Privacy Policy
Version: 23/01/2025
1. Controller (Art. 4 (7) GDPR)
De Medici Movement Spa Club / Urbanowicz Izabela
Mühlenstraße 31
40213 Düsseldorf
Germany
Phone: +49 (0)211 16092864
E-mail: office@de-medici.info
Website: https://www.de-medici.info
Note: Please add the exact legal form here (e.g. “sole proprietorship”).
Data protection contact / Data protection officer (if appointed)
For all data protection enquiries please contact office@de-medici.info.
If a data protection officer has been appointed, their contact details will be published here.
Supervisory authority:
State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW),
Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
2. Purposes and legal bases of processing
We process personal data for the following purposes and on the following legal bases:
- Operation and security of the website (creation of log files, prevention of misuse/fraud) – legal basis: Art. 6 (1) (f) GDPR (legitimate interest).
- Appointment booking, purchase of vouchers/services, performance of contract, pre-contractual communication – legal basis: Art. 6 (1) (b) GDPR.
- Compliance with legal obligations (e.g. tax and commercial retention duties) – legal basis: Art. 6 (1) (c) GDPR.
- Consents (e.g. newsletter, statistics/marketing cookies) – legal basis: Art. 6 (1) (a) GDPR in conjunction with Sec. 25 (1) TTDSG / TDDDG.
- Direct marketing to existing customers – legal basis: Art. 6 (1) (f) GDPR in conjunction with Sec. 7 (3) UWG (German Unfair Competition Act).
3. Hosting & processing under contract
We use the services of a hosting provider (infrastructure, platform, computing, storage and security services) to operate this website.
Hosting provider: [Please insert name and address of the hosting provider, e.g. IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany]
We have concluded a data processing agreement with the hosting provider pursuant to Art. 28 GDPR.
4. Server log files
When you access our website, the following data is automatically processed by the server:
- IP address
- Date and time of request
- Time zone difference
- Requested page/file (request line)
- HTTP status code
- Amount of data transferred
- Referrer URL
- Browser type/version and operating system
Purpose: IT security, stability, technical administration, prevention of misuse and fraud.
Storage period: generally 7–30 days, longer only in the event of a security-related review.
Legal basis: Art. 6 (1) (f) GDPR.
5. Cookies, consent & similar technologies (TTDSG / TDDDG)
We use a consent banner. Cookies/tools that are not technically necessary (e.g. statistics, marketing, comfort features) are only set after you have given your consent. You can change or withdraw your selection at any time via the banner.
5.1 Technically necessary cookies
These include, for example, session cookies, language settings or cookies for appointment booking. They are required to provide the website and its functions.
Legal basis: Sec. 25 (2) TTDSG / TDDDG, Art. 6 (1) (f) GDPR.
5.2 Non-essential cookies / tools
Examples: web analytics, reach measurement, marketing/remarketing, integration of external services. These are only used after your consent.
Legal basis: Sec. 25 (1) TTDSG / TDDDG, Art. 6 (1) (a) GDPR.
5.3 Overview of cookies/tools (examples)
Important: Please adapt to the tools/services you actually use (analytics, maps, booking, newsletter, payment providers).
| Category | Tool / Provider | Purpose | Legal basis | Storage period | Third country transfer |
|---|---|---|---|---|---|
| Statistics | Google Analytics 4 (Google Ireland Ltd.) | Reach / usage measurement | Consent (Art. 6 (1) (a) GDPR; Sec. 25 (1) TTDSG/TDDDG) | up to 14 months | USA – EU-US DPF / SCCs |
| Marketing | Google Ads / Remarketing | Conversion tracking / remarketing | Consent | variable | USA – EU-US DPF / SCCs |
| Comfort | Google Maps / Fonts | Map display / web fonts | Consent | variable | USA – EU-US DPF / SCCs |
6. Web analytics (optional)
If you have consented via the cookie/consent banner, we use Google Analytics 4 (Google Ireland Ltd.) to analyse the use of our website. Pseudonymous usage profiles can be created; IP addresses are shortened. A transfer to the USA is possible (based on EU-US Data Privacy Framework and/or Standard Contractual Clauses). You can withdraw your consent at any time via the consent banner.
Legal basis: Art. 6 (1) (a) GDPR in conjunction with Sec. 25 (1) TTDSG / TDDDG.
Storage period: up to 14 months.
If you do not use Google Analytics 4, please delete this section.
7. Contact (e-mail / form / phone)
When you contact us, we process your details (name, contact data, content of your enquiry) in order to deal with your request and for follow-up questions.
Legal basis: Art. 6 (1) (b) GDPR (pre-contractual/contractual) or Art. 6 (1) (f) GDPR (general communication).
Storage period: until your enquiry has been fully processed, then in accordance with statutory retention periods.
8. Appointment booking, voucher purchases & contractual performance
To process appointments, services and voucher purchases we process master data, contract data, performance data and payment data.
Legal basis: Art. 6 (1) (b) GDPR; Art. 6 (1) (c) GDPR (retention of business documents for up to 10 years according to German tax/commercial law).
Note: If we use external booking/payment services (e.g. Shore, SimplyBook, Calendly, Mollie, Stripe, PayPal), they will be named as recipients.
9. Recipients
- Internal departments (service, appointment management, accounting)
- IT / hosting service providers
- Payment service providers / banks
- Newsletter / mailing service providers
- Public authorities where legally required
We have concluded data processing agreements with processors pursuant to Art. 28 GDPR.
10. Third country transfers
If services of providers outside the EEA (especially the USA) are used, data may be transferred to a third country. This is done on the basis of an adequate data protection level (e.g. EU-US Data Privacy Framework) and/or EU Standard Contractual Clauses.
11. Storage period
Unless stated otherwise in this privacy policy, we delete or anonymise personal data as soon as the purpose has been achieved and there are no statutory retention obligations to the contrary (usually 6–10 years for tax-relevant documents).
12. Obligation to provide personal data
For bookings and contracts you must provide the data that is necessary for the conclusion and performance of the contract. Without this data, the service cannot be provided.
13. No automated decision-making
There is no automated individual decision-making. Profiling may take place only if you have consented to marketing/analytics tools.
14. Your rights
You have the following rights under the GDPR:
- right of access (Art. 15 GDPR)
- right to rectification (Art. 16 GDPR)
- right to erasure (Art. 17 GDPR)
- right to restriction of processing (Art. 18 GDPR)
- right to data portability (Art. 20 GDPR)
- right to object (Art. 21 GDPR)
- right to withdraw consent (Art. 7 (3) GDPR)
- right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
Terms and Conditions (AGB)
Version: 23/01/2025
1. Scope of application
These Terms and Conditions govern the legal relationship between De Medici Movement Spa Club / Urbanowicz Izabela (hereinafter “Provider”) and its customers regarding the use of the website www.de-medici.info, the booking of appointments and the purchase of services/vouchers. Conflicting terms and conditions of the customer do not apply unless the Provider has expressly agreed to them in writing.
2. Services & conclusion of contract
The presentation of services on the website does not constitute a binding offer, but an invitation to submit an offer. By sending an appointment booking or purchase order you submit a binding offer. The contract is concluded when we confirm the booking/order (usually by e-mail). Appointment confirmations are subject to availability.
3. Prices & payment
The prices valid at the time of booking/order as shown on the website or in the booking system apply. Prices include statutory VAT, where applicable. The available payment methods will be displayed during the booking/purchase process. In case of default of payment, the statutory provisions apply.
4. Appointments, cancellations & no-shows
- Appointments agreed with us are binding.
- Cancellations up to 24 hours before the start of the appointment are free of charge (unless otherwise stated).
- Cancellations within 24 hours before the start of the treatment will be charged at 40% of the price of the booked treatment.
- No-shows or cancellations after the appointment has started will be charged at 100% of the agreed price, unless you can prove that no loss or a significantly lower loss has occurred.
- Late arrival: If you arrive late, the treatment may only be carried out within the remaining appointment time. If the treatment time is reduced by at least half due to reasons within your responsibility, the full (100%) price of the booked treatment is payable.
- Statutory rights of withdrawal remain unaffected.
5. Vouchers & value cards
- Vouchers are transferable and valid for 3 years from the date of purchase (regular limitation period).
- Cash payment / redemption of the voucher value is excluded, unless a mandatory statutory right exists.
- Vouchers cannot be offset against already discounted services, time-limited offers, deals or percentage promotions, unless expressly stated otherwise. In other words: promotional prices and discounts cannot be combined with vouchers.
- Any remaining balance will remain valid until the expiry date.
6. Health information
Certain treatments require the customer to be medically fit. Please inform us in advance of any relevant health conditions. The Provider reserves the right to refuse or adapt treatments for medical reasons.
7. House rules & conduct
Customers must follow the instructions of the staff. Brought-in items must be stored carefully. The Provider is not liable for loss or damage to brought-in items, unless caused by intent or gross negligence.
8. Warranty
Statutory warranty rights apply.
9. Liability
The Provider is liable for damages – regardless of the legal ground – in cases of intent and gross negligence.
In cases of simple (slight) negligence, the Provider is only liable:
- for damage resulting from injury to life, body or health, and
- for damage resulting from the breach of an essential contractual obligation (cardinal obligation). In this case, liability is limited to the foreseeable damage typical for this type of contract.
Liability under the German Product Liability Act remains unaffected.
10. Copyright and external links
The content on the website is protected by copyright. Any use not expressly permitted requires prior written consent. The Provider is not responsible for the content of external linked websites; the respective operator is solely responsible for these contents.
11. Right of withdrawal for consumers in distance contracts
11.1 General rule
Consumers have a 14-day right of withdrawal for contracts concluded off-premises and for distance contracts.
11.2 No right of withdrawal for leisure services with a fixed date (Sec. 312g (2) No. 9 German Civil Code)
For contracts concerning services in connection with leisure activities (e.g. spa/wellness treatments) where a specific date or period is agreed, no right of withdrawal exists. The cancellation (40 %) and no-show (100 %) rules stated in section 4 apply in full.
11.3 Vouchers without a fixed date
For the purchase of vouchers without a fixed date, a 14-day right of withdrawal applies. If the voucher is fully redeemed within the withdrawal period, the right of withdrawal expires. In case of partial redemption, any refund is reduced accordingly.
11.4 Services before the expiry of the withdrawal period
If you expressly request that we start performing the service before the withdrawal period has expired, you must pay reasonable compensation for the services provided up to the time of your withdrawal. If the service has been fully provided and you have expressly agreed to this and confirmed your knowledge that your right of withdrawal expires, the right of withdrawal will cease to exist.
11.5 Exercising the right of withdrawal
To exercise your right of withdrawal, please contact:
De Medici Movement Spa Club / Urbanowicz Izabela
Mühlenstraße 31
40213 Düsseldorf
Germany
Phone: +49 (0)211 16092864
E-mail: office@de-medici.info
12. Data protection
Our current privacy policy as published on this website applies.
13. Online dispute resolution / consumer dispute resolution
The European Commission provides an online dispute resolution platform (ODR): https://ec.europa.eu/consumers/odr. We are neither obliged nor generally willing to participate in dispute resolution proceedings before a consumer arbitration board.
14. Final provisions
German law applies, to the exclusion of the UN Convention on Contracts for the International Sale of Goods (CISG). For consumers, this choice of law only applies insofar as it does not deprive them of the protection afforded by mandatory provisions of the law of the country of their habitual residence. If the customer is a merchant, the place of jurisdiction is Düsseldorf, Germany. Should individual provisions of these Terms and Conditions be or become invalid, the validity of the remaining provisions shall not be affected.
Note: This is a template. You must adapt it to your actual business model, tools/services (booking, payment, analytics), legal form, and current German law (TTDSG/TDDDG). No legal advice.