Privacy Policy

1. Controller

The controller responsible for data processing on this website is NewAgevity GmbH · Dr. Marcus Grolig · Munich.

Practice address: Maximilianstraße 14 · 80539 Munich. Phone: +49 (0) 89 — 123 456 78. Email: info@medispa.com. Practice owner: Dr. Marcus Grolig.

2. Data we collect

Depending on how you interact with us, we may process the following categories of personal data:

• Identity and contact details (name, email address, phone number)
• Appointment and treatment preferences you voluntarily provide
• Messages submitted through contact, newsletter, or booking forms
• Technical data such as IP address, browser type, device information, and usage logs
• Communication records when you contact our practice by phone, email, or form

3. Purposes and legal bases

We process personal data only where necessary and on a valid legal basis under Art. 6 GDPR:

• To respond to enquiries and schedule appointments (Art. 6 (1)(b) GDPR – contract / pre-contractual steps)
• To operate, secure, and improve our website (Art. 6 (1)(f) GDPR – legitimate interests)
• To send newsletters or marketing updates where you have given consent (Art. 6 (1)(a) GDPR)
• To comply with legal, medical, or accounting obligations (Art. 6 (1)(c) GDPR)

4. Health-related information

If you share health-related information when requesting treatment or booking an appointment, we treat this as special-category data under Art. 9 GDPR. Such data is processed only with your explicit consent and/or as required for medical care, and is handled with heightened confidentiality.

5. Cookies and analytics

Our website may use essential cookies required for basic functionality and security. Optional analytics or marketing cookies are used only with your consent where required by law. You can manage cookie preferences in your browser settings at any time.

6. Data sharing

We do not sell personal data. We may share data with trusted service providers (for example hosting, email delivery, or IT support) strictly as needed to operate our practice and website, under appropriate data-processing agreements. Data may also be disclosed where required by law or competent authorities.

7. Retention

We retain personal data only for as long as necessary for the purposes described above, or as required by statutory retention periods applicable to medical practices and commercial records in Germany. When retention is no longer required, data is deleted or anonymized.

8. Your rights

Under the GDPR, you have the right to:

• Access your personal data (Art. 15)
• Rectify inaccurate data (Art. 16)
• Request erasure where applicable (Art. 17)
• Restrict processing (Art. 18)
• Data portability (Art. 20)
• Object to processing based on legitimate interests (Art. 21)
• Withdraw consent at any time without affecting prior lawful processing

9. Complaints

If you believe your data protection rights have been violated, you may lodge a complaint with the competent supervisory authority. For Bavaria, this is typically the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA).

10. Contact for privacy matters

For privacy requests or questions, contact us at info@medispa.com or write to Maximilianstraße 14 · 80539 Munich. We will respond within the timeframes required by applicable law.