Note: This English version is a convenience translation. In case of doubt, the German version of this page is legally binding.
The controller responsible for data processing on this website is Natalie Sarah Plitt Services (CZ-Wellmed), Hochwiesenweg 17, 73102 Birenbach, Germany. Telephone: 07161 304 8150 (also WhatsApp), e-mail: info@cz-wellmed.de.
We arrange surgery dates at partner clinics in the Czech Republic and Slovakia. In doing so, we also process health data. This data is specially protected. We process it only to the extent necessary for your enquiry or your order and where you have given your consent (Art. 9(2)(a) GDPR), and we pass it on only if you wish us to or the surgery arrangement order requires it.
You can use the website without providing personal data. We load non-essential services (chat, statistics, advertising, external reviews) only with your consent.
When you access the website, the web server processes technically necessary data: IP address, date and time, page accessed, browser type, operating system and referrer URL. The legal basis is Art. 6(1)(f) GDPR (secure and stable operation). The logs are deleted after a short time, generally after 7 days. Hosting provider: [Enter hosting provider, address, data processing agreement under Art. 28 GDPR].
Technically necessary storage (for example for the cookie banner and your settings) takes place on the basis of Section 25(2) TDDDG and Art. 6(1)(f) GDPR. We load all other services (chat, statistics, marketing, external reviews) only after your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can change or withdraw your choice at any time via "Settings" in the cookie banner. The withdrawal takes effect for the future.
If you contact us via a form (for example "Request information pack" or "Enquiry"), e-mail, telephone or WhatsApp, we process your details (name, contact details, your request) in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and, insofar as you provide health information, Art. 9(2)(a) GDPR.
Forms on this website are transmitted in encrypted form (TLS) and stored encrypted on our server. The notification sent to us does not contain the content of your details. You will receive a confirmation of receipt by e-mail. Please note: ordinary e-mails are not end-to-end encrypted. We therefore ask you to send photos and health data via our photo upload wherever possible.
Callback request: If you choose a callback time in the form, we store the requested day and time of day together with your telephone number in order to call you in the requested period. The time slots are counted on our server so that not too many callbacks fall into one period. No names are stored in the process.
Health questionnaire: In the voluntary health questionnaire we ask for health information (for example pre-existing conditions, medication, allergies, height and weight). We process it only with your explicit consent (Art. 9(2)(a) GDPR), in order to assess your enquiry together with the partner clinic you have chosen. The information is transmitted and stored in encrypted form and passed on only to the partner clinic you have chosen. You can withdraw your consent at any time with effect for the future. You will suffer no disadvantage if you do not complete the questionnaire.
If you commission us to arrange a surgery date ("surgery order"), we process your master data (name, address, date of birth, contact details), details of the procedure you want, the clinic and the date, and details of travel and accommodation. The legal basis is Art. 6(1)(b) GDPR. We process health data on the basis of your explicit consent (Art. 9(2)(a) GDPR), which you give separately in the surgery order.
To reserve an appointment and obtain a medical assessment, we pass the data required for this to the partner clinic you have chosen and the doctors working there. The clinics are located in the Czech Republic and Slovakia, that is, within the European Union. There, the clinics and doctors decide independently on the treatment data (the clinic's own privacy notices apply). For travel services (for example hotel, transfer), we pass the necessary details to the respective providers.
With the photo upload you can send us photos for the medical assessment. In doing so, we collect your contact details, the procedure you want, your message and the photos. The photos may constitute health data, including of intimate areas of the body. We process them only on the basis of your explicit consent (Art. 6(1)(a), Art. 9(2)(a) GDPR). You give your consent in the form by ticking the box. Without consent, the upload is not possible.
How we protect your photos: transmission is encrypted (TLS). When saving, we remove location and camera data from the image files. The files are stored encrypted, and access is restricted to authorised persons with a password. We do not send photos by e-mail. To document your consent, we store the time, the version of the consent text and a shortened, non-reversible check value of your IP address.
We pass your photos on only to the partner clinic(s) you have chosen. Photos for which no arrangement order is concluded are deleted automatically after 90 days. You can withdraw your consent at any time with effect for the future and request earlier deletion (e-mail to info@cz-wellmed.de, please include your reference number). Processing carried out up to that point remains lawful.
The appointment calendar shows available surgery dates at the clinics. It does not process any personal data. If you request an appointment, your e-mail programme or the form opens. The details in section 4 then apply.
We communicate and document your enquiry using the following systems. Data processing agreements under Art. 28 GDPR are in place with the service providers where required.
If you consent in the cookie settings, we load the chat service Tidio. Your chat entries, your IP address and technical data are transmitted to Tidio, including to countries outside the EU. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Please do not provide health data or photos in the chat. The photo upload is there for that purpose.
Only with your consent do we use Google Analytics and Google Ads (provider: Google Ireland Limited, Ireland, or Google LLC, USA). They help us to understand how the website is used and to measure the effect of advertisements. Cookies may be set and data transmitted to Google, including to the USA. The legal basis is Art. 6(1)(a) GDPR, Section 25(1) TDDDG. Transfer to the USA is based on the adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses. Without consent, these services are not loaded. [Check Analytics/Ads configuration before going live: IP anonymisation, Consent Mode]
On our pages we link to partners, for example for follow-up cost insurance (medassure, safe4beauty), financing (medkred, credit4beauty) and hotel bookings (Booking.com). When you click, you leave our site. We do not transmit any data from your enquiries in the process. The respective provider is responsible for processing there. Please read their privacy notices. For some links we may be entitled to a commission when a contract is concluded or a booking is made (partner links, for hotels Booking.com). The price does not change for you. CZ-Wellmed is neither an insurer, nor a lender, nor a credit intermediary acting on behalf of the provider.
Loan comparison (smava): The comparison from smava (smava GmbH, Berlin) is loaded only when you click "Load loan comparison". Your browser and the data you enter then transmit information to smava. The legal basis is your consent given by clicking (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).
Review seal (ausgezeichnet.org): Only with your consent do we load the review seal and customer testimonials from ausgezeichnet.org (provider: Bewertungsportal ausgezeichnet.org, Germany). A script from the provider is loaded in your browser in the process. The provider thereby receives technical data, for example your IP address, the page accessed and browser details, and may set cookies. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Without consent, nothing is loaded. The "Reviews" link leads to a page of the provider. Its privacy notices apply there. [Enter provider details (company name, address) before going live]
We send the newsletter only with your explicit consent using the double opt-in procedure (Art. 6(1)(a) GDPR). We store the time and IP address of the sign-up as proof. The mailing service provider is CleverReach (Germany). You can unsubscribe at any time.
For hotel bookings made at your request, we pass the necessary data (name, arrival and departure dates, number of people) to the accommodation or to the booking platform (Art. 6(1)(b) GDPR).
We link to our presences with social media providers. When you click, you are forwarded to the provider and its privacy notices apply. We set marketing pixels only after your consent. This concerns our Facebook group (Meta Platforms Ireland Limited) and our Instagram profile @cz_wellmed. These are simple links; no data is transmitted to Meta when the page is loaded. Content shared in the group is the responsibility of the respective participant, and Meta is responsible for processing on the platform. Please do not share any health data there that you do not wish to make public.
We pass on data only if you have consented, if it is necessary for the contract or if the law requires it. Recipients are clinics and doctors (section 5), service providers as processors (sections 2, 8, 12), travel providers and, where necessary, tax advisers or authorities. Transfer to countries outside the EU takes place only for the services named in this policy, on the basis of an adequacy decision, standard contractual clauses or your explicit consent (Art. 49(1)(a) GDPR).
We delete data earlier if the purpose ceases to apply or you withdraw your consent, unless a retention obligation prevents it.
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). To do so, write to info@cz-wellmed.de.
Right to object: Insofar as we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. You may object to direct marketing at any time without giving reasons. Further details can be found in the withdrawal information and in the right to object.
Right to lodge a complaint: You can lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart.
Without the mandatory details marked as such, we cannot process your enquiry or your order. No decision based solely on automated processing, including profiling, within the meaning of Art. 22 GDPR takes place.
We protect your data with technical and organisational measures: TLS encryption, encrypted storage of sensitive data, access restriction with passwords and two-factor authentication, data minimisation and regular deletion. No procedure is completely secure. For sensitive information, please use our photo upload and the forms.
Our services are not aimed at persons under 18. We do not arrange operations for minors.
We amend this policy when our services or the legal situation change. As of: October 2026 (version 2026-10). This version corresponds to the consent text in the photo upload and the surgery order.
The use of our contact details published in the legal notice for sending advertising that has not been expressly requested is hereby objected to.