1. Who is responsible for your data?
ID Tress Clinic is responsible for the processing described in this policy. You can contact us at care@idtress.com or at either of our locations:
- Luise-Rainer-Straße, 40235 Düsseldorf, Germany
- Grüneburgweg, 60322 Frankfurt am Main-Innenstadt II, Germany
- Verrijn Stuartlaan, 2288 EL Rijswijk, Netherlands
- Germany: +49 176 23617829
- Netherlands: +31 6 87582453
2. Information we collect
- Contact information, including your name, email address, telephone or WhatsApp number, country, and preferred contact method.
- The information you include in your message or consultation request, which may include health-related information if you choose to provide it.
- Technical information needed to deliver and secure the website, such as IP address, device and browser information, access times, and server logs.
- Your language preference and temporary preview access status stored in your browser.
- The discount code generated when you submit a consultation request.
3. Why we use your information
We use your information to respond to your request, arrange and prepare a consultation, communicate with you through your chosen channel, maintain website security, prevent misuse, and meet applicable legal obligations.
- Steps taken at your request before entering into a contract: Article 6(1)(b) GDPR.
- Our legitimate interests in operating and protecting the website and handling general enquiries: Article 6(1)(f) GDPR.
- Separate explicit consent, where obtained for health information: Article 9(2)(a) GDPR.
- Compliance with a legal obligation where applicable: Article 6(1)(c) GDPR.
4. Consultation forms and health information
Our consultation form is intended for initial contact. The initially unchecked checkbox records that you have read this policy and agree to the use of your contact details to respond to your enquiry. It does not authorize marketing or provide blanket consent to process health data. If medical information is needed later, the clinic must establish the appropriate legal basis and, where required, obtain separate explicit consent.
5. Service providers and recipients
We share information only when needed to operate the website, handle your enquiry, provide professional services, or comply with the law.
- Netlify, Inc. provides website hosting and Netlify Forms. New consultation requests are stored in the clinic's Netlify Forms dashboard and may trigger an email notification to the clinic.
- Google email services may be used to receive, deliver, and manage consultation enquiries.
- YouTube/Google provides the embedded short videos displayed on the website.
- Authorised clinic, administrative, and medical personnel may access an enquiry where needed to respond.
- Professional advisers or public authorities may receive information where required by law.
6. Google Analytics, YouTube and browser storage
With your consent, we use Google Analytics 4 (measurement ID G-9ZGNS4XGMP) to measure visits, page use, successful consultation requests, and clicks that open WhatsApp. We do not send names, phone numbers, email addresses, messages, discount codes, or health information to Google Analytics. Analytics remains disabled until you accept and can be disabled again through Cookie settings.
Videos are embedded using YouTube’s privacy-enhanced domain (youtube-nocookie.com). YouTube content loads only after you choose to play a video. Your browser may then connect to YouTube/Google and transmit technical information such as your IP address and device details.
We use browser storage to remember your selected language, analytics choice and, for authorised team members, temporary preview access. The legal basis for optional analytics is your consent under Article 6(1)(a) GDPR. You may withdraw it at any time through Cookie settings.
7. International transfers
Some service providers may process information outside the European Economic Area. Where required, transfers are protected through an adequacy decision, approved contractual safeguards such as the European Commission’s Standard Contractual Clauses, or another lawful transfer mechanism.
8. How long we keep information
Consultation enquiries are generally retained for up to 12 months after the last contact unless you ask us to delete them sooner or a longer period is needed for an ongoing treatment relationship, legal claims, healthcare documentation, accounting, or another legal obligation. Technical and security logs are retained according to operational need and the service provider’s applicable retention settings.
9. Patient photographs and testimonials
Before-and-after photographs and patient testimonials are published only with documented permission for the agreed website and marketing purposes. Because treatment photographs may reveal health information, we rely on explicit consent where required. Consent can be withdrawn for future use by contacting us; withdrawal does not affect lawful publication that occurred before the request was received.
10. Your rights
Subject to the conditions in data protection law, you may request access, correction, deletion, restriction, data portability, or object to certain processing. You may also withdraw consent at any time and lodge a complaint with a competent data protection authority, including the authority in the EU country where you live or work or where the alleged infringement occurred.
11. Security and automated decisions
We apply appropriate technical and organisational measures to protect personal information. No internet transmission is completely risk-free. We do not use consultation information for automated decision-making or profiling that produces legal or similarly significant effects.
12. Changes and contact
We may update this policy when our website, services, or legal obligations change. The latest version and update date will remain available on this page. For privacy questions or requests, email care@idtress.com.