top of page

PRIVACY POLICY

We are very pleased that you are interested in us, the JJPS Dr. Kricheldorff Dr. Wagner Fachärzte für Plastische und Ästhetische Chirurgie PartG (hereinafter "We").  

​

We take the protection of your data very seriously and treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

The following provisions inform you about the type, scope, duration and purpose of the processing of personal data by us as the responsible provider of this website and about the third-party components relevant to data protection that we use for optimization purposes and to increase the quality of use.

​

We have taken numerous technical, contractual and organizational measures to ensure that the applicable data protection regulations are observed and to protect the data we manage from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. However, please note that Internet-based data transmission (e.g. communication by e-mail) generally has security gaps, so that absolute protection cannot be guaranteed. For this reason, every person concerned is free to transmit personal data to us in alternative ways, for example by telephone.

​

I. Definitions

Our data protection declaration is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). Our data protection declaration should be legible and understandable for the general public as well as for our users and business partners. To ensure this, we would like to explain the terms used in advance.

​

We use the following terms, among others, in this data protection declaration:

​

a) Personal data

Personal data is any information relating to an identified or identifiable natural person (hereinafter "data subject"). A natural person is considered to be identifiable if, directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, an online identifier or to one or more special features, the expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person can be identified (Art. 4 No. 1 DSGVO).

​

b) Data subject

Data subject is any identified or identifiable natural person whose personal data is processed by the data controller.

​

c) processing

Processing is any process carried out with or without the help of automated procedures or any such series of processes in connection with personal data such as collecting, recording, organizing, organizing, storing, adapting or changing, reading out, querying, using, disclosure through transmission, distribution or any other form of provision, comparison or linking, restriction, deletion or destruction (Art. 4 No. 2 GDPR).

​

d) Restriction of processing

Restriction of processing is the marking of stored personal data with the aim of restricting their future processing (Art. 4 No. 3 GDPR).

​

e) profiling

Profiling is any type of automated processing of personal data, which consists in using this personal data to evaluate certain personal aspects relating to a natural person, in particular aspects relating to work performance, economic situation, health, personal To analyze or predict preferences, interests, reliability, behavior, whereabouts or change of location of this natural person (Art. 4 No. 4 GDPR).

​

f) Pseudonymization

Pseudonymization is the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without the use of additional information, provided that this additional information is kept separately and is subject to technical and organizational measures that ensure that the personal data not assigned to an identified or identifiable natural person.

 

g) Controller or data controller

The person responsible or responsible for processing is the natural or legal person, authority, institution or other body that alone or jointly with others decides on the purposes and means of processing personal data (Art. 4 No. 7 DSGVO)

 

h) processors

Processor is a natural or legal person, authority, institution or other body that processes personal data on behalf of the person responsible (Art. 4 No. 8 DSGVO).

 

i) Recipient

Recipient is a natural or legal person, public authority, institution or other body to which personal data is disclosed, regardless of whether it is a third party or not. However, authorities that may receive personal data as part of a specific investigation order under Union law or the law of the Member States are not considered recipients (Art. 4 No. 9 GDPR).

 

j) third party

Third party is a natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and the persons who, under the direct responsibility of the controller or the processor, are authorized to process the personal data (Article 4 No. 10 GDPR).

 

k) Consent

Consent is any expression of will voluntarily given by the data subject in an informed manner and unequivocally for the specific case in the form of a declaration or other clear confirmatory action with which the data subject indicates that they consent to the processing of their personal data (Art. 4 No. 11 GDPR).

​

II. Responsible

The person responsible within the meaning of the GDPR, other data protection laws applicable in the member states of the European Union and other data protection regulations is:

JJPS Dr. Kricheldorff Dr. Wagner Fachärzte für Plastische und Ästhetische Chirurgie PartG

Münzstr. 5, 10115 Berlin, Germany

hello@jjps.berlin

​

III. Information about the processing of personal data

If personal data is processed when using our website, it will be deleted or blocked as soon as the purpose of storage no longer applies. Storage can also take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

​

1. Data processing by us

​

a)  server data

Our website collects a range of general data and information each time you or an automated system access the website. In order to enable you to visit the website and to ensure its stability and security, the following data is collected, temporarily stored and used in so-called log files:

​

  • Information about the browser types and versions used, 

  • Information about the operating system used by the accessing system,

  • the website from which an accessing system reaches our website (so-called referrer), 

  • the sub-websites, which are controlled via an accessing system on our website, 

  • the date and time of access to the website, 

  • the internet protocol address (IP address), 

  • the internet service provider of the accessing system and 

  • other similar data and information that serves to avert danger in the event of attacks on our information technology systems.

 

The anonymous data of the server log files are stored separately from all personal data provided by you. When using this general data and information, we do not draw any conclusions about you.

​

The legal basis for the temporary storage of the data is Article 6 Paragraph 1 Letter f) GDPR.

 

b)  cookies

Our website uses cookies. Cookies are text files that are placed and saved on a computer system via an Internet browser when you visit our website. If a user calls up a website, a cookie can be stored on the user's computer.

​

If a user calls up our website, a cookie can be stored on the user's computer. Cookies contain characteristic character strings that enable the browser to be clearly identified when the website is called up again. However, this does not mean that we are immediately informed of your identity.

​

By using cookies, we can provide you with more user-friendly services on this website that would not be possible without the cookie setting. Some elements of our website require that the accessing browser can be identified even after a page change.  

​

With the help of this cookie, your preferred settings are saved so that they can be made available immediately when you visit the website again. This can include the language settings or another preference. It also serves to facilitate the filling out of forms. The stored information is automatically deleted after the session has ended.  

​

Our legitimate interest in the processing of personal data in accordance with Article 6 (1) (f) GDPR also lies in these purposes.

​

We also use cookies on our website, which enable an analysis of your surfing behavior in order to optimize our offer for you. The data collected in this way is pseudonymised using technical precautions. It is therefore no longer possible to assign the data to you. The data will not be stored together with other personal data from you.

​

When you visit our website, you will be informed by an information banner about the use of cookies for analysis purposes and referred to this data protection declaration. In this context, there is also a reference to how the storage of cookies can be prevented in the browser settings. The purpose of using technically necessary cookies is to simplify the use of websites for you. For these it is necessary that the browser is recognized even after a page change. You can prevent the setting of cookies by our website at any time by means of a corresponding setting in the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all common internet browsers. If you deactivate the setting of cookies in the Internet browser used, not all functions of our website may be fully usable.

​

The legal basis for the processing of personal data using cookies for analysis purposes is Article 6(1)(a) GDPR if you have given your consent to this.

 

Please note that our website is hosted on the Wix.com platform. Wix.com provides us with the online platform and also sets its own cookies. You can find out exactly which cookies are involved under the following link:

https://support.wix.com/de/article/cookies-und-your-website-at-wix

​

c)  E-mail contact

An e-mail address is given on our website, which can be used for electronic contact. If you contact us by e-mail, the personal data transmitted with the e-mail will be stored by us.  

​

In this context, it does not pursue any transfer of data to third parties. The data will only be used to process the conversation.  

​

The legal basis for the processing of data that is transmitted in the course of sending an e-mail is Article 6 (1) (f) GDPR. If the e-mail contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.  

​

The processing of the personal data, which is processed in the case of e-mail contact, serves us solely to process your contact. This is our legitimate interest in processing the data.  

​

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For personal data sent to us by email, this is the case when the respective conversation with the user has ended. The conversation is over when it can be inferred from the circumstances that the facts in question have been finally clarified.  

​

If you contact us by email, you can object to the storage of your personal data at any time. In such a case, the conversation cannot be continued. All personal data that was saved in the course of making contact will be deleted in this case.

​

2. Data Processing by Wix and Other Third Parties

We built our website with the help of Wix.com Ltd. Namal 40, 6350671 Tel Aviv, Israel ("Wix") and is also hosted on their servers in the United States, Europe (including Lithuania, Germany and Ukraine), Israel and other jurisdictions. We have entered into an order processing agreement with Wix.com. Accordingly, Wix.com maintains physical, electronic and procedural security measures to protect the personal information of its users' users, i.e. you, our website visitor. The Wix.com Privacy Policy is here  http://de.wix.com/about/privacy available.

Wix.com is a certified participant of the EU-US Privacy Shield Framework. Wix.com is committed to handling all personal information received from European Union (EU) member states in accordance with the Privacy Shield Framework in accordance with its applicable principles. For more information about the Privacy Shield Framework, visit the US Department of Commerce's Privacy Shield List at [https://www.privacyshield.gov].

​

Wix.com is responsible for the processing of personal information it receives under the Privacy Shield Framework and subsequently transfers it to a third party acting on behalf of Wix.com as an agent on its behalf. Wix.com complies with the Privacy Shield Principles in all onward transfers of EU personal data, including the onward transfer liability provisions.

​

With respect to personal information included or transmitted pursuant to the Privacy Shield Framework, Wix.com is subject to the regulatory and enforcement powers of the US Federal Trade Commission (FTC). In certain situations, Wix.com may be required to disclose personal information in response to government requests, including to comply with national security or law enforcement requirements.

​

a) Use of Google Maps

The offer of Google Maps (a service of Google Inc, 1600 Amphitheater Parkway Mountain View, CA 94043, USA) is integrated on our website. This means that interactive maps are displayed directly on the website and you can use the convenient map function directly. This enables the interactive display of maps on the website and the convenient use of the map function, including the creation of route maps. Our legitimate interest in data processing in accordance with Article 6 (1) (f) GDPR also lies in these purposes.

​

By visiting the website, Google receives the information that you have accessed the corresponding website and subpage. In addition, the under III.  (Automatic storage of data when visiting our website) transmits the data mentioned in this declaration. This occurs regardless of whether Google provides a user account that you used to log in or whether there is no user account. If you are logged in to Google, the data will be assigned directly to the Google user account. If you do not wish to be assigned to this profile on Google, you must log out of your Google user account before activating the button. Google stores data as usage profiles and uses them for advertising, market research and/or needs-based design of the website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about the user's activities on this website. The user has the right to object to the creation of such user profiles, whereby he must contact Google to exercise this right.

​

Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the provider's data protection declaration. There you will also receive further information on the relevant rights and setting options for the protection of privacy:  http://www.google.de/intl/de/policies/privacy.  

 

Google also processes this personal data in the USA and has submitted to the EU-US Privacy Shield,  https://www.privacyshield.gov/EU-US-Framework .

​

b) Social Media Plugins

Functions of the Instagram service are integrated on our website. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to our site with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or how it is used by Instagram.

​

The Instagram plugin is used on the basis of Article 6 (1) (f) GDPR. The website operator has a legitimate interest in the widest possible visibility in social media.

For more information, see Instagram's privacy policy:  https://instagram.com/about/legal/privacy/ .

​

3. Rights of the data subject

If personal data is processed by you, you are a data subject within the meaning of the GDPR and you have the following rights towards us, the person responsible:

​

a)  Right to information (Article 15 GDPR)

Every person affected by the processing of personal data has the right to receive free information about the personal data stored about him and a copy of this information from the person responsible for processing at any time. Furthermore, the European legislator for directives and regulations has granted the data subject access to the following information:

​

  • the processing purposes,

  • the categories of personal data being processed,

  • the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations,

  • if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration,

  • the existence of a right to correction or deletion of the personal data concerning you or to restriction of processing by the person responsible or a right to object to this processing,

  • the existence of a right of appeal to a supervisory authority,

  • if the personal data are not collected from the data subject: all available information about the origin of the data,

  • the existence of automated decision-making including profiling in accordance with Article 22 (1) and (4) GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

 

Furthermore, the data subject has a right to information as to whether personal data has been transmitted to a third country or to an international organization. If this is the case, the person concerned has the right to receive information about the appropriate guarantees in connection with the transmission.

If a data subject wishes to exercise this right to information, they can contact one of our employees at any time.

​

b) Right to rectification (Article 16 GDPR)

Every person affected by the processing of personal data has the right to demand the immediate correction of incorrect personal data concerning them. Furthermore, the data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data - also by means of a supplementary declaration.

If a data subject wishes to exercise this right to rectification, they can contact one of our employees at any time.

​

c) Right to erasure (right to be forgotten) (Art. 17 GDPR)

Any person affected by the processing of personal data has the right to demand that the person responsible delete the personal data concerning them immediately if one of the following reasons applies and if the processing is not necessary:

​

  • The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.

  • The data subject revokes their consent on which the processing was based pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR and there is no other legal basis for the processing.

  • The data subject objects to the processing in accordance with Art. 21 (1) GDPR and there are no overriding legitimate reasons for the processing, or the data subject objects to the processing in accordance with Art. 21 (2) GDPR.

  • The personal data have been unlawfully processed.

  • Erasure of the personal data is necessary to fulfill a legal obligation in Union or Member State law to which the controller is subject.

  • The personal data was collected in relation to information society services offered in accordance with Art. 8 Para. 1 GDPR.

 

If one of the above reasons applies and a data subject wishes to have personal data stored by us deleted, they can contact one of our employees at any time. This will ensure that the request for deletion is complied with immediately.

​

If the personal data has been made public by us and our company, as the person responsible, is obliged to delete the personal data in accordance with Art. 17 (1) GDPR, we shall take appropriate measures, including technical measures, to prevent other to inform those responsible for data processing who process the published personal data that the data subject has requested the deletion of all links to this personal data or copies or replications of this personal data from these other persons responsible for data processing, insofar as the processing is not required. Our employees will arrange what is necessary in individual cases.

​

d) Right to restriction of processing (Article 18 GDPR)

Every person affected by the processing of personal data has the right granted by the European directive and regulation giver to demand that we restrict the processing if one of the following conditions is met:

​

  • The accuracy of the personal data is contested by the data subject for a period that enables us to verify the accuracy of the personal data.

  • The processing is unlawful, the data subject rejects the deletion of the personal data and instead requests the restriction of the use of the personal data.

  • We no longer need the personal data for the purposes of processing, but the data subject needs them to assert, exercise or defend legal claims.

  • The data subject has lodged an objection to the processing pursuant to Article 21(1) GDPR pending the verification whether our legitimate grounds outweigh those of the data subject.

 

If one of the above conditions is met and a data subject wishes to request the restriction of personal data stored by us, they can contact one of our employees at any time. This will arrange for the restriction of processing.

​

e) Right to data portability (Art. 20 GDPR)

Every person affected by the processing of personal data has the right to receive the personal data relating to them, which have been provided to us by the person concerned, in a structured, common and machine-readable format. You also have the right to transmit this data to another person responsible without hindrance from us, provided that the processing is based on the consent in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and the processing is carried out using automated procedures, unless the processing is necessary for the performance of a task that is in the public interest or in the exercise of official authority that has been delegated to us.

​

Furthermore, when exercising their right to data portability in accordance with Art. 20 Para. 1 GDPR, the data subject has the right to have the personal data transmitted directly by us to another person responsible, insofar as this is technically feasible and provided that this does not affect the Rights and freedoms of other people are impaired.

​

In order to assert the right to data transferability, the person concerned can contact one of our employees at any time.

​

f) Right to object (Art. 21 GDPR)

Every person affected by the processing of personal data has the right, for reasons arising from their particular situation, to object at any time to the processing of personal data relating to them, which is based on Article 6 Paragraph 1 lit. e) or f) GDPR to file an objection. This also applies to profiling based on these provisions.

​

We no longer process the personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims .

​

If we process personal data in order to operate direct advertising, the person concerned has the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling insofar as it is associated with such direct advertising. If the data subject objects to us processing for direct marketing purposes, we will no longer process the personal data for these purposes.

​

In addition, the data subject has the right, for reasons arising from their particular situation, to object to the processing of personal data relating to them, which is carried out by us for scientific or historical research purposes or for statistical purposes in accordance with Article 89 (1) GDPR object, unless such processing is necessary to fulfill a task in the public interest.

​

In order to exercise the right to object, the data subject can contact any of our employees directly. In connection with the use of information society services, the data subject is also free, notwithstanding Directive 2002/58/EC, to exercise his or her right to object by automated means using technical specifications.

 

g) Automated decisions in individual cases including profiling (Article 22 GDPR)

Any person affected by the processing of personal data has the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning them or similarly significantly affects them, provided that the decision (1) does not is necessary for the conclusion or performance of a contract between the data subject and us, or (2) is permitted by law of the Union or the Member States to which we are subject and these laws take appropriate measures to protect the rights and freedoms and the legitimate contain the interests of the data subject or (3) is carried out with the express consent of the data subject.

​

If the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and us, or (2) it is based on the data subject's explicit consent, we shall implement suitable measures to safeguard the rights and freedoms and legitimate interests of the data subject protect the person, including at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.

​

If the data subject wishes to assert rights relating to automated decisions, they can contact one of our employees at any time.

​

h) Right to withdraw consent under data protection law

Any person affected by the processing of personal data has the right to revoke consent to the processing of personal data at any time.

If the data subject wishes to assert their right to revoke consent, they can contact one of our employees at any time.

​

i) Right to lodge a complaint with the supervisory authority

Every person affected by the processing of personal data has the right to lodge a complaint with a supervisory authority, in particular in the member state of their place of residence, their place of work or the place of the alleged infringement, if they believe that the processing of personal data concerning them violates violates the GDPR.  

 

The supervisory authority to which the complaint was lodged will inform the complainant about the status and the results of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.

 

Status: November 2021

 

bottom of page