Privacy policy

Data protection at a glance

1 General information

We take the protection of your personal data very seriously. Personal data is any information that can be used to identify you personally, such as your name, address, e-mail address, telephone number or IP address.

We process your personal data exclusively within the framework of the statutory data protection regulations, in particular the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

This privacy policy informs you about which data we process on our website, the purposes for which this is done, the legal basis for the processing and the rights to which you are entitled.

This privacy policy applies exclusively to our website. If you are redirected to external pages via links, please inform yourself there about the respective handling of your data.

Responsible for data processing:

Villa zu Medii
Dr. Frederick de Brabandt
Beckhausstraße 204
33611 Bielefeld
Phone: +49 521 83457
E-mail: [email protected]

2 Accessing our website and server log files

When you visit our website, technical information is automatically processed by the server. This may include the following data in particular:

  • IP address
  • Date and time of access
  • Page or file accessed
  • Amount of data transferred
  • Browser used
  • Operating system used
  • Referrer URL, i.e. the previously visited page
  • Host name of the accessing computer

This data is technically necessary in order to deliver the website correctly, to ensure the stability and security of the website and to be able to detect misuse or technical faults.

The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the secure, stable and technically error-free provision of our website.

The server log files are only stored for as long as is necessary for the aforementioned purposes and then deleted or anonymized, provided that there are no legal retention obligations or security interests to the contrary.

3 Making contact

If you contact us by e-mail, telephone or via a contact form, we process the data you provide in order to answer your inquiry and, if necessary, to clarify any further queries.

This may include the following data in particular:

  • Name
  • E-mail address
  • Phone number
  • Content of your message
  • Time of the request

The legal basis is Art. 6 para. 1 lit. b GDPR, provided that your request is related to a treatment, an appointment or another pre-contractual or contractual service. In all other cases, the processing is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR to answer your request appropriately.

We will only store the data you provide for as long as is necessary to process your request. Statutory retention obligations remain unaffected.

4 Making an appointment

If you request or book an appointment via our website, we process the data you provide to process the appointment.

This may include the following data in particular:

  • Name
  • Contact details
  • Desired date
  • Request or message
  • Further voluntary information, if applicable

The legal basis is Art. 6 para. 1 lit. b GDPR, insofar as the processing is necessary for the implementation of pre-contractual measures or for the preparation or implementation of a treatment. If you voluntarily provide special information, the processing may also be based on your consent in accordance with Art. 6 para. 1 lit. a GDPR.

Please do not transmit any particularly sensitive health data via general contact or appointment forms unless this is expressly required.

5 Cookies and consent management

Our website uses cookies and similar technologies. Cookies are small text files that are stored on your end device.

We differentiate between technically necessary cookies and services requiring consent.

Technically necessary cookies are required for the website to function, to be provided securely or to be able to use functions that you have expressly requested. The legal basis is Art. 6 para. 1 lit. f GDPR. Insofar as access to information on your terminal device is technically necessary, this is done in accordance with the relevant provisions of the Telecommunications Digital Services Data Protection Act.

For all services that are not technically necessary, in particular external media, statistical or marketing services, we will obtain your consent if such services are used. The legal basis is then Art. 6 para. 1 lit. a GDPR.

You can revoke or change your consent at any time with effect for the future. This does not affect the lawfulness of the processing carried out before you withdraw your consent.


Borlabs Cookie / Consent management

Our website uses Borlabs Cookie, a service provided by Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany.

Borlabs Cookie is used to obtain, manage and document consent for certain services and content on our website. For this purpose, technically necessary cookies can be set to save your selection. In particular, the following information may be processed:

  • Your consent or refusal of individual services
  • Time of consent
  • Browser used
  • Technical information about your end device
  • anonymized or shortened identifier to assign the consent

The processing is carried out in order to be able to manage and prove your data protection consent in a legally secure manner. The legal basis is Art. 6 para. 1 lit. c GDPR, insofar as the processing is carried out to fulfill legal obligations to provide evidence, as well as Art. 6 para. 1 lit. f GDPR due to our legitimate interest in legally compliant consent management.

You can change or revoke your consent at any time via the cookie settings on our website.

Borlabs Cookie can also provide so-called content blockers. This means that external content, such as YouTube videos, is initially blocked and only loaded after your consent. Borlabs itself describes this function as a way of blocking external media such as YouTube, Google Maps or social media posts.


Embedded YouTube videos

Videos from the YouTube platform may be embedded on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

YouTube videos are not loaded automatically on our website, but are initially blocked by a content blocker. A connection to YouTube or Google is only established and the video loaded if you agree to the video being displayed.

Personal data may be processed, in particular your IP address, browser and device information, the page accessed and information on video usage. If you are logged into your Google account, Google can associate your visit to our website with your user account.

The processing takes place exclusively on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future via the cookie settings.


Trust index / Display of ratings

On our website we use a rating widget from Trustindex to display existing ratings of our practice.

The widget is only loaded once you have agreed to the display of external content. Only then will a connection to Trustindex servers be established. Technical data may be processed in the process, in particular your IP address, browser information, device information and the date and time of the page view.

Trustindex is used on our website exclusively to display existing ratings. You cannot submit your own review directly via Trustindex on our website. If you follow a link to submit a review, you will be redirected to the relevant external review platform, for example Google. The respective provider is responsible for the data processing there.

The processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future via the cookie settings.


Cloudflare

Our website may use Cloudflare services. The provider is Cloudflare, Inc, 101 Townsend St., San Francisco, CA 94107, USA.

Cloudflare can be used as a content delivery network, security service and for the technical optimization of our website. The aim is to make our website faster, more stable and more secure.

When you visit our website, requests may be routed via Cloudflare servers. In particular, technical access data may be processed, for example IP address, URL accessed, date and time of access, browser type, operating system, referrer URL and information to detect and prevent abusive access.

The processing is carried out on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in the secure, stable and high-performance provision of our website.

If Cloudflare Web Analytics or Cloudflare Insights is also used, it will only be used on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR, unless this function is technically necessary. The data protection conference generally points out that consent is regularly required for access to information in the end device, unless this access is technically absolutely necessary.


Google Fonts

On our website, fonts are loaded locally from our own server. A connection to Google Fonts servers is not established.

6 Your rights

You have the following rights vis-à-vis us with regard to your personal data:

  • Right to information pursuant to Art. 15 GDPR
  • Right to rectification pursuant to Art. 16 GDPR
  • Right to erasure pursuant to Art. 17 GDPR
  • Right to restriction of processing pursuant to Art. 18 GDPR
  • Right to data portability pursuant to Art. 20 GDPR
  • Right to object pursuant to Art. 21 GDPR
  • Right to withdraw consent granted pursuant to Art. 7 (3) GDPR
  • Right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR

If you have given your consent, you can revoke it at any time with effect for the future. The legality of the processing until the revocation remains unaffected.

7 Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.

In particular, the supervisory authority of your place of residence, your place of work or the place of the suspected data protection breach may be responsible.