Privacy notice.

Last updated: 21 September 2026.

1. Controller

Dr. med. dent. Niusha Barahmand Pour
SMILE meets DESIGN Dentistry
Sankt-Apern-Straße 17–21 · 50667 Köln
Telephone: 0221 669 401 80
Email: info@smilemeetsdesign.de

2. Website provision by Netlify

We use Netlify to host and deliver this website. The provider is Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. When you visit a page, Netlify processes technical connection and access data. This includes, in particular, your IP address, the requested page or file including transmitted URL parameters, the time and status of the request, and details of your browser and operating system. If your browser transmits it, the previously visited page may also be recorded.

This processing serves to provide the website, analyse errors and protect against abusive access. The legal basis is our legitimate interest in reliable and secure website operation under Art. 6 Abs. 1 lit. f DSGVO. Netlify processes hosting data on our behalf; the terms are described in the Netlify Data Processing Agreement.

Processing in the USA and other countries by Netlify and its service providers is possible. For covered transfers to the USA, Netlify refers to its certification under the EU–US Data Privacy Framework. Where this transfer mechanism does not apply, the Data Processing Agreement provides for the European Commission's Standard Contractual Clauses. Further information is available in the Netlify privacy notice and the information on subprocessors.

Retention of technical data is governed by the relevant operational and security purpose and legal obligations. These include investigating errors and specific security incidents. The availability of individual access logs depends on the Netlify service and plan used; information is available in the observability documentation.

Fonts, images, videos and program files are delivered through our website. No requests are made to Google Fonts or an external font provider for this purpose. Google Tag Manager and advertising measurement with Google Ads load only after you have given your explicit consent. Google Analytics and personalised advertising are not enabled. The separate integration of Google Maps following your choice is described below.

3. Contact by telephone or email

When you contact us, we process your information to handle your enquiry. For enquiries relating to a treatment contract or its preparation, the legal basis is Art. 6 Abs. 1 lit. b DSGVO; for other organisational enquiries, it is our legitimate interest in responding under Art. 6 Abs. 1 lit. f DSGVO. Where health data are required as part of treatment, the relevant additional provisions apply, in particular Art. 9 Abs. 2 lit. h DSGVO and professional confidentiality obligations.

We retain enquiries for as long as necessary to handle them and, where applicable, to fulfil statutory retention requirements. Please do not send sensitive health data by unencrypted email.

Contact form with Form.taxi

Our contact form is intended for organisational enquiries. Your name, email address and message are required; a telephone number is optional. When you submit the form, your browser sends these details by HTTPS POST to Form.taxi, a service of wrkt*biz Reinhard Söllradl, 4070 Eferding, Austria. The service stores the enquiry in the form account and sends it to our practice email address. Simply visiting our contact page does not contact Form.taxi.

Contract-related enquiries are processed under Art. 6 Abs. 1 lit. b DSGVO, and other organisational enquiries under Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest is in answering your enquiry and securing the contact channel. Please do not submit clinical findings or sensitive health data through the form.

For connection and spam protection purposes, Form.taxi processes technical information, including the IP address and, where transmitted, the submitting website. The enabled spam filter checks form contents; according to the provider, IP addresses are compared with known spam sources in anonymised form. A hidden control field also helps detect automated submissions.

According to Form.taxi, hosting is provided by ALL-INKL.COM at its Dresden data centre; Mailjet GmbH is used for email delivery. Form contents are stored by the provider for no more than one year. Entries in spam and trash are automatically deleted after one month. Emails received by the practice are subject to the purpose-related retention periods described above.

Further information is available in the Form.taxi privacy notice, the spam protection documentation and the information on the submission archive.

Employment enquiries

If you email us to express interest in working at our practice or to apply for a role, we process your contact and qualification details insofar as they are necessary to decide whether to establish an employment relationship. The legal basis is § 26 Abs. 1 BDSG in conjunction with the DSGVO. We use this information to handle your application and communicate with you. It is retained only as long as necessary for this purpose, to fulfil legal obligations or to safeguard legitimate legal interests.

4. Booking appointments with Doctolib

Our appointment links open Doctolib's external website. Simply reading this page does not embed or load Doctolib. Your browser connects to Doctolib only when you follow an appointment link. Its privacy notice and legal informationapply there. Alternatively, you can book your appointment with us by telephone.

5. Google Maps at your choice

The embedded map is initially disabled. By selecting “Load Google Maps”, you consent to loading the map. This transmits information including your IP address and technical browser information to Google. Google may store or read information on your device. The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing in the USA is possible.

The map is embedded on the basis of your consent under Art. 6 Abs. 1 lit. a DSGVO and, where information is stored or read on your device, § 25 Abs. 1 TDDDG. Details of processing, storage duration and international transfers are available in the Google privacy policy.

You can disable the embedded map again using “Cookie settings” in the footer and “Reject optional services”. This does not reverse transfers that have already occurred; the lawfulness of processing before consent was withdrawn remains unaffected. The map will not automatically reload when you visit a new page. The separate directions link opens Google Maps as an external website.

Advertising measurement with Google Ads

With your consent, we use Google Ads, integrated via Google Tag Manager, to measure the effectiveness of our adverts. The recipient is Google Ireland Limited, Ireland. We record clicks on our phone number and appointment links to Doctolib. A click does not prove that a conversation took place or that an appointment was booked. Google's measurement services do not load without your consent.

Google processes technical usage data. This may include your IP address, browser and device information, timestamps, advertising and cookie identifiers, and information about the page accessed and the previously visited page. The click events we trigger do not contain form contents. Google Analytics, personalised advertising, enhanced conversions and automatic detection of contact details from forms are not enabled for this website.

The legal basis is your consent under Article 6(1)(a) GDPR and, for storing or accessing information on your device, section 25(1) TDDDG. Cookies with the prefix ‘_gcl_’ and local browser storage may be used to attribute advertising clicks. Google states that these cookies expire after 90 days. Further information is available in Google's cookie information and privacy policy, including retention information.

Data may be processed in the USA. Google LLC states that it is certified under the EU–US Data Privacy Framework. For transfers not covered by adequacy decisions, Google may use standard contractual clauses. Details are available in Google's information on international data transfers.

You can withdraw your consent at any time using ‘Cookie settings’ in the footer and ‘Reject optional services’. Measurement stops; if the Google tag has already loaded, the page reloads. Data already transmitted cannot be recalled; withdrawal does not affect the lawfulness of processing before withdrawal. Your choice is retained for no more than 180 days. You can book appointments and contact us without giving consent.

6. Storing your preference

When you confirm your privacy preference, we store your choice locally in your browser under “smd_consent_v2”. The entry contains the version, the choice concerning advertising measurement and the time, but no contact or treatment data. The choice is recognised for no more than 180 days. It serves to manage the privacy preference you expressly selected; the legal bases are § 25 Abs. 2 Nr. 2 TDDDG and Art. 6 Abs. 1 lit. f DSGVO. You can change your choice through “Cookie settings” or delete it using your browser's website data settings.

7. Optional topic selection and preparation checklist

The topic selection and checklist for your visit work solely within the open page. Your selection is transmitted neither to the practice nor to third parties and is not stored permanently by the website. No patient profile or appointment booking is created.

8. External links

Links to Instagram, professional sources and other websites load the respective site only when clicked. The relevant provider is responsible for data processing there.

WhatsApp link

The WhatsApp symbol opens an external link to WhatsApp. No WhatsApp scripts or chat widgets are embedded on our website; simply visiting a page does not establish a connection to WhatsApp. Only when you open the link do you leave our website and access the service. Technical connection data may then be transmitted to the provider. Opening the link does not automatically send a message.

Information about the provider's data processing is available in the WhatsApp privacy notice. Please do not send clinical findings, health information or patient photographs there. For medical concerns and urgent symptoms, contact the practice by telephone. Telephone contact and online appointment booking are available independently of WhatsApp.

9. Your rights

Subject to the legal requirements, you have the right of access, rectification, erasure, restriction of processing and data portability. You may withdraw consent with effect for the future. Where processing is based on legitimate interests, you may object on grounds relating to your particular situation.

You may lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia. To exercise your rights, you may also contact the controller named above.