Privacy

Platform operator

SuperPatch-ID 111259984

Postal and parcel address · not a residential address

a.agne.heuring@gmail.com
+49 151 470 76 221

Adrian Agne-Heuring – Smoozia – operates the technical information platform and manages partner accounts.

Responsibility for centrally provided content

Adrian Agne-Heuring assumes legal and editorial responsibility for the information, media, study summaries and experience reports he provides centrally.

Website hosting

The website is hosted via ChatGPT Sites by OpenAI. When you visit, the host and technical service providers process connection data required for delivery and security, such as IP address, date and time, page visited, browser and device information and transmission status.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is secure, reliable operation. Data is deleted or anonymised when no longer required. More information: OpenAI Privacy Policy.

Partner account and security

For registration, payment allocation and account management, we process your name, email address, password hash, plan and billing details. Profile details and pictures are published only with explicit approval. Account management is based on Art. 6(1)(b) GDPR and abuse prevention on Art. 6(1)(f) GDPR. Essential session cookies last up to twelve hours; login attempts are limited. Account emails are sent through the operator’s Google email account.

Language selection

The selected language is stored in a functional language cookie in this browser for six months. A language in the link takes precedence; without a saved choice, we use the browser language, with German as a fallback. This setting is not used for analytics or advertising.

Language, media and optional offers

Your voluntary choice to display offers is stored in this browser’s local storage for this partner page. You can withdraw it by removing the tick or clearing browser data. Other information remains accessible without consent. This does not send email or WhatsApp messages. The platform uses system fonts; central information and media come from Smoozia. External videos load only when opened. No marketing or analytics cookies are set.

Contact

If you contact us by email or phone, we process your information to handle your request. The legal basis is Art. 6(1)(b) or (f) GDPR. Data is deleted when the request is resolved and no legal retention duty applies.

The WhatsApp link opens only when clicked. WhatsApp then processes data independently: WhatsApp Privacy Policy.

External links

The buttons for the patch test, product overview and shop lead to external SuperPatch pages. A connection to the respective provider is made only after you click. That provider is responsible for its processing.

Search and AI answers

Submitted searches are stored for the operator’s review in the platform database with the search text, its normalized form, language, time, result count and a random event identifier. If the database is temporarily unavailable, the event is held in object storage until transferred. For missing results or images, the search text, language, time and details of the gap may also be stored in object storage for editorial review. Search input may contain personal or health data. Please omit names and contact details.

The review aims to identify missing or unsuitable results, fix technical errors and improve search. Before saving entered free text for editorial search review, we ask for separate, voluntary consent under Article 6(1)(a) GDPR. You can use search without this consent. Without consent, we do not save search free text for this purpose. Aggregated usage figures with no personal reference may be used for technical analysis.

Please do not enter names, contact details or information about identifiable people. Such information is removed from editorial search logs as soon as it is recognised. We do not use identifiable health information for editorial search review. Processing such data additionally requires an applicable exception under Article 9(2) GDPR.

Individual search logs, including normalised search text and associated temporary copies, are deleted no later than 30 days after collection. Daily automatic cleanup covers the platform database and associated object storage. Only aggregated statistics with no personal reference are then retained for search review. You may withdraw consent at any time for the future. For a specific deletion request, contact the operator and, if available, provide the event identifier and approximate search time.

For AI-generated answers, after your consent your message, up to four previous messages and relevant sources are sent to OpenAI through our server. Some requests can be answered without an AI model. The conversation is not stored permanently in your browser. Please do not enter names or identifiable health data.

Reported questions are deleted by daily automatic cleanup no later than 90 days after receipt. Deselecting the option stops future automatic reports; it does not immediately delete reports already sent. Continued retention of personal content after withdrawal requires an independent legal basis. Contact the operator to request specific deletion.

Use of the AI feature is based on your voluntary consent under Article 6(1)(a) GDPR. Ordinary search remains available without AI consent. Consent to AI use is separate from consent to editorial storage of search text and from permission to submit feedback. Do not send identifiable health data to the AI feature. Any processing intended for such data would additionally require separate explicit consent under Article 9(2)(a) GDPR or another applicable exception.

OpenAI processes content sent through the API to answer the request. According to its published API information, this content is not used for model training by default. OpenAI may retain content in abuse monitoring logs for up to 30 days by default; exceptions required by law or to protect the services remain possible. Other retention periods depend on the API endpoint and its configuration. Information: https://developers.openai.com/api/docs/guides/your-data. These provider periods are independent of retention in our own platform database.

Our verified Responses API calls use store:false, so we do not request response-state storage through this option. The abuse monitoring logs described above are separate.

Experience reports and translations

Partners can submit reports with their name, text, patches used, application sites and up to two images. Until the operator approves publication, only the relevant partner account and administration can view the submission. Publication requires explicit consent (Art. 6(1)(a) GDPR). Welcome texts of published profiles are translated through the OpenAI API and translations are stored. Only the welcome text is transmitted, without account, billing or contact details. Please do not include sensitive or other people’s personal information in welcome texts.

Storage and payments

Account details remain stored for account management and possible continued use. You can request deletion from the operator. Data is deleted or anonymised when no longer needed, unless statutory retention obligations apply. Billing details required by law are retained accordingly. Withdrawal of publication consent applies to the future. Payments are handled separately by Fritz Agne – Gemüse Fritz – through SumUp or by invoice; the payment provider’s privacy notices also apply. The platform and partner do not receive complete card details or payment login credentials.

Retention periods for search free text and voluntary feedback are set out in “Search and AI answers”. Accounts, contact and billing have their own purposes and retention obligations. Withdrawal of consent to search review does not delete invoice data that must be retained by law.

Your rights

Subject to the legal requirements, you have rights of access, rectification, erasure, restriction, data portability and objection. You may withdraw consent at any time with effect for the future. This does not affect the lawfulness of processing before withdrawal. You may complain to a data protection supervisory authority, in particular the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate: https://www.datenschutz.rlp.de/.

This supervisory authority information concerns processing by Adrian Agne-Heuring as platform operator. The partner named above is responsible for direct enquiries addressed to that partner. Your right to complain to other competent supervisory authorities under the GDPR remains unaffected.