Dottore Caletti · Information
Privacy
How we handle your information, which services this website uses and what rights you have.
Last updated: 11 November 2026
Who is responsible for your data
The data controller is Dott. Mag. Andrea Caletti, c/o Vita Aesthetica, Kurfürstendamm 200, 10719 Berlin. If you have any questions about the processing of your data or wish to exercise your rights, you can contact us at team@dottore.caletti.de.
This notice applies to Dottore Andrea Caletti’s website at www.caletti.de and its associated preview addresses. The privacy notices provided by the linked appointment booking service and other external services also apply when you use them.
Accessing and hosting the website
When you visit the website, technical connection data is processed, in particular your IP address, the time of access, the address requested, browser information and the request status. This is necessary to deliver the page, identify errors and prevent attacks. The legal basis is Article 6(1)(f) GDPR; our interest is in operating the website securely and reliably.
The website is hosted on Vercel. Vercel and the infrastructure partners it uses may receive technical data as service providers. Processing outside the European Economic Area cannot be ruled out. The applicable provisions are the data protection arrangements agreed with the service providers and appropriate safeguards for international transfers.
Fonts and images illustrating the website’s topics are served by the website itself. Maps and appointment booking are linked; they are not loaded as external widgets simply by reading this page.
Contact form and email
When you write to us, we process your name, email address, any telephone number you provide voluntarily and your message in order to handle and respond to your enquiry. Required fields are marked on the form. Without this information, we cannot respond to an enquiry submitted through the form.
For an enquiry about a possible treatment, Article 6(1)(b) GDPR provides the basis for steps taken prior to entering into a contract. We handle general administrative enquiries on the basis of Article 6(1)(f) GDPR and our interest in being available to contact. Information about your health is afforded special protection. Please only include what is needed to make contact in the general form; we will discuss findings and medical details through an appropriate channel.
Contact enquiries are transferred to our practice management system, CloudPMS, and stored there for handling. An internal email notification is also sent via Postmark. Access is granted to the people responsible for handling enquiries and the necessary technical service providers, including Pinkstone, which provides our technical support. Your message is not published.
We retain enquiries for as long as necessary to deal with them and clarify any follow-up questions. Where statutory documentation or retention requirements apply, the data covered by these requirements remains stored for the specified period. It is then deleted or its processing is restricted.
Protecting the contact form
The contact form uses Cloudflare Turnstile to detect automated and abusive requests. Technical signals such as your IP address, browser and connection information are sent to Cloudflare, and a verification token is provided for submitting the form.
This check protects our contact channel. Processing is based on Article 6(1)(f) GDPR. Where strictly necessary access to your device takes place, section 25(2), point 2 TDDDG applies. Cloudflare may process data outside the European Economic Area; Cloudflare explains the details in its privacy notice. Alternatively, you can contact us by email.
Usage analysis with Firstload
Firstload is active on this website. It records page views and selected interactions, such as clicks on appointment booking, to help us understand usage and the source of enquiries. The data processed includes the page address, referral source, campaign parameters, time, and technical browser and connection data.
The current configuration does not use a persistent identifier in cookies or local browser storage for this analysis. Short-lived identifiers are used in memory; on the server side, technical connection data may be used to generate a pseudonymous recognition key that changes daily. Pseudonymous data is not automatically anonymous.
In this configuration, Firstload respects your browser’s Do Not Track signal. You can enable this signal in a browser that supports it. The analysis is based on the legitimate interest in improving the service and attributing enquiries under Article 6(1)(f) GDPR. You can object on grounds relating to your particular situation; please contact team@dottore.caletti.de to do so.
When form submission is confirmed, an email address hashed using SHA-256 may also be sent to Firstload as a pseudonymous attribution signal. The hash is not plain text, but it remains a personal data attribute. The content of your message is not transmitted as an analytics event.
Cookie choices and consent management with iubenda
We use iubenda Privacy Controls and Cookie Solution from iubenda s.r.l., Italy, to manage your cookie choices. This involves processing your choices and technical connection data, in particular your IP address, browser information and the page visited. An essential cookie stores your decision.
The service loads when you first scroll or open ‘Cookie settings’. Scrolling does not constitute consent. You can reject optional purposes or select them individually, and you can change your decision or withdraw consent for the future at any time via ‘Cookie settings’. Any choices already stored are taken into account.
Managing and documenting your choices serves to fulfil our data protection obligations under Article 6(1)(c) in conjunction with Article 7(1) GDPR. Section 25(2), point 2 TDDDG applies to the necessary storage of your choices. Optional services that require consent need your prior agreement under Article 6(1)(a) GDPR and, where they access your device, section 25(1) TDDDG.
Remembering your language and interface preferences
When you explicitly select a language, it is saved in local browser storage under c26_language until you delete the website data or choose another language. c26_language_seen applies only to the browser session and prevents repeated automatic language changes. The session cookie c26_directory_open remembers the sections you have opened in the overview pages.
These settings support your chosen way of using the website and are not used for advertising. The basis is Article 6(1)(f) GDPR and our interest in providing a website that works reliably; section 25(2), point 2 TDDDG applies to the storage required for this purpose. You can delete the saved settings through your browser.
Optional analytics and conversion tracking
If these services are enabled for the website and you consent to the relevant purpose, Google Analytics 4 and Google Ads may be used via Google Tag Manager. The provider is Google Ireland Limited, Ireland. Analytics helps us understand how the website is used; advertising measurement attributes confirmed enquiries or bookings to a campaign. Without the relevant consent, Google tracking remains blocked. Declining consent does not affect the contact form or appointment booking.
This may involve processing technical connection data, cookie identifiers, campaign parameters and confirmation events. Your analytics and marketing choices are applied separately. The event data we send to Google does not contain names, email addresses, message content or medical information. Data transfers to the USA cannot be ruled out; information about the safeguards used is available from Google.
The legal basis is your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG. You can change your choices at any time via the cookie settings. If you withdraw consent, the website stops its Google tracking and removes the tracking cookies it manages. Withdrawal does not affect processing that has already lawfully taken place. The separately described Firstload analysis is governed by the information in the ‘Usage analysis with Firstload’ section.
Appointment booking, maps and external links
Appointment booking and the map view are provided as links. Your browser only connects to the respective service when you open it; that service’s privacy notice also applies. The public booking service at termin.caletti.de is part of our practice’s services. In the live environment, the website and booking service can both take account of your cookie choices on caletti.de.
Existing campaign parameters may be passed to the public booking service to attribute an enquiry. Without the relevant consent, our shared attribution system stores them only temporarily in memory and may include them in the booking link for a limited time. Longer-term storage in attribution cookies requires the appropriate consent. Personal patient areas are excluded from this website tracking.
Your rights
Subject to the legal requirements, you have rights of access, rectification, erasure, restriction of processing and data portability. You can withdraw any consent you have given at any time with effect for the future. You can object to processing based on legitimate interests on grounds relating to your particular situation. You can object to direct marketing at any time.
To exercise your rights, simply send a message to team@dottore.caletti.de. You can also lodge a complaint with a data protection supervisory authority, in particular in your place of residence, place of work or the place of the suspected infringement. In Berlin, this is the Berlin Commissioner for Data Protection and Freedom of Information.