The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
ITC Baraner
Owner: Hüseyin Baraner
Mainzer Str. 36
55411 Bingen am Rhein
Germany
Phone: +49 1520 903 82 89
Email: baraner@baraner.com
The protection of personal data is important to us. Personal data is processed on Health Tourism Travel only insofar as this is necessary for the operation of the website and the services offered, an appropriate legal basis exists, or users have consented to the processing.
Personal data means any information relating to an identified or identifiable natural person.
Personal data is processed in particular on the basis of Article 6(1) GDPR. Where processing is based on consent, the legal basis is Article 6(1)(a) GDPR. Consent may be withdrawn at any time with effect for the future.
Health Tourism Travel is hosted on a Virtual Dedicated Server (VDS) operated by ITC Baraner. The server is rented from Turhost and is physically located in the Netherlands.
When the website is accessed, technically necessary data may be processed and stored in server log files. This may include the IP address, date and time of access, page or file requested, amount of data transferred, referrer URL, browser and browser version, operating system, and access status or HTTP status code.
This processing serves in particular to provide and maintain the technical stability of the website, ensure system security, analyse errors, and detect and prevent abusive or unlawful access. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and functional operation of our online service.
The server is located within the European Union.
Health Tourism Travel uses cookies and similar technologies. Technically necessary cookies and similar technologies may be used where required for the operation and basic functions of the website.
For technologies that are not technically necessary, in particular technologies used to analyse user behaviour, consent is obtained before use where required by law.
Users can manage their consent decisions through the consent management system used on Health Tourism Travel and can change or withdraw consent at any time with effect for the future.
We use a self-developed consent management solution (PiCMP – Pi Consent Management Platform) to manage and document consent. No external consent management provider is used to provide this system.
PiCMP records, implements and documents consent decisions relating to technologies requiring consent. In particular, a truncated IP address, the date and time of the decision, the language version used and the relevant consent decisions are processed.
The processing serves to implement and document users' privacy choices. Where processing is necessary to comply with statutory documentation obligations, it is based on Article 6(1)(c) GDPR. Where there is an additional legitimate interest in legally compliant and transparent consent management, processing may be based on Article 6(1)(f) GDPR.
PiCMP takes into account the consent signals provided for by Google Consent Mode V2. The existence of corresponding technical consent categories does not mean that Health Tourism Travel uses all marketing or preference services that could be assigned to such categories.
Consent can be changed or withdrawn with effect for the future through the privacy or cookie settings provided on Health Tourism Travel.
Health Tourism Travel uses Google Analytics for statistical analysis of website use. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables us to evaluate information about how visitors use Health Tourism Travel. This may include information on pages viewed, the time and duration of visits, technical information about the browser and device, approximate location information and interactions with the website.
Google Analytics is used on the basis of consent pursuant to Article 6(1)(a) GDPR. Where consent is required for storing information on a device or accessing information already stored on a device, the service is likewise used only after the relevant consent has been given.
Consent can be changed or withdrawn at any time with effect for the future through Health Tourism Travel's privacy or cookie settings.
When Google services are used, it cannot be ruled out that data may also be processed by Google companies or service providers outside the European Economic Area. Where a transfer to a third country takes place, it is carried out in accordance with the applicable statutory requirements.
Health Tourism Travel uses Google Consent Mode V2 in connection with consent management. Consent signals are used to communicate the consent status selected by the user to Google services.
The technical provision of consent signals for categories such as analytics, advertising or personalisation does not mean that Health Tourism Travel uses all corresponding Google or marketing services. The services actually activated on the website and the user's consent decision are decisive.
If users contact us by email or telephone, we process the personal data transmitted in this context insofar as necessary to deal with the respective enquiry.
Depending on the subject of the enquiry, processing is based on Article 6(1)(b) GDPR where the contact relates to entering into or performing a contract, or on Article 6(1)(f) GDPR. In the latter case, our legitimate interest is the appropriate handling of communications addressed to us.
Personal data is generally stored only for as long as necessary for the respective processing purpose. Data may also be retained where statutory retention, documentation or limitation periods require this.
When the purpose of processing ceases to apply and there is no statutory or other legal basis for continued storage, the relevant personal data will be deleted.
Personal data may be transmitted to technical service providers insofar as this is necessary for operating the website or providing the relevant services. Depending on the service used, these may include providers of server infrastructure and web analytics.
Where service providers process personal data on our behalf, this is carried out in accordance with applicable data protection requirements.
Some of the service providers we use, or their subcontractors, may process personal data outside the European Union or the European Economic Area.
Where such a transfer takes place, it is carried out only in accordance with the requirements of Articles 44 et seq. GDPR, for example on the basis of an adequacy decision of the European Commission or appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Subject to the statutory requirements, data subjects have in particular the right of access (Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), data portability (Article 20 GDPR), objection (Article 21 GDPR), and the right to withdraw consent at any time with effect for the future pursuant to Article 7(3) GDPR.
To exercise these rights, data subjects may contact baraner@baraner.com.
Where we process personal data on the basis of legitimate interests under Article 6(1)(f) GDPR, data subjects have the right, subject to the statutory requirements, to object to the processing on grounds relating to their particular situation.
Under Article 77 GDPR, data subjects have the right to lodge a complaint with a data protection supervisory authority if they consider that the processing of their personal data infringes the GDPR.
The supervisory authority generally responsible for the controller is: The State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz), Hintere Bleiche 34, 55116 Mainz, Germany.
The right to contact another competent supervisory authority in accordance with applicable law remains unaffected.
We take appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access and other risks. Security measures are reviewed in line with technological developments and existing risks and are adjusted where necessary.
This Privacy Policy may be amended if the technical functions of Health Tourism Travel, the services used or the legal requirements change. The version currently published on Health Tourism Travel applies.
Last updated: October 2026