Privacy Policy | MinimalMed Munich

1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.

Data Collection on This Website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator:

Dr. med. Felicitas Mrochen
MinimalMed
Tengstraße 27
80798 Munich, Germany
Email: info@minimalmed.de

2. Hosting and Content Delivery

This website is hosted on servers operated by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel processes access data (IP address, date, time, amount of data transferred, referrer URL).

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and efficient provision of the website).

Data transfer to the USA: Vercel is certified under the EU-US Data Privacy Framework. Additionally, Standard Contractual Clauses (SCCs) have been agreed upon.

Vercel Privacy Policy: https://vercel.com/legal/privacy-policy

3. General Information and Mandatory Disclosures

Data Protection

The operator of this website takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection regulations and this privacy policy.

Controller

The controller responsible for data processing on this website is:

Dr. med. Felicitas Mrochen
Tengstraße 27
80798 Munich, Germany
Phone: +49 172 578 9352
Email: info@minimalmed.de

Data Retention

Unless a more specific retention period has been stated in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies.

Your Rights

You have the right at any time to:

Request information about your data stored with us (Art. 15 GDPR)
Request rectification of inaccurate data (Art. 16 GDPR)
Request erasure of your data (Art. 17 GDPR)
Request restriction of processing (Art. 18 GDPR)
Request data portability (Art. 20 GDPR)
Object to processing (Art. 21 GDPR)
Lodge a complaint with a supervisory authority (Art. 77 GDPR)

Competent supervisory authority: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.

4. Data Collection on This Website

Contact Form and Appointment Booking

If you send us inquiries via the contact form or through our appointment booking system, your details from the form, including the contact information you provide, will be stored by us for the purpose of processing your inquiry and for possible follow-up questions.

Inquiry via Email or Phone

If you contact us by email or phone, your inquiry, including all personal data arising from it, will be stored and processed by us for the purpose of handling your request.

5. Cookies and Storage Technologies

This website uses cookies and local storage technologies.

Technically Necessary Storage

preferred-lang: Stores your language preference (localStorage)
mm_cookie_consent: Stores your cookie consent choice (localStorage)

Analytics Cookies (Only With Consent)

mm_visited: Identifies returning visitors (localStorage)
mm_treatment_views: Counts visited treatment pages (sessionStorage)
_clarity: Microsoft Clarity session ID
_gcl_au: Google Ads conversion linker

Legal basis: Art. 6(1)(a) GDPR (consent) and § 25(2) TTDSG for technically necessary cookies.

You can withdraw your consent at any time by accessing the cookie settings at the bottom of the page or by deleting the corresponding cookies in your browser settings.

6. Web Analytics and Tracking

6.1 Microsoft Clarity

We use Microsoft Clarity to analyze user behavior. Provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA.

Data collected:

Device information (browser type, screen size)
Interactions (clicks, scroll behavior, mouse movements)
Pages visited and time spent
Anonymized session recordings
Heatmaps (aggregated click data)

Project ID: vakz7pj660

Purpose: Improving user experience and website optimization.

Legal basis: Art. 6(1)(a) GDPR (consent).

Retention period: 90 days.

Opt-out: You can prevent data collection by Clarity by enabling "Do Not Track" in your browser settings or by withdrawing your consent via the cookie banner.

6.2 Google Tag Manager

We use Google Tag Manager to manage website tags. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Container ID: GTM-5QT2SBCN

The Tag Manager itself does not store cookies and does not collect any personal data. It serves as a container for triggering other tags, which may collect data in their own right.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in efficient tag management).

6.3 Google Ads Conversion Tracking

We use Google Ads conversion tracking to measure the success of our advertising campaigns. Provider: Google Ireland Limited.

Conversion ID: AW-11413001578

When you click on a Google ad, a cookie is set. If you subsequently make an appointment booking, Google recognizes the conversion.

Data collected:

Whether a conversion occurred (e.g., booking click)
Total number of conversions (aggregated)
No personal data such as name or email

Legal basis: Art. 6(1)(a) GDPR (consent).

Retention period: 90 days.

Opt-out:

Cookie settings on this website
Google Ads settings: https://adssettings.google.com
Network Advertising Initiative: https://optout.networkadvertising.org

7. Appointment Booking via Doctolib

We use Doctolib for online appointment booking. Provider: Doctolib GmbH, Mehringdamm 51, 10961 Berlin, Germany.

The following data is collected during booking:

Name
Email address
Phone number
Date of birth
Desired appointment and treatment

Purpose: Appointment scheduling and management.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

Retention period: In accordance with medical documentation obligations (10 years).

Doctolib is ISO 27001 certified and stores all data on servers in Germany/EU.

8. Social Media

We maintain profiles on the following social networks:

Instagram

Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Privacy Policy: https://privacycenter.instagram.com/policy

Facebook

Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Privacy Policy: https://www.facebook.com/privacy/policy

WhatsApp (for Contact)

Provider: WhatsApp Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
When you contact us via WhatsApp, your phone number and messages are processed by WhatsApp.
Privacy Policy: https://www.whatsapp.com/legal/privacy-policy

9. Data Transfers to Third Countries

Some of our service providers are located outside the EU/EEA:

Service	Country	Safeguard
Vercel (Hosting)	USA	EU-US DPF + SCCs
Microsoft Clarity	USA	EU-US DPF + SCCs
Google (GTM, Ads)	USA	EU-US DPF + SCCs

The companies listed above are certified under the EU-US Data Privacy Framework, which ensures an adequate level of data protection. Additionally, EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) have been agreed upon.

10. SSL/TLS Encryption

This website uses SSL/TLS encryption for security purposes. You can recognize an encrypted connection by "https://" in the address bar and the lock icon in your browser.

When SSL/TLS encryption is active, the data you transmit to us cannot be read by third parties.

11. Right to Object

Right to Object (Art. 21 GDPR)

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to the processing.

You may object to direct marketing at any time without providing reasons.

Objection to tracking:

Use the cookie settings on this website
Enable "Do Not Track" in your browser
Use the opt-out links of the respective providers (see above)

Contact for objections: info@minimalmed.de

12. Changes to This Privacy Policy

We reserve the right to update this privacy policy to ensure it always complies with current legal requirements or to reflect changes to our services.

Last updated: February 2026