Privacy Policy

We are very pleased about your interest in our practice. Data protection is of particularly high importance to us. The use of the website of Kleintierpraxis Cremlingen is generally possible without providing any personal data. However, if a data subject wishes to make use of specific services offered by our practice via our website, the processing of personal data may become necessary. Where the processing of personal data is necessary and there is no statutory basis for such processing, we generally obtain the consent of the data subject.

The processing of personal data, for example the name, address, e-mail address or telephone number of a data subject, is always carried out in accordance with the General Data Protection Regulation and in compliance with the country-specific data protection provisions applicable to Kleintierpraxis Cremlingen. By means of this privacy policy, we wish to inform the public about the nature, scope and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed by means of this privacy policy of the rights to which they are entitled.

Server log data when you visit the website

Each time you visit this website, your browser transmits technical data to the server on which the site is hosted. The following may be logged: the IP address, the date and time of access, the page requested, the page from which you came to us (referrer), and the browser type, browser version and operating system.

This data is needed to deliver the pages, keep the site running securely and fend off attacks. We do not store these logs ourselves, do not analyse them and do not combine them with other data. The legal basis is our legitimate interest in a secure and functioning website (Art. 6(1) sentence 1 lit. f GDPR).

Website hosting (Netlify)

This website is hosted by Netlify. The provider is Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. As our processor, Netlify processes the server log data described above, including your IP address. This processing is based on our legitimate interest in providing our website securely, quickly and reliably (Art. 6(1)(f) GDPR). The data processing agreement under Art. 28 GDPR forms part of our contract with Netlify.

As Netlify is based in the USA, data may be transferred to the USA. Netlify is certified under the EU-U.S. Data Privacy Framework, so the transfer is based on the European Commission’s adequacy decision (Art. 45 GDPR). In the alternative, the contract contains the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

Netlify keeps the log data for as long as is necessary for the operation and security of its platform; Netlify does not state a fixed period for our plan. For hosting, Netlify processes only technical connection data; we do not use any further services offered by the provider (such as forms or analytics features) on this website. Further information is available in Netlify’s privacy policy at netlify.com/privacy.

Web analytics with Umami

To see which pages are read and how visitors find us, we use the web analytics service Umami. The provider is Umami Software, Inc., 28 Geary St, Suite 650 #243, San Francisco, CA, USA. Umami sets no cookies and stores nothing on your device.

When you open a page, your browser loads a small script from Umami. It transmits the address of the page, the page title, the page you came from, and the screen size and language setting of your browser; it reads these two values in your browser for this purpose. It also checks whether measurement has been switched off in your browser. From your IP address and browser identifier, Umami derives country, region and city as well as browser, operating system and device type; the IP address itself is not stored. So that several page views of one visit are counted together, Umami creates an identifier from your IP address, your browser identifier and a value that changes every month. We do not draw any conclusions about you as a person from this data.

If you have switched on “Do Not Track” in your browser, Umami does not count your visit.

The legal basis is our legitimate interest in a statistical analysis of usage in order to improve our offering (Art. 6(1)(f) GDPR). Umami processes the data as our processor; the data processing agreement forms part of our contract with Umami. The data of our account is stored in the European Union. Umami uses sub-processors, including providers in the USA; transfers to them are covered by the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). Further information: umami.is/privacy and umami.is/dpa.

Contact options via the website

Owing to statutory provisions, this website contains information that enables quick electronic contact with our practice as well as direct communication with us, which also includes a general address for so-called electronic mail (e-mail address). If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject is automatically stored. Such personal data transmitted on a voluntary basis by a data subject to the controller is stored for the purposes of processing the matter or of contacting the data subject. This personal data is not passed on to third parties.

The legal basis for the processing of the data, where the user has given consent, is Art. 6(1) lit. a GDPR. The legal basis for the processing of data transmitted in the course of initiating a treatment contract is Art. 6(1) lit. b GDPR. Otherwise, the legal basis for the processing is Art. 6(1) lit. f GDPR; our legitimate interest lies in handling your enquiry. If you contact us via Google services, data is processed by Google Ireland Limited, based in Ireland.

You can also contact us via our Google Business Profile. If you use this option, the data is processed by Google Ireland Limited, based in Ireland. Further information on data protection at Google is available at policies.google.com/privacy.

Processing of treatment data

In the course of initiating, establishing and carrying out a treatment contract, we process the personal data required for this purpose, in particular your name, address, telephone number and e-mail address. The controller responsible for this processing is Dr Katja Häusler. The legal basis for the processing is Art. 6(1) lit. b GDPR, as the processing is necessary for the performance of the treatment contract.

Disclosure of data to third parties

Your personal data is only passed on to third parties if this is necessary for the performance of the treatment contract, if you have voluntarily given your express consent (Art. 6(1) sentence 1 lit. a GDPR), or if the disclosure is necessary for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in your data not being disclosed (Art. 6(1) sentence 1 lit. f, (4) GDPR). Data is also disclosed where a legal obligation exists (Art. 6(1) sentence 1 lit. c GDPR) or where this is legally permissible and necessary for the performance of contractual relationships with you (Art. 6(1) sentence 1 lit. b GDPR).

If you give us written consent to data processing for specific purposes (Art. 6(1) lit. a GDPR), this consent can be withdrawn at any time and without giving reasons (Art. 7(3) GDPR).

If you do not agree with the processes described here, we are unfortunately unable to treat your pet, as we would otherwise be unable to comply with statutory requirements, including those under sections 611 et seq. of the German Civil Code (BGB) and section 14(4) of the German VAT Act (UStG) in conjunction with section 33 of the German VAT Implementation Ordinance (UStDV).

Applications and applicant data

If you apply to us, for example via the application form on our training page or by e-mail, we process the personal data you transmit to us. This includes your name, your contact details (e-mail address, telephone number), your information on school qualifications, grades and desired start of training, as well as any further information you voluntarily provide to us in your message or with application documents.

The application form on our website does not transmit any data to a server. Based on your input, it merely composes a prepared e-mail in your own e-mail program, which you send to us yourself. The transmission therefore takes place in the same way as a regular e-mail.

The purpose of the processing is to carry out the application procedure and to decide on the establishment of a training or employment relationship. The legal basis is Art. 6(1) lit. b GDPR (initiation of an employment relationship); insofar as you grant us consent going beyond this, Art. 6(1) lit. a GDPR.

If no training or employment relationship comes about, we delete your applicant data at the latest six months after completion of the application procedure — unless you have consented to longer storage, for example so that you can be considered for future positions. In the event of a hiring, the data is transferred into the employment relationship. Your applicant data is not passed on to third parties.

Hosting and form processing of the training landing page (Netlify)

Our training landing page (available at ausbildungsplatz.kleintierpraxis-cremlingen.de) is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. When the page is accessed, technically necessary data (IP address, date/time, requested URL, browser identifier) is processed in server logs to ensure delivery of the page and to prevent attacks.

Data entered into the application form there is received via Netlify Forms and forwarded to our practice email address. Data processed: name, email address, telephone number (optional), self-test answers, optional message, IP address, timestamp. The purpose is to process your enquiry regarding training as a veterinary nurse. Legal basis: Art. 6(1) lit. b GDPR (pre-contractual measures at your request) and Art. 6(1) lit. f GDPR (legitimate interest in the secure operation of the website).

Form submissions are stored in the Netlify dashboard and deleted after completion of the application process, at the latest after 6 months. The same applies to the server logs as to the hosting of this website. On request, we will delete your data at any time. A data processing agreement under Art. 28 GDPR is in place with Netlify; for transfers to the USA, see the section on the hosting of this website. Further information: netlify.com/privacy and netlify.com/gdpr-ccpa.

Routine erasure and blocking of personal data

The controller processes and stores the personal data of the data subject only for the period necessary to achieve the purpose of storage, or insofar as this has been provided for by the European legislator of directives and regulations or another legislator in laws or provisions to which the controller is subject.

If the purpose of storage no longer applies, or if a storage period prescribed by the European legislator of directives and regulations or another competent legislator expires, the personal data is routinely blocked or erased in accordance with the statutory provisions. We keep treatment records for at least five years under the professional code of conduct and invoices for eight years under tax law, each from the end of the calendar year. We delete the customer file ten years after the last treatment.

Data processing on our social media pages

We maintain company pages on several social media platforms in order to provide further information about our practice and opportunities for exchange. We operate company pages on the following platforms:

• Facebook, operated by Meta Platforms Ireland Limited (Ireland, EU), hereinafter “Meta”
• Instagram, operated by Meta Platforms Ireland Limited (Ireland, EU), hereinafter “Meta”
• TikTok, operated by TikTok Technology Limited (Ireland, EU), hereinafter “TikTok”
• LinkedIn, operated by LinkedIn Unlimited Company (Ireland, EU), hereinafter “LinkedIn”

When you visit or interact with a profile on a social media platform, personal data about you may be processed. Information associated with a social media profile used regularly constitutes personal data. This also includes messages and statements made using the profile. In addition, certain information is often collected automatically during your visit to a social media profile, which may also constitute personal data.

Visiting a social media page: When you visit our social media page, the operators of the social media platforms are solely responsible for this processing of personal data. Further information is available in their privacy policies: Meta (objection and opt-out options at facebook.com/settings), TikTok, LinkedIn.

The operators of the social media platforms collect and process event data and profile data and provide us with statistics and insights for our pages in anonymised form (“Page Insights”). This processing of personal data is carried out by the social media operators and us as joint controllers. The processing serves our legitimate interest in evaluating the types of actions taken on our page and improving our page based on these findings. The legal basis for this processing is Art. 6(1) lit. f GDPR. We cannot assign the information obtained via Page Insights to individual user profiles.

We have concluded agreements with the platform operators on processing as joint controllers, which define the allocation of data protection obligations. Details: Meta Page Insights, TikTok, LinkedIn.

You can also exercise your data subject rights directly with the operators: Meta, TikTok, LinkedIn. We have agreed with Meta, TikTok and LinkedIn that the Irish Data Protection Commission is the lead supervisory authority overseeing the processing for Page Insights. You always have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie) or any other supervisory authority.

Communication via social media pages: We also process information that you provide to us via our company page on the respective platform, such as the username used, contact details or a message to us. We carry out this processing as sole controller, based on our legitimate interest in contacting enquiring persons (Art. 6(1) lit. f GDPR). Further processing may take place if you have given your consent (Art. 6(1) lit. a GDPR) or if it is necessary to comply with a legal obligation (Art. 6(1) lit. c GDPR).

AI telephone assistant "Emma" (Vetpal GmbH)

To improve how easily you can reach us by phone, we use the AI telephone assistant "Emma" provided by Vetpal GmbH, Donaustrasse 44, 12043 Berlin. Incoming calls are answered automatically, processed and passed on to us. Depending on how the conversation goes, personal data such as name, telephone number, the reason for the call and information about your animal is recorded.

The processing is based on Art. 6(1)(b) GDPR (pre-contractual measures or performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in efficient practice management).

Vetpal acts as our processor under Art. 28 GDPR; a data processing agreement including a confidentiality obligation is in place. Calls are not recorded as audio; a transcript and a summary are stored. Processing takes place in data centres in the European Union. Vetpal uses sub-processors for this, some of which are based in the USA, for example for telephony, speech recognition and speech output. Where data may reach the USA in the process, for instance when calls are forwarded or during support access, this is safeguarded by the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) or the EU-U.S. Data Privacy Framework (Art. 45 GDPR). Vetpal does not use the data to train AI models.

You will find further information on data processing by Vetpal GmbH at vetpal.de/datenschutz. How we handle AI systems and who supervises them is set out in our AI transparency statement.

Online appointment booking and the MeineTiere web app

You can book appointments online via termin.vet. The service is operated by vetpraxis.de GmbH & Co. KG, Dorfstr. 15, 84069 Schierling, Germany, which also provides our practice management software. Our links open the booking page in a new tab. On the German version of our home page you can also open the booking calendar in a window on our site; it only loads after you click, and only then does the provider receive your IP address.

The data entered when booking (name, contact details, preferred date, reason for the visit) is processed by the provider on our behalf, solely to create the appointment in our practice management software. Legal basis: Art. 6(1)(b) GDPR (initiation of the treatment contract).

With the MeineTiere web app we offer browser-based access to your pet’s treatment data, findings and appointments. The app is also provided by vetpraxis.de GmbH & Co. KG. Access is personal and available only to existing patients of our practice. No data is passed on to third parties; the data is stored on the same EU server as our practice management software. We send reminders about upcoming vaccinations, check-ups and worming treatments by e-mail.

Dermatology questionnaire

Before an appointment in our dermatology consultation, you can fill in a questionnaire (in German) on our website: information about your pet and its symptoms as well as your name, telephone number and e-mail address. The form runs entirely in your browser. It creates a PDF on your device; the website stores none of it and transmits nothing to us or to third parties.

The questionnaire only reaches us if you send the PDF by e-mail or bring it along printed out. If you wish, the page opens a prepared e-mail in your e-mail program for this purpose; you attach the PDF yourself. We use the information to prepare the appointment and to treat your pet; it is kept like other treatment data (see “Routine erasure and blocking of personal data”). The legal basis is Art. 6(1)(b) GDPR (initiation and performance of the treatment contract).

Map on the contact page (OpenStreetMap)

On our contact page you can display a map section from OpenStreetMap. The provider is the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge CB4 0WS, United Kingdom. The map only loads when you click “Load map”. Your browser then transmits connection data, including your IP address, to the OpenStreetMap servers; the OpenStreetMap Foundation processes it as an independent controller.

The legal basis is your consent, which you give by clicking (Art. 6(1)(a) GDPR). It only applies to that one page view: if you reload the page, the map stays hidden until you click again. For the United Kingdom there is an adequacy decision of the European Commission (Art. 45 GDPR). Privacy notice: osmfoundation.org/wiki/Privacy_Policy.

Rights of the data subject

Every data subject is entitled to the following rights, which they can assert vis-à-vis the controller at any time:

• Right of access to the data stored about you (Art. 15 GDPR)
• Right to rectification of inaccurate data (Art. 16 GDPR)
• Right to erasure of your data (Art. 17 GDPR), insofar as no statutory retention obligations stand in the way
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to the processing (Art. 21 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Insofar as the processing of personal data is based on consent given by you, this may be withdrawn at any time and without giving reasons with effect for the future pursuant to Art. 7(3) GDPR. The withdrawal does not affect the lawfulness of the processing carried out on the basis of the consent up to the withdrawal. To assert your rights, please contact: .

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular with the State Commissioner for Data Protection of Lower Saxony (Der Landesbeauftragte für den Datenschutz Niedersachsen).

Name and address of the controller

The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the member states of the European Union and other provisions of a data protection nature is:

Dr Katja Häusler
Kleintierpraxis Cremlingen
Im Moorbusche 100
38162 Cremlingen
Tel. +49 5306 572 28 41
E-mail:

As of 06/10/2026 V008