Privacy Policy
This translation is provided for information purposes only. Only the German version is legally binding: go to the German version.
1. Controller
HM Medical Hair UG (haftungsbeschränkt)
Wallrafplatz 2–4
50667 Köln
Managing Director: Daniela Freesemann
Phone: 0163 78 92 490
Email: support@hairmedical.de
2. General information on data processing
We take the protection of your personal data very seriously. Your data is processed confidentially and in accordance with the statutory data protection regulations and this privacy policy. Personal data means any data that can be used to identify you personally.
3. Hosting with ALL-INKL.COM
Our website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany.
When you visit our website, the hosting provider automatically collects and stores information in so-called server log files, which your browser transmits to us automatically. This includes:
- IP address
- Date and time of the server request
- Pages visited (URL)
- Referrer URL
- Browser type and browser version
- Operating system used
- Host name of the accessing device
Collecting this data is technically necessary in order to display our website correctly and to ensure its stability and security.
The legal basis for this data processing is Art. 6 (1) (f) GDPR (legitimate interest in the secure and trouble-free operation of the website). A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.
4. Contact and appointment booking
If you contact us via the contact form, by email or through an online appointment booking, the data you provide will be processed in order to handle your enquiry and arrange appointments. This may include, in particular, the following data:
- Name
- Email address
- Phone number (optional)
- Preferred appointment or date and time of the appointment request
- Content of your message / enquiry
The processing is carried out to handle your enquiry or to take steps prior to entering into a contract.
The legal bases are Art. 6 (1) (b) GDPR (initiation and performance of a contract) and Art. 6 (1) (f) GDPR (legitimate interest in effective communication with prospective clients and patients).
5. Cookies
Our website uses so-called cookies. Cookies are small text files that are placed on your device and stored by your browser. They help to make our website more user-friendly, effective and secure.
We use basic (essential) cookies that are required for the operation of the website. In addition – subject to your consent – cookies may be used for analytics and marketing purposes (e.g. in connection with Google Analytics or the Meta Pixel).
Legal bases:
- Essential cookies: Art. 6 (1) (f) GDPR (legitimate interest in operating the website)
- Non-essential cookies (analytics/marketing): Art. 6 (1) (a) GDPR (consent)
You can give or withdraw your consent via the cookie banner used on the website. You can also configure your browser so that you are informed when cookies are set and allow cookies only on a case-by-case basis, exclude the acceptance of cookies in certain cases, or activate the automatic deletion of cookies when the browser is closed. If cookies are disabled, the functionality of this website may be limited.
6. Google Analytics 4
We use Google Analytics 4 on our website, a web analytics service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server and stored there. In Google Analytics 4, your IP address is anonymised by default (IP anonymisation), so that it cannot be directly linked to you as an individual.
The data processed may include, among other things:
- Pages viewed and content accessed
- Interactions (clicks, scrolling, session duration)
- Approximate location (country, region)
- Browser type and version
- Operating system and device type used
- Referrer URL
- Truncated IP address
The legal basis for the use of Google Analytics is your consent pursuant to Art. 6 (1) (a) GDPR, which you can give via the cookie banner.
A data processing agreement is in place with Google. A transfer of personal data to the USA cannot be ruled out. The data transfer is based on the standard contractual clauses approved by the EU Commission.
You can withdraw your consent at any time with effect for the future via the cookie banner, or prevent the installation of cookies by adjusting your browser software settings accordingly.
7. Meta Pixel (Facebook/Instagram)
We use the Meta Pixel of the social network Facebook/Instagram on our website, operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
The Meta Pixel makes it possible to track the behaviour of users after they have seen or clicked on an advertisement. This allows us to evaluate the effectiveness of our advertisements for statistical and market research purposes and to optimise future advertising measures.
The data processed may include, among other things:
- Pages and content viewed
- Interactions with our website (e.g. enquiries, appointment bookings)
- IP address
- Browser information
- Device information
- Referrer URL
- Date and time of the visit
Meta may link this data to your Facebook or Instagram account and use it for its own advertising purposes. However, we only receive statistical analyses from Meta and no data that would allow us to identify you directly.
The legal basis for the use of the Meta Pixel is your consent pursuant to Art. 6 (1) (a) GDPR, which you can give via the cookie banner.
A transfer of data to the USA is possible. The transfer is based on the standard contractual clauses of the EU Commission. Further information on data processing by Meta can be found in Meta's data policy.
8. Google Maps
The map service Google Maps may be embedded on our website to display locations. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server and stored there. Google may use cookies and similar technologies for this purpose.
Google Maps is used exclusively on the basis of your consent pursuant to Art. 6 (1) (a) GDPR, which you can give via the cookie banner.
Further information on data processing by Google can be found in Google's privacy policy.
9. Google Fonts
Fonts from Google Fonts are used on our website.
Local hosting
Wherever possible, Google Fonts are hosted locally on our web server. In this case, no data is transferred to Google servers.
External loading (if active)
If, in exceptional cases, Google Fonts are loaded from Google's servers, your IP address is transmitted to Google Ireland Limited in order to display the fonts. Additional technical data (e.g. browser and device data) may also be processed.
External Google Fonts are only used on the basis of your consent pursuant to Art. 6 (1) (a) GDPR, which you can give via the cookie banner.
10. Embedded social media content
Content from social networks such as Facebook or Instagram (e.g. feeds, posts, buttons) may be embedded on our website. When you access a page with embedded content, a connection to the servers of the respective provider is established. In the process, your IP address, information about your browser and other technical data may be transmitted to the provider.
Such content is only embedded with your consent pursuant to Art. 6 (1) (a) GDPR, which you can give via the cookie banner.
11. Rights of data subjects
Under the applicable data protection laws, you have the right at any time to:
- Access to the personal data we hold about you (Art. 15 GDPR)
- Rectification of inaccurate data or completion of your data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Objection to processing (Art. 21 GDPR)
- Data portability (Art. 20 GDPR)
Where data processing is based on your consent, you may withdraw it at any time with effect for the future.
You also have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of personal data concerning you infringes the GDPR (Art. 77 GDPR).
The competent supervisory authority is in particular:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
12. Erasure of data
As a matter of principle, we only store personal data for as long as is necessary for the purposes for which it is processed, or as required by statutory retention periods. Once the purpose of processing no longer applies or a mandatory retention period expires, the personal data is erased in accordance with the statutory provisions.
13. Data security
We use appropriate technical and organisational measures to protect your data against manipulation, loss, destruction and unauthorised access. Our security measures are continuously improved in line with technological developments.
14. Disclosure of personal data
Your personal data will only be passed on to third parties
- if you have given your express consent,
- if the disclosure is necessary for the performance of a contract with you,
- if there is a legal obligation to do so, or
- if the disclosure is based on our legitimate interests and there is no reason to assume that you have an overriding legitimate interest in your data not being disclosed.
15. Changes to this privacy policy
We reserve the right to amend this privacy policy in the future so that it always complies with current legal requirements, or to reflect changes to our services in the privacy policy, e.g. when new services are introduced. The current version of the privacy policy will then apply to your next visit.