Privacy Policy

As of: September 2026

1. Responsible Party

Beorga Center by Dr. Sedeeq Basheer GmbH
Otto-Brenner-Straße 5
33607 Bielefeld
Germany

Managing Director: Iman Basil Sallo
Phone: +49 163 4679837
E-Mail: info@beorgagmbh.de
Website: www.beorgagmbh.de

2. General Information

We treat your personal data confidentially and in accordance with the statutory data protection regulations, in particular the General Data Protection Regulation (GDPR), as well as this privacy policy.

Personal data is all information with which a person can be directly or indirectly identified. This includes, for example, name, address, telephone number, e-mail address, IP address and details of desired treatments. In the case of inquiries about medical or aesthetic treatments, health data within the meaning of Art. 9 GDPR may also be processed.

Please only transmit the absolutely necessary information via unencrypted communication channels.

3. Hosting and Server Log Data

This website is hosted by the following provider:

MonoVM Ltd
E-Mail: support@monovm.com
Website: www.monovm.com

When you access our website, the hosting provider collects technically necessary data in so-called server log files. These may include:

• IP address
• Date and time of access
• Page or file accessed
• Amount of data transferred
• Browser type and version
• Operating system
• Referrer URL
• Hostname of the accessing device

The processing is carried out to provide the website securely and without disruption on the basis of Art. 6 (1) (f) GDPR. Our legitimate interest lies in the secure, stable and technically error-free operation of the website.

If the hosting provider processes personal data outside the European Union or the European Economic Area, the transfer only takes place in compliance with the requirements of Art. 44 et seq. GDPR. A contract for data processing is concluded with the provider if necessary.

4. SSL or TLS Encryption

For security reasons, this website uses SSL or TLS encryption. You can recognize an encrypted connection by "https://" and the lock symbol in your browser's address bar. This means that data you transmit to us cannot generally be read by third parties without further effort.

5. Contact by E-Mail

If you contact us by e-mail, we process the data you transmit, in particular name, e-mail address, telephone number (if provided), content of your message and details of the desired advice or treatment.

The processing is carried out to handle your request and to take pre-contractual measures in accordance with Art. 6 (1) (b) GDPR. For general inquiries, it may also be based on Art. 6 (1) (f) GDPR.

If your message contains health data, this is processed - if necessary - on the basis of your explicit consent in accordance with Art. 9 (2) (a) GDPR. You can withdraw your consent at any time with effect for the future.

6. Contact Form

If you use the contact form on our website, the data entered there is transmitted to us and stored to process your request. Mandatory fields are limited to what is necessary.

The legal basis is Art. 6 (1) (b) GDPR; for other concerns Art. 6 (1) (f) GDPR. Health data should only be entered if this is necessary for the request and you have explicitly consented to its processing.

7. Appointment Scheduling

Appointments can be made via WhatsApp, Instagram, telephone, e-mail or in person on site. We process the necessary data, such as name, contact details, desired location and service, as well as the date and time of the appointment.

The legal basis is Art. 6 (1) (b) GDPR. Health data is only processed insofar as this is necessary and legally permissible or you have explicitly consented.

8. Contact via WhatsApp

We offer WhatsApp for communication and appointment scheduling. The provider for users within the European Union is generally WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

When using the service, data is transmitted to WhatsApp or affiliated companies. Processing outside the EU or EEA cannot be ruled out. Use is voluntary; alternatively, you can contact us by phone or e-mail.

Our processing is carried out in accordance with Art. 6 (1) (b) GDPR. For transmitted health data, Art. 9 (2) (a) GDPR applies - if necessary.

Please do not send medical findings, identification documents or particularly confidential documents unless this has been explicitly agreed in advance.

Privacy information: www.whatsapp.com/legal/privacy-policy-eea

9. Instagram

We maintain a profile on Instagram. The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

If you visit our profile, contact us there or request an appointment, Meta processes personal data on its own responsibility. Data transfer to third countries, in particular to the USA, may take place.

We process your information in accordance with Art. 6 (1) (b) or (f) GDPR. If there is only a link on our website, no data is transmitted to Instagram merely by visiting. Directly embedded content may generally only be loaded after your consent. The legal basis is Art. 6 (1) (a) GDPR and § 25 (1) TDDDG.

Privacy information: privacycenter.instagram.com/policy

10. Telephone and Personal Contact

In the case of a telephone or personal inquiry, we process the information required for your concern and appointment scheduling. The legal basis is Art. 6 (1) (b) GDPR; for general inquiries Art. 6 (1) (f) GDPR. Telephone calls are not recorded without prior explicit consent.

11. Google Maps

Our website may use Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When loading an embedded map, in particular IP address, device information and location data may be transmitted to Google. Transfer to third countries cannot be ruled out. Google Maps is only loaded after your consent. The legal basis is Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Consent can be withdrawn at any time via the cookie settings.

Privacy information: policies.google.com/privacy

12. Payment Processing

Depending on the agreed service, PayPal, credit card payment via Stripe, SumUp, bank transfer and instant transfer may be offered. For payment, necessary payment, contract and billing data are processed. The legal basis is Art. 6 (1) (b) GDPR. Statutory retention obligations remain unaffected.

PayPal

The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A. When making a payment, the necessary data is transmitted to PayPal. Privacy information: www.paypal.com/de/legalhub/paypal/privacy-full

Stripe

For credit card payments, Stripe may be used. The provider for European users is generally Stripe Payments Europe Limited, Ireland. Privacy information: stripe.com/de/privacy

SumUp

For payments via SumUp, the necessary payment data is processed by SumUp. Privacy information: www.sumup.com/de-de/datenschutzbestimmungen/

Bank and Instant Transfer

For a bank or instant transfer, the participating credit institutions process payment data. We receive in particular name, IBAN or parts thereof, amount, payment date and purpose.

13. Cookies and Consent Management

Our website uses technically necessary cookies insofar as they are required for secure operation and basic functions. Technically non-essential cookies or comparable technologies, in particular for maps, external media, statistics or advertising, are only set or loaded after your explicit consent.

The legal basis for necessary technologies is § 25 (2) TDDDG and, insofar as personal data is processed, Art. 6 (1) (f) GDPR. For non-essential technologies, your consent applies in accordance with § 25 (1) TDDDG and Art. 6 (1) (a) GDPR. You can withdraw these at any time via the cookie settings.

14. Recipients of Personal Data

Personal data is only transmitted if this is necessary or legally permitted. Recipients may in particular be:

• Hosting and IT service providers
• Communication providers
• Payment service providers and banks
• Tax consulting and accounting
• Cooperating doctors or medical institutions
• Authorities where legally obliged

Disclosure to cooperating doctors or clinics only takes place if this is necessary for the desired consultation or treatment and a corresponding legal basis exists.

15. Storage Duration

We store personal data only for as long as is necessary for the respective purpose. Inquiries without a subsequent contract are generally deleted as soon as they have been finally processed and there are no statutory or legitimate reasons for further storage.

Contract, booking and payment documents are stored in accordance with statutory commercial and tax retention periods. Medical documentation may be subject to special statutory retention periods.

16. Your Data Protection Rights

You have the following rights subject to the statutory requirements:

• Information about your stored data
• Correction of incorrect data
• Deletion of your data
• Restriction of processing
• Data portability
• Objection to certain processing
• Withdrawal of consent with effect for the future

To exercise your rights, you can contact us at info@beorgagmbh.de. If the processing is based on Art. 6 (1) (f) GDPR, you can object for reasons arising from your particular situation.

17. Right to Complain

You have the right to complain to a data protection supervisory authority. For companies based in Bielefeld, the following is generally responsible:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2-4
40213 Düsseldorf
Website: www.ldi.nrw.de

18. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy if legal requirements, our website or the services used change.