Privacy policy
Data protection
The operator of this app takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the General Data Protection Regulation (GDPR) and this privacy policy. Further information on the GDPR and what we are doing in this regard can be found here.
The use of our app is generally possible without providing personal data. If personal data (e.g., name, address, or email address) is collected on our app, this is always done voluntarily as far as possible. These data will not be passed on to third parties without your express consent.
We would like to point out that data transmission over the Internet (e.g., email communication) may be subject to security gaps. Complete protection of data against access by third parties is not possible.
Access, correction, deletion, blocking
You have the right of free access to your stored personal data, its origin and recipients, and the purpose of data processing and the right to correct, block, or delete these data at any time. You can contact us anytime if you have further questions on personal data.
Privacy policy for the use of Amazon Web Services (AWS)
We use AWS for web hosting and server deployment. The operator is Amazon Web Services, Inc., located in Frankfurt am Main. All personal data stored in our database is stored at this location. AWS has multiple certifications and offers the highest standards for protecting data and its servers. The Frankfurt site is C5 certified. Cloud Computing Compliance Controls Catalog (C5) is a government-supported test scheme introduced in Germany by the Federal Office for Information Security (BSI). The test scheme is intended to be used by organizations to prove their operational security against widespread cyber attacks using cloud services as part of the German government's key issues paper »Security recommendations for cloud computing providers«. More information can be found here.
Privacy policy for the use of Adyen
If you opt for online payment when using Dr. Plano's booking system, the payer's contact details will be transmitted to the online payment service provider Adyen as part of the orders placed in this way. Adyen is a service provided by Adyen N.V., which is registered in the Dutch Chamber of Commerce under the registration number 34259528 and has its registered office (seat) in the Netherlands at Simon Carmiggeltstraat 6-50, 1011 DJ in Amsterdam. Adyen acts as an online payment service provider and trustee.
The personal data transmitted to Adyen is usually first name, last name, address, telephone number, IP address, email address, credit card details or bank details, or other data required for order processing, as well as data related to the order, such as number of items, item number, invoice amount and VAT as a percentage, billing information, etc. This transmission is necessary to process the order with the selected payment method, particularly for identity confirmation, payment management, and customer relationship.
Please note: Adyen may also disclose personal data to service providers, subcontractors, or other affiliated companies if necessary to fulfill the contractual obligations arising from the order or if the personal data is to be processed on Adyen's behalf.
Depending on the payment method selected via Adyen, e.g., invoice or direct debit, the personal data transmitted to Adyen will be transmitted by Adyen to credit agencies. This transmission serves to check identity and creditworthiness in relation to the order placed. Which credit agencies are involved and which data is generally collected, processed, stored, and passed on by Adyen can be found in Adyen's privacy policy. Adyen's terms of use are available here.
Privacy policy for the use of Billomat (accounting)
We use the online billing service Billomat for our accounting. Billomat is an offer from Billomat GmbH & Co KG, Barbiergasse 6, 90443 Nuremberg.
For accounting, our customers' personal data is transmitted to Billomat and stored by Billomat to fulfill the orders. Billomat uses the stored data for billing, sending invoices, settling invoices, dunning procedures, and evaluating the data to compile statistics. Billomat does not use our customers' data for its own purposes and will not pass this data on to third parties unless it is necessary to fulfill the order. We trust in the reliability and IT and data security of Billomat and have concluded a data processing agreement with the provider.
Further information on Billomat's privacy policy and terms of use can be found in the provider'sprivacy policy and the terms of use.
Privacy policy for the use of domainfactory (domains, web hosting, and email provider)
We use domainfactory to send emails for individual communication between customers and employees. Domains and web hosting are also operated via this provider. Web hosting involves peripheral websites that run via this provider. These services are provided by domainfactory GmbH, Oskar-Messter-Str. 33, 85737 Ismaning, Germany.
domainfactory does not use our customers' data for its own purposes and will not pass this data on to third parties unless it is necessary to fulfill the order. We trust in the reliability and IT and data security of domainfactory.
Further information on domainfactory's privacy policy and terms of use can be found in the provider's privacy policy and the terms of use.
Privacy policy for the use of united domains (domains)
We use united domains, among others, to operate the domains. This service is provided by united-domains AG, Gautinger Straße 10, 82319 Starnberg, Germany.
united domains does not use the data for its own purposes and will not pass this data on to third parties unless necessary to fulfill the order. We trust in the reliability and IT and data security of united domains.
Further information on united domains' privacy policy and terms of use can be found in the provider's privacy policy and terms of use.
Privacy policy for the use of FingerprintJS (device binding)
When Dr. Plano users activate the device binding feature (e.g., for using the digital time clock for time tracking), we use the FingerprintJS service to ensure device recognition and prevent the use of unauthorized devices. This service is provided by FingerprintJS Inc., 1440 W. Taylor St #735, Chicago, IL 60607, USA.
FingerprintJS Inc. stores the data for device detection and device binding for the European region in Frankfurt am Main. Only data necessary for device detection in terms of authorized use is collected. The provider guarantees that no other data traffic is tracked and that the device detection only relates to one domain. This means that user behavior is not linked across multiple domains.
Further information on the privacy policy and terms of use of FingerprintJS can be found in the provider's privacy policy and terms of use.
Privacy policy for the use of tawk (live chat)
We use tawk to operate a live chat. This service is provided by tawk.to inc, 187 East Warm Springs Rd, SB298 Las Vegas, NV, 89119, USA.
For the session and communication, tawk stores, e.g., the name, email address, and the content of the conversation. tawk does not use the data for its own purposes and will not pass this data on to third parties unless necessary to fulfill the order. We trust in the reliability and IT and data security of tawk.
Further information on tawk's privacy policy and terms of use can be found in the provider's privacy policy and the terms of use.
Privacy policy for the use of Aircall (telephone system)
We use Aircall to operate our cloud telephone system. This service is provided by Aircall SAS, 11-15, rue Saint Georges, 75009 Paris, France.
Aircall stores the telephone number and – if available – other contact details, such as the person's name and organization, to make the call. Furthermore, telephone calls may be recorded for training purposes if the persons making the call agree to this. Aircall does not use the data for its own purposes and will not pass it on to third parties unless necessary to fulfill the order. We trust in the reliability and IT and data security of Aircall.
Further information on Aircall's privacy policy and terms of use can be found in the provider's privacy policy and the terms of use.
Privacy policy for the use of Jira (project management)
We use Jira for our project management and ticketing. Jira is an offering from Atlassian. Pty Ltd, Level 6, 341 George Street, Sydney NSW 2000, Australia.
As a rule, no personal data is stored in Jira. In exceptional cases, certain user information, such as name or email address, may be stored in tickets to fix a software bug. Atlassian does not use our customers' data for its own purposes and will not pass this data on to third parties unless it is necessary to fulfill the order. We trust in the reliability and IT and data security of Jira.
Further information on Atlassian's privacy policy and terms of use can be found in the provider's privacy policy and the terms of use.
Privacy policy for the use of MailChimp (newsletter)
We use the newsletter distribution platform MailChimp to send our newsletter. MailChimp is an offer from Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.
The data stored during registration is transmitted to Rocket and stored by Rocket. The data entered during registration will not be transmitted to other third parties. After registration, MailChimp will send you an email to confirm your registration.
MailChimp utilizes the stored data to send and analyze newsletters on our behalf. According to their information, MailChimp may also use this data to optimize or enhance its services. This includes technical improvements for sending and displaying newsletters and economic analyses to determine the geographical distribution of recipients. However, MailChimp does not use the data from our newsletter recipients to contact them directly or to share it with third parties. We have confidence in MailChimp's reliability, as well as their IT and data security measures. Additionally, MailChimp employs Google Analytics from Google, Inc., which may be integrated into the newsletters. More information about Google Analytics can be found in this privacy policy section titled »Google Analytics«.
You can revoke your consent to the storage of your data and its use for sending the newsletter anytime by clicking on the link provided in every newsletter.
Privacy policy for the use of the POS interface
If you decide to use the interface to a POS system when using Dr. Plano (booking of offers), the data of the person making the booking and the participants will be transmitted to the respective POS system as part of the management of your bookings for courses, slots, events, and gift cards.
The personal data transmitted to the POS system is the first name, last name, address, telephone number, email address, or other data required for the course and booking processing. In addition, data related to the order is communicated: the number of items, item number, invoice amount and VAT as a percentage, billing information, existing gift cards, etc. This transmission is necessary for the processing of course and booking management, particularly for identity confirmation, payment management, and customer relationship.
Please note: Personal data may also be passed on by the respective POS system to service providers, subcontractors, or other affiliated companies if necessary to fulfill contractual obligations or if the personal data is to be processed on behalf of the provider. The exact data being collected, processed, stored, and passed on by the respective POS system can be found in the privacy policy and the terms of use of the POS provider. Further information on the POS interface can be found in your Dr. Plano account under »Booking system settings > Integrations«.
Privacy policy for the use of YouTube
Our app uses plugins from the YouTube site operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit one of our pages with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited.
If you are logged into your YouTube account, you enable YouTube to assign your browsing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.
Further information on the handling of user data can be found in YouTube's privacy policy.
Privacy policy for the use of Google reCAPTCHA Enterprise
We use the reCAPTCHA Enterprise service provided by Google Inc. (Google) to protect your orders placed online. This service helps determine whether the input is made by a human or generated by automated machine processing. To accomplish this, your IP address and any other data required by Google for the reCAPTCHA Enterprise service are sent to Google. Your information is transmitted to Google for processing in this context.
Google will use this information to evaluate your use of this service on behalf of the app's operator. The IP address transmitted by your browser as part of reCAPTCHA Enterprise will not be merged with other Google data. Google's deviating privacy policy applies to that data.
Further information on Google's privacy policy and terms of use can be found in the provider's privacy policy and the terms of use.
Privacy policy for the use of HelloSign (electronic signature)
We use the online-based software HelloSign for electronic signatures that take place online. HelloSign is a Dropbox company, JN PROJECTS Inc., from Delaware, USA.
With the electronic signature, the signatory's personal data is transmitted to HelloSign and stored by HelloSign to fulfill the orders. HelloSign uses the stored data for electronic signatures, to send the signed document to the signatory, and to log the signing process. HelloSign does not use our customers' data for its own purposes and will not pass this data on to third parties unless it is necessary to fulfill the order. We trust in HelloSign's reliability and IT and data security. The company is also eIDAS-compliant, making it a viable option for the electronic signing of online documents for companies in all EU member states.
Further information on HelloSign's privacy policy and terms of use can be found in the provider's privacy policy and the terms of use.
Privacy policy for the use of Sentry (error analysis tool)
To improve the user experience of our software, we use Sentry software (https://sentry.io, 45 Fremont Street, 8th Floor, San Francisco, CA 94105). This software allows us to record and analyze technical errors in our software.
Sentry is only used for error detection and error analysis of our software. There is no connection or combination with other analysis tools. No profiles of individual users are created. Further information on Sentry's privacy policy and terms of use can be found in the provider's privacy policy and the terms of use.
Privacy policy for the use of Google Analytics
This app utilizes Google Analytics, a web analytics service provided by Google Ireland Limited, located at Gordon House, Barrow Street, Dublin 4, Ireland (»Google«). The integration is conducted through Google Tag Manager, also a Google product. Google Analytics uses »cookies« and similar technologies to gather data on user behavior. These technologies allow us to analyze user interactions within the app and enhance our services accordingly.
The information generated by the cookie regarding the use of this app is generally transmitted to a Google server in the United States and stored there. To ensure data protection, Google Analytics on this app has been enhanced with the »anonymizeIp« code, allowing for the anonymized collection of IP addresses (IP masking). In this process, Google shortens the IP address within member states of the European Union or other countries that are part of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address sent to a Google server in the United States, which is then shortened. The IP address provided by your browser in connection with Google Analytics will not be combined with other data held by Google.
You can revoke your consent for cookie storage at any time by using the cookie consent manager or by changing the relevant settings in your browser. Additionally, you can prevent Google from collecting and processing data generated by cookies related to your app usage (including your IP address) by downloading and installing the browser plugin available at the following link: Deactivate Google Analytics. Moreover, you can opt out of Google Analytics data collection by clicking the link below. An opt-out cookie will be set to block future data collection when you visit this app: Deactivate Google Analytics.
For more information about our terms of use and data protection, please refer to the Terms of Use for Google Analytics and the Google Privacy Policy & Terms of Use.
Privacy policy for the use of LaunchDarkly (feature management)
We use LaunchDarkly to manage our software's features. This service is provided by Catamorphic, Co., a Delaware corporation located at 350 Frank H. Ogawa Plaza, Suite 100, Oakland, CA 94612, USA.
LaunchDarkly only stores the customer number and no personal data to provide the service. LaunchDarkly does not use the data for its own purposes and will not pass this data on to third parties unless necessary to fulfill the order. We trust in the reliability and IT and data security of LaunchDarkly.
Further information on LaunchDarkly's privacy policy and terms of use can be found in the provider's privacy policy and the terms of use.
Our website uses so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies make our website more user-friendly, effective, and secure. Cookies are small text files that the browser stores on the user's computer.
Most of the cookies we use are so-called »session cookies«. They are automatically deleted when a user leaves our site. Other cookies remain stored on the device until the user deletes them. These cookies enable us to recognize the user's browser on the next visit and thus, for example, reconstruct settings made by the user.
Browsers can be set to inform the user about cookie settings and only allow cookies in individual cases. It is also possible to exclude the acceptance of cookies in certain cases or in general and to activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of our app may be restricted.
Cookies in the booking plugin
Dr. Plano's booking plugin & payment page use only technically necessary cookies that enable the following security and basic functions:
- Online payment (via our payment provider Adyen)
- Google reCAPTCHA (protection against bot attacks)
- Sentry (Bug-Tracking)
- Status page (communication of server malfunctions)
- Tawk (chat for communication in case of malfunction)
Further up in this privacy policy, you will find a separate section for each service with more information and the associated subcontractors.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which are automatically transmitted by the user's browser. Including:
- browser type / browser version
- operating system used
- referrer URL
- host name of the accessing computer
- time of the server request
This data cannot be assigned to specific persons. This data is not merged with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.