Privacy Policy

Personal data means any information relating to an identified or identifiable natural person. This includes, for example, your name, email address, telephone number or IP address.

We process personal data only where there is a legal basis for doing so. Depending on the nature of the processing, this is based in particular on:

• your consent pursuant to Article 6(1)(a) GDPR;
• the performance of a contract or the implementation of pre-contractual measures pursuant to Article 6(1)(b) GDPR;
• compliance with a legal obligation pursuant to Article 6(1)(c) GDPR; or
• our legitimate interests pursuant to Article 6(1)(f) GDPR, provided that your interests or fundamental rights and freedoms do not override those interests.

We process personal data only to the extent necessary for the respective purposes.

Our website is hosted on the Odoo Online cloud platform.

For the operation of our website, we use Odoo S.A. as our technical service provider. Where Odoo processes personal data on our behalf, this is carried out on the basis of a Data Processing Agreement in accordance with Article 28 GDPR.

When you access our website, the hosting provider automatically processes technical information required to make the website available and to ensure its security and stability.

This may include in particular:

• IP address of the requesting device;
• date and time of access;
• pages and files accessed;
• volume of data transferred;
• browser type and browser version;
• operating system used;
• referring URL;
• information on successful or unsuccessful access requests.

The processing is carried out to ensure the secure and reliable operation of the website and to protect against attacks and misuse.

The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest lies in providing a secure, stable and efficient online service.

When you visit our website, certain technical information is automatically stored in so-called server log files.

These data are used exclusively for:

• ensuring the reliable operation of the website;
• maintaining IT security;
• analysing technical errors; and
• preventing and investigating misuse or unauthorised access.

The processing is carried out on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR.

Our website uses cookies. Cookies are small text files stored on your device that contain certain information. They help us provide a user-friendly, secure and technically functional website.

Some cookies are essential for the operation of the website and are set automatically. Other cookies are only used with your consent.

When you visit our website for the first time, you can choose which categories of optional cookies you wish to allow through our consent management system. You may change or withdraw your consent at any time with future effect.

Depending on the type of cookie, processing is carried out:

• on the basis of your consent pursuant to Article 6(1)(a) GDPR; or
• on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR in ensuring the technically reliable operation of our website.

Further information about the cookies we use can be found in our Cookie Policy.

We use Plausible Analytics to analyse and optimise our website.

The purpose of the web analytics is solely to evaluate the use of our website statistically and to continuously improve our services. Only aggregated usage data are processed.

Plausible Analytics operates within our Odoo Online environment. According to the provider, the service is designed with privacy in mind and does not create user profiles or track visitors across different websites.

The collected data are used exclusively to generate aggregated usage statistics.

The processing is based on our legitimate interest pursuant to Article 6(1)(f) GDPR in analysing and improving our online services.

If you contact us using our contact form, we process the personal data you provide solely for the purpose of handling your enquiry and communicating with you.

Depending on the nature of your enquiry, the following data may be processed:

• name;
• email address;
• company;
• telephone number (where provided);
• the content of your message;
• the date and time of your enquiry.

The information marked as mandatory is required in order to process your enquiry. Any additional information is provided voluntarily.

Processing is carried out:

• for the implementation of pre-contractual measures pursuant to Article 6(1)(b) GDPR where your enquiry relates to the conclusion of a contract; or
• on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR in responding to general enquiries.

Your data will only be retained for as long as necessary to process your enquiry or where statutory retention obligations apply.

Please do not submit any health data or other special categories of personal data within the meaning of Article 9 GDPR via the contact form unless we have expressly requested you to do so.

Our website allows you to book appointments online.

For this purpose, we process the personal data you provide to the extent necessary to plan, organise and manage your appointment. This may include your name, contact details and information relating to your requested appointment.

Appointment management is carried out using the Odoo application integrated into our website. As part of the appointment process, automated appointment confirmations and reminders may be sent.

The legal basis for this processing is Article 6(1)(b) GDPR where the appointment relates to pre-contractual measures or the performance of a contract. In all other cases, processing is based on our legitimate interest pursuant to Article 6(1)(f) GDPR in ensuring efficient appointment management.

When booking appointments, we also ask you not to provide any health data or confidential information in free-text fields unless this is necessary for arranging the appointment.

We use Odoo’s integrated Customer Relationship Management (CRM) system to manage customers, prospective customers and business contacts.

As part of establishing and maintaining business relationships, we may process in particular:

• name;
• company;
• contact details;
• communication records;
• appointment and correspondence information; and
• information relating to existing or prospective business relationships.

The processing is carried out solely for the purpose of managing our business relationships, handling enquiries, initiating contracts and performing contractual obligations.

The legal basis is Article 6(1)(b) GDPR where the processing is necessary for entering into or performing a contract. In all other cases, processing is based on our legitimate interest pursuant to Article 6(1)(f) GDPR in the efficient organisation of our customer and business relationships.