**Subject of this Privacy Policy**

We are pleased that you are interested in our website and the offers available on these pages. Protecting your personal data (hereinafter referred to as "data") is very important to us. Therefore, we would like to inform you in detail about what data is collected during your visit to our website and the use of our offers, and how it is processed by us. Furthermore, we would like to inform you about your rights and the technical and organizational protection measures we have taken regarding the processing of your data.

**Name and Address of the Data Controller and Service Provider**

The controller in the sense of the General Data Protection Regulation (GDPR) and the service provider in the sense of the Telemedia Act (TMG) is Taviara Aesthetics GmbH & Co. KG, Klosterwachtstraße 39b, 83684 Tegernsee (hereinafter also referred to as "ARTHROCON," "Taviara Aesthetics," or "we").

Questions or comments regarding this privacy policy or data protection in general should be directed to our data protection officer at dsb@arthrocon.de.

**Collection and Use of Your Data**

For the use of our website, it is generally not necessary for you to provide personal data. We only collect and use the data that your internet browser automatically transmits to us, such as:

- Date and time of access to one of our web pages

- Your browser type

- Browser settings

- Screen resolution

- The operating system used

- The page you last visited

- The amount of data transferred and the access status (file transferred, file not found, etc.)

- Your IP address.

We process this data to enable the use of the web pages you have accessed and to check whether our websites are displayed optimally for you. We only use the IP address for the duration of your visit and store the data for logging purposes exclusively in an anonymized form by truncating the IP address so that it is no longer assignable. Processing is based on Article 6(1)(f) GDPR and in our interest to reliably and as smoothly as possible display our website to you.

**Use and Deactivation of Cookies**

We do not generally use cookies in the area of our website aimed at visitors. Only within the administrative area of the website do we use cookie technology. Cookies are small text files that are sent from our web server to your browser during your visit to our web pages and are stored on your computer, tablet, or smartphone for later retrieval.

In the administrative area of our website, we use the following technically necessary cookies:

[PHPSESSID] Function: This cookie is used for executing scripts in the administrative area of our website and serves as a session ID for identifying individual users during a single website visit ("session management"). It contains an identification number created anew for each browser session and is only stored until the respective browser session ends. The cookie is a so-called first-party cookie, controlled by our website.

You can control whether cookies are set and retrieved through the settings in your browser. For instance, you can deactivate the storage of cookies entirely, limit it to certain websites, or configure your browser to notify you automatically whenever a cookie is to be set and ask for your feedback. You can block or delete individual cookies. However, this may result in some functions of our website being impaired and no longer functioning fully for technical reasons.

**Engagement of Service Providers and Data Disclosure to Third Parties**

Your data may be passed on to supporting technical service providers (e.g., website hosting and maintenance) for providing this website and the aforementioned purposes, who we have carefully selected and commissioned in writing. These service providers are bound by our instructions and are regularly monitored by us.

Otherwise, your data will only be passed on to other third parties if expressly indicated in this privacy policy or if we are legally obliged to do so.

**Your Rights**

You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have the right to access this personal data and the information listed in Article 15 GDPR.

You have the right to request the correction of incorrect personal data concerning you and, if applicable, the completion of incomplete personal data (Article 16 GDPR).

You have the right to request the deletion of personal data concerning you without delay, provided one of the reasons listed in Article 17 GDPR applies, e.g., if the data is no longer needed for the purposes pursued (right to deletion).

You have the right to request the restriction of processing if one of the conditions listed in Article 18 GDPR applies, e.g., if you have objected to processing, for the duration of our review.

You can object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is based on Article 6(1)(e) or (f) GDPR. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims (Article 21 GDPR).

You have the right to receive the data concerning you that you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another entity or have it transmitted by us (right to data portability).

Please contact dsb@arthrocon.de to exercise your rights.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you violates the GDPR (Article 77 GDPR). In Bavaria, the competent supervisory authority is the Bavarian Data Protection Authority.

**Data Security**

We use technical and organizational security measures to protect personal data that is generated or collected, especially against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our security measures are continuously improved in line with technological developments. When using our website, your personal data is encrypted using SSL/TLS technology to prevent unauthorized access by third parties.

August 2024

Taviara Aesthetics GmbH & Co. KG