Legal

Privacy policy

Note: This is a translation for convenience. The legally binding version is the German one.

Thank you for your interest in our practice. The protection of your personal data is important to us. Below we inform you in detail about how we handle your data.

1. Controller

Controller in the sense of the GDPR is: Luciana Corrêa-Luis Duarte Wetterstraße 29, 58313 Herdecke, Germany E-mail: info@beauty-by-lu.de · Phone: +49 2330 · 9 17 01 33

2. Collection of general information (server log files)

When you visit our website, so-called server log files are automatically recorded by the hosting system of our provider (see § 3). They contain technical information such as:

• IP address of the requesting device
• Date and time of access
• Name and URL of the file retrieved
• Referrer URL (previously visited page)
• Browser used and, where applicable, operating system

These data are processed exclusively to ensure a smooth connection, to assess system security and stability and for administrative purposes. No combination with other data sources or person-related analysis takes place on our side; in particular, no reach or usage statistics are produced.

Legal basis is Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest lies in the secure and stable operation of this website. Server log files are deleted by the hosting provider at the latest after seven days. Longer storage only takes place if it is necessary to investigate a specific security incident.

3. Hosting

This website is hosted with ALL-INKL.COM — Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The provider processes personal data on our behalf as a processor within the meaning of Art. 28 DSGVO. A data processing agreement (DPA) is in place with the provider. All servers are located in data centres in Germany; no transfer to third countries outside the European Union takes place.

Further information about data protection at the provider can be found at all-inkl.com/datenschutz.

4. Contact

If you contact us by e-mail or phone, your information will be stored for the processing of your enquiry and for any follow-up questions. Legal basis is Art. 6 Abs. 1 lit. b DSGVO when a treatment contract is being initiated, otherwise Art. 6 Abs. 1 lit. f DSGVO (legitimate interest in providing an appropriate response).

No transfer to third parties takes place. The data are deleted as soon as the matter has been finally processed and no statutory retention periods conflict — as a rule, within six months after the final processing.

5. Patient data in the podiatry practice

As part of podiatric treatment we process health data (Art. 9 Abs. 2 lit. h DSGVO) to carry out the treatment, for billing and to fulfil statutory retention obligations. These data are not collected via the website and are subject to medical and professional confidentiality.

A detailed patient privacy information notice, describing in detail how your health data are processed in the treatment context, will be handed to you in person at the first appointment in the practice.

6. Cookies

This website does not set any cookies. Neither tracking cookies nor analytical cookies nor third-party cookies are used. A cookie banner is therefore not required.

7. Your rights and right to lodge a complaint

You have the following rights:

• Access to the data stored about you (Art. 15 DSGVO)
• Correction of incorrect data (Art. 16 DSGVO)
• Erasure of your data (Art. 17 DSGVO)
• Restriction of processing (Art. 18 DSGVO)
• Data portability (Art. 20 DSGVO)
• Objection to processing based on Art. 6 Abs. 1 lit. f DSGVO (Art. 21 DSGVO)

An informal notice to the contact details given in § 1 is sufficient to exercise your rights.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 DSGVO). The competent supervisory authority for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW) Kavalleriestraße 2–4, 40213 Düsseldorf, Germany www.ldi.nrw.de

8. Data protection officer

Due to the size of our practice, there is no statutory obligation to appoint a data protection officer under § 38 BDSG; no data protection officer has been appointed. For data-protection-related questions, please contact us directly using the details in § 1.

9. SSL encryption

For security reasons, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” in the address bar of your browser.

10. Changes to this privacy policy

We reserve the right to adapt this privacy policy so that it always meets the current legal requirements or reflects changes to our services. The version current at the time of your visit applies.