Privacy Policy
1. Privacy at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data includes any data that can be used to identify you personally. Detailed information on data protection can be found in our privacy policy listed below this text.
Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the section “Notice Concerning the Party Responsible for Data Collection” in this privacy policy.
How do we collect your data?
Some data is collected when you provide it to us. This could, for example, be data you enter into a contact form.
Other data is collected automatically or with your consent by our IT systems when you visit the website. This is mainly technical data, such as your internet browser, operating system, or the time you accessed the page. This data is collected automatically as soon as you enter this website.
What do we use your data for?
Part of the data is collected to ensure the website runs error-free. Other data may be used to analyze your user behavior. If contracts can be concluded or initiated via the website, the transmitted data will also be processed for contract offers, orders, or other service requests.
What are your rights regarding your data?
You always have the right to request free information about where your stored personal data comes from, who receives it, and what it's used for. You also have the right to request that it be corrected or deleted. If you've given us consent to process your data, you can cancel that consent at any time for the future.
You also have the right to ask us to limit how we use your personal data in certain situations. Plus, you can file a complaint with the responsible supervisory authority.
If you have any questions about this or data privacy in general, feel free to reach out to us whenever you like.
Analytics and third-party tools
When you visit this website, your browsing habits may be statistically analyzed. We mostly do this using analysis programs.
You can find detailed information about these analysis programs in our privacy policy below.
2. Hosting
We host our website content with the following provider:
External hosting
This website is hosted externally. The personal data collected on this website is stored on the host's servers. This can include IP addresses, contact requests, meta and communication data, contract details, contact info, names, website visits, and other data generated through a website.
We use external hosting to fulfill our contracts with potential and current clients, and to provide our online services safely, quickly, and efficiently through a professional provider.
Our host will only process your data as much as needed to fulfill their service duties and will follow our instructions regarding that data.
We use the following host:
netcup GmbH
Emmy-Noether-Straße 10
76131 Karlsruhe
3. General notes and mandatory information
Privacy Policy
The people running these pages take the protection of your personal data very seriously. We treat your personal data confidentially and follow the legal data protection rules as well as this privacy policy.
When you use this website, various pieces of personal data are collected. Personal data is information that can be used to identify you personally. This privacy policy explains what data we collect, what we use it for, and how we do it.
Just a heads-up: data transmission on the internet (like when communicating by email) can have security gaps. It's impossible to completely protect data from being accessed by others.
Note on the responsible party
The party responsible for processing data on this website is:
Dr. med. Etem Caliskan
Sophienstr. 23
10178 Berlin
Phone: +49 151 56776854
Email: contact@orvea.de
The responsible party is the person or company who alone or together with others decides why and how personal data is processed.
How long we keep your data
If no specific storage period has been mentioned in this privacy policy, your personal data will stay with us until the reason for processing it no longer applies. If you ask us to delete your data or withdraw your consent, we will delete your data unless we have other legally allowed reasons to keep it.
General information on the legal basis for data processing on this website
If you have given your consent to data processing, we process your personal data on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR. If your data is required to fulfill a contract or to carry out pre-contractual measures, we process your data on the basis of Art. 6 para. 1 lit. b GDPR.
We also process your data if it is necessary to fulfill a legal obligation on the basis of Art. 6 para. 1 lit. c GDPR. Data processing may also be based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.
Recipients of personal data
As part of our business activities, we work with various external service providers. In some cases, this also requires the transfer of personal data to these external parties. We only pass on personal data if this is necessary to fulfill a contract, if we are legally obliged to do so, if we have a legitimate interest, or if another legal basis permits the data transfer.
Revocation of your consent to data processing
Many data processing operations are only possible with your explicit consent. You can revoke consent you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right to object to data collection in special cases and to direct marketing
If data processing is based on Art. 6 para. 1 lit. e or f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. This also applies to profiling based on these provisions.
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising. If you object, your personal data will no longer be used for direct marketing purposes.
Right to lodge a complaint with the competent supervisory authority
In the event of violations of the GDPR, those affected have the right to lodge a complaint with a supervisory authority. The right to lodge a complaint is without prejudice to other administrative or judicial remedies.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format.
Information, correction, and deletion
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, as well as a right to correction or deletion of this data.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. This right exists in particular if you dispute the accuracy of your stored data, if the processing is unlawful, if we no longer need the data, or if you have lodged an objection against the processing.
If you have restricted the processing of your personal data, this data may only be processed—aside from being stored—with your consent or for the establishment, exercise, or defense of legal claims.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://".
Objection to promotional emails
We hereby object to the use of contact data published as part of our legal notice obligation to send unsolicited advertising and information materials. The site operators expressly reserve the right to take legal action in the event of the unsolicited sending of promotional information.
4. Data collection on this website
Cookies
Our website uses cookies. Cookies are small data files that won't harm your device. They are saved on your device either temporarily for a single session or permanently.
Cookies can be set by us or by third-party companies. Third-party cookies make it possible to integrate certain services from other companies into our website.
Cookies have various functions. Many cookies are technically essential because certain website features wouldn't work without them. Other cookies help us analyze user behavior or are used for advertising purposes.
You can adjust your browser settings to notify you when cookies are placed, only allow them in individual cases, or block them entirely. Disabling cookies may limit the functionality of this website.
Contact form
If you send us inquiries via the contact form, we'll save the details you provide—including your contact info—to process your request and handle any follow-up questions.
We process this data based on your consent, our legitimate interests, or if your request is related to a contract or required for pre-contractual steps.
Inquiries via email, phone, or fax
If you contact us by email, phone, or fax, we will store and process your inquiry along with any personal data it contains to handle your request.
We won't share this data without your consent. It stays with us until you ask us to delete it, revoke your consent, or the reason for storing it no longer applies.
Online Payments and Payment Service Providers
You can pay for treatment packages directly when booking online; deposits can be made via a payment link. We use the payment service provider Stripe for this purpose. The provider is Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland (hereinafter “Stripe”). Payment processing takes place on a Stripe payment page.
In particular, we process your name, email address, the payment amount, the date of the booked appointment, and your payment information (e.g., card details or your Apple Pay or Google Pay account). The name of the booked treatment is not transmitted to Stripe. We do not receive your full card details.
If you choose to pay via Klarna or opt for installment payments, your data will be transmitted to Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter “Klarna”). Klarna conducts an identity and credit check on its own responsibility and determines whether the selected payment method will be offered to you. An installment or financing agreement is entered into exclusively between you and Klarna.
Data processing is carried out to process the payment and thereby fulfill the contract pursuant to Article 6(1)(b) of the GDPR, as well as to comply with statutory retention requirements pursuant to Article 6(1)(c) of the GDPR. Stripe may also transfer data to Stripe, Inc. in the United States; Stripe, Inc. is certified under the “EU-US Data Privacy Framework” (DPF), and the European Commission’s Standard Contractual Clauses are also used.
For more information, please see the privacy policies of Stripe and Klarna:
https://stripe.com/de/privacy
https://www.klarna.com/de/datenschutz/
5. Newsletter
Newsletter data
If you'd like to sign up for our newsletter, we need your email address and some details that let us check that you own the email address provided and agree to receive the newsletter.
We process the data you enter in the newsletter sign-up form solely based on your consent. You can withdraw your consent at any time, for example, by clicking the "unsubscribe" link in the newsletter.
Once you unsubscribe from the mailing list, your email address may be saved on a blacklist if necessary to prevent future mailings.
Data transfers to the USA are based on the European Commission's standard contractual clauses. You can find more details on how Google handles user data in their privacy policy:
https://policies.google.com/privacy?hl=de
The company is certified under the "EU-US Data Privacy Framework" (DPF). You can find more information at:
https://www.dataprivacyframework.gov/participant/5780
Source: e-recht24.de