Privacy Policy

The data controller within the meaning of the General Data Protection Regulation (GDPR) is:

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

The use of our website is generally possible without providing personal data. Where personal data is collected on our pages, this is always done on a voluntary basis. This data will not be passed on to third parties without your express consent.

The legal basis for the processing of personal data is Art. 6 (1) GDPR. We only process data if at least one of the following conditions applies: consent (Art. 6 (1) (a) GDPR), performance of a contract (Art. 6 (1) (b) GDPR), legal obligation (Art. 6 (1) (c) GDPR), or legitimate interest (Art. 6 (1) (f) GDPR).

This website is hosted by an external service provider (host). Personal data collected on this website is stored on the host's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access, and other data generated via a website.

The use of the host is in the interest of a secure, fast, and efficient provision of our online offering by a professional provider (Art. 6 (1) (f) GDPR). If a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR.

We have concluded a data processing agreement (DPA) with our host. This ensures that our website visitors' personal data is only processed according to our instructions and in compliance with the GDPR.

This site uses SSL encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the address bar of the browser changing from "http://" to "https://" and by the lock symbol in your browser bar. When SSL encryption is activated, the data you transmit to us cannot be read by third parties.

Our website uses cookies. Cookies are small text files stored on your device by your browser. They do not cause any damage and do not contain viruses.

We use technically necessary cookies that are required for the operation of the site. These are automatically deleted at the end of your browser session (session cookies). In addition, we use cookies for analysing user behaviour or displaying certain features. These are only set with your express consent.

We use Usercentrics as a Consent Management Platform (CMP) to manage your cookie consent. When visiting our website, you will be asked to give your consent for various cookie categories. You can change or revoke your settings at any time via the cookie banner or the privacy settings on our website.

Legal basis: Art. 6 (1) (a) GDPR (consent) for optional cookies, Art. 6 (1) (f) GDPR (legitimate interest) for technically necessary cookies.

Cookie-Erklärung

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources. The collection of this data is based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of their website.

If you send us enquiries via the contact form, your details from the enquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the enquiry and in case of follow-up questions.

The processing of this data is based on Art. 6 (1) (b) GDPR, if your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6 (1) (f) GDPR).

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to storage, or the purpose for data storage no longer applies. Mandatory statutory provisions — in particular retention periods — remain unaffected.

This site uses so-called Google Fonts provided by Google LLC for the uniform display of fonts. When you access a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

For this purpose, the browser you use must connect to Google's servers. This gives Google knowledge that our website was accessed via your IP address. Google Fonts are used on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the uniform presentation of the typeface on their website.

For more information on Google Fonts, please visit https://fonts.google.com/about and Google's privacy policy: https://policies.google.com/privacy.

We offer you the option of contacting us via WhatsApp (Meta Platforms Ireland Ltd.). If you contact us via WhatsApp, your message, your name, and your phone number will be processed to respond to your enquiry.

The use of WhatsApp is based on your consent pursuant to Art. 6 (1) (a) GDPR, which you grant by actively initiating contact. Please note that WhatsApp has access to the address book of the device used and may process the data stored there on servers in the USA or other third countries.

We recommend that you do not send sensitive or confidential data via WhatsApp. For more information, please refer to WhatsApp's privacy policy.

We use the Treatwell service (Treatwell GmbH) for online appointment booking. When you book an appointment via Treatwell, your personal data (such as name, contact details, desired service, and preferred appointment time) is transmitted to and processed by Treatwell.

Data processing is carried out for the purpose of appointment scheduling and management on the basis of Art. 6 (1) (b) GDPR (performance of a contract). Treatwell processes the data in accordance with its own privacy policy.

For more information on data protection at Treatwell, please refer to their privacy policy at treatwell.de.

Our website contains links to our Instagram profile. Instagram is a service of Meta Platforms Ireland Ltd. When you click on an Instagram link, you will be redirected to our Instagram profile.

When visiting our Instagram profile, Instagram may collect your personal data. We have no influence on the type and scope of data processed by Instagram. For more information, please refer to the privacy policy of Instagram/Meta.

The integration is based on our legitimate interest in effective public relations pursuant to Art. 6 (1) (f) GDPR.

You have the following rights with regard to the personal data concerning you:

• Right of access (Art. 15 GDPR) — You may request information about your personal data processed by us.
• Right to rectification (Art. 16 GDPR) — You may request the correction of inaccurate or the completion of your personal data stored by us.
• Right to erasure (Art. 17 GDPR) — You may request the deletion of your personal data stored by us, unless processing is necessary for exercising the right of freedom of expression, for compliance with a legal obligation, or for reasons of public interest.
• Right to restriction of processing (Art. 18 GDPR) — You may request the restriction of the processing of your personal data.
• Right to object (Art. 21 GDPR) — You may object to the processing of your personal data at any time, provided that the processing is based on Art. 6 (1) (f) GDPR.
• Right to data portability (Art. 20 GDPR) — You may request that we provide the personal data concerning you in a structured, commonly used, and machine-readable format.
• Right to withdraw consent (Art. 7 (3) GDPR) — You may withdraw consent once given at any time. The lawfulness of the data processing carried out until the withdrawal remains unaffected.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes the GDPR.

Competent supervisory authority: