This is a courtesy translation of the German privacy policy. In case of doubt, the German version applies.
1. Data protection at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information on data protection can be found in our privacy policy below.
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the section “Information on the controller” in this privacy policy.
How do we collect your data?
On the one hand, your data is collected when you provide it to us, e.g. via the contact form. Other data is collected automatically by our IT systems when you visit the website (above all technical data such as internet browser, operating system or time of the page view). External services and statistics are only loaded after you have given your consent.
2. Information on the controller
The controller responsible for data processing on this website is:
Dr. med. Christoph Zimmermann
Private practice for plastic and aesthetic surgery
Regerstraße 1, 70195 Stuttgart, Germany
Phone: +49 711 46966991
E-mail: kontakt@plastischechirurgie-zimmermann.de
The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
3. Hosting and server log files
This website is hosted by an external service provider (host). When the website is accessed, the host automatically stores information transmitted by your browser in so-called server log files: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request and IP address. Processing is carried out on the basis of Art. 6 (1) (f) GDPR; our legitimate interest lies in the technically error-free and secure provision of the website. A data processing agreement pursuant to Art. 28 GDPR has been concluded with the host.
Hosting provider: [to be added before going live – name, address, any transfer to third countries]
SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognize an encrypted connection by the fact that the browser's address bar changes from “http://” to “https://”.
Fonts
The “Raleway” font used on this website is served locally from our server. No connection to Google servers is established in the process.
4. Consent management (cookie banner)
On your first visit, we ask for your consent to optional services. Your decision is stored in your browser's local storage (localStorage, key “zm-consent-v2”) so that we do not have to ask you again on every page view. This is technically necessary (§ 25 (2) no. 2 TDDDG, Art. 6 (1) (c) GDPR). No data is transmitted to us or to third parties in the process. You can withdraw or change your consent at any time with effect for the future: .
5. Contacting us
Contact form
If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there (name, e-mail address, phone number, message), will be stored by us for the purpose of processing the enquiry and in case of follow-up questions, and transmitted to the practice by encrypted e-mail. We do not pass this data on without your consent. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) or your consent pursuant to Art. 6 (1) (a) GDPR. Insofar as you provide us with health data, we process it on the basis of your explicit consent (Art. 9 (2) (a) GDPR) or for the provision of healthcare (Art. 9 (2) (h) GDPR). Please only submit the information necessary for your concern via the form.
Enquiries by e-mail or phone
If you contact us by e-mail or phone, your enquiry, including all resulting personal data, will be stored and processed by us for the purpose of handling your request. The data remains with us until you ask us to delete it, withdraw your consent or the purpose no longer applies. Mandatory statutory provisions – in particular medical retention periods (§ 630f BGB, professional code of conduct) – remain unaffected.
Applications
We process application documents that you send to bewerbung@plastischechirurgie-zimmermann.de exclusively for the purpose of carrying out the application process (§ 26 BDSG, Art. 6 (1) (b) GDPR). If no employment relationship is established, we delete the documents no later than six months after the end of the process.
6. External services (only with consent)
The following services are only loaded once you have consented to the “External media” category in the cookie banner or have released the respective content via the “Unlock content” button (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). In doing so, your IP address is transmitted to the respective provider. Some providers also process data in the USA; the transfer takes place on the basis of the EU-US Data Privacy Framework or EU standard contractual clauses.
Google Maps
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Purpose: showing directions to the practice. Further information: policies.google.com/privacy
YouTube
We embed videos in privacy-enhanced mode (youtube-nocookie.com). Provider: Google Ireland Limited. Further information: policies.google.com/privacy
Online booking via Jameda
For online appointment booking, we use the booking calendar of jameda GmbH, Balanstraße 71a, 81541 München (Docplanner group). The data entered when booking is processed directly by Jameda. Further information: jameda.de/datenschutz
Calendly (video consultation)
To book video consultations, we use Calendly, Calendly LLC, 115 E Main St, Ste A1B, Buford, GA 30518, USA. Further information: calendly.com/privacy
ProvenExpert rating seal
On larger screens (desktop), we embed the rating seal of ProvenExpert, a service of Expert Systems AG, Quedlinburger Straße 1, 10589 Berlin, if you have consented to the “External media” category. In doing so, your IP address is transmitted to ProvenExpert in order to display the seal with our current ratings. The seal is not loaded on smartphones. The legal basis is your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). Further information: provenexpert.com/en-gb/privacy-policy
Contact via WhatsApp
Via our practice assistant, you can contact us by WhatsApp (WhatsApp Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland). The connection is only established when you actively click on the WhatsApp link. Please do not send any health data or medical findings via WhatsApp; use the contact form or a personal consultation for this.
Practice assistant
The practice assistant on our website gives automatic answers based on the content of this website. It runs entirely in your browser; selections entered are neither stored nor transmitted.
7. Statistics and marketing (only with consent)
We only load the following services after you have consented to the respective category in the cookie banner (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). Without consent, no connection to these providers is established and no cookies are set. For the Google services, we use Google Consent Mode v2: it passes your choice on to Google so that storage and advertising features are only used to the extent of your consent. You can withdraw your consent at any time via the cookie settings; cookies already set by these services are then deleted. Google and Meta also process data in the USA; the transfer is based on the EU-US Data Privacy Framework or EU standard contractual clauses.
Google Tag Manager
With your consent to the “Statistics” category, we load Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It is a tool we use to manage Google Analytics and the related measurement events; it does not set any cookies itself, but processes your IP address in order to deliver the script.
Google Analytics 4 (statistics)
If you have consented to the “Statistics” category, we use Google Analytics 4 from Google Ireland Limited to analyze and improve the use of our website (e.g. pages viewed, clicks on phone and e-mail links, enquiries sent). Google Analytics 4 always shortens IP addresses. Cookies (e.g. “_ga”) are stored for up to 14 months. Further information: policies.google.com/privacy
Google Ads conversion tracking and remarketing (marketing)
If you have consented to the “Marketing” category, we use Google Ads from Google Ireland Limited. This tells us whether someone sent an enquiry after clicking on one of our ads (conversion), and allows us to show relevant ads to visitors of our website later on (remarketing). Cookies (e.g. “_gcl_au”) are stored for up to 90 days. Further information: policies.google.com/technologies/ads
8. Social networks and review portals
On our website, we link to our profiles on Instagram, Facebook, TikTok and YouTube and to review portals (Google, Jameda, ProvenExpert, Estheticon). These are simple links; no plugins are embedded. Only when you follow a link do the privacy policies of the respective provider apply.
9. Your rights
Within the framework of the applicable statutory provisions, you have the right at any time to free information about your stored personal data (Art. 15 GDPR), its origin and recipients and the purpose of data processing and, where applicable, a right to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20 GDPR).
Withdrawal of your consent to data processing
Many data processing operations are only possible with your explicit consent. You can withdraw consent you have already given at any time. The lawfulness of the data processing carried out until the withdrawal remains unaffected by the withdrawal.
Right to object to data collection in special cases (Art. 21 GDPR)
If data processing is based on Art. 6 (1) (e) or (f) GDPR, you have the right at any time to object to the processing of your personal data on grounds relating to your particular situation.
Right to lodge a complaint with the competent supervisory authority
In the event of violations of the GDPR, you have the right to lodge a complaint with a supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, www.baden-wuerttemberg.datenschutz.de.
If you have any questions about data protection, please contact kontakt@plastischechirurgie-zimmermann.de or use our contact form.
