Legal

Privacy policy (Datenschutzerklärung)

Protecting your personal data is important to us. Below, we inform you in accordance with the General Data Protection Regulation (GDPR / DSGVO) and the German Federal Data Protection Act (BDSG) about the processing of personal data on this website.

1. Controller

Hanna Kohlert
Private Medical Practice for Aesthetic & Regenerative Medicine
Humboldtstraße 9, 65189 Wiesbaden
Email: info@praxiskohlert.de
Phone / WhatsApp: +49 176 560 24351

2. General information on data processing

As a rule, we process our users' personal data only to the extent necessary to provide a functioning website as well as our content and services. Processing is regularly based on consent (Art. 6 (1) (a) GDPR), on the performance or initiation of a contract (Art. 6 (1) (b) GDPR) or on our legitimate interest (Art. 6 (1) (f) GDPR).

3. Hosting and server log files

When you access this website, the hosting provider automatically stores information transmitted by your browser in so-called server log files:

• browser type and version
• operating system used
• date and time of access
• page / file accessed
• truncated or anonymised IP address

This data serves technical security and the stable operation of the website (Art. 6 (1) (f) GDPR). It is not merged with other data sources.

The website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers are located in Germany (EU). A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider. No personal data is transferred to third countries outside the EU/EEA in the context of hosting.

4. Contact

If you contact us by email, WhatsApp or phone, your details will be processed to handle your enquiry and any follow-up questions (Art. 6 (1) (b) or (f) GDPR). When using WhatsApp, the privacy policy of Meta Platforms Ireland Ltd. additionally applies; data may also be transferred to third countries. Please do not send sensitive health data via WhatsApp.

5. Appointment booking

For online appointment scheduling, we process the data you provide (e.g. name, contact details, requested treatment, preferred date) solely to organise and carry out the appointment (Art. 6 (1) (b) GDPR). The data is treated confidentially and is not passed on to third parties for advertising purposes.

6. Health data

Health data processed in the course of medical treatment (Art. 9 GDPR) is additionally subject to medical confidentiality. This processing is based on Art. 9 (2) (h) GDPR (preventive healthcare, medical treatment) in conjunction with § 22 BDSG and is not part of mere website use.

7. Cookies and audience measurement

This website uses only technically necessary cookies that are required for its operation.

For data-minimising audience measurement, we use Umami Analytics – a self-hosted open-source software that runs exclusively on our own server in Germany (Nuremberg). No data is transmitted to third parties. Umami works without cookies and does not create cross-device user profiles. IP addresses are not stored but used only transiently to generate anonymous, aggregated statistics. The analytics are loaded only after your active consent via the notice on our website; the legal basis is your consent (Art. 6 (1) (a) GDPR). Your decision is stored locally in your browser (not a cookie) and can be revoked at any time by deleting your browser's site data for this page – the notice will then appear again.

8. Retention period

We process and store personal data only for as long as is necessary to achieve the respective purpose or as required by statutory retention obligations (e.g. under commercial, tax or professional law).

9. Your rights

You have the following rights vis-à-vis us regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent given (Art. 7 (3) GDPR)

To exercise your rights, an informal message to the controller named above is sufficient.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other legal remedy, you have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Hessische Beauftragte für Datenschutz und Informationsfreiheit (Hessian Commissioner for Data Protection and Freedom of Information), Postfach 3163, 65021 Wiesbaden, Germany.

11. Currency of this policy

This privacy policy is current as of July 2026. Further development of the website or changes in legal requirements may make it necessary to amend this policy.