Privacy notice for professionals
What data berryl processes when you, as a dietitian or nutrition professional, contact us about the pilot or use the professional dashboard, why, and what rights you have. For the website in general and the app, our privacy notice applies.
Draft – to be reviewed by a lawyer. This text describes the technical setup to the best of our knowledge and is not legal advice.
1. Who we are
[Company name] UG (haftungsbeschränkt)
[Street and number, postcode, city], Germany
Email: [privacy@…]
Full details in the legal notice.
2. When you contact us about the pilot
What data
The details you send us by email, usually your name, email address, practice, country and professional title.
Why
To answer you, to set up your access to the pilot and to the professional dashboard, and to keep in touch about the pilot.
Legal basis
EU and UK: steps at your request before entering into a contract (Art. 6(1)(b) GDPR / UK GDPR) and our legitimate interest in answering inquiries (Art. 6(1)(f)). Australia and New Zealand: we collect only what is reasonably necessary for this purpose.
How long
If no cooperation comes about, we delete your details [period, e.g. 6 months after the last contact]. While you take part in the pilot, we keep them for as long as you take part. [Enter the period after the end of participation.]
Email provider
Our mailbox is hosted by Google Workspace. Google [check the contracting party, usually Google Cloud EMEA Ltd., Ireland, for customers in the EU] acts as our processor. [Confirm the data processing agreement with Google and the basis for possible transfers to the USA, e.g. EU-US Data Privacy Framework or standard contractual clauses.]
3. Your clients’ data in the professional dashboard
You only see data from clients who actively share it with you in the app. Your clients can stop sharing at any time; you then no longer see their data. Their data is stored in our database in Frankfurt, Germany. We are responsible for this processing toward your clients; their consent is the basis. [Legal review: role of the professional (separate controller or not) per market; for the US check whether HIPAA applies when a covered entity, e.g. a dietitian billing insurance, uses the dashboard; for the UK check the professional’s duties under UK GDPR and HCPC standards.]
4. Newsletter (optional)
We only send you news about berryl for professionals if you have asked for it and confirmed your email address. You can unsubscribe at any time with a short email or through the link in every newsletter. [Only include once an English sign-up exists. US: CAN-SPAM; UK: PECR; Australia: Spam Act 2003; New Zealand: Unsolicited Electronic Messages Act 2007.]
5. Where the data is stored
Pilot contacts are stored in our CRM database at Supabase in the EU region (Ireland, eu-west-1). Supabase acts as our processor. [Check and enter: contracting party (Supabase Inc., USA), data processing agreement and the basis for possible access from the USA.] Data of professionals from the UK, the US, Australia and New Zealand is therefore transferred to the EU; see section 5 of our privacy notice.
6. Your rights
You can ask for access to your data, correction, deletion, restriction and portability, and you can object to processing based on our legitimate interests or withdraw consent at any time. An email to [privacy@…] is enough. The rights in your country and where you can complain (for example the ICO in the UK, the OAIC in Australia, the Office of the Privacy Commissioner in New Zealand, or a supervisory authority in the EU) are listed in our privacy notice.
We make no decisions with legal or similarly significant effects based solely on automated processing.
Last updated: [date of publication]. Draft of 12 October 2026; not legal advice.