Privacy Policy

Controller

AESTHORA

Owner: Anja Ritscher

Am Markt 1

01723 Kesselsdorf

Germany

Email: hello@aesthora.de

Phone: 035204 18860

Purposes and legal bases

We process personal data only where necessary for the website, communication, appointment organization, treatment preparation, shop orders, contract performance, security or legal obligations. Legal bases include Art. 6(1)(a), (b), (c), (f) GDPR and, where health data is concerned, Art. 9(2) GDPR where applicable.

Hosting and technical data

When the website is accessed, technical data is processed, such as IP address, date and time, page views, browser, operating system and referrer. Processing serves secure provision, stability and error analysis.

Contact, appointment and consultation

If you contact us or request an appointment, we process information such as name, contact details, message, appointment request and, where applicable, treatment-related information. You should provide health-related information only where necessary.

Shopify headless shop

For buyable products, AESTHORA uses Shopify functions for product data, cart, checkout, payment processing and order management. Order data, contact details, delivery address, payment status, cart, purchased products, IP address and technical checkout data may be processed. The privacy information in Shopify checkout and of payment providers also applies.

Sanity CMS

Editorial content is managed through Sanity. Technical access data of editors and embedded media data may be processed. Personal content is maintained only where required.

Cookies and similar technologies

We use strictly necessary cookies and similar technologies to provide website, language, cart, checkout and security functions. Non-essential cookies, analytics or marketing services are used only where legally permitted and, where required, after consent.

Recipients and third-country transfers

Recipients may include hosting providers, IT service providers, Sanity, Shopify, payment providers, shipping providers, communication providers, tax advisors, legal advisors and authorities. International services may involve transfers outside the EU/EEA; appropriate safeguards are considered.

Retention period

We store personal data only as long as necessary for the respective purposes or statutory retention periods apply. Commercial and tax documents may in particular be retained for up to ten years.

Your rights

Under the GDPR, you have rights of access, rectification, erasure, restriction, data portability, objection and withdrawal of consent. You also have the right to lodge a complaint with a supervisory authority.

Version

Version: June 2026. After final selection of all payment, shipping, analytics and marketing services, this privacy policy should be reviewed again.