Privacy Policy

1. Privacy at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified.

Data collection on this website

Some data is collected by you providing it to us – e.g. via a contact form or online appointment booking. Other data is collected automatically or after your consent when visiting the website (e.g. IP address, browser or time of page access).

Some data is collected to ensure the error-free provision of the website. Other data is used to process your enquiries and handle appointment bookings.

2. General information and mandatory disclosures

Responsible party

Retention period

Unless a more specific retention period has been stated in this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent, your data will be deleted unless statutory retention obligations apply (e.g. 10 years for booking records under tax law).

Note on data transfers to the USA

We use tools from companies based in the USA (e.g. Google). When these tools are active, personal data may be transferred to the USA. The USA is not considered a safe third country under EU data protection law. Where possible, we use the EU Commission's standard contractual clauses or the "EU-U.S. Data Privacy Framework".

3. Data collection on this website

Server log files

The page provider automatically collects and stores information in server log files transmitted by your browser: browser type and version, operating system, referrer URL, hostname of the accessing computer, time of the server request and IP address. This data is not merged with other data sources. Legal basis: Art. 6(1)(f) GDPR.

Online appointment booking

When you book an appointment online, we process the data you enter (name, email, phone, treatment type) for the purpose of appointment scheduling and contract performance. Legal basis: Art. 6(1)(b) GDPR. Where necessary, the data may also be used to enforce our terms (e.g. cancellation fee for late cancellations).

Contact form and email enquiries

If you send us enquiries via the contact form or email, your details including the contact information provided will be stored for the purpose of processing the enquiry and follow-up questions. We do not pass this data on without your consent. Legal basis: Art. 6(1)(b) or Art. 6(1)(f) GDPR.

Consent management (Usercentrics)

We use Usercentrics to obtain and manage your consent for the storage of cookies. Provider: Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich. Legal basis: Art. 6(1)(c) GDPR.

4. Booking system (SumUp)

We use SumUp Bookings for online appointment scheduling. When you book an appointment, your data is transferred to SumUp Europe S.à r.l., 5 Place de la Gare, 1616 Luxembourg. Legal basis: Art. 6(1)(b) GDPR. For SumUp's privacy policy, visit: sumup.com/privacy

5. Analytics and advertising

Google Analytics / Google Ads

This website uses web analytics services from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data about your use of our website is collected to optimise our offering and measure advertising success. Processing only takes place after your consent via the cookie banner. Legal basis: Art. 6(1)(a) GDPR.

Facebook Pixel (Meta)

We use the visitor action pixel from Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland to measure conversions from our Facebook and Instagram ads. The data is anonymous to us but is stored and processed by Meta. Legal basis: Art. 6(1)(a) GDPR.

6. Plugins and tools

Map service (OpenStreetMap)

On our contact page we embed a map provided by OpenStreetMap, operated by the OpenStreetMap Foundation (OSMF), Cambridge, UK. When the page is loaded, your IP address is transmitted to OSMF servers. OpenStreetMap does not use advertising or tracking cookies. Legal basis: Art. 6(1)(f) GDPR.

YouTube

We embed videos from YouTube (Google Ireland Limited) on our website. When a video starts, a connection to Google's servers is established, informing Google which pages you visit. Legal basis: Art. 6(1)(a) or (f) GDPR.

Google reCAPTCHA

To protect our forms against spam and abuse, we use Google reCAPTCHA (Google Ireland Limited). Your IP address and usage data are transmitted to Google. Legal basis: Art. 6(1)(f) GDPR.

7. Hosting (Hetzner / Vercel)

This website is hosted on servers of Hetzner Online GmbH, Gunzenhausen, Germany and via Vercel Inc., USA. When you visit the website, connection data (including IP address) is transmitted to these servers. Legal basis: Art. 6(1)(f) GDPR. For Vercel, data may be transferred to the USA; we use the EU Commission's standard contractual clauses for this.

8. Your rights

You have the following rights regarding your personal data:

• · Access to your stored data (Art. 15 GDPR)
• · Correction of inaccurate data (Art. 16 GDPR)
• · Deletion of your data (Art. 17 GDPR)
• · Restriction of processing (Art. 18 GDPR)
• · Data portability (Art. 20 GDPR)
• · Objection to processing (Art. 21 GDPR)
• · Withdrawal of consent with future effect (Art. 7(3) GDPR)
• · Complaint to the competent supervisory authority (Art. 77 GDPR)

The competent supervisory authority for Baden-Württemberg is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW), Lautenschlagerstraße 20, 70173 Stuttgart.