privacy policy
Information pursuant to the GDPR + BDSG (German Federal Data Protection Act)
This English version is provided for information; the German version is legally binding.
controller
The controller for the processing of data on this website is:
Ästhetik am Isartor
Owner: Dr. Fabian Weinschenk
Isartorplatz 5
80331 München
data collected when you visit the website
When this website is accessed, technically necessary data (IP address, date/time, browser type, referrer) are processed in order to make the delivery of the content possible. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in stable operation).
cookies, consent + analytics
Cookies that are not technically necessary, and analytics and marketing services, we use only after your express consent. On your first visit a consent banner appears with the categories essential (always active), Statistics and Marketing, on which you decide per category. The legal basis for optional services is your consent (Art. 6(1)(a) GDPR in conjunction with § 25 Abs. 1 TDDDG — the German Telecommunications and Digital Services Data Protection Act). Consent is voluntary and can be withdrawn at any time with effect for the future.
We use Google Consent Mode v2: before consent is given, no statistics or marketing services are loaded — the default setting is “denied”. Only after your consent is the Google Tag Manager loaded (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), which manages the services you have released. The Tag Manager itself stores no analytics cookies.
Statistics — Google Analytics 4: If you consent to the “Statistics” category, we use Google Analytics 4 for audience measurement in order to improve what we offer. The data processed include a truncated (anonymised) IP address, device and browser information, and your interactions on the website. The provider is Google Ireland Limited; a transfer to Google LLC in the USA is possible. Google LLC is certified under the EU-US Data Privacy Framework; in addition, standard contractual clauses are in place.
Statistics — Microsoft Clarity: Likewise, if you consent to the “Statistics” category, we use Microsoft Clarity, a web analytics service which evaluates usage behaviour by means of heatmaps and pseudonymised session recordings in order to improve the usability of the website. The data processed include mouse and scroll movements, clicks, page views and device and browser information; entries in form fields are masked by default and are not recorded. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA; a transfer to the USA is possible. Microsoft is certified under the EU-US Data Privacy Framework, and in addition standard contractual clauses are in place. Further information in the Microsoft privacy statement.
Marketing: If you consent to the “Marketing” category, advertising and social media services may be used to measure the success of campaigns and to extend reach. Before a specific service (e.g. Google Ads, Meta, LinkedIn) is activated, this privacy policy will be supplemented with the details of that service.
You can change your consent at any time, or withdraw it with effect for the future:
contact + booking
If you contact us or book a consultation appointment online, we process the data submitted in order to deal with your enquiry and to perform the consultation contract (Art. 6(1)(b) GDPR). The data are not passed on to third parties; technical service providers (hosting, payment service providers) are bound by data processing agreements.
online appointment booking (doctolib)
For online appointment booking we embed — solely after your consent — an iFrame of the service Doctolib. The provider is Doctolib SAS, 54 quai Charles Pasqua, 92300 Levallois-Perret, France. The content is loaded only after your consent; in doing so, technically necessary data (including the IP address, device and browser information and cookies) are transmitted to Doctolib in order to make the appointment booking possible.
The data you enter in the booking form are processed by Doctolib in order to arrange the appointment. The legal basis is your consent to the loading of the service (Art. 6(1)(a) GDPR in conjunction with § 25 Abs. 1 TDDDG) as well as the initiation and performance of the consultation contract (Art. 6(1)(b) GDPR). A data processing agreement under Art. 28 GDPR is in place with Doctolib. Further information on the processing of data by Doctolib can be found on the website of doctolib.de.
your rights
- Access under Art. 15 GDPR
- Rectification under Art. 16 GDPR
- Erasure under Art. 17 GDPR
- Restriction of processing under Art. 18 GDPR
- Data portability under Art. 20 GDPR
- Objection under Art. 21 GDPR
Right to lodge a complaint with the competent supervisory authority — Bayerisches Landesamt für Datenschutzaufsicht (BayLDA).
last updated
This privacy policy is reviewed regularly and adapted to statutory requirements. Last updated: 2026-05-31.
