Privacy Policy

1. Privacy at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified.

Data collection on this website

Some data is collected by you providing it to us – e.g. via a contact form or online appointment booking. Other data is collected automatically or after your consent when visiting the website (e.g. IP address, browser or time of page access).

Some data is collected to ensure the error-free provision of the website. Other data is used to process your enquiries and handle appointment bookings.

2. General information and mandatory disclosures

Responsible party

Retention period

Unless a more specific retention period has been stated in this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent, your data will be deleted unless statutory retention obligations apply (e.g. 10 years for booking records under tax law).

Note on data transfers to the USA

We use tools from companies based in the USA (e.g. Google). When these tools are active, personal data may be transferred to the USA. The USA is not considered a safe third country under EU data protection law. Where possible, we use the EU Commission's standard contractual clauses or the "EU-U.S. Data Privacy Framework".

3. Data collection on this website

Server log files

The page provider automatically collects and stores information in server log files transmitted by your browser: browser type and version, operating system, referrer URL, hostname of the accessing computer, time of the server request and IP address. This data is not merged with other data sources. Legal basis: Art. 6(1)(f) GDPR.

Online appointment booking

When you book an appointment online, we process the data you enter (name, email, phone, treatment type) for the purpose of appointment scheduling and contract performance. Legal basis: Art. 6(1)(b) GDPR. Where necessary, the data may also be used to enforce our terms (e.g. cancellation fee for late cancellations).

Contact form and email enquiries

If you send us enquiries via the contact form or email, your details including the contact information provided will be stored for the purpose of processing the enquiry and follow-up questions. We do not pass this data on without your consent. Legal basis: Art. 6(1)(b) or Art. 6(1)(f) GDPR.

Consent management (cookie banner)

On your first visit we ask for your consent to advertising cookies via our own cookie banner. Your choice (“Accept” or “Only necessary”) and its timestamp are stored only locally in your browser (local storage) and are not shared with third parties. You can change or withdraw your choice at any time via the “Cookie settings” link in the footer. Legal basis: Art. 6(1)(c) GDPR in conjunction with Section 25(2) no. 2 TDDDG.

4. Booking system (Planity)

We use Planity (Planity SAS, 10 Rue de Penthièvre, 75008 Paris, France) for online appointment scheduling. When you book an appointment, your data is transferred to Planity and processed there. Legal basis: Art. 6(1)(b) GDPR. For Planity's privacy policy, visit: planity.com/privacy

5. Analytics and advertising

Google Ads conversion tracking

Only if you consent in the cookie banner do we load the Google tag from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It lets us measure whether visitors who clicked one of our Google ads then open our booking page or click our phone number (conversion tracking). Google sets cookies (e.g. _gcl_au) and processes, among other things, your IP address, device and browser information and the ad click ID. We only receive aggregated statistics, no data that identifies you personally. Data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework. We do not use personalised advertising or Google Analytics. Legal basis: your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG; you can withdraw it at any time via “Cookie settings” in the footer.

Facebook Pixel (Meta)

We use the visitor action pixel from Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland to measure conversions from our Facebook and Instagram ads. The data is anonymous to us but is stored and processed by Meta. Legal basis: Art. 6(1)(a) GDPR.

6. Plugins and tools

Map service (OpenStreetMap)

On our contact page we embed a map provided by OpenStreetMap, operated by the OpenStreetMap Foundation (OSMF), Cambridge, UK. When the page is loaded, your IP address is transmitted to OSMF servers. OpenStreetMap does not use advertising or tracking cookies. Legal basis: Art. 6(1)(f) GDPR.

YouTube

We embed videos from YouTube (Google Ireland Limited) on our website. When a video starts, a connection to Google's servers is established, informing Google which pages you visit. Legal basis: Art. 6(1)(a) or (f) GDPR.

Google reCAPTCHA

To protect our forms against spam and abuse, we use Google reCAPTCHA (Google Ireland Limited). Your IP address and usage data are transmitted to Google. Legal basis: Art. 6(1)(f) GDPR.

7. Hosting (Hetzner / Vercel)

This website is hosted on servers of Hetzner Online GmbH, Gunzenhausen, Germany and via Vercel Inc., USA. When you visit the website, connection data (including IP address) is transmitted to these servers. Legal basis: Art. 6(1)(f) GDPR. For Vercel, data may be transferred to the USA; we use the EU Commission's standard contractual clauses for this.

8. Your rights

You have the following rights regarding your personal data:

• · Access to your stored data (Art. 15 GDPR)
• · Correction of inaccurate data (Art. 16 GDPR)
• · Deletion of your data (Art. 17 GDPR)
• · Restriction of processing (Art. 18 GDPR)
• · Data portability (Art. 20 GDPR)
• · Objection to processing (Art. 21 GDPR)
• · Withdrawal of consent with future effect (Art. 7(3) GDPR)
• · Complaint to the competent supervisory authority (Art. 77 GDPR)

The competent supervisory authority for Baden-Württemberg is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW), Lautenschlagerstraße 20, 70173 Stuttgart.