1. Privacy at a Glance
The protection of your personal data is important to us. This Privacy Policy explains which personal data is processed when you visit our website and for what purposes.
Personal data means any information relating to an identified or identifiable natural person.
We process personal data only to the extent necessary to provide and secure our website or where you voluntarily provide such data when contacting us.
2. Controller
The controller responsible for data processing on this website is:
Dr. Zimmermann Holding GmbH
Osterdeich 18
28203 Bremen
Germany
Phone:
+49 (0) 421 620 100 09
Email:
m.zimmermann@drzimmermann.de
Represented by:
Dr. Matthias Zimmermann
3. Hosting
This website is hosted by:
STRATO GmbH
Otto-Ostrowski-Straße 7
10249 Berlin
Germany
When you access our website, the hosting provider processes certain technical data that is automatically transmitted by your browser. This may include, in particular:
IP address,
date and time of access,
page or file accessed,
browser type and browser version,
operating system used,
referrer URL,
amount of data transferred, and
information about the requesting internet service provider.
The processing of this data is necessary to make the website technically available and to ensure its security, stability and functionality.
The processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, reliable and technically error-free provision of our website.
Where STRATO processes personal data on our behalf, such processing is carried out on the basis of a data processing agreement pursuant to Art. 28 GDPR.
4. Server Log Files
When you visit our website, our hosting provider automatically processes information in so-called server log files.
Server log files are used in particular for the technical provision of the website and for detecting and preventing attacks and other forms of misuse.
Visitors' IP addresses may be stored by the hosting provider for security purposes for a limited period. According to our hosting provider, IP addresses may be stored for a maximum of seven days for the purpose of detecting and preventing attacks.
The processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in ensuring the security and functionality of our website.
5. Contact by Email or Telephone
You may contact us by email or telephone.
If you contact us, we process the personal data you provide for the purpose of handling and responding to your enquiry.
This may include, in particular:
name,
email address,
telephone number,
company and position, if provided, and
the content of your enquiry and any other information you voluntarily provide.
If your enquiry relates to the conclusion or performance of a contract or to pre-contractual measures, the processing is based on Art. 6(1)(b) GDPR.
In all other cases, the processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the appropriate handling and response to enquiries addressed to us.
If you contact us by email, the email link provided on our website merely opens your email application or the email service you use. Your message is only transmitted once you send it using your email application or email service.
6. Cookies and Similar Technologies
Our website does not use cookies or similar technologies for analytics, marketing, advertising or profiling purposes.
Where technically necessary cookies or similar technologies are used in connection with the technical provision of the website, they are used exclusively to ensure the provision, security and functionality of the website.
Where the storage of information on your device or access to information already stored on your device is strictly necessary to provide a digital service expressly requested by you, this is carried out on the basis of Section 25(2) No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG).
Where personal data is processed in this context, the processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and technically error-free provision of our website.
7. No Analytics or Tracking Services
We do not use analytics, tracking, marketing or profiling services on this website.
In particular, we do not analyse user behaviour for advertising or marketing purposes.
8. External Content and Services
As a general rule, our website does not integrate external content or services for analytics, marketing or advertising purposes.
In particular, we do not use embedded external maps, videos, social media plugins or comparable content that would result in personal data being transmitted to the respective third-party provider merely by visiting our website.
Links to external websites or services only establish a connection to the respective external provider after the user actively clicks on the relevant link. From that point onwards, the privacy policies of the respective provider apply.
9. Disclosure of Personal Data
Personal data is only disclosed where this is necessary for the provision of our website or the handling of your enquiry, where we are legally required to do so, where another legal basis permits the disclosure, or where you have expressly consented to it.
As part of the hosting of our website, STRATO GmbH processes personal data as a service provider on our behalf.
We do not disclose personal data to third parties for advertising or marketing purposes.
10. Data Retention
We retain personal data only for as long as necessary for the respective processing purposes or for as long as statutory retention obligations apply.
Data relating to enquiries will be deleted once the respective enquiry has been fully processed, unless statutory retention obligations or other legitimate reasons require further storage.
Server log files are subject to the applicable technical and security-related retention periods of our hosting provider.
11. Data Security
We take appropriate technical and organisational measures to protect your personal data against loss, manipulation, unauthorised access and unauthorised disclosure.
Our website uses SSL/TLS encryption. You can recognise an encrypted connection in particular by the fact that the website address begins with “https://”.
12. Your Rights
Subject to the applicable legal requirements, you have the following rights in relation to the processing of your personal data:
Right of access pursuant to Art. 15 GDPR,
Right to rectification pursuant to Art. 16 GDPR,
Right to erasure pursuant to Art. 17 GDPR,
Right to restriction of processing pursuant to Art. 18 GDPR,
Right to data portability pursuant to Art. 20 GDPR,
Right to object to processing pursuant to Art. 21 GDPR, and
Right to withdraw consent pursuant to Art. 7(3) GDPR.
You may withdraw any consent you have given at any time with effect for the future. The lawfulness of any processing carried out prior to the withdrawal of consent remains unaffected.
Right to Object
Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right, pursuant to Art. 21 GDPR, to object to such processing at any time on grounds relating to your particular situation.
We will then no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing is necessary for the establishment, exercise or defence of legal claims.
13. Right to Lodge a Complaint with a Supervisory Authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.
You may, in particular, contact the data protection supervisory authority responsible for our registered office or a supervisory authority in the place of your habitual residence.
14. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy where changes to our website, the technical services used or applicable legal requirements make this necessary.
The current version published on this website shall apply.
Last updated: August 2026