Privacy policy

1. Controller

Institut Brand, owner Christiane Brand
Niederhoner Straße 22, 37269 Eschwege, Germany
Phone: +49 5651 33 555 33
Email: info@institut-brand.de

2. Data protection officer

Volker Roeber, Bernhard-Engelhardt-Str. 6, 37269 Eschwege, Germany
Phone: +49 5651 3203810
Email: brand@datenschutz-nordhessen.de

3. Hosting and provision of the website

This website is built with the Lovable platform and provided via its infrastructure (Lovable Labs Incorporated, 2261 Market Street, San Francisco, CA 94114, USA). Content delivery servers are used to deliver the pages; this may involve transfers of data to third countries, in particular the USA. Such transfers take place on the basis of the EU Commission's standard data protection clauses pursuant to Art. 46 (2) (c) GDPR or – where applicable – on the basis of an adequacy decision (EU-US Data Privacy Framework).

The provider processes the technically necessary connection data on our behalf as a processor (Art. 28 GDPR). The legal basis is our legitimate interest in the secure and efficient provision of the website (Art. 6 (1) (f) GDPR).

4. Server log files

Every time this website is accessed, technical information is recorded automatically: the page or file requested, date and time, volume of data transferred, browser type and version, operating system, referrer URL and IP address. This data is technically necessary for delivering and displaying the website and additionally serves security and error analysis.

Legal basis: Art. 6 (1) (f) GDPR. This data is not merged with other data sources. Log data is deleted automatically after a short period unless it is required to investigate misuse or a security incident.

5. Cookies and similar technologies

This website does not use cookies for analysis, advertising or tracking purposes. No usage profiles are created, and no web analytics service (e.g. Google Analytics) and no social media plug-ins from Facebook, Instagram, X/Twitter or YouTube are embedded.

Where technically necessary storage in the browser takes place (e.g. for the display or security of the site), this does not require consent pursuant to Sec. 25 (2) no. 2 TDDDG. For this reason no cookie banner is required. Should services requiring consent be used in the future, we will obtain your consent in advance via a consent banner and update this policy.

You can restrict or prevent the storage of cookies at any time via your browser settings.

6. “Request a free quote” form

Using the form on the page /en/offer you can request a non-binding quote. We process the data you provide:

• information on the desired field of work, the intended use, the preferred way of purchase and further areas of interest,
• first name, last name, phone number and email address.

Purpose: handling your enquiry, preparing an individual quote and contacting you for this purpose.
Legal basis: Art. 6 (1) (b) GDPR (steps prior to entering into a contract) and Art. 6 (1) (a) GDPR insofar as you expressly consent to being contacted.
Voluntary nature: providing this information is voluntary. Without contact details, however, we cannot send you a quote.
Recipients: the data is processed exclusively within Institut Brand and is not sold to third parties for advertising purposes. Where necessary to prepare the quote, we pass your details on to the TimeWaver manufacturer or to the partner entrusted with distribution.
Storage period: we store your enquiry for as long as it is required for processing and delete it afterwards – at the latest after the expiry of statutory retention periods (generally 6 or 10 years for tax-relevant records).

You can withdraw any consent given at any time without stating reasons by email to info@institut-brand.de. The lawfulness of processing carried out up to the withdrawal remains unaffected.

Form data is transmitted encrypted via HTTPS/TLS. No automated decision-making or profiling takes place.

7. Contact by email or phone

If you contact us by email or phone, we store your details in order to answer your enquiry and for possible follow-up questions. The legal basis is Art. 6 (1) (b) or (f) GDPR.

8. Fonts (Google Fonts)

The fonts “DM Sans” and “Manrope” are loaded via the Google Fonts service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) to display the texts. When a page is accessed, your browser establishes a connection to Google servers, transmitting your IP address and the page requested. The legal basis is our legitimate interest in a consistent and appealing presentation (Art. 6 (1) (f) GDPR). Further information: policies.google.com/privacy.

9. Links to the external shop and partner sites

The purchase and information links on this website lead to external offerings, in particular to the online shop therapeuten-shop.com. These are plain text links – no data is transmitted automatically to the shop as long as you do not click the link.

If you click such a link, you leave this website. From that point on the privacy policy of the respective provider applies; that provider processes your data (e.g. IP address, cookies, order data) under its own responsibility. We have no influence on the content and data processing of those sites.

10. Embedded videos

The videos on this website are delivered from our own hosting infrastructure and are only loaded when you start them. No data is transmitted to third-party video platforms such as YouTube or Vimeo.

11. Data minimisation and security

We process personal data only for as long as necessary or legally required. The website is delivered exclusively encrypted via HTTPS. We take technical and organisational measures to protect your data against loss, manipulation and unauthorised access.

12. Your rights

You have the right at any time to:

• access to the data stored about you (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing based on legitimate interests (Art. 21 GDPR),
• withdraw consent given with effect for the future (Art. 7 (3) GDPR).

Please contact the controller named above or our data protection officer. You also have the right to lodge a complaint with a supervisory authority; for us this is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Postfach 3163, 65021 Wiesbaden, Germany.

13. Changes to this policy

We adapt this privacy policy when legal requirements or our services and features change. The version published on this page applies.