The following information provides a brief overview of what happens to your personal data when you visit our website. Personal data is any information relating to an identified or identifiable natural person. Detailed information on data protection can be found in the privacy policy below.
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. The responsible party within the meaning of the General Data Protection Regulation (GDPR) is Laser ONE GmbH. You can find the full contact details of the responsible body in Section 2 of this privacy policy.
How do we collect your data?
On the one hand, your data is collected when you provide it to us. This may, for example, be data that you enter into a contact form or provide as part of an online appointment booking.
Other data is collected automatically or after your consent when you visit our website by our IT systems or by the services used. This is primarily technical data, such as IP address, internet browser, operating system, or the time of the page view. The collection of technically necessary data occurs automatically as soon as you access our website. Other data is only processed if there is a corresponding legal basis for doing so.
What do we use your data for?
Part of the data is processed to ensure the secure and error-free provision of the website. Further data is processed to handle your inquiries and to provide the services you have requested, in particular online appointment booking and appointment management.
If you have given your consent, data may also be processed to analyze the use of our website, to measure the effectiveness of our advertising, and for marketing purposes.
What rights do you have regarding your data?
Within the framework of legal requirements, you have, in particular, the right to information about your personal data as well as the right to rectification, erasure, and restriction of processing. Furthermore, you may have a right to data portability and a right to object to certain types of processing.
You can revoke any consent given at any time with effect for the future. The legality of the processing carried out until the revocation remains unaffected.
In addition, you have the right to lodge a complaint with a competent data protection supervisory authority.
Further information about your rights can be found in Section 2 of this privacy policy.
When visiting our website—provided you have previously given your consent via our consent management system—services for the statistical evaluation of website use, for measuring the success of advertising measures, and for marketing purposes may be used.
Cookies and similar technologies may be used, and personal data may be transmitted to the respective providers. You can change or revoke your consent at any time with effect for the future via the privacy settings provided on our website.
Detailed information on the services used, the respective purposes, legal bases, recipients, and any data transfers to third countries can be found in the following sections of this privacy policy.
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the applicable data protection regulations and this privacy policy.
When you use this website, various personal data are processed. Personal data is information that relates to an identified or identifiable natural person. This privacy policy explains which personal data we process, for what purposes, and on what legal basis this is done.
We point out that data transmission over the internet (e.g., when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.
The responsible body for data processing on this website is:
Laser ONE GmbH
Address:
Uhlandstraße 175
10719 Berlin
Represented by the managing director: Natalia Miller
Contact:
Phone: +49 30 239 307 04
Email: info@laserone.de
Commercial register number:
HRB 276336
Charlottenburg Local Court
The responsible body is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.
If you believe that the processing of your personal data violates the General Data Protection Regulation or other data protection regulations, you have the right to lodge a complaint with a data protection supervisory authority in accordance with Art. 77 GDPR.
For Laser ONE GmbH, the following supervisory authority is particularly responsible:
Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
Further information and current contact details can be found on the website of the Berlin Commissioner for Data Protection and Freedom of Information.
The right to lodge a complaint exists without prejudice to other administrative or judicial remedies.
In accordance with Art. 20 GDPR, you have the right, under the legal requirements, to receive personal data that you have provided to us and which we process on the basis of your consent or to fulfill a contract using automated procedures, in a structured, commonly used, and machine-readable format.
You also have the right to transmit this data to another controller or—as far as technically feasible—to demand direct transmission by us to another controller.
For security reasons and to protect the transmission of confidential content, such as inquiries or appointment bookings, this website uses SSL or TLS encryption.
You can recognize an encrypted connection by the fact that the address line of your browser begins with “https://”.
When SSL or TLS encryption is activated, the data you transmit to us cannot generally be read by unauthorized third parties during transmission.
Under the legal requirements, you have the right at any time to information about the personal data processed by us in accordance with Art. 15 GDPR.
Furthermore, you have, in particular, the right to rectification of incorrect personal data in accordance with Art. 16 GDPR, to erasure of your personal data in accordance with Art. 17 GDPR, and to restriction of processing in accordance with Art. 18 GDPR.
To exercise your rights and for further questions on the subject of data protection, you can contact us at any time using the contact details provided above.
Many data processing operations are only possible with your consent. You can revoke consent already given at any time with effect for the future in accordance with Art. 7 Para. 3 GDPR.
The legality of the processing carried out on the basis of the consent until the revocation is not affected by the revocation.
Insofar as your consent relates to cookies, similar technologies, or services integrated via them, you can change or revoke your selection at any time via the privacy settings provided on our website.
If the processing of your personal data is based on Art. 6 Para. 1 lit. e or f GDPR, you have the right, in accordance with Art. 21 GDPR, to object to the processing of your personal data at any time for reasons arising from your particular situation. This also applies to profiling based on these provisions.
If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such advertising. This also applies to profiling, insofar as it is associated with such direct marketing. After your objection, your personal data will no longer be processed for these purposes.
The use of contact data published within the scope of the imprint obligation for the purpose of sending unsolicited advertising and information materials is hereby objected to.
Laser ONE GmbH expressly reserves the right to take legal action in the event of the unsolicited sending of advertising information, such as spam emails.
Our website uses cookies and similar technologies. Cookies are small data sets that are stored on your end device and can contain certain information. Similar technologies can include, for example, local storage or other storage and access techniques.
Some cookies and similar technologies are technically necessary so that our website functions securely and properly and functions expressly requested by you can be provided. Other technologies can serve, in particular, to analyze website use, measure the success of advertising measures, marketing purposes, or the integration of external content and services.
Insofar as the storage of information on your end device or access to information already stored on your end device is strictly necessary to provide a digital service expressly requested by you, this is done on the basis of Section 25 Para. 2 No. 2 TDDDG.
Insofar as storage of information on your end device or access to information stored there is not strictly necessary, this only takes place after your prior consent in accordance with Section 25 Para. 1 TDDDG. Insofar as personal data is processed here, the processing is based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR.
We use a consent management system to manage your consents. Through this, you can select which cookies, technologies, and services requiring consent you wish to agree to. You can change or revoke your consent at any time with effect for the future via the privacy settings provided on our website.
Detailed and automatically updated information on the cookies and similar technologies used on our website, in particular on their providers, purposes, categories, and storage periods, can be found in the following cookie statement.
When you access our website, information is automatically processed by the server in so-called server log files, which your browser automatically transmits. These may include in particular:
The processing of this data is carried out for the secure and stable provision of our website, to ensure system security, and to detect and analyze technical malfunctions and abusive access.
A merging of this data with other data sources is generally not carried out, unless this is necessary to ensure system security, for technical error analysis, or for other legally permissible reasons.
legal basis
The processing is based on Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the secure, stable, and error-free provision of our website as well as in the defense and investigation of abusive access.
Our website and parts of our technical infrastructure are operated at Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany.
As part of the hosting, technically necessary connection and log data such as IP address, date and time of access, pages or files accessed, browser information, and other technical data can be processed.
The processing is carried out in particular to provide our website securely, stably, and reliably, and to be able to detect and analyze technical malfunctions and abusive access.
legal basis
The processing is based on Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in a secure, stable, and reliable provision of our website and the technical infrastructure required for this.
Insofar as Hetzner processes personal data on our behalf, we have concluded a data processing agreement with Hetzner Online GmbH in accordance with Art. 28 GDPR.
Wenn Sie uns per Kontaktformular Anfragen zukommen lassen, werden Ihre Angaben aus dem Anfrageformular inklusive der von Ihnen dort angegebenen Kontaktdaten zwecks Bearbeitung der Anfrage und für den Fall von Anschlussfragen bei uns gespeichert. Diese Daten werden von der Laser ONE GmbH vertraulich behandelt und nicht ohne Ihre ausdrückliche Einwilligung weitergegeben.
Die Verarbeitung der in das Kontaktformular eingegebenen Daten erfolgt somit ausschließlich auf Grundlage Ihrer Einwilligung (Art. 6 Abs. 1 lit. a DSGVO). Sie können diese Einwilligung jederzeit widerrufen. Dazu reicht eine formlose Mitteilung per E-Mail an uns. Die Rechtmäßigkeit der bis zum Widerruf erfolgten Datenverarbeitungsvorgänge bleibt vom Widerruf unberührt.
Die von Ihnen im Kontaktformular eingegebenen Daten verbleiben bei uns, bis Sie uns zur Löschung auffordern, Ihre Einwilligung zur Speicherung widerrufen oder der Zweck für die Datenspeicherung entfällt (z.B. nach abgeschlossener Bearbeitung Ihrer Anfrage). Zwingende gesetzliche Bestimmungen – insbesondere Aufbewahrungsfristen – bleiben unberührt.
When you book an appointment via our website, we process the personal data required for this. This includes, in particular, first and last name, telephone number, email address, selected service, selected employee, date and time of the appointment, and, if applicable, a discount code, special requests, or other voluntary information.
Own Booking Interface and Altegio
We use our own booking interface for online appointment booking. This is connected to the Altegio appointment management system via a technical interface.
Available services, employees, and free appointments are retrieved via this interface. The data you enter as part of the booking is then transmitted to Altegio in order to create, manage, change, or cancel the desired appointment.
Provider is:
Altegio Europe KFT
Széchenyi István tér 7
House of Business Roosevelt
1054 Budapest
Hungary
Altegio processes the personal data on our behalf, in particular for appointment management, customer management, avoidance of double bookings, and, if applicable, for sending appointment confirmations and appointment reminders.
To the extent this is necessary for the provision and documentation of our services, treatment data and treatment-relevant information may also be processed in Altegio. Provided that corresponding consent has been given, this may also include health data as well as photographs for treatment documentation.
Technical Forwarding via Our Servers
Communication between our booking interface and Altegio takes place via a technical interface or a booking proxy operated by us.
Permanent storage of the booking content on the intermediate server generally does not occur. Technically necessary log data, such as IP address, time and status of the request, and technical error messages, can be stored temporarily to ensure the secure operation of the interface, analyze technical errors, and prevent abusive access.
Technical server operation takes place at Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany.
Additional Appointment and Customer Management via Shore
In addition, we use the Shore service for internal customer and appointment management.
Provider is:
Shore GmbH
Lothstraße 19
80797 Munich
Germany
To the extent this is necessary for the internal processing, organization and documentation of our services, contact, customer, appointment and treatment data may be processed in Shore. This may also include, where available and necessary, treatment-relevant health information as well as photographs for treatment documentation.
The processing serves in particular internal appointment organization, customer management, customer communication, and the documentation of planned and performed treatments.
Purposes of Data Processing
Processing is carried out in particular for the following purposes:
Legal bases
The processing of personal data required for appointment booking and appointment management is carried out on the basis of Art. 6 Para. 1 lit. b GDPR for the implementation of pre-contractual measures and for the fulfillment of the treatment or service contract concluded with you.
The processing of technically necessary server and log data is carried out on the basis of Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the secure, stable, and error-free operation of the booking interface and the technical interface as well as in the prevention of abuse.
Insofar as you give us separate consent, for example for receiving offers or news, the relevant processing is carried out on the basis of Art. 6 Para. 1 lit. a GDPR. Consent given can be revoked at any time with effect for the future.
Recipients and Processors
Recipients of the personal data are, insofar as this is necessary for the stated purposes:
With the processors used by us, agreements on order processing in accordance with Art. 28 GDPR are concluded, as far as legally required.
Speicherdauer
Booking, customer, and appointment data are stored as long as this is necessary for appointment processing, customer support, and documentation.
In addition, the data can be stored insofar as legal commercial, tax, or other retention obligations exist or storage is necessary for the assertion, exercise, or defense of legal claims.
Technical log data of the booking interface is only stored as long as this is necessary to ensure system security and technical error analysis. Subsequently, they are deleted unless legal obligations or specific security incidents require longer storage.
In the context of appointment scheduling, consultation, performance and handling of our treatments, we process personal data of our customers. This may include, in particular, first and last name, address, date of birth, telephone number, email address, as well as information on appointments, booked and performed treatments, and customer history.
Processing is carried out, insofar as it is necessary for the initiation, performance and handling of the contractual relationship, on the basis of Art. 6(1)(b) GDPR. Where statutory retention obligations exist, further storage is carried out on the basis of Art. 6(1)(c) GDPR.
The data is stored only for as long as is necessary for the purposes stated. In addition, data may be stored where statutory retention obligations exist or where storage is necessary for the establishment, exercise or defence of legal claims.
Before or in the context of certain treatments, we collect health data as part of a health/safety medical history questionnaire. This may include, in particular, information on illnesses, allergies, medication intake, pregnancy, skin conditions and other health circumstances that are relevant for assessing treatment suitability, possible contraindications and treatment risks.
Health data belongs to the special categories of personal data within the meaning of Art. 9 GDPR.
The processing of the health data provided as part of the health/safety medical history questionnaire is carried out on the basis of your explicit consent pursuant to Art. 9(2)(a) GDPR for the purpose of assessing treatment suitability, possible contraindications and treatment risks, as well as for documenting the course of treatment.
The completed medical history documents are generally kept in paper form. Treatment-relevant information may additionally be processed and stored in our electronic customer file and the customer and appointment management systems used by us.
Consent may be withdrawn at any time with effect for the future, for example by email to info@laserone.de. The lawfulness of the processing carried out on the basis of the consent up to the withdrawal is not affected by the withdrawal.
Provided that you expressly consent, photographs of the treated body areas may be taken before, during and/or after a treatment and stored in your electronic customer file. The photographs serve exclusively for internal documentation and assessment of the course of treatment.
Publication or use for advertising or marketing purposes does not take place on the basis of this consent.
Processing is carried out on the basis of your consent pursuant to Art. 6(1)(a) GDPR. Where the photographs reveal special categories of personal data within the meaning of Art. 9 GDPR or are processed as such, processing is additionally carried out on the basis of your explicit consent pursuant to Art. 9(2)(a) GDPR.
Consent is voluntary. Your refusal or a later withdrawal has no effect on the performance of your treatment. You may withdraw your consent at any time with effect for the future, for example by email to info@laserone.de. The lawfulness of the processing carried out up to the withdrawal remains unaffected by this.
In the event of a withdrawal, the photographs stored on the basis of this consent will be deleted, unless statutory retention obligations or other legal reasons prevent deletion.
On individual pages of our website, in particular in our blog posts, we provide buttons through which content can be shared via various social networks and communication services. These include in particular Facebook, WhatsApp, Reddit, and Pinterest.
The sharing buttons are integrated as simple links. The associated symbols are displayed locally on our website. When simply accessing our website, no connection to the respective social networks or communication services is established via these buttons and no personal data is transmitted to these providers as a result.
Only when you click on one of the corresponding sharing buttons is the respective external service called up. In this process, personal data, in particular your IP address, the address of the page to be shared, and other technical information, can be transmitted to the respective provider.
If you are logged in to the respective service, the provider can assign the call and any further interactions to your user account. The subsequent data processing by the respective provider is subject to its data protection regulations. We generally have no influence on the type and scope of the data processing that takes place there.
We use analysis and marketing services on our website. These serve in particular to evaluate the use of our website, to measure the effectiveness of our advertising measures, and to optimize our advertising campaigns.
The analysis and marketing services described below are only used after you have given the required consent via our consent management system. Without corresponding consent, these services will not be activated.
You can change or revoke your consent at any time with effect for the future via the privacy settings provided on our website.
We use Google Analytics on our website, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables us to statistically evaluate the use of our website. In this context, information about page views, interactions with our website, origin of visitors, devices and browsers used, and other usage and technical data can be processed.
Google Analytics uses cookies and similar technologies to collect and evaluate information about the use of our website. Pseudonymous identifiers can also be processed in the process.
The use of Google Analytics only takes place after your prior consent. The storage of information on your end device or access to information stored there is based on Section 25 Para. 1 TDDDG. The associated processing of personal data is based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR.
You can change or revoke your consent at any time with effect for the future via the privacy settings provided on our website.
As part of the use of Google Analytics, personal data can also be transmitted to Google LLC and other companies affiliated with Google and processed outside the European Union or the European Economic Area.
Further information on the processing of personal data by Google can be found in Google’s privacy information.
We use Google Ads and associated conversion tracking technologies from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us to display advertisements in Google’s offerings and on third-party websites and to measure the effectiveness of our advertising measures. With the help of conversion tracking, we can determine in particular whether users perform certain actions on our website after calling up or clicking on one of our advertisements.
Cookies and similar technologies can be used here, and in particular information about page views, clicks, interactions with our website and advertisements, conversions, IP address, technical device and browser information, and pseudonymous identifiers can be processed.
The use of Google Ads and the associated tracking and conversion technologies only takes place after your prior consent. The storage of information on your end device or access to information stored there is based on Section 25 Para. 1 TDDDG. The associated processing of personal data is based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR.
You can change or revoke your consent at any time with effect for the future via the privacy settings provided on our website.
As part of the use of Google Ads, personal data can also be transmitted to Google LLC and other companies affiliated with Google and processed outside the European Union or the European Economic Area.
Further information on the processing of personal data by Google can be found in Google’s privacy information.
We use the Meta Pixel on our website. The provider for users within the European Union is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
The Meta Pixel enables us to record certain interactions of visitors with our website and to measure the effectiveness of our advertisements on Facebook and Instagram. This allows us to understand in particular whether users perform certain actions on our website after calling up or clicking on an advertisement, and to evaluate and optimize our advertising campaigns accordingly.
Cookies and similar technologies can be used here, and in particular information about page views, clicks, interactions with our website and advertisements, actions performed or conversions, IP address, technical device and browser information, and cookie and other pseudonymous identifiers can be processed.
The information collected with the help of the Meta Pixel can be linked by Meta with further information. Especially if you are logged in to a Meta service, Meta can assign the processed information to your user account if necessary. We generally have no complete influence on the further data processing by Meta.
The use of the Meta Pixel only takes place after your prior consent. The storage of information on your end device or access to information stored there is based on Section 25 Para. 1 TDDDG. The associated processing of personal data is based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR.
You can change or revoke your consent at any time with effect for the future via the privacy settings provided on our website.
In connection with the Meta Pixel, personal data can also be transmitted to companies of the Meta group of companies and processed outside the European Union or the European Economic Area.
Further information on the processing of personal data by Meta can be found in Meta’s privacy information.
We use the TikTok Pixel on our website. The provider for users in the European Economic Area is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.
The TikTok Pixel enables us to record certain interactions of visitors with our website, to measure the effectiveness of our advertisements on TikTok, and to evaluate and optimize our advertising campaigns.
Cookies and similar technologies can be used here, and in particular information about page views, clicks, interactions with our website and advertisements, actions performed or conversions, timestamps, IP address, technical device and browser information, and cookie and other pseudonymous identifiers can be processed.
The information collected with the help of the TikTok Pixel can be processed by TikTok in particular for measuring and optimizing advertising campaigns and, if necessary, linked with further information available to TikTok. We generally have no complete influence on the further data processing by TikTok.
The use of the TikTok Pixel only takes place after your prior consent. The storage of information on your end device or access to information stored there is based on Section 25 Para. 1 TDDDG. The associated processing of personal data is based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR.
You can change or revoke your consent at any time with effect for the future via the privacy settings provided on our website.
In connection with the TikTok Pixel, personal data may be processed outside the European Union or the European Economic Area.
Further information on the processing of personal data by TikTok can be found in TikTok’s privacy information.
Videos from the video platform YouTube are integrated into our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The YouTube videos are integrated into our website in such a way that the YouTube player is only loaded after you have given the required consent via our consent management system.
Before you give your consent, no connection to YouTube is established by the integrated video player and no data is transmitted to YouTube or Google by it.
After your consent, the YouTube player is loaded. In the process, a connection to the servers of YouTube or Google is established. This allows in particular your IP address, technical device and browser information, information about the page called up, and information about the use of the integrated video to be transmitted to YouTube or Google.
If you are logged in to your YouTube or Google account, Google can assign the use of the integrated video to your user account if necessary.
YouTube can use cookies and similar technologies and store or read information on your end device.
The use of YouTube only takes place after your prior consent. The storage of information on your end device or access to information stored there is based on Section 25 Para. 1 TDDDG. The associated processing of personal data is based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR.
You can change or revoke your consent at any time with effect for the future via the privacy settings provided on our website.
In connection with the use of YouTube, personal data can also be transmitted to Google LLC and other companies affiliated with Google and processed outside the European Union or the European Economic Area.
Further information on the processing of personal data by Google or YouTube can be found in Google’s privacy information.
On our website, we integrate the map service Google Maps via a Google Maps embed. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Maps enables us to provide you with interactive maps directly on our website and to make it easier to find our location.
Google Maps is integrated into our website in such a way that the connection to Google is only established after you have given the required consent via our consent management system.
Before you give your consent, the Google Maps embed is not loaded and no data is transmitted to Google by it.
After your consent, Google Maps is loaded and a connection to Google’s servers is established. In this process, in particular your IP address, technical device and browser information, information about the page called up, and other data required for the provision of the map service can be transmitted to Google.
The use of Google Maps only takes place after your prior consent. The storage of information on your end device or access to information stored there, insofar as this takes place, is based on Section 25 Para. 1 TDDDG. The associated processing of personal data is based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR.
You can change or revoke your consent at any time with effect for the future via the privacy settings provided on our website.
In connection with the use of Google Maps, personal data can also be transmitted to Google LLC and other companies affiliated with Google and processed outside the European Union or the European Economic Area.
Further information on the processing of personal data by Google can be found in Google’s privacy information.
