Information under Article 13 GDPR · Last updated: September 2026
Dr. med. dent. Niusha Barahmand Pour
Smile Meets Design, Sankt-Apern-Straße 17–21, 50667 Köln, Germany
Telephone: +49 221 669 401 80
Email: info@smilemeetsdesign.de
This website is designed to minimise the data it collects. We use analytics, tracking or marketing services only with your explicit consent (see section 3). Without your consent, we do not use cookies or similar technologies for advertising or analytics purposes. Fonts are loaded locally from our own server.
Consent banner. When you first visit, we ask for your consent through a banner. We store your decision, together with the time and the version of the consent text, in your browser’s local storage (localStorage, “smd_consent_record_v2”). This storage manages your choice and prevents measurement services from loading without your consent (section 25(2), point 2 TDDDG; Article 6(1)(c) in conjunction with Article 7(1) GDPR). If the stored text version changes, we ask again. You can change your decision or withdraw your consent at any time using “Cookie-Einstellungen ändern” in the legal notice (Impressum). When you withdraw consent, a page with measurement services already loaded is reloaded to stop them from continuing to run. Withdrawal takes effect for the future.
To return you to a previously visited position, we also use your browser’s local session storage (“smd_internal_departure_v1”) and navigation history. This information supports navigation within the website and is not transferred to external providers for this purpose.
Google Tag Manager. We use Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to manage measurement services. Tag Manager itself does not set marketing cookies or create user profiles; it loads other services, but only after you have given consent.
Google Ads conversion measurement. With your consent, we use Google Ads to measure the effectiveness of our advertisements. Our own measurement events report whether an enquiry was successfully submitted or a contact option was clicked; they do not contain names, contact details or message text. When Google services are used, technical data and identifiers are also processed, in particular your IP address, browser information, pages visited, and cookie and advertising click identifiers. Google cookies and similar technologies may be used for this purpose (e.g. “_gcl_…”). Clicking an appointment link is not a confirmed booking. The website does not grant consent for personalised advertising.
Technical default settings (Consent Mode v2). All Google signals are disabled by default (“denied” for ad_storage, analytics_storage, ad_user_data and ad_personalization). Only when you click “Accept” are ad_storage, analytics_storage and ad_user_data set to “granted” and the services described above loaded; ad_personalization remains permanently disabled, so personalised advertisements are not served. If you decline, all default settings remain in place and no advertising cookies are set.
Legal bases. These services are used solely on the basis of your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG. Our services are not directed at children. If you are under 16, please do not give consent; in that case, valid consent can only be given by your parent or guardian (Article 8 GDPR).
Transfers to third countries. When Google services are used, data may be transferred to Google LLC in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework; the European Commission’s standard contractual clauses are also in place (Article 46 GDPR).
Retention periods. Your consent decision remains stored until you withdraw it or delete the website data in your browser. The retention periods for Google cookies are as specified by Google. Details and further information about Google’s processing of data are available in Google’s privacy policy at policies.google.com/privacy.
When you visit the website, our hosting provider automatically processes technical access data, in particular your IP address, the date and time of access, the file requested, browser type and volume of data transferred. This processing provides the website and maintains its stability and security, on the basis of Article 6(1)(f) GDPR.
Our hosting provider is Netlify. Where Netlify processes personal data on our behalf to host our website, this takes place under a data processing agreement pursuant to Article 28 GDPR. Where data is transferred to the United States in this context, the transfer is based on the EU-U.S. Data Privacy Framework.
Server log data is stored only for as long as necessary for secure operation and error analysis, and is then deleted.
If you use the contact form, we process your name, email address, selected enquiry topic, and any telephone number and message you choose to provide. We use this information to handle your enquiry and arrange a possible consultation appointment. The legal basis for treatment-related enquiries is Article 6(1)(b) GDPR. We handle other general enquiries on the basis of our legitimate interest in responding to them under Article 6(1)(f) GDPR. Your name, email address and enquiry topic are required fields in the form. Alternatively, you can contact us by telephone.
We use form.taxi to receive form submissions, under a data processing agreement. The data is processed within the European Union. form.taxi receives the entries, forwards them to the practice by email, and also retains the enquiries in its submission archive for a limited period.
We retain enquiries only for as long as necessary to handle your enquiry and fulfil statutory retention obligations.
Please avoid sending health data, medical findings, X-rays or other particularly sensitive information through the form. If you nevertheless send us such information, we process it only to the extent necessary to handle your enquiry and move further communication to a more suitable, confidential channel.
Our website contains links to external services such as Doctolib (online appointment booking), Google Maps, WhatsApp and Instagram. Data is transferred to these providers only when you actively click the relevant link; from that point onwards, the respective provider’s privacy policy applies. The location map shown on the website is loaded entirely from our own server; no data is transferred to Google for this purpose when you visit the page.
Please do not send us sensitive health data, medical findings, X-rays or close-up photographs of treated areas through WhatsApp.
Subject to the applicable legal requirements, you have the right to access, rectification, erasure, restriction of processing, data portability and objection. Where we process data on the basis of Article 6(1)(f) GDPR, you have the right to object on grounds relating to your particular situation.
You also have the right to lodge a complaint with a data protection supervisory authority, such as the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.
We do not carry out automated decision-making, including profiling.