Privacy policy

1. Controller

Institut Brand, owner Christiane Brand
Niederhoner Straße 22, 37269 Eschwege, Germany
Phone: +49 5651 33 555 33
Email: info@institut-brand.de

2. Data protection officer

Volker Roeber, DSB-Mitte / EuroTrust-Consulting
Emilienstraße 15, 99817 Eisenach, Germany
Email: info@dsb-mitte.de

3. Hosting and provision of the website

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. The servers are located in Germany. Your data is not transferred to countries outside the European Union.

STRATO processes the technically necessary connection data on our behalf; a data processing agreement pursuant to Art. 28 GDPR is in place with STRATO. The legal basis is our legitimate interest in the secure and efficient provision of the website (Art. 6 (1) (f) GDPR).

4. Server log files

Every time this website is accessed, technical information is recorded automatically: the page or file requested, date and time, volume of data transferred, browser type and version, operating system, referrer URL and IP address. This data is technically necessary for delivering and displaying the website and additionally serves security and error analysis.

Legal basis: Art. 6 (1) (f) GDPR. This data is not merged with other data sources.

Log data is deleted automatically after 90 days at the latest. It is retained for longer only in individual cases and only where there is a specific reason, such as an attack or a malfunction that needs to be investigated; the entries concerned are deleted once the investigation has been completed.

5. Cookies and similar technologies

This website does not set any cookies at all and does not store any other information on your device. No usage profiles are created, no web analytics service is embedded and no social media plug-ins from Facebook, Instagram, X or YouTube are used. For this reason no consent banner is required.

Should services requiring consent be used in the future, we will obtain your consent in advance and update this policy.

You can restrict or prevent the storage of cookies at any time via your browser settings.

6. “Request a free quote” form

Using the form on the page /en/offer you can request a non-binding quote. We process the data you provide:

• information on the desired field of work, the intended use, the preferred way of purchase and further areas of interest,
• first name, last name, phone number and email address.

Purpose: handling your enquiry, preparing an individual quote and contacting you for this purpose.
Legal basis: Art. 6 (1) (b) GDPR (steps prior to entering into a contract) and Art. 6 (1) (a) GDPR insofar as you expressly consent to being contacted.
Voluntary nature: providing this information is voluntary. Without contact details, however, we cannot send you a quote.
Recipients: your details are transmitted encrypted to our web server at STRATO in Germany and forwarded from there by email to our mailbox info@institut-brand.de. They are not stored on the website itself. Our email mailbox is operated on a server of our IT service provider Andre Hotzler EDV-Dienstleistungen, Freischützstr. 99, 81927 München, Germany, in a data centre in Germany. To retrieve and process the emails we use Zoho Mail, provided by Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands; processing takes place in the EU. Only the employees of Institut Brand involved in processing your enquiry have access. No data is passed on for advertising purposes. Where necessary to prepare the quote, we pass your details on to the TimeWaver manufacturer or to the partner entrusted with distribution.
Storage period: enquiries that do not result in a contract are deleted from our mailbox no later than 6 months after receipt. If a contract results from it, we retain the data required for this for as long as statutory retention periods demand (generally 6 or 10 years).

You can withdraw any consent given at any time without stating reasons by email to info@institut-brand.de. The lawfulness of processing carried out up to the withdrawal remains unaffected.

Form data is transmitted encrypted via HTTPS/TLS. No automated decision-making or profiling takes place.

7. Contact by email or phone

If you contact us by email or phone, we store your details in order to answer your enquiry and for possible follow-up questions. The legal basis is Art. 6 (1) (b) or (f) GDPR. Our email mailbox is operated on a server of our IT service provider Andre Hotzler EDV-Dienstleistungen, Freischützstr. 99, 81927 München, Germany, in a data centre in Germany. To retrieve and process the emails we use Zoho Mail, provided by Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands; processing takes place in the EU.

8. Our online shop

The purchase and quote links on this website lead to our online shop at therapeuten-shop.com. This shop is operated by Institut Brand, the same controller as this website. These are plain text links; merely visiting these pages does not transfer any data to the shop. As soon as you click such a link, the shop's own terms and conditions, cancellation policy and privacy policy apply. The shop is operated on the Shopify platform and uses its own cookies; details can be found in its privacy policy.

Other linked offerings, such as partner websites, are operated by their respective providers under their own responsibility. We have no influence over their content or data processing.

9. Embedded videos

The videos on this website are delivered from our web server at STRATO in Germany and are only loaded when you start them. No data is transmitted to third-party video platforms such as YouTube or Vimeo.

10. Data minimisation and security

We process personal data only for as long as necessary or legally required. The website is delivered exclusively encrypted via HTTPS. We take technical and organisational measures pursuant to Art. 32 GDPR to protect your data against loss, manipulation and unauthorised access.

11. Your rights

You have the right at any time to:

• access to the data stored about you (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing based on legitimate interests (Art. 21 GDPR),
• withdraw consent given with effect for the future (Art. 7 (3) GDPR).

Please contact the controller named above or our data protection officer. You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany, poststelle@datenschutz.hessen.de. You may also contact the supervisory authority where you live.

12. Changes to this policy

We adapt this privacy policy when legal requirements or our services and features change. The version published on this page applies.