bad Bentheim, Germany
Phone: +49 174 3458793, email: info@healthperformancelab.com

This privacy policy applies to the websites healthperformancelab.de, healthperformancelab.nl and healthperformancelab.com and to my coaching services.

2. General

I only process personal data where this is necessary to run this website, to answer enquiries or to deliver a coaching programme. The legal bases are in particular Art. 6(1)(b) GDPR (contract and pre-contractual enquiries), Art. 6(1)(c) GDPR (legal obligations), Art. 6(1)(f) GDPR (legitimate interest in a secure, working website) and, for health data, Art. 9(2)(a) GDPR (your explicit consent).

3. Hosting and server log files

This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. When you visit the website, the server automatically stores technical data in log files, for example your IP address, date and time, the page visited, your browser and operating system. This serves the security and stability of the website (Art. 6(1)(f) GDPR). A data processing agreement under Art. 28 GDPR is in place with the host. My email inbox is also hosted by Hostinger.

4. SSL encryption

For security reasons this website uses SSL or TLS encryption. You can recognise an encrypted connection by "https://" in the address bar.

5. Cookies, analytics and external services

This website does not set cookies for advertising or analytics and does not use tracking services. For the language selection a technically necessary cookie (pll_language) may be stored so the page is shown in your language. The legal basis is § 25(2) TDDDG in conjunction with Art. 6(1)(f) GDPR.

6. Contact by email and contact form

When you use the contact form, your details (name, email address, chosen topic, message, page language and the page you are writing from) are sent by email to info@healthperformancelab.com. You automatically receive a confirmation at the email address you entered. The details are not stored in a website database. To prevent misuse, your IP address is stored temporarily in encrypted form (as a checksum) for no longer than one hour. When you contact me by email or through the form, I process your details (for example name, email address and the content of your message) to answer your enquiry (Art. 6(1)(b) GDPR). I delete the data once it is no longer needed and no statutory retention periods apply.

Please do not send health data such as diagnoses, lab values or medication by email, the contact form or social networks before we have agreed on a coaching programme. I only process such information within the coaching and only with your explicit consent (see section 7).

Contact via WhatsApp. The website contains a link you can use to send me a message on WhatsApp voluntarily. WhatsApp only opens when you click it. The provider is WhatsApp Ireland Limited (Meta), Merrion Road, Dublin 4, Ireland. WhatsApp processes, among other things, your phone number, your message and metadata, including in the USA. I only use the data to answer your enquiry (Art. 6(1)(b) or (f) GDPR). WhatsApp's own privacy notice applies to its processing: whatsapp.com/legal/privacy-policy-eea. Please do not send me health data via WhatsApp. If you prefer not to use WhatsApp, just write to me by email or through the contact form.

7. Data during coaching

If you book a coaching programme, I process the data needed to support you. This includes:

  • Contact and contract data, for example name, address, email address, phone number, booked package and billing details
  • Information from the intake questionnaire and our conversations, for example goals, daily routine, nutrition, training and sleep habits
  • Progress data, for example body weight, measurements, sleep duration, energy, steps and training volume
  • Health-related information, for example complaints, previous conditions, medication or lab reports, as far as you share them with me

I process contract and contact data to perform the coaching contract (Art. 6(1)(b) GDPR). Health data is a special category of data (Art. 9 GDPR). I only process it if you have given your explicit written consent beforehand (Art. 9(2)(a) GDPR), and only for your coaching. Consent is voluntary and can be withdrawn at any time with effect for the future, for example by email. Coaching is possible without this information, but may be less personal.

I do not pass your coaching data on to third parties, except to the recipients named in this text. I do not use it for advertising and I do not make automated decisions.

Retention: I delete health and progress data no later than twelve months after the end of the coaching, earlier if you ask me to or withdraw your consent. Invoices and other tax-relevant documents are kept as required by law (usually up to 10 years, Art. 6(1)(c) GDPR).

8. Blood tests in cooperation with cerascreen

For the packages that include a blood analysis I work with cerascreen GmbH, Güterbahnhofstraße 16, 19059 Schwerin, Germany. The following applies:

  • Order: I order the test kit for you. If it is to be sent directly to you, I pass your name and delivery address to cerascreen for this purpose (Art. 6(1)(b) GDPR). I do not pass on any health data.
  • Sample and analysis: you take the sample yourself at home and activate the test with the test ID in the cerascreen app or on the cerascreen website. The analysis is carried out by cerascreen and its medical partner laboratories. cerascreen is itself responsible for this processing; cerascreen's privacy policy applies, which you accept when activating the test.
  • Results report: cerascreen only releases your results report to you. I do not receive any lab results from cerascreen. If you would like us to discuss your report in the coaching, you can send it to me yourself, for example as a PDF. By doing so you explicitly consent to the processing of this health data for your coaching (Art. 9(2)(a) GDPR). The retention period from section 7 applies.
  • No medical assessment: the medical assessment of the values is carried out by the laboratory or by doctors. In the coaching I only use the results to align nutrition, training and daily routine with you.

9. Progress dashboard

For the coaching I may provide you with a digital progress dashboard. The values you enter there are only stored locally in your browser on your device and are not transmitted to me or third parties. Only when you send me your data yourself, for example as a copied table, do I process it as described in section 7. You can delete the data in the dashboard yourself at any time.

10. Instagram

This website contains a simple link to my Instagram profile. No Instagram content is embedded. Only when you click the link are you taken to Instagram (Meta Platforms Ireland Ltd.), where their privacy policy applies. If you message me on Instagram, Meta also processes these messages. Please do not share health data there.

11. Recipients and third countries

Recipients of your data may be: Hostinger as processor for website and email, cerascreen for shipping test kits (see section 8) and, where required by law, tax advisers and authorities. I do not transfer your data to countries outside the European Union myself.

12. Your rights

You have the right to:

  • access your stored data (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
  • withdraw consent with effect for the future (Art. 7(3) GDPR)

A short email to info@healthperformancelab.com is enough.

13. Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority, for example in the country where you live. The authority responsible for me is: Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany.