Privacy Policy

As of: October 2026

Courtesy translation of the German original (Datenschutzerklärung).

Below, we inform you in accordance with the statutory requirements of data protection law (in particular the European General Data Protection Regulation, “GDPR”) about the nature, scope and purpose of the processing of personal data on this website. For the definition of terms such as “personal data” or “processing”, we refer to Art. 4 GDPR.

Controller

The controller within the meaning of Art. 4(7) GDPR is:
Nikos Health Hub OÜ
Sepapaja tn 6, Tallinn, 11415, Estonia
E-mail: office@nikoblekic.com

Data we process

When you merely visit this website for information (without registration), we only collect the data that your browser automatically transmits to our server:

• IP address
• Date and time of the request
• Browser type and version, operating system
• Page accessed, access status
• Website from which the request originates (referrer)

This data is processed exclusively to deliver the website securely and reliably and is not merged with other personal data about you. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. The data is stored for a short time in server log files of our hosting provider (Vercel Inc.) and then deleted automatically.

Self-test and health information

On our website you can voluntarily take a short self-test on your erectile health. Your answers are health data and therefore particularly sensitive data within the meaning of Art. 9 GDPR.

• The self-test runs locally in your browser; the evaluation takes place directly on your device.
• Your answers are not stored on a server by us and are not passed on to third parties.
• We only process your health information if you voluntarily share it with us in the course of an intro call or by e-mail. In that case, the legal basis is your explicit consent under Art. 9(2)(a) GDPR.
• This information is used exclusively to prepare and deliver the coaching, is not used for advertising purposes, and is not passed on to or sold to third parties.

No disclosure for advertising purposes

As a matter of principle, we do not pass on your personal data to third parties and do not use it for third-party advertising purposes. Data is only passed on where this is necessary to perform a contract (e.g. to the service providers named in this policy, such as Calendly or our hosting provider) or where we are legally obliged to do so.

Appointment booking via Calendly

To book a free intro call, we link to Calendly (provider: Calendly LLC, USA). If you use this link, you will be redirected to Calendly’s website, where Calendly’s privacy policy applies. The data you enter to arrange the appointment (e.g. name, e-mail address) is processed by Calendly and made available to us for organising the appointment. The legal basis is the fulfilment of your request under Art. 6(1)(b) GDPR.

The intro call takes place as a video conference via Google Meet (provider: Google Ireland Limited, Ireland, or Google LLC, USA). Connection data and, to the extent you share it, the content of the conversation are processed. The call is not recorded.

Hosting

This website is hosted by Vercel Inc. When you access the page, Vercel processes technically necessary connection data (e.g. IP address) in order to deliver the content. The legal basis is our legitimate interest in a stable and secure provision of the website under Art. 6(1)(f) GDPR.

Fonts

The fonts used on this website are delivered from our own server. No connection is made to servers of Google or other font providers.

YouTube videos

Videos from YouTube are embedded on this website (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, or Google LLC, USA). When you open a page with a video, your browser first loads only a preview image from YouTube’s servers; your IP address is transmitted to YouTube or Google in the process. The legal basis for this is our legitimate interest in an appealing presentation of our content under Art. 6(1)(f) GDPR.

The video itself is only loaded when you click the preview image. Further data (e.g. IP address, device and browser information) is then transmitted to YouTube, and YouTube may set cookies or access information on your device. We have no influence over this. The legal basis is your consent by actively clicking the video (Art. 6(1)(a) GDPR, Section 25(1) of the German Telecommunications Digital Services Data Protection Act, TDDDG). Further information can be found in Google’s privacy policy at policies.google.com/privacy.

Payment processing via Stripe

For payments, we link to payment pages of Stripe (provider: Stripe Payments Europe, Ltd., Ireland; parent company: Stripe, Inc., USA). If you use this link, you will be redirected to Stripe’s website. Stripe processes the data you enter there (e.g. name, e-mail address, billing address, payment method) in order to process the payment, prevent fraud and meet legal obligations. We receive the data required for contract processing and accounting. The legal basis is the performance of a contract under Art. 6(1)(b) GDPR and compliance with legal obligations under Art. 6(1)(c). Stripe’s privacy policy also applies, at stripe.com/privacy.

Automated processes and e-mail dispatch

After a purchase, we may automatically send you a confirmation or welcome e-mail. For this purpose, your e-mail address and, where applicable, your name are transmitted via an automation service (Zapier Inc., USA) to our e-mail dispatch system (MailerLite). The legal basis is the performance of a contract under Art. 6(1)(b) GDPR. For details, please refer to the privacy policies of the respective providers.

Contact by e-mail

If you contact us by e-mail, we process your details in order to handle your enquiry. The legal basis is the performance of a contract or the implementation of pre-contractual measures (Art. 6(1)(b) GDPR) or our legitimate interest in answering enquiries (Art. 6(1)(f)). Our e-mail inbox is operated via Google Workspace (provider: Google Ireland Limited, Ireland, or Google LLC, USA).

Cookies

This website currently does not set any tracking or marketing cookies of its own. Technically necessary cookies may be set by embedded third-party providers (e.g. Calendly) as soon as you use their service. Information on this can be found in the respective provider’s privacy policy. In addition, this website stores only simple settings in your browser’s local storage (e.g. whether a notice window has already been closed). This information does not leave your device.

Transfers to third countries (USA)

Several of the service providers named above are based in the USA or belong to US groups (including Vercel Inc., Calendly LLC, Zapier Inc., Google LLC and Stripe, Inc.). As a result, personal data may be transferred to the USA. Where the provider is certified under the EU-US Data Privacy Framework, the transfer is based on the European Commission’s adequacy decision (Art. 45 GDPR); otherwise it is based on standard contractual clauses (Art. 46 GDPR). You can obtain a copy of the safeguards on request at the e-mail address given above.

Storage period

We store personal data only for as long as is necessary for the respective purpose. We delete enquiries and appointment data once they have been dealt with and no statutory retention obligations apply. Contract and payment data are retained in accordance with the statutory commercial and tax retention periods.

Data security

All data between your browser and our server is transmitted in encrypted form via a secure SSL/TLS connection. We take appropriate technical and organisational measures to protect your data against unauthorised access, loss or manipulation.

Despite these measures, we cannot guarantee absolute security, like any provider on the internet. In particular, complete protection cannot be assured when data is transmitted over the internet or in the event of attacks by third parties (e.g. hacking attempts). We accept no liability for damage caused by unauthorised access by third parties despite appropriate security precautions.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing (Art. 21 GDPR). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). To exercise these rights, please contact the e-mail address given above.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement (Art. 77 GDPR). As our company is established in Estonia, the Estonian supervisory authority is competent for us (Art. 55, 56 GDPR): Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate), Tatari 39, 10134 Tallinn, Estonia, www.aki.ee, e-mail: info@aki.ee.