1. Privacy at a glance
General information
The following information gives you a simple overview of what happens to your personal data when you visit this website. Personal data is any information that can be used to identify you personally. For detailed information about data protection, please refer to our privacy policy below.
Data collection on this website
Who is responsible for collecting data on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the section “Information about the controller” in this privacy policy.
How do we collect your data?
Some of your data is collected when you provide it to us. This may include, for example, information you enter in a contact form or when making a booking.
Other data is collected automatically or after you have given your consent when you visit the website through our IT systems. This primarily consists of technical data, such as your internet browser, operating system or the time you accessed a page. This data is collected automatically as soon as you enter this website.
What do we use your data for?
Some of the data is collected to ensure that the website functions correctly. Other data may be used to analyse your behaviour as a user.
What rights do you have regarding your data?
You have the right to obtain information at any time, free of charge, about the origin, recipients and purpose of your stored personal data. You also have the right to request that this data be corrected or deleted. If you have given consent to data processing, you may withdraw that consent at any time with effect for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. In addition, you have the right to lodge a complaint with the competent supervisory authority.
You can contact us at any time about these rights or any other questions relating to data protection.
2. Hosting
We host the contents of our website with the following provider:
External hosting
This website is hosted externally. Personal data collected on this website is stored on the servers of the hosting provider or providers. This may primarily include IP addresses, contact enquiries, metadata and communication data, contractual data, contact details, names, website access information and other data generated through a website.
External hosting is used for the purpose of fulfilling contracts with our prospective and existing customers, under Article 6(1)(b) GDPR, and in the interests of providing our online services securely, quickly and efficiently through a professional provider, under Article 6(1)(f) GDPR. Where the relevant consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG), insofar as consent covers the storage of cookies or access to information on the user's device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.
Our hosting provider or providers will process your data only to the extent necessary to fulfil their obligations to provide the service and will follow our instructions regarding this data.
We use the following hosting provider:
HOSTINGER operations, UAB
Švitrigailos str. 34, Vilnius 03230 Lithuania
Phone: +37064503378
Email: domains@hostinger.com
3. General information and mandatory disclosures
Data protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection provisions and this privacy policy.
When you use this website, various types of personal data are collected. Personal data is information that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.
Please note that transmitting data over the internet, for example when communicating by email, may involve security vulnerabilities. Complete protection of data against access by third parties is not possible.
Information about the controller
The controller responsible for data processing on this website is:
Seliem Taher [Vietec]
Mittelstraße 54
68169 Mannheim
Telephone: 0176 31035878
Email: info@vietec.de
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names, email addresses or similar information.
Retention period
Unless a more specific retention period is stated in this privacy policy, your personal data will remain with us until the purpose for processing it no longer applies. If you submit a justified request for deletion or withdraw consent to data processing, your data will be deleted unless we have other legally permissible reasons for retaining it, such as retention periods under tax or commercial law. In that case, the data will be deleted once those reasons no longer apply.
General information about the legal bases for data processing on this website
If you have consented to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR or, where special categories of data under Article 9(1) GDPR are processed, Article 9(2)(a) GDPR. If you expressly consent to the transfer of personal data to third countries, processing is also based on Article 49(1)(a) GDPR. If you have consented to cookies being stored or to information on your device being accessed, for example through device fingerprinting, processing is additionally based on section 25(1) TDDDG. Consent may be withdrawn at any time. If your data is required to fulfil a contract or to take steps prior to entering into a contract, we process it on the basis of Article 6(1)(b) GDPR. We also process your data on the basis of Article 6(1)(c) GDPR where this is necessary to comply with a legal obligation. Data may also be processed on the basis of our legitimate interests under Article 6(1)(f) GDPR. The following paragraphs explain the legal bases applicable in each individual case.
Recipients of personal data
In the course of our business activities, we work with various external parties. This sometimes requires personal data to be transferred to those parties. We disclose personal data to external parties only where this is necessary to fulfil a contract, where we are legally required to do so, for example when providing data to tax authorities, where we have a legitimate interest in disclosure under Article 6(1)(f) GDPR, or where another legal basis permits disclosure. When using data processors, we disclose our customers' personal data only on the basis of a valid data processing agreement. Where processing is carried out jointly, a joint processing agreement is concluded.
Withdrawing your consent to data processing
Many data processing operations are possible only with your express consent. You may withdraw consent you have already given at any time. Withdrawal does not affect the lawfulness of data processing carried out before consent was withdrawn.
Right to object to data collection in specific cases and to direct marketing (Article 21 GDPR)
WHERE DATA PROCESSING IS BASED ON ARTICLE 6(1)(e) OR (f) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA. THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. THE LEGAL BASIS ON WHICH PROCESSING IS CARRIED OUT IS SET OUT IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) GDPR).
WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING. THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ARTICLE 21(2) GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work or the place of the alleged infringement. This right exists without prejudice to other administrative or judicial remedies.
Right to data portability
You have the right to receive data that we process automatically on the basis of your consent or in performance of a contract, or to have it provided to a third party, in a commonly used, machine-readable format. If you request the direct transfer of data to another controller, this will be done only where technically feasible.
Access, rectification and erasure
Within the scope of the applicable legal provisions, you have the right at any time to obtain information, free of charge, about your stored personal data, its origin and recipients, and the purpose of processing, and, where applicable, the right to have that data corrected or deleted. You may contact us at any time about this or other questions concerning personal data.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. You may contact us at any time to exercise this right. The right to restriction of processing applies in the following cases:
- If you contest the accuracy of the personal data we hold about you, we generally need time to verify it. For the duration of that verification, you have the right to request the restriction of the processing of your personal data.
- If your personal data has been or is being processed unlawfully, you may request restriction of processing instead of erasure.
- If we no longer need your personal data but you require it to establish, exercise or defend legal claims, you have the right to request restriction of processing instead of erasure.
- If you have lodged an objection under Article 21(1) GDPR, your interests must be weighed against ours. Until it has been established whose interests prevail, you have the right to request the restriction of the processing of your personal data.
Where you have restricted the processing of your personal data, that data may, apart from being stored, be processed only with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or enquiries you send to us as the website operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the change in the browser address line from “http://” to “https://” and by the lock symbol in your browser's address bar.
When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
4. Data collection on this website
Cookies
Our websites use cookies. Cookies are small data packages and do not harm your device. They are stored on your device either temporarily for the duration of a session, as session cookies, or permanently, as persistent cookies. Session cookies are automatically deleted at the end of your visit. Persistent cookies remain stored on your device until you delete them or your web browser deletes them automatically.
Cookies may originate from us, as first-party cookies, or from third-party companies, as third-party cookies. Third-party cookies enable certain services provided by third parties to be integrated into websites, such as cookies used to process payments.
Cookies serve various purposes. Many cookies are technically necessary because certain website functions would not work without them, such as a shopping basket or displaying videos. Other cookies may be used to analyse user behaviour or for advertising purposes.
Cookies required to carry out electronic communications, provide certain functions you have requested, such as a shopping basket, or optimise the website, such as cookies used to measure website audiences, are stored as necessary cookies on the basis of Article 6(1)(f) GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to provide its services in a technically correct and optimised manner. Where consent to storing cookies and comparable recognition technologies has been requested, processing is carried out exclusively on the basis of that consent under Article 6(1)(a) GDPR and section 25(1) TDDDG. Consent may be withdrawn at any time.
You can configure your browser to inform you when cookies are set and to allow cookies only on a case-by-case basis, to exclude cookies in certain cases or in general, and to delete cookies automatically when you close the browser. Disabling cookies may restrict the functionality of this website.
This privacy policy explains which cookies and services are used on this website.
CookieFirst – managing your consent
We use CookieFirst, a service provided by Digital Data Solutions B.V., Plantage Middenlaan 42a, 1018 DH Amsterdam, the Netherlands. We use it to collect and store your choices about cookies and services that require consent, and to document consent you have given, changed or withdrawn.
The data processed includes your choices, the date and time, a randomly generated identifier, the website visited, and information about your browser and operating system. Your IP address is processed to establish the technical connection and, according to the provider, is recorded in anonymised form. CookieFirst also stores your choices in your browser so that they can be applied on subsequent visits.
The required documentation is based on Article 6(1)(c) GDPR in conjunction with Article 7(1) GDPR. Where accessing or storing information on your device is strictly necessary to manage your choices, the legal basis is section 25(2), no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG). Consent records are retained for as long as necessary to demonstrate compliance with our data protection obligations and are then deleted.
You can change your choices and withdraw consent at any time through “Cookie settings”, with effect for the future. This does not affect the lawfulness of processing carried out before withdrawal. Our cookie overview provides details of individual cookies, their purposes, providers and lifetimes.
Further information: CookieFirst privacy policy.
Google Analytics 4
Google Analytics 4 is not currently enabled on this website. We do not currently collect usage statistics through this service. We plan to use it only after obtaining your consent.
We plan to use Google Analytics 4 to analyse the use of our website statistically and improve our content. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes analytics data on our behalf.
Once the service is enabled and you have given your consent, the data collected may include page views, interactions, visit duration, the source of the visit, browser and device information, and an approximate location. Cookies and similar identifiers allow visits and usage patterns to be recognised. This constitutes pseudonymous usage data.
According to Google, IP addresses of users in the EU are used to derive approximate location information and then discarded; they are not logged or stored in Analytics. Further information: Google Analytics – data and privacy.
Google Analytics is used exclusively on the basis of your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG. Consent may be withdrawn at any time through the cookie consent tool.
Before enabling the service, we will add the actual retention period configured for user and event data associated with identifiers, together with the setting governing whether new activity restarts that retention period. This retention setting does not apply to standard aggregated reports. Cookie lifetimes are listed separately in our cookie overview. The shared information about Google below applies to transfers outside the EEA.
Google Ads and conversion measurement
Google Ads and its conversion measurement are not currently enabled on this website. We do not currently transmit measurement data about ad interactions or bookings through these services. We plan to use them only after obtaining your consent.
We plan to use Google Ads to advertise our services and, after obtaining your consent, to measure the success of our advertising. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Conversion measurement helps us recognise whether an interaction with an advertisement has led to a defined action on our website and improve our campaigns.
Cookies, cookie identifiers and ad click identifiers may be used for this purpose. Once the service is enabled and you have given your consent, information about pages viewed, the time and type of action measured, IP address, browser and device may be transmitted to Google. We receive reports on advertising performance, which we use for statistical evaluation and optimisation of our advertising activities.
The measurement technologies used on our website will be activated only after you have given your consent. The legal bases are Article 6(1)(a) GDPR and section 25(1) TDDDG. You can withdraw consent at any time through “Cookie settings”, with effect for the future.
Before enabling the service, we will add information about the measurement functions used and the retention of measurement data. You can find the lifetimes of the cookies used in our cookie overview. Further information: How Google uses data from partner websites.
Shared information about Google Analytics and Google Ads
In addition to Google Ireland Limited, recipients of the data may include Google LLC in the USA and other Google service providers. Data may be processed outside the European Economic Area. For transfers to Google LLC, which is certified under the EU-US Data Privacy Framework, Google relies on the adequacy decision under Article 45 GDPR. Where a transfer is not covered by that decision, Google states that it uses safeguards including the EU standard contractual clauses under Article 46 GDPR.
Information about and access to the safeguards used: Google's frameworks for data transfers. Further information about data processing and your rights in relation to Google: Google's privacy policy.
Server log files
The website provider automatically collects and stores information in server log files that your browser transmits to us automatically. This includes:
- Browser type and version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
This data is not combined with other data sources.
This data is collected on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in the technically correct presentation and optimisation of its website, which requires the collection of server log files.
Contact form
If you send us enquiries through the contact form, the information you provide in that form, including your contact details, will be stored by us to process the enquiry and in case of follow-up questions. We will not disclose this data without your consent.
This data is processed on the basis of Article 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary to take steps prior to entering into a contract. In all other cases, processing is based on our legitimate interest in effectively handling enquiries addressed to us, under Article 6(1)(f) GDPR, or on your consent under Article 6(1)(a) GDPR where this has been requested. Consent may be withdrawn at any time.
The data you enter in the contact form will remain with us until you request its deletion, withdraw your consent to storage, or the purpose for storing the data no longer applies, for example after your enquiry has been fully handled. Mandatory statutory provisions, particularly retention periods, remain unaffected.
Details in the contact form
To send an enquiry, provide your first and last name, email address and a message. You may also add a telephone number and details of your concern if you wish.
Briefly describe your concern and provide only the details needed for your enquiry. Medical records and further details can be discussed in person.
Handling your enquiry
When you submit the form, your entries are sent to Aesthetic Munich by email. These details are used to handle your enquiry and reply using the contact information you provided.
Before submission, the required details and your consent to processing for the purpose of handling the enquiry are requested.
Session cookie for form security
The contact form uses a session cookie. It associates the form with your session and helps protect against abusive submissions.
Enquiries by email, telephone or fax
If you contact us by email, telephone or fax, we will store and process your enquiry, including all personal data arising from it, such as your name and the content of the enquiry, for the purpose of handling your request. We will not disclose this data without your consent.
This data is processed on the basis of Article 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary to take steps prior to entering into a contract. In all other cases, processing is based on our legitimate interest in effectively handling enquiries addressed to us, under Article 6(1)(f) GDPR, or on your consent under Article 6(1)(a) GDPR where this has been requested. Consent may be withdrawn at any time.
The data you send us through contact enquiries will remain with us until you request its deletion, withdraw your consent to storage, or the purpose for storing the data no longer applies, for example after your request has been fully handled. Mandatory statutory provisions, particularly statutory retention periods, remain unaffected.
5. Plugins and tools
Google Maps
This website uses the Google Maps mapping service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. This service enables us to embed maps on our website.
To use the features of Google Maps, your IP address must be stored. This information is generally transmitted to a Google server in the USA and stored there. The provider of this website has no influence over that transfer. When Google Maps is activated, Google may use Google Fonts to ensure consistent font display. When you access Google Maps, your browser loads the required web fonts into its cache to display text and fonts correctly.
Google Maps is used in the interests of presenting our online services attractively and making the locations listed on our website easy to find. This constitutes a legitimate interest under Article 6(1)(f) GDPR. Where the relevant consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and section 25(1) TDDDG, insofar as consent covers the storage of cookies or access to information on the user's device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.
Data transfers to the USA are based on the European Commission's standard contractual clauses. Details are available at https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
Further information about how user data is handled can be found in Google's privacy policy at https://policies.google.com/privacy?hl=en.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards when data is processed in the United States. Each company certified under the DPF undertakes to comply with those standards. Further information is available from the provider at https://www.dataprivacyframework.gov/participant/5780.
Online appointment booking with Shore
For online appointment booking, we use Shore, a service provided by Shore GmbH, Lothstr. 19, 80797 Munich, Germany. The booking service can be opened in an embedded window directly on our website.
The Shore widget is loaded only after you have consented to functional services through the cookie notice. Your choice also applies to our other pages. When the widget loads, Shore receives information including your IP address, browser and device details, the time of access and, where applicable, the referring page. Loading the embedded service is based on your consent under Article 6(1)(a) GDPR and, where storage or access on your device requires consent, section 25(1) TDDDG. You can withdraw this permission through “Cookie settings”.
If you decline the embedded service, a standard appointment button remains available with a link to Shore’s external booking page. You leave our website and access Shore’s booking page only when you follow that link. On mobile devices, booking may also open on Shore’s external page. You can also book by telephone on 0174 9390409.
When you book, we process the details you enter, particularly your name, email address or telephone number, selected service and appointment. We use these details to arrange and organise appointments and to communicate with you about your booking. The legal basis is Article 6(1)(b) GDPR. Shore processes booking data on our behalf as a data processor.
Please do not enter medical information that is unnecessary for arranging your appointment. If your choice of service or other information you provide reveals health data, we process it only on the basis of your separate, explicit consent under Article 9(2)(a) GDPR. You can withdraw that consent at any time by contacting us, with effect for the future. Cookie consent does not replace this separate consent.
Booking data is deleted when it is no longer required for arranging the appointment and related purposes. Statutory retention requirements remain unaffected. Any information included in treatment records is subject to the separate retention periods applicable to those records.
Further information: Shore privacy policy.
Last updated:
