Privacy Policy

1. Data Controller

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Phone:
+49 172 215 79 87

Email:
info@benz-aesthetics.com

2. General Information

Protecting your personal data is of utmost importance to us. This Privacy Policy explains how
BENZ AESTHETICS collects, processes and protects your personal data when you visit our website or contact us.

We process personal data exclusively in accordance with the applicable data protection laws, in particular the
General Data Protection Regulation (GDPR).

Personal data means any information relating to an identified or identifiable natural person, including, but not limited to,
your name, email address, telephone number, IP address or any information you voluntarily provide to us.

3. Hosting

This website is hosted by GoDaddy. Whenever you access our website, the hosting provider automatically collects
and stores technical information in so-called server log files.

This information may include:

• IP address
• Date and time of access
• Browser type and browser version
• Operating system
• Referring website (Referrer URL)
• Requested pages
• Amount of transmitted data

The processing of this information is necessary to ensure the secure, stable and reliable operation of our website,
to detect technical issues and to protect against cyber attacks.

The legal basis for this processing is
Article 6(1)(f) GDPR, reflecting our legitimate interest in providing a secure online service.

4. SSL / TLS Encryption

For security reasons and to protect the transmission of confidential information, this website uses
SSL/TLS encryption.

An encrypted connection can be recognised by the
“https://” address prefix and the lock symbol displayed in your browser.

Encryption ensures that information transmitted between your device and our website cannot easily be intercepted
or accessed by unauthorised third parties.

5. Cookies and Consent Management

Our website uses cookies. Cookies are small text files stored on your device that enable certain website functions
and improve your browsing experience.

Some cookies are technically necessary for the operation of the website. Other cookies are used for analytics,
statistics or marketing purposes.

When you visit our website for the first time, you will be presented with a cookie consent banner allowing you
to decide which categories of cookies you wish to accept.

You may change or withdraw your consent at any time through the cookie settings available on our website.

The legal basis for processing is
Article 6(1)(a) GDPR (consent) and
Article 6(1)(f) GDPR (legitimate interest in providing a functional and secure website).

6. Server Log Files

The hosting provider automatically stores certain technical information whenever our website is accessed.
These log files are processed exclusively for the following purposes:

• Ensuring the technical operation of the website
• Maintaining system security
• Identifying technical errors
• Preventing misuse
• Improving the stability and performance of our website

The information contained in server log files is not combined with other data sources.

7. Contacting Us

If you contact us by email or telephone, we process the personal data you voluntarily provide in order to respond to your enquiry.

Depending on your enquiry, this may include:

• Your name
• Telephone number
• Email address
• The content of your message
• Health-related information voluntarily provided by you

Your information will be processed solely for the purpose of responding to your enquiry and, where applicable,
preparing a consultation or treatment.

The legal basis for processing is Article 6(1)(b) GDPR (pre-contractual measures) and
Article 6(1)(f) GDPR (our legitimate interest in communicating with prospective patients).

Where special categories of personal data (such as health information) are processed,
this is done only where legally permitted or based on your explicit consent.

8. Contact Form

If you submit an enquiry using the contact form available on our website,
we process the information you provide solely for the purpose of handling your request.

Depending on the information submitted, this may include:

• Your name
• Email address
• Telephone number
• The content of your enquiry

Your information will not be disclosed to third parties unless required by law
or necessary for the processing of your enquiry.

The legal basis for processing is Article 6(1)(b) GDPR.

9. Appointment Booking

Appointments may currently be arranged by:

• Telephone
• Email
• The external booking platform Doctolib

If you choose to book an appointment via Doctolib, you will be redirected to the website operated by Doctolib.
Please note that the processing of personal data on the Doctolib website is carried out exclusively by Doctolib
in accordance with its own Privacy Policy.

Should direct online appointment booking become available on this website in the future,
this Privacy Policy will be updated accordingly.

10. WhatsApp Communication

We provide a mobile telephone number on our website that may also be used to contact us via WhatsApp.

If you choose to communicate with us via WhatsApp, we process the personal data you voluntarily provide,
including, where applicable:

• Your name
• Telephone number
• The content of your messages
• Any health-related information you choose to share

WhatsApp is a service provided by WhatsApp Ireland Limited,
Merrion Road, Dublin 4, D04 X2K5, Ireland.

Please note that the use of WhatsApp may involve the transfer of personal data
to companies within the Meta Group and, where applicable,
to countries outside the European Economic Area.

The use of WhatsApp is entirely voluntary.
If you prefer, you may contact us by telephone or email instead.

The legal basis for processing is
Article 6(1)(b) GDPR (pre-contractual measures) and
Article 6(1)(f) GDPR (our legitimate interest in providing efficient communication).

Where special categories of personal data are concerned,
processing is carried out only where legally permitted.

11. Newsletter

Visitors to our website may subscribe to our newsletter. For this purpose, we process your email address and, where applicable, your name.

Subscriptions are generally confirmed using a double opt-in procedure. After registering, you will receive a confirmation email requiring you to verify your subscription before receiving newsletters.

Our newsletter may include information about:

• Treatments and services
• Aesthetic medicine and cosmetic surgery
• Educational content
• Practice news
• Events
• Special announcements

You may withdraw your consent at any time with future effect by using the unsubscribe link contained in every newsletter or by contacting us directly.

The legal basis for processing is Article 6(1)(a) GDPR.

If we use an external newsletter service provider, such processing will be carried out solely on the basis of a Data Processing Agreement in accordance with Article 28 GDPR.

12. Google Analytics

Where Google Analytics is activated on this website and you have provided your consent, we use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies that enable us to analyse how visitors use our website.

Depending on your consent settings, the following information may be processed:

• Pages visited
• Session duration
• Click behaviour
• Browser type
• Operating system
• Device information
• Approximate geographic location
• Anonymised IP address (where applicable)

The information collected is used exclusively for statistical analysis and to improve the performance, usability and content of our website.

The legal basis for processing is Article 6(1)(a) GDPR.

You may withdraw your consent at any time through the cookie settings on our website.

Further information is available at:

https://policies.google.com/privacy

13. Google Tag Manager

Our website may use Google Tag Manager, a service provided by Google Ireland Limited.

Google Tag Manager itself does not generally collect or store personal data. Its purpose is to manage and deploy other website tags and services.

Where additional tracking technologies are implemented through Google Tag Manager, the corresponding provisions of this Privacy Policy apply.

The legal basis for processing is your consent pursuant to Article 6(1)(a) GDPR.

14. Google reCAPTCHA

To protect our contact forms from spam, abuse and automated requests, we may use Google reCAPTCHA, a service provided by Google Ireland Limited.

When reCAPTCHA is active, Google may process certain technical information, including:

• IP address
• Browser information
• Operating system
• Language settings
• Mouse movements
• Screen resolution
• Date and time of access
• Other technical information necessary to distinguish legitimate users from automated systems

The use of reCAPTCHA serves the legitimate interest of protecting our website and online services from misuse.

Where legally required, reCAPTCHA will only be activated following your consent.

15. YouTube

Our website contains embedded videos hosted on YouTube. YouTube is a service provided by Google Ireland Limited.

When you visit a page containing an embedded YouTube video, a connection may be established with YouTube’s servers.

Depending on your browser settings and consent preferences, YouTube may process personal data such as:

• IP address
• Browser information
• Device information
• Pages visited
• Viewing behaviour

If you are logged into your Google or YouTube account while visiting our website, Google may associate your visit with your personal account.

Where required by applicable law, embedded YouTube content will only be loaded after you have granted your consent via our cookie consent tool.

The legal basis for processing is Article 6(1)(a) GDPR.

Further information is available at:

https://policies.google.com/privacy

16. Social Media Links

Our website contains links to our official profiles on the following social media platforms:

• Instagram
• Facebook
• YouTube
• LinkedIn

These are standard external links only. No personal data is automatically transferred to these platforms simply by visiting our website.

Only after you actively click one of these links will you leave our website and be redirected to the respective platform, where the privacy policies of the relevant provider will apply.

17. Online Payments

Our website may in the future offer the possibility of making payments online for selected services.

Should online payment functionality be introduced, payments will be processed exclusively through reputable payment service providers.

The categories of personal data processed will depend on the payment provider selected and the payment method used.

Personal data will be processed solely for the purpose of completing the payment transaction and fulfilling contractual obligations.

This Privacy Policy will be updated once a specific payment provider has been implemented.

The legal basis for processing is Article 6(1)(b) GDPR.

18. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable legal retention obligations.

Once the relevant purpose no longer applies and statutory retention periods have expired, personal data will be securely deleted or anonymised in accordance with applicable law.

19. Your Rights under the GDPR

Subject to the applicable legal requirements, you have the following rights under the General Data Protection Regulation:

• The right of access (Article 15 GDPR)
• The right to rectification (Article 16 GDPR)
• The right to erasure (“right to be forgotten”) (Article 17 GDPR)
• The right to restriction of processing (Article 18 GDPR)
• The right to data portability (Article 20 GDPR)
• The right to object to processing (Article 21 GDPR)
• The right to withdraw your consent at any time with future effect

To exercise any of these rights, please contact us using the contact details provided in Section 1 of this Privacy Policy.

20. Right to Lodge a Complaint

If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority.

This right exists without prejudice to any other administrative or judicial remedy available under applicable law.

21. Legal Bases for Processing

Unless a more specific legal basis is stated in this Privacy Policy, we process personal data on one or more of the following legal grounds under the General Data Protection Regulation (GDPR):

• Article 6(1)(a) GDPR – Your consent.
• Article 6(1)(b) GDPR – Processing necessary for the performance of a contract or in order to take steps prior to entering into a contract.
• Article 6(1)(c) GDPR – Compliance with a legal obligation.
• Article 6(1)(f) GDPR – Our legitimate interests, provided these are not overridden by your interests or fundamental rights and freedoms.

Where special categories of personal data are processed, particularly health-related information within the meaning of Article 9 GDPR, such processing takes place only where permitted by law, based on your explicit consent, or where otherwise authorised under Article 9 GDPR.

22. Recipients of Personal Data

We disclose personal data to third parties only where this is legally permitted, necessary for the provision of our services, or where you have given your consent.

Recipients of personal data may include, in particular:

• Our hosting provider;
• IT service providers and technical support partners;
• Website maintenance providers;
• Providers of analytics and statistical services;
• Providers of communication services, including WhatsApp;
• External appointment booking providers, including Doctolib;
• Newsletter service providers, where applicable;
• Payment service providers, where applicable;
• Public authorities, courts or regulatory bodies where disclosure is required by law.

Where external service providers process personal data on our behalf, this is carried out solely on the basis of a Data Processing Agreement in accordance with Article 28 GDPR.

23. International Data Transfers

Certain services integrated into our website may involve the transfer of personal data to countries outside the European Economic Area (“EEA”), including, in particular, the United States.

This may apply to services provided by Google (such as Google Analytics, Google Tag Manager and YouTube), WhatsApp and other technology providers used in connection with our website.

Where personal data is transferred to a country outside the EEA, such transfers are carried out only where an appropriate legal basis exists under the GDPR.

Depending on the service provider, this may include:

• An adequacy decision adopted by the European Commission;
• The European Commission’s Standard Contractual Clauses (SCCs); or
• Other safeguards recognised under applicable data protection law.

Further information regarding international data transfers is available in the privacy policies of the respective service providers.

24. Automated Decision-Making

BENZ AESTHETICS does not use automated decision-making or profiling within the meaning of Article 22 GDPR that produces legal effects concerning you or similarly significantly affects you.

25. Obligation to Provide Personal Data

As a general rule, the provision of personal data is voluntary.

However, certain information may be required in order to process your enquiry, arrange an appointment, provide medical consultation or enter into a treatment agreement.

If you choose not to provide the information necessary for these purposes, we may be unable to respond to your request or provide the requested services.

26. Recruitment and Job Applications

If you apply for a position with BENZ AESTHETICS, whether in response to a published vacancy or on your own initiative, we process the personal data contained in your application solely for the purpose of conducting the recruitment process.

This may include:

• Your contact details;
• Curriculum vitae (CV);
• Certificates and qualifications;
• Employment history;
• References; and
• Any other information voluntarily provided by you.

Your application documents will be treated confidentially and will only be accessible to individuals directly involved in the recruitment process.

If your application is unsuccessful, your personal data will be deleted after the applicable statutory retention period has expired, unless you have expressly consented to longer retention.

27. Children and Minors

Our website and services are intended primarily for adults.

Individuals under the age of 18 should not submit personal data through this website without the consent of a parent or legal guardian.

We do not knowingly collect or process personal data from children unless permitted by applicable law or based on the consent of the child’s legal representative.

28. Medical Disclaimer

The information provided on this website is intended solely for general informational purposes and does not constitute medical advice, diagnosis or treatment.

Visiting this website, contacting us via email or WhatsApp, or submitting an enquiry through our contact form does not establish a doctor-patient relationship.

Medical advice, diagnoses and treatment recommendations can only be provided following an appropriate personal consultation and medical assessment.

For your own privacy and security, we recommend that you transmit only the information necessary for your enquiry when using electronic communication channels.

If you are experiencing a medical emergency, please contact your local emergency services or the nearest emergency department immediately.

29. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy at any time to reflect changes in legal requirements, technical developments or modifications to our website and services.

The version published on this website at the time of your visit shall apply.

Where required by law, material changes will be communicated appropriately.

30. Contact

If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact:

Phone:
+49 172 215 79 87

Email:
info@benz-aesthetics.com