Privacy policy

Definitions

Under Art. 4(1) GDPR, personal data means any information relating to an identified or identifiable natural person; a natural person is regarded as identifiable who can be identified, directly or indirectly, in particular by reference to

Under Art. 4(2) GDPR, “processing” means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage

Controller

Dr Sussan Rosenthal
derma utoquai
Theatinerstrasse 31
80333 Munich

Phone: +49 89 89 12 94 00
Email: contact@munich-hairtransplant.com

Data protection officer

We have not appointed a data protection officer, nor are we legally required to. Please address any request to the controller.

Types of data processed

Basic data (name, address, etc.)
Contact data (email, telephone number, etc.).
Meta / communication / usage data (IP address, operating system, etc.).

Your rights

Right of access (Art. 15 GDPR)

You may ask us to confirm whether we process personal data concerning you. If we do, you have a right of access to that data and to the information set out in Art. 15(1) GDPR.

Right to rectification (Art. 16 GDPR)

If we process inaccurate personal data concerning you, you have the right to request its rectification. You also have the right to have incomplete personal data completed.

Right to erasure (Art. 17 GDPR)

Where one of the grounds in Art. 17(1) GDPR applies, you have the right to request the erasure of your personal data without undue delay. This does not apply where one of the grounds in Art. 17(3) GDPR applies.

Right to restriction of processing (Art. 18 GDPR)

Where one of the conditions in Art. 18(1) GDPR is met, you have the right to request restriction of the processing of your data.

Right to object to processing (Art. 21 GDPR)

If we process your personal data on the basis of Art. 6(1)(e) or (f) GDPR, you have the right under Art. 21(1) GDPR to object to that processing on grounds relating to your particular situation.

Right to data portability (Art. 20 GDPR)

Where the conditions of Art. 20(1) GDPR are met, you have the right to receive the personal data concerning you that you provided to us in a structured, commonly used and machine-readable format, and you have the right to

Right to withdraw consent at any time (Art. 7(3) GDPR)

You have the right to withdraw your consent at any time. This does not affect the lawfulness of processing carried out on the basis of that consent before its withdrawal.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

You may also address any complaint about the processing of your personal data to a data protection supervisory authority. The authority responsible for us as controller is the

Bavarian State Office for Data Protection Supervision
Promenade 18
91522 Ansbach

Phone: +49 981 180093-0
Fax: +49 981 180093-800
Email: poststelle@lda.bayern.de

You may, however, address your complaint to any data protection supervisory authority, including the authority for your place of residence or work, or the place of the alleged infringement.

Existence of automated decision-making, including profiling (Art. 13(2)(f), Art. 22(1) and (4) GDPR)

We do not carry out automated decision-making, including profiling (Art. 13(2)(f), Art. 22(1) and (4) GDPR).

Processing operations

Personal data is processed in the following operations:

Cookies

To make visiting our website attractive and to enable certain features, we use cookies on various pages. These are small text files stored on your device. Some of the cookies we use

You can set your browser to notify you when cookies are set and decide on each one individually, or to refuse cookies in certain cases or generally. If cookies are not accepted, the functionality of our

The purpose of processing is therefore the optimal use and functioning of our website and the provision of the necessary services. The legal basis for cookies that are not technically necessary is your consent under Art.

Contact form / enquiry by telephone or email

If you contact us via the contact form on our website, the data you enter there will be processed.

The purpose of processing is to answer your enquiry and to fulfil any (pre-)contractual obligations. The legal basis is (implied) consent under Art. 6(1)(a) GDPR and, where applicable, Art. 6(1)(b) GDPR.

We store the data for as long as is necessary to answer your enquiry or to fulfil (pre-)contractual or statutory obligations.

The same applies to contact by telephone and by email.

Cookie Banner

We use a cookie banner to manage our cookies. That tool itself sets a cookie, but a technically necessary one (see “Cookies” above). This cookie manages the use of other cookies, along with your

Google Analytics (and Google Tag Manager)

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), together with Google Tag Manager, which Google provides to enable the implementation of Google Analytics

Google Analytics uses “cookies”, text files stored on your computer that allow an analysis of how visitors use the website. The information generated by the cookie about your use of this website is

You can prevent cookies from being stored by adjusting your browser settings; please note, however, that you may then not be able to use the full functionality of this website. You can also

Because using Google Analytics may transfer personal data to the USA, and because the parent company of Google Ireland is a US company, a transfer of data to third countries takes place (Art. 44 ff. GDPR), or at least cannot be

In addition to this legislation, US companies in the telecommunications sector and providers of “remote computing services” (which includes cloud providers in particular) are subject to the so-called CLOUD Act (Clarifying Lawful Overseas Use of Data Act). This is a

If US authorities obtain access to your data under the law currently in force in the USA, you as an EU citizen have no effective legal remedy available. The risk in this processing therefore lies in particular in the absence of enforceable

If you give us your consent, you do so in the knowledge of the risks just described. Your consent is the legal basis for the transfer of data to a third country under Art. 49(1)(a) GDPR.

Google Maps

We embed Google Maps on our website via the Google API. Google Maps is an interactive mapping service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, legal notice: https://www.google.com/intl/en/contact/impressum.html. Google Ireland Limited is a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google's privacy policy can be viewed here: https://policies.google.com/privacy?hl=en.

If you open a subpage on which the Google Maps plugin is implemented and click the “Load map” button, Google receives information about that request. Alongside this, the meta, communication and usage data described above is also sent to Google

Because using Google Maps transfers personal data to the USA, and because the parent company of Google Ireland is a US company, a transfer of data to third countries takes place (Art. 44 ff. GDPR), or at least cannot be excluded

If you give us your consent (by clicking the “Load map” button), you do so in the knowledge of the risks just described. Your consent is the legal basis for the transfer of data

Google Ads

This website uses “Google Ads”, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The parent company of Google Ireland is the US-based https://ads.google.com/intl/en/home/faq/gdpr/

Google Ads allows us to draw attention to our services through advertising on external websites. Using the data Google Ads provides, we can determine how successful our individual campaigns are. With

You can prevent cookies from being stored by adjusting your browser settings, or refuse consent; please note, however, that you may then not be able to use the full functionality of this website.

Because using Google Ads may transfer personal data to the USA, and because the parent company of Google Ireland is a US company, a transfer of data to third countries takes place (Art. 44 ff. GDPR), or at least cannot be

If you give us your consent, you do so in the knowledge of the risks just described. Your consent is the legal basis for the transfer of data to a third country under Art. 49(1)(a) GDPR.

Sources

https://www.canva.com/

https://fontana-klinik.de/