Private practice for aesthetic medicine & surgery

Data protection

Data protection declaration

Introduction and overview

We have written this data protection declaration (version 07.03.2025-322959328) in order to explain to you in accordance with the specifications of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, which personal data (for short data) we as the person responsible-and the processors (e.g. provider)-will process in the future and what legal options you have. The terms used are to be understood gender -neutral.
In short: we provide you with comprehensive information about data that we process through you.

Data protection declarations usually sound very technically and use legal terms. This data protection declaration, on the other hand, should describe the most important things as easily and transparently as possible. As far as transparency is beneficial, technical terms are explained to the reader , left to further information and use
graphics In this way, we inform in a clear and simple language that we only process personal data as part of our business activities if there is a corresponding legal basis. This is certainly not possible if you hand over as scarce, unclear and legal-technical explanations, as they are often standard on the Internet when it comes to data protection. I hope you will find the following explanations interesting and informative and maybe there is one or the other information that you have not yet known. If you still have any questions, we would like to ask you to contact the responsible body below or in the imprint, follow the existing links and to look at further information on third pages. Of course, you will also find our contact details in the imprint.

scope

This data protection declaration applies to all personal data we process in the company and for all personal data that we have commissioned by companies (processors). With personal data we mean information within the meaning of Art. 4 No. 1 GDPR such as name, email address and postal address of a person. The processing of personal data ensures that we can offer and bill our services and products, be it online or offline. The scope of this data protection declaration includes:

  • All online appearances (websites, online shops) that we operate
  • Social media appearances and email communication
  • Mobile apps for smartphones and other devices

In short: The data protection declaration applies to all areas in which personal data in the company are processed in a structured manner via the channels mentioned. If we enter legal relationships with you outside of these channels, we will inform you separately.

Legal basis

In the following data protection declaration, we give you transparent information on the legal principles and regulations, i.e. the legal basis of the General Data Protection Regulation, which enable us to process personal data.
As for EU law, we refer to the Regulation (EU) 2016/679 of the European Parliament and the Council of April 27, 2016. This General Data Protection Regulation of the EU can of course be made online at EUR-Lex, access to EU law, at https://eur-lex.eu/legal-content/de/ ?uri=celex% 3a32016R0679 read.

We only process your data if at least one of the following conditions applies:

  1. Consent (Article 6 paragraph 1 lit. a GDPR): You gave us your consent to process data for a specific purpose. One example would be the storage of your entered data from a contact form.
  2. Contract (Article 6 paragraph 1 lit. b GDPR): In order to fulfill a contract or pre -contractual obligations with you, we process your data. For example, if we conclude a purchase contract with you, we need personal information in advance.
  3. Legal obligation (Article 6 paragraph 1 lit. c GDPR): If we are subject to a legal obligation, we process your data. For example, we are legally obliged to collect invoices for accounting. These usually contain personal data.
  4. We reserve legitimate interests (Article 6 (1) lit. f GDPR): In the event of legitimate interests that do not restrict your fundamental rights, we reserve the processing of personal data. For example, we have to process certain data in order to be able to operate our website safely and economically. This processing is therefore a legitimate interest.

Other conditions such as the perception of recordings in the public interest and exercise of public violence as well as the protection of vital interests generally do not occur. Insofar as such a legal basis should be relevant, it is shown at the corresponding position.

In addition to the EU regulation, national laws also apply:

  • In Austria, this is the federal law for the protection of natural persons in the processing of personal data ( data protection law ), or DSG .
  • In Germany Federal Data Protection Act applies , BDSG .

If other regional or national laws apply, we will inform you about it in the following sections.

Contact details of the person responsible

If you have any questions about data protection or processing of personal data, you will find the contact details of the person responsible below in accordance with Article 4 (7) of the EU General Data Protection Regulation (GDPR):
Dr. med. Gunther Oldag
Hauptstrasse 53
66798 Wallerfangen

Email: Info@ schoenheits-hand-werk .de
Telephone: 06831/4005904
Imprint: https: // schoenheits-hand-werk .de/imprint/

Memory duration

The fact that we only save personal data as long as it is absolutely necessary for the provision of our services and products is considered a general criterion for us. This means that we delete personal data as soon as the reason for data processing is no longer available. In some cases, we are legally obliged to save certain data even after the original purpose is eliminated, for example for the purposes of bookkeeping.

If you want the deletion of your data or revoke your consent to data processing, the data will be deleted as quickly as possible and as far as there is no obligation to store.

We will inform you further below about the specific duration of the respective data processing if we have further information.

Rights according to the General Data Protection Regulation

According to Article 13, 14 GDPR, we will inform you about the following rights that you are entitled to so that you will have a fair and transparent processing of data:

  • According to Article 15 GDPR, you have the right to provide information about whether we process data from you. If this is true, you are right to receive a copy of the data and to find out the following information:
    • for what purpose we carry out the processing;
    • the categories, i.e. the types of data that are processed;
    • Whoever receives this data and if the data is transmitted to third countries, how security can be guaranteed;
    • how long the data is saved;
    • the existence of the right to correction, deletion or restriction of processing and the right to object to the processing;
    • that you can complain to a supervisory authority (links to these authorities can be found below);
    • the origin of the data if we have not collected it with you;
    • Whether profiling is carried out, whether data is automatically evaluated in order to get a personal profile from you.
  • According to Article 16 GDPR, you have the right to correct the data, which means that we have to correct data if you find errors.
  • According to Article 17 GDPR, you have the right to deletion ("right to be forgotten"), which concretely means that you can request the deletion of your data.
  • According to Article 18 GDPR, you have the right to restrict processing, which means that we can only save the data more but do not use it any further.
  • According to Article 20 GDPR, you have the right to data portability, which means that we provide you with your data in a common format on request.
  • According to Article 21 GDPR, you have a right to object, which after enforcement brings a change in processing.
    • If the processing of your data is based on Article 6 (1) lit. e (public interest, exercise of public violence) or Article 6 (1) lit. f (legitimate interest), you can object to the processing. We then check as quickly as possible whether we can legally comply with this contradiction.
    • If data is used to operate direct mail, you can object to this type of data processing at any time. We are no longer allowed to use your data for direct marketing.
    • If data is used to operate profiling, you can object to this type of data processing at any time. We are no longer allowed to use your data for profiling.
  • According to Article 22 GDPR, you may have the right not to be subject to a decision based exclusively on automated processing (e.g. profiling).
  • According to Article 77 GDPR, you have the right to complain. This means that you can complain to the data protection authority at any time if you believe that the data processing of personal data violates the GDPR.

In short: you have rights - do not hesitate to contact the responsible body listed above!

If you believe that the processing of your data violates data protection law or your data protection claims have been violated in any other way, you can complain to the supervisory authority. This is the data protection authority for Austria whose website you can find at https://www.dsb.gv.at/ . In Germany there is a data protection officer for each state. For more information, you can contact the Federal Commissioner for Data Protection and Freedom of Information (BFDI) . The following local data protection authority is responsible for our company:

Saarland data protection authority

State Commissioner for Data Protection: Monika Grethel
Address: Fritz-Dobisch-Straße 12, 66111 Saarbrücken
Telephone number: 06 81/947-0
E-mail address: poststelle@datenschutz.saarland.de
Website:
https://www.datenschutz.saarland.de/

Security of data processing

In order to protect personal data, we have implemented both technical and organizational measures. Wherever it is possible for us to encrypt or pseudonymize personal data. As a result, we make it as difficult as possible that third parties can conclude personal information from our data.

Art. 25 GDPR speaks of “data protection through technology design and through data protection -friendly default settings” and believes that both with software (e.g. forms) you also think of hardware (e.g. access to the server room) and take the appropriate measures. In the following we, if necessary, go into specific measures.

TLS encryption with https

TLS, encryption and HTTPS sound very technical and are too. We use HTTPS (The Hypertext Transfer Protocol Secure stands for "safe hypertext transmission protocol") in order to transmit data to the Internet.
This means that the complete transfer of all data from your browser to our web server is secured - nobody can “listen”.

We have thus introduced an additional safety layer and meet data protection through technology design ( Article 25 (1) GDPR ). By using TLS (Transport Layer Security), an encryption protocol for secure data transmission on the Internet, we can ensure the protection of confidential data.
You can see the use of this protection of the data transmission at the small lock symbol in the top left of the browser, left of the Internet address (e.g. sample page.de) and the use of the Schemas HTTPS (instead of http) as part of our Internet address.
If you would like to know more about encryption, we recommend the Google Search for “Hypertext Transfer Protocol Secure Wiki” to get good links to further information.

communication

Communication Summary
👥 Those affected: Everyone who communicates with us by phone, email or online form
📓 Processed data: e.g. B. Telephone number, name, email address, entered form data. You can find more details on this in the contact type
🤝 Purpose: Processing of communication with customers, business partners etc.
📅 Duration of storage: Duration of the business event and the legal regulations
⚖️ Legal basis: Art. 6 Para. 1 lit. a GDPR (consent), Art. 6 Para. 1 lit. b GDPR (contract), Art. 6 Para. (Legitimate interests)

If you contact us and communicate by phone, email or online form, personal data can be processed.

The data is processed for the handling and processing of your question and the associated business process. The data while stored while or as long as the law prescribes.

Affected people

All of the processes mentioned are affected by everyone who is looking for contact with us through the communication channels provided by us.

phone

If you call us, the call data on the respective end device and the telecommunications provider used are saved pseudonymously. In addition, data such as name and telephone number can then be sent by email and saved for answering inquiries. The data will be deleted as soon as the business case has ended and legal requirements allow it.

e-mail

If you communicate with us by email, data may be saved on the respective end device (computer, laptop, smartphone, ...) and data is stored on the email server. The data will be deleted as soon as the business case has ended and legal requirements allow it.

Online forms

If you communicate with us using an online form, data will be saved on our web server and, if necessary, forwarded us to an email address. The data will be deleted as soon as the business case has ended and legal requirements allow it.

Legal basis

The processing of the data is based on the following legal bases:

  • Art. 6 Para. 1 lit. a GDPR (consent): You give us the consent to save your data and continue to use purposes relating to the business case;
  • Art. 6 Para. 1 lit. b GDPR (contract): There is a need for fulfilling a contract with you or an order processor such as B. the telephone provider or we must have the data for pre -contractual activities, such as B. process the preparation of an offer;
  • Art. 6 Para. 1 lit. f GDPR (legitimate interests): We want to operate customer inquiries and business communication in a professional framework. In addition, certain technical facilities such as B. E-mail programs, Exchange servers and mobile operators necessary in order to be able to operate communication efficiently.

Order processing contract (AVV)

In this section we would like to explain what an order processing contract is and why it is needed. Because the word “order processing contract” is quite a tongue breaker, we will often only use the acronym AVV here in the text. Like most companies, we do not work alone, but also use services from other companies or individuals. By including various companies or service providers, we may pass on personal data for processing. These partners then act as processors with whom we conclude a contract, the so -called order processing contract (AVV). It is most important to know that the processing of your personal data is carried out exclusively after our instruction and must be regulated by the AVV.

Who are processors?

As a company and website holder, we are responsible for all data that we process from you. In addition to those responsible, there can also be so -called processors. This includes every company or person who processes personal data on our behalf. More precisely and said after the GDPR definition: Every natural or legal person, authority, institution or another position that processes personal data on our behalf is considered a processor. Processors can therefore be service providers such as hosting or cloud providers, payment or newsletter providers or large companies such as Google or Microsoft.

To better understand the terms, an overview of the three roles in the GDPR:

Affected person (you as a customer or prospect) → responsible person (we as a company and client) → processor (service provider such as webhoster or cloud provider)

Content of an order processing contract

As already mentioned above, we have completed an AVV with our partners who act as a processor. It is stated that the processor processes the data to be processed exclusively in accordance with the GDPR. The contract must be concluded in writing, but in this context, the electronic conclusion of the contract is also considered "in writing". The processing of the personal data is only carried out on the basis of the contract. The following must be included in the contract:

  • Binding to us as responsible
  • Duties and rights of the person responsible
  • Categories of people affected
  • Type of personal data
  • Type and purpose of data processing
  • Subject and duration of data processing
  • Implementation location of data processing

Furthermore, the contract contains all obligations of the processor. The most important duties are:

  • Measures to ensure data security
  • to take possible technical and organizational measures to protect the rights of the person concerned
  • to conduct a data processing list
  • At the request of the data protection supervisory authority to work with it
  • to carry out a risk analysis in relation to the personal data obtained
  • Sub-mandate processors may only be commissioned with the written approval of the person responsible

You can see what an AVV looks like in concrete terms, for example at https://www.wko.at/service/wirtschaftsrecht-werberecht/eu-dsgvo-pattern contract-getungsverung.html. A sample contract is presented here.

Web hosting introduction

Webhosting Summary
👥 Affected: Visitors to the website
🤝 Purpose: Professional hosting of the website and protection of the company
📓 Processed data: IP address, time of the website, used browser and other data. You can find more details below or at the web hosting provider used.
📅 Storage duration: Depending on the respective provider, but usually 2 weeks
⚖️ Legal bases: Art. 6 Para. 1 lit.f GDPR (legitimate interests)

What is web hosting?

If you visit websites these days, certain information - including personal data - is automatically created and saved, including on this website. This data should be processed as economical as possible and only on the grounds. By the way, we mean the entirety of all websites on a domain, i.e. everything from the start page (homepage) to the last subpage (like this one here). With domain, for example, for example.de or sample-biel.com.

If you want to watch a website on a computer, tablet or smartphone, use a program called web browser. You probably know some web browsers by name: Google Chrome, Microsoft Edge, Mozilla Firefox and Apple Safari. We say browser or web browser in short.

In order to display the website, the browser must connect to another computer where the code of the website is stored: the web server. The operation of a web server is a complicated and elaborate task, which is why this is usually taken over by professional providers, the providers. These offer web hosting and thus ensure reliable and error -free storage of the data from websites. A lot of technical terms, but please stay tuned, it gets even better!

When connecting the browser on your computer (desktop, laptop, tablet or smartphone) and during data transmission and the web server can process personal data. On the one hand, your computer stores data, on the other hand, the web server must also save data for a while to ensure proper operation.

A picture says more than a thousand words, so the following graphic shows the interaction between the browser, the Internet and the hosting provider for illustration.

Browser and web server

Why do we process personal data?

The purposes of data processing are:

  1. Professional hosting of the website and securing the company
  2. To maintain operational and IT security
  3. Anonymous evaluation of access behavior to improve our offer and, if necessary, to prosecute or persecute claims

What data are processed?

Even while you are now visiting our website, our web server is storing the computer on which this website is saved, usually automatically data such as

  • The complete Internet address (URL) of the accessed website
  • Browser and browser version (e.g. Chrome 87)
  • The operating system used (e.g. Windows 10)
  • The address (URL) of the previously visited page (referrer URL) (e.g. https://www.beabepielquellsite.de/vondabinichgegge/ )
  • the host name and the IP address of the device from which is accessed (e.g. Computer name and 194.23.43.121)
  • Date and time
  • In files, the so-called web server log files

How long are data saved?

As a rule, the data mentioned above are saved for two weeks and then automatically deleted. We do not pass this data further, but cannot rule out that this data will be viewed in the presence of illegal behavior of authorities.

In short: your visit is logged by our provider (company that runs our website on special computers (servers)), but we do not pass on your data without consent!

Legal basis

The legality of the processing of personal data within the framework of web hosting results from Art. 6 Para. 1 Lit. f GDPR (preservation of the legitimate interests), because the use of professional hosting with a provider is necessary in order to be able to present the company safely and user -friendly on the Internet and to be able to pursue attacks and demands from this.

Between us and the hosting provider there is usually a contract for order processing in accordance with Art. 28 f. GDPR, which guarantees compliance with data protection and guarantees data security.

All-link data protection declaration

We use all-link, including a web hosting provider. The German company All-inkl.com-Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany is the service provider.

In the data protection declaration on https://all-inkl.com/datenschutzinformationen/ .

Order processing contract (AVV) All-Inkl

In the sense of Article 28 of the General Data Protection Regulation (GDPR), we have concluded an order processing contract (AVV) with All-Inkl. You can read about what an AVV is and above all what must be included in an AVV in our general section "Order processing contract (AVV)".

This contract is required by law because All-Ink is processed personal data on our behalf. It clarifies that all-link can only process data that you receive from us only according to our instructions and must comply with the GDPR.

Web Analytics Introduction

Web Analytics Data Protection Declaration Summary
👥 Affected: Visitors to the website
🤝 Purpose: Evaluation of the visitor information to optimize the website.
📓 Processed data: Access statistics that contain data such as locations of access, device data, access duration and time, navigation behavior, click behavior and IP addresses. You can find more details on this with the web analytics tool used.
📅 Storage duration: Depending on the web analytics tool
⚖️ Legal bases: Art. 6 Para. 1 lit. a GDPR (consent), Art. 6 Para. 1 lit. f GDPR (legitimate interests)

What is Web Analytics?

We use software to evaluate the behavior of website visitors, for short web analytics or web analysis on our website. Data is collected that the respective analytic tool provider (also called a tracking tool) is collected, managed and processed. With the help of the data, analyzes about the user behavior are created on our website and provided us as website operator. In addition, most tools offer different test options. For example, we can test which offers or content are best received by our visitors. For this we show you two different offers for a limited period of time. After the test (so-called A/B test) we know which product or content our website visitors find more interesting. For such test procedures, as well as for other analytics procedures, user profiles can also be created and the data is saved in cookies.

Why do we operate web analytics?

With our website we have a clear goal in mind: We want to deliver the best website on the market for our industry. In order to achieve this goal, we want to offer the best and most interesting offer on the one hand and, on the other hand, make sure that you feel completely comfortable on our website. With the help of web analysis tools, we can take a closer look at the behavior of our website visitors and then improve our website for you and us accordingly. For example, we can see how old our visitors are on average, where they come from, when our website is visited the most or which content or products are particularly popular. All of this information helps us optimize the website and thus perfectly adapt to your needs, interests and wishes.

What data are processed?

Which data is saved exactly depends on the analysis tools used. However, it is usually saved, for example, what content you are watching on our website, which buttons or links you click on, when to call up a page, which browser you use, with which device (PC, tablet, smartphone, etc.) you visit the website or which computer system you use. If you agreed that location data may also be collected, these can also be processed by the web analysis tool provider.

Your IP address is also saved. According to the General Data Protection Regulation (GDPR), IP addresses are personal data. However, your IP address is usually stored pseudonymized (i.e. in unrecognizable and abbreviated form). For the purpose of the tests, web analysis and web optimization, no direct data, such as your name, age, your address or your email address, is basically saved. If you are collected, all of this data is stored pseudonymously. So they cannot be identified as a person.

The following example shows the functionality of Google Analytics as an example of client-based web tracking with Java script code.

Schematic data flow at Google Analytics

How long the respective data will be saved always depends on the provider. Some cookies only save data for a few minutes or until you leave the website again, other cookies can save data over several years.

Duration of data processing

We will inform you further below about the duration of data processing if we have more information. In general, we only process personal data as long as is absolutely necessary for the provision of our services and products. If, such as in the case of accounting, this is required by law, this storage duration can also be exceeded.

Right of contradictions

You also have the right to revoke your consent to the use of cookies or third -party providers at any time. This works either via our cookie management tool or other opt-out functions. For example, you can also prevent data acquisition by cookies by manage, deactivating or deleting the cookies in your browser.

Legal basis

The use of web analytics requires your consent, which we have obtained with our cookie popup. Art. 6 Para. 1 Lit. a GDPR (consent), this consent represents the legal basis for the processing of personal data, as can be seen when recording web analytics tools.

In addition to the consent, our website has a legitimate interest in analyzing the behavior of website visitors and thus improving our offer technically and economically. With the help of web analytics, we recognize mistakes on the website, can identify attacks and improve economy. The legal basis for this is Art. 6 Para. 1 lit. f GDPR (legitimate interests) . Nevertheless, we only use the tools if they have given consent.

Since cookies are used for web analytics tools, we also recommend reading our general data protection declaration on cookies. In order to find out exactly which data you save and process by you, you should read through the data protection declarations of the respective tools.

Information on special web analytics tools, you will receive-if available-in the following sections.

WP statistics data protection declaration

WP statistics data protection declaration Summary
👥 Visitors to the website
🤝 Purpose: Evaluation of the visitor information to optimize the website.
📓 Processed data: Access statistics that contain data such as anonymized IP addresses, duration of the website or click behavior.
📅 Storage duration: The data is saved until they are no longer required for the purposes
⚖️ Legal basis: Art. 6 Para. 1 lit. a GDPR (consent), Art. 6 Para. 1 lit. f GDPR (legitimate interests)

What is WP Statistics?

We use the analysis plugin WP Statistics on our website. This plugin was developed by Veronalabs (5460 W Main St, Verona, NY 13478, United States), an American software company. With this plugin we get simple statistics on how to use our website as a user. In this data protection declaration, we go into the analysis tool in more detail and show you which data will be saved where and for how long.

This plugin is an analysis software that was specially developed for websites that use the content management system WordPress. WordPress helps us to easily edit our website without programming knowledge. WP Statistics can collect data on how long you linger on our website, which sub -pages you visit, how many visitors are on the website or which website you came to us. No cookies are set by WP Statistics and they cannot be identified as a person by the data collected.

Why do we use WP Statistics?

With the help of WP Statistics, we get simple statistics that help us make our website even more interesting and better for you. Our website and the content, products and/or services offered on it should meet your requirements and wishes as much as possible. In order to achieve this goal, of course we also have to find out where we should make improvements and changes. The statistics obtained help us to get one step closer to this goal.

What data are saved by WP Statistics?

WP Statistics does not set cookies and the data collected only creates statistics in anonymous form by using our website. WP Statistics also anonymizes your IP address. You as a person cannot be identified.

WP statistics collect visitor data (so-called Visitos´Data) when your web browser connects to our web server. This data is stored on our server in our database. These include, for example:

  • The address (URL) of the accessed website
  • Browser and browser version
  • The operating system used
  • The address (URL) of the previously attended page (referrer URL)
  • the host name and the IP address of the device from which is accessed
  • Date and time
  • Information on the country/city
  • Number of visitors who come from a search engine
  • Duration of the website stay
  • Clicks on the website

The data is not passed on and are not sold.

How long and where are the data saved?

All data is stored locally on our web server. The data is saved on our web server until they are no longer required for the purposes listed above.

How can I delete my data or prevent data storage?

You have the right to information, correction or deletion and restriction of the processing of your personal data at any time. You can also revoke your consent to the processing of data at any time.

Legal basis

The use of WP Statistics requires your consent, which we have obtained with our Cookie Popup. Art. 6 Para. 1 Lit. a GDPR (consent), this consent represents the legal basis for the processing of personal data, as can be seen when recording web analytics tools.

In addition to the consent, our website has a legitimate interest in analyzing behavior of website visitors and thus improving our offer technically and economically. With the help of WP Statistics, we recognize mistakes on the website, can identify attacks and improve economy. The legal basis for this is Art. 6 Para. 1 lit. f GDPR (legitimate interests) . Nevertheless, we only use WP Statistics if you have given consent.

We would like to point out that, in the opinion of the European Court of Justice, there is currently no reasonable level of protection for data transfer to the United States. Data processing is essentially possible by WP Statistics. This can lead to the fact that data may not be processed and saved anonymously. If necessary, US state authorities may access individual data. It can also happen that this data is linked to data from other possible services of WP Statistics with which you have a user account.

We have now informed you of the most important information on data processing by WP Analytics. Because the plugin does not use cookies and the data for statistical evaluation is stored locally in the web server, your data is handled very carefully. If you want to learn more about WP Analytics, you should watch the company's data protection declaration at https://wp-statistics.com/privacy-policy .

Yoast SEO WordPress Plugin data protection declaration

We use the analysis tool YOAST SEO WordPress Plugin for our website. The Dutch company Yoast BV, Don Emanuelstraat 3, 6602 GX Wijchen, Netherlands is the Dutch company.

You can find out more about the data processed by the use of Yoast SEO WordPress Plugin in the data protection declaration on https://yoast.com/privacy-policy/ .

Security & anti-spam

Security & Anti-Spam data protection declaration Summary
👥 Visitors to the website
🤝 Purpose: Cyber ​​security
📓 Processed data: Data such as your IP address, name or technical data such as browser version
You can find more details below and the individual data protection texts.
📅 Memory duration: Most of the data are saved until they are no longer required to fulfill the service
⚖️ Legal bases: Art. 6 Para. 1 lit. a GDPR (consent), Art. 6 Para. 1 lit. f GDPR (legitimate interests)

What is security & anti-spam software?

With so-called security & anti-spam software, you can protect yourself and we protect ourselves from various spam or phishing emails and possible other cyber attacks. Spam means advertising emails from a mass shipping that you did not ask for yourself. Such emails are also called data waste and can also cause costs. Phishing emails are again messages that aim to build trust in fake messages or websites in order to get personal data. Anti-spam software usually protects against unwanted spam messages or malignant emails that could indulge in viruses into our system. We also use general firewall and security systems that protect our computers from unwanted network attacks.

Why do we use security & anti-spam software?

We attach particular importance to safety on our website. After all, it's not just about our, but above all about your security. Unfortunately, in the world of IT and the cyber threats internet, everyday life is already part of everyday life. With the help of a cyber attack, hackers often try to steal personal data from an IT system. And therefore a good defense system is absolutely necessary. A security system monitors all incoming and outgoing connections to our network or computer. In order to achieve even greater security before cyber attacks, we also use other external security services on our computer in addition to the standardized security systems. Unauthorized traffic of data is better prevented and so we protect ourselves from cybercrime.

What data are processed by security & anti-spam software?

Which data is collected and saved, of course, depends on the respective service. However, we always strive to use only programs that collect data very economically or only store data that is necessary for the fulfillment of the service offered. In principle, the service can save data such as name, address, IP address, email address and technical data such as browser type or browser version. Any performance and protocol data can also be collected in order to recognize possible incoming threats in good time. This data is processed as part of the services and in compliance with the applicable laws. This also includes the GDPR for US providers (via the standard contract clauses). In some cases, these security services also work with third-party providers who can store and/or process data, in line and in accordance with the data protection guidelines and other security measures. Data storage is usually done via cookies.

Duration of data processing

We will inform you further below about the duration of data processing if we have more information. For example, save security programs data until you or we cancel the data storage. In general, personal data is only saved as long as it is absolutely necessary for the provision of services. In many cases, we are unfortunately lacking precise information about the length of the storage.

Right of contradictions

You also have the right to revoke your consent to the use of cookies or third-party providers of security software at any time. This works either via our cookie management tool or other opt-out functions. For example, you can also prevent data acquisition by cookies by manage, deactivating or deleting the cookies in your browser.

Since cookies can also be used for such security services, we recommend our general data protection declaration via cookies. In order to find out exactly which data you save and process by you, you should read through the data protection declarations of the respective tools.

Legal basis

We mainly use the security services on the basis of our legitimate interests (Art. 6 Para. 1 lit. f GDPR) on a good security system against various cyber attacks.

Certain processing, in particular the use of cookies and the use of security functions, require your consent. If you have agreed that data can be processed and saved by integrated security services, this consent is considered the legal basis of data processing (Art. 6 Para. 1 lit. a GDPR). Most of the services we use set cookies in your browser to store data. We therefore recommend that you read through our data protection text via cookies and to look at the data protection declaration or the cookie guidelines of the respective service provider.

You can find out information about special tools - if available - in the following sections.

UpdraftPlus data protection declaration

We use updraftplus, a backup and security system for our website. The service provider is the British company Updraft WP Software Ltd. 11 Barringer Way, St. Neots, PE19 1LW, Cambridgeshire, United Kingdom.

By leaving Britain from the European Union, the GDPR is no longer applicable to data transfer there. However, based on Art. 45 GDPR, the European Commission decided that Britain offers a level of protection that is appropriate compared to the GDPR. The data transfer there is therefore permitted. You can view the decision here (download): https://eur-lex.europa.eu/legal-content/de/txt/pdf/?uri=celex:32021d1772

You can find out more about the data processed by the use of updraft plus in the privacy policy on https://updraftplus.com/data-protection-and-privacy-centre/ .

Web design introduction

Web design data protection declaration Summary
👥 Visitors to the website
🤝 Purpose: Improvement of the user experience
📓 Processed data: Which data is processed depends heavily on the services used. Usually it is an IP address, technical data, language settings, browser version, screen resolution and name of the browser. You can find more details on the web design tools used.
📅 Storage duration: Depending on the tools used
⚖️ Legal bases: Art. 6 Para. 1 lit. a GDPR (consent), Art. 6 Para. 1 lit. f GDPR (legitimate interests)

What is web design?

We use various tools on our website that serve our web design. With web design, as often assumed, it is not about that our website looks pretty, but also about functionality and performance. But of course the right look of a website is also one of the great goals of professional web design. Web design is a sub -area of ​​the media design and deals with both the visual and the structural and functional design of a website. The aim is to improve your experience on our website with the help of web design. In the web design jargon one speaks in this context of User Experience (UX) and usability. User Experience means all the impressions and experiences that the website visitor experiences on a website. A sub -point of the user experience is usability. It is about the user -friendliness of a website. Above all, the value is placed on the fact that content, subpages or products are clearly structured and that they find easily and quickly what they are looking for. In order to offer you the best possible experience on our website, we also use so-called third-party web design tools. In this data protection declaration, all services that improve our website are under the "web design" category. This can be, for example, fonts, various plugins or other integrated web design functions.

Why do we use web design tools?

How to record information on a website depends very much on the structure, functionality and visual perception of the website. Therefore, a good and professional web design became increasingly important for us. We are constantly working on the improvement of our website and see this as an extended service for you as a website visitor. Furthermore, a beautiful and functioning website also has economic advantages for us. After all, they will only visit us and take our offers if they feel completely comfortable.

Which data is saved by web design tools?

When you visit our website, web design elements can be integrated in our pages that can also process data. Which data it is, of course, depends heavily on the tools used. You can also see exactly which tools we use for our website. We recommend that you read through the respective data protection declaration of the tools used for more information. Most of the time you will find out which data is processed, whether cookies are used and how long the data will be kept. Through fonts such as Google Fonts, for example, information such as language settings, IP address, version of the browser, screen resolution of the browser and name of the browser automatically transfers to the Google servers.

Duration of data processing

How long data is processed is very individual and depends on the web design elements used. For example, if cookies are used, the retention period can only take a minute, but also a few years. Please make yourself smart in this regard. On the one hand, we recommend that you recommend our general text section on cookies and the data protection declarations of the tools used. There you can usually find out which cookies are used and what information is saved in it. For example, Google Font files are saved for a year. This is intended to improve the loading time of a website. Basically, data is only kept as long as it is necessary for the provision of the service. For legal prescriptions, data can also be saved longer.

Right of contradictions

You also have the right to revoke your consent to the use of cookies or third -party providers at any time. This works either via our cookie management tool or other opt-out functions. You can also prevent data acquisition by cookies by manage, deactivating or deleting the cookies in your browser. However, there are also data that cannot be deleted as easily under web design elements (mostly for fonts). This is the case when data automatically collected and transmitted to a third -party provider (such as Google) directly in the event of a page call. Then please contact the support of the relevant provider. In the case of Google, you can reach support at https://support.google.com/?hl=de .

Legal basis

If you have consented that web design tools may be used, the legal basis of the relevant data processing is this consent. According to Art. 6 Para. 1 Lit. a GDPR (consent), this consent is the legal basis for the processing of personal data, as can be found in the collection by web design tools. From our website there is also a legitimate interest to improve the web design on our website. After all, we can only provide you with a nice and professional web offer. The corresponding legal basis is Art. 6 Para. 1 lit. f GDPR (legitimate interests). Nevertheless, we only use web design tools if you have given consent. We definitely want to emphasize that here again.

Information on special web design tools, if available, can be found in the following sections.

Google Fonts Local data protection declaration

On our website we use Google Fonts from Google Inc. For Europe, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible. We have integrated the Google fonts locally, i.e. on our web server-not on Google's servers. As a result, there is no connection to Google servers and therefore no data transmission or storage.

What are Google Fonts?

In the past, Google Fonts were also called Google Web Fonts. This is an interactive directory with over 800 fonts that Google provides free of charge. With Google Fonts you could use fonts without uploading them to your own server. But in order to prevent any information transfer to Google servers in this regard, we downloaded the fonts to our server. In this way we act in accordance with data protection and do not send any data on to Google Fonts.

Use of linguise (automatic website translation)

To provide our website in several languages, we use the Linguise , operated by DXT One, 32565 B Golden Lantern St, Suite 191, Dana Point, CA 92629, USA .

Linguise enables the automatic translation of website content. When calling the page, the service recognizes the language preset by the browser and delivers the corresponding language version. The IP address of website visitors be transmitted to the linguise server inside to provide the right language version.

The processing takes place on the basis of Art. 6 Para. 1 lit. f GDPR (legitimate interest in a user-friendly and multilingual representation of our online offer).

Further information on data processing by linguise can be found at:
https://www.linguise.com/de/

Closing word

Congratulations! When you read these lines, you have really "fought" yourself through our entire data protection declaration or at least scrolled down to here. As you can see on the scope of our data protection declaration, we take the protection of your personal data, anything but light shoulder.
It is important to us to inform you to the best of our knowledge and belief about the processing of personal data. However, we not only want to inform you which data is processed, but also bring the motives for the use of various software programs. As a rule, data protection declaration sounds very technically and legally. Since most of them are not web developers or lawyers, we also wanted to go a different way linguistically and explain the facts in a simple and clear language. Of course, this is not always possible due to the topic. Therefore, the most important terms are explained in more detail at the end of the data protection declaration.
If you have any questions about data protection on our website, please do not hesitate to contact us or the responsible body. We wish you a good time and hope to welcome you again on our website soon.

All texts are protected by copyright.

 

Last change: 23.04.2025

Contact us!

Schoenheits-Hand-Werk
private practice Dr. med. Gunther Oldag
Hauptstrasse 53
66798 Wallerfangen

- For route planning with Google Maps*

 

Telephone: 06831/4005904
E-Mail: Info@ schoenheits-hand-werk .de

.

* When clicking on the button, you will be forwarded to Google Maps. Please note that Google Maps needs your IP address for route planning, which may be forwarded to a server with a location in the USA. Map material created from OpenStreetMap data , license: Open Database License (ODBL)