Privacy Policy

Note: This English version is provided for convenience. In case of any discrepancy, the German original (Datenschutzerklärung) shall prevail.

1. Controller

The controller responsible for data processing on this website is:

2. General information on data processing

As a matter of principle, we only process personal data of our users to the extent necessary to provide a functional website as well as our content and services. Personal data is generally only processed with the user's consent or where a legal basis permits the processing (in particular Art. 6 GDPR). Personal data is any information relating to an identified or identifiable natural person.

3. Hosting and server log files

This website is hosted by Alfahosting GmbH, Ankerstraße 3b, 06108 Halle (Saale), Germany. The host processes personal data that arises when you visit this website on our behalf. We have concluded a data processing agreement pursuant to Art. 28 GDPR with the host, which ensures that the processed data is handled in compliance with data protection law.

When this website is accessed, the hosting provider automatically collects information in so-called server log files, which your browser transmits automatically: IP address, date and time of access, name and URL of the file retrieved, volume of data transferred, browser used and operating system, as well as the previously visited page (referrer URL). This data is not merged with other data sources. The legal basis is Art. 6 (1) (f) GDPR; we have a legitimate interest in the technically error-free presentation, optimisation and security of our website. You have the right to object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

4. Contact form

If you send us enquiries via the contact form, the information you provide (name, company, e-mail address, phone number, type of goods and your message) is stored for the purpose of processing the enquiry and in case of follow-up questions.

The legal basis for the processing is Art. 6 (1) (b) GDPR, insofar as your enquiry is aimed at concluding or performing a contract or serves to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the enquiries addressed to us (Art. 6 (1) (f) GDPR).

The form is technically transmitted via the service provider Formspree (Formspree Inc., USA). In doing so, the data you enter is transferred to servers in the USA. The transfer to the USA is based on the European Commission's standard contractual clauses pursuant to Art. 46 (2) (c) GDPR. There is no adequacy decision by the European Commission for the USA under Art. 45 GDPR. It cannot be ruled out that US authorities may access the transferred data without effective legal remedies being available against this in accordance with European standards.

5. Appointment booking (Zeeg)

We use the service Zeeg provided by Zeeg GmbH, c/o Moghaddas, Friedrichstraße 114 A, 10117 Berlin, Germany, for scheduling initial consultations and appointments. When you book an appointment via Zeeg, the data you provide (in particular name, e-mail address and preferred appointment) is processed for the management and execution of the appointment. The legal basis is Art. 6 (1) (b) GDPR (performance of pre-contractual measures) and Art. 6 (1) (f) GDPR (legitimate interest in efficient appointment organisation). Further information can be found in Zeeg's privacy policy: https://zeeg.me/en/privacy.

6. Cookies and local storage

This website does not use any tracking or analytics cookies. We exclusively use technically necessary local storage (localStorage) in your browser, for example to store your acknowledgement of the cookie notice. This information remains in your browser and is not transferred to us or to third parties.

Access to this information is permitted without consent pursuant to § 25 (2) no. 2 TDDDG, as the storage is strictly necessary in order for us to provide the telemedia service you have expressly requested. No consent is required for this. No profiles are created and no user-related tracking is carried out.

7. Recipients and disclosure of data

Your personal data is only disclosed to third parties insofar as this is necessary for the performance of a contract, you have consented or we are legally obliged to do so. Recipients are in particular the processors we use (hosting, form transmission, appointment booking), who act exclusively in accordance with our instructions. No disclosure beyond this – for example for advertising purposes – takes place.

8. Storage period

We only store personal data for as long as is necessary for the respective purposes. Server log files are regularly deleted or anonymised after a short period, as soon as they are no longer required for the purpose of the technical provision and security of the website. Enquiries via the contact form are retained until the enquiry has been conclusively processed and no further questions are to be expected. Insofar as the data concerns business transactions, the statutory retention periods apply, in particular 6 years for commercial letters (§ 257 HGB) and 10 years for accounting documents (§ 147 AO). After these periods expire, the data is deleted, unless there are other legal grounds for further storage.

9. Your rights as a data subject

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) as well as the right to withdraw consent granted with effect for the future. An informal message to the contact details above is sufficient to exercise your rights.

You also have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR. The supervisory authority responsible for us is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, www.baden-wuerttemberg.datenschutz.de.

10. Right to object

Insofar as we process personal data on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then no longer process the data concerned, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

11. SSL / TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser's address line changes from “http://” to “https://” and by the padlock symbol in your browser line. When SSL or TLS encryption is active, the data you transmit to us cannot be read by third parties.

Last updated: June 2026