Privacy Policy

Information about the collection and processing of your personal data.

1. Responsible Party

The party responsible for data processing on this website in accordance with the General Data Protection Regulation (GDPR) is:

Praxis Dr. med. Thomas Ackermann
Niederndorfer Hauptstr. 41
91074 Herzogenaurach
Phone: 09132 90 24 770
Email: praxis@thomas-ackermann.com

2. Data Collection on Our Website (Hosting & Logfiles)

Our website is hosted by an external service provider. When you visit our website, the server automatically collects technical data (server log files), such as your IP address, browser type, operating system, and the time of the page view. This collection is based on Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the technically flawless presentation and optimization of our website.

SSL or TLS encryption: For security reasons and to protect the transmission of confidential content (such as orders or inquiries), this website uses SSL or TLS encryption. You can recognize this by the “https://” in your browser’s address bar.

3. Online Shop (WooCommerce) & Payment Providers

We offer medical-aesthetic treatments for booking via our website. To process contracts, we process the data you provide during the order process (name, address, email, contact details). The legal basis for this is the fulfillment of a contract or pre-contractual measures (Art. 6 Para. 1 lit. b GDPR).

Payment service providers: To process payments, we integrate external payment service providers (e.g., PayPal, Stripe, Klarna, or credit card providers). When paying, you transmit your payment data directly to these providers. We do not store your complete credit card or bank details on our servers. The data protection regulations of the respective payment providers apply.

4. Appointment Booking & Health Data (Art. 9 GDPR)

When you book appointments via our contact form or our online booking system, we collect data to process your request. As we are a medical practice, this information may include special categories of personal data (health data). Processing is carried out in strict compliance with medical confidentiality based on your explicit consent (Art. 9 Para. 2 lit. a GDPR) and for the provision of our medical services.

5. Cookies & Web Analytics (Google Analytics)

Our website uses cookies. Necessary cookies ensure the basic functions of the website (e.g., the shopping cart in the shop). In addition, we use (exclusively after your prior, active consent via our cookie banner in accordance with Art. 6 Para. 1 lit. a GDPR) analytics cookies.

Google Analytics: If you have given your consent, we use Google Analytics, a web analytics service provided by Google. We have activated IP anonymization so that your IP address is truncated within the EU beforehand. You can revoke your consent at any time via the cookie settings at the bottom of our website.

6. Your Rights

Within the framework of the applicable legal provisions, you have the right at any time to:

• Information about your stored personal data (Art. 15 GDPR)
• Rectification of incorrect data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)

To exercise these rights, you can contact the address provided in the imprint above at any time.

7. Right to Lodge a Complaint with the Supervisory Authority

In the event of data protection violations, you have the right to lodge a complaint with the competent supervisory authority. The competent authority is:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18, 91522 Ansbach
Website: www.lda.bayern.de