Skip to content

Privacy Policy

Home | Privacy Policy

For Merz Aesthetics, the protection of personal data is of great importance. In the following privacy notices, we inform you who is responsible for processing your personal data and how your data are processed when you visit our Ultherapy PRIME landing pages.

A. Controller

The controller responsible for processing your personal data within the meaning of Art. 4 No. 7 GDPR is:
Merz Aesthetics GmbH
Eckenheimer Landstr. 100
60318 Frankfurt, Germany
(“Merz”)
Email: datenschutz-aesthetics@merz.de

B. What are your personal data used for?

I. Website visit

When accessing this website, Merz servers automatically store the following information:

  • Browser type and version
  • Operating system
  • Referrer URL
  • Pages visited
  • Date and time of access
  • IP address
  • Internet service provider

 
Purpose of processing:

  • Ensuring website functionality and security
  • Troubleshooting and error analysis
  • Preventing and investigating misuse
  • Statistical analysis (in anonymized form)

 
Legal basis: Art. 6(1)(f) GDPR

II. Cookies and tracking technologies

We use cookies and similar technologies. Consent is managed via the Osano consent management platform.
You can withdraw or adjust your consent at any time via the cookie settings.
 

1. Technically necessary cookies

These cookies are required to operate the website.
Purpose:

  • Ensuring proper website functionality
  • IT security
  • Saving user preferences
  • Managing consent via Osano

 
Legal basis:
Section 25(2) TDDDG, Art. 6(1)(f) GDPR
 

2. Consent Management (Osano)

We use Osano to collect and document user consent.
Processed data:

  • Consent status
  • IP address (in shortened form where applicable)
  • Device and browser information

 
Purpose:

  • Compliance with legal obligations
  • Proof of consent

 
Legal basis:
Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR
 

3. Analytics

a. Matomo

We use Matomo for privacy-friendly web analytics.
Processed data:

  • Page views and user interactions
  • Truncated IP address
  • Device and browser information

 
Key characteristics:

  • IP anonymization is enabled
  • No disclosure to third parties

 
Purpose:

  • Website optimization
  • Performance measurement
  • Campaign evaluation

 
Legal basis:
Section 25(1) TDDDG, Art. 6(1)(a) GDPR

Storage period:
Up to 13 months

Withdrawal:
Via cookie settings

b. Google Analytics

We use Google Analytics, a web analytics service provided by Google Ireland Limited.
Purpose:

  • Analysis of website usage
  • Evaluation of campaign performance
  • Understanding user behavior across traffic sources

 
Processed data:

  • Truncated IP address (IP masking enabled)
  • Usage data (e.g. page views, session duration)
  • Device and browser information
  • Online identifiers (e.g. cookies)

 
Recipients:

  • Google Ireland Limited
  • Google LLC (USA)

 
Third-country transfer:
Transfer to the USA; safeguarded through the EU-US Data Privacy Framework and Standard Contractual Clauses

Storage period:
Up to 26 months

Legal basis:
Section 25(1) TDDDG, Art. 6(1)(a) GDPR

Withdrawal:

 
Further information:
https://policies.google.com/privacy

c. Use of UTM parameters

We use UTM parameters in URLs to track campaign performance.
Processed data:

  • Campaign identifiers
  • Traffic source information
  • User interaction data

 
Purpose:

  • Attribution and optimization of marketing campaigns

 
Legal basis:
Art. 6(1)(f) GDPR
 

4. Embedded services

a. Vimeo (Video content)

We use Vimeo to embed videos.

Processed data:

  • IP address
  • Device and browser information
  • Video interaction data

 
Purpose:

  • Providing video content related to treatments

    Recipient:

  • Vimeo LLC (USA)

 
Third-country transfer:
USA; safeguarded through Standard Contractual Clauses

Legal basis:
Section 25(1) TDDDG, Art. 6(1)(a) GDPR

Further information:
https://vimeo.com/privacy

b. Google Maps (Clinic locator)

We use Google Maps to display clinics offering Ultherapy PRIME treatments.

Processed data:

  • IP address
  • Location-related data
  • Usage data

 
Purpose:

  • Providing clinic search functionality

 
Recipients:

  • Google Ireland Limited
  • Google LLC

 
Third-country transfer:
USA; safeguarded through EU-US Data Privacy Framework and Standard Contractual Clauses

Legal basis:
Section 25(1) TDDDG, Art. 6(1)(a) GDPR

Further information:
https://policies.google.com/privacy
 

5. Marketing and campaign tracking

Meta Pixel
We use the Meta Pixel for campaign measurement and targeted advertising.

Processed data:

  • Page visits and interactions
  • Device and browser information
  • Behavioral and interest data

 
Purpose:

  • Measuring campaign performance
  • Delivering personalized advertising on Meta platforms

 
Recipients:

  • Meta Platforms Ireland Limited
  • Meta Platforms, Inc.

 
Third-country transfer:
USA; safeguarded through EU-US Data Privacy Framework and Standard Contractual Clauses

Legal basis:
Section 25(1) TDDDG, Art. 6(1)(a) GDPR

Withdrawal:
Via cookie settings

Further information:
https://www.facebook.com/about/privacy

C. Storage periods and deletion

Personal data are stored only as long as necessary:

  • Server log data: approx. 7 days
  • Matomo data: up to 13 months
  • Google Analytics data: up to 26 months
  • Marketing data: depending on provider
  • Consent data: according to legal retention requirements

 
Data are deleted once they are no longer required unless statutory retention obligations apply.

D. Your rights

You have the following rights under GDPR:

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restriction of processing
  • Right to data portability
  • Right to object
  • Right to withdraw consent at any time

 
You also have the right to lodge a complaint with a supervisory authority.

E. Contact

If you have any questions regarding data protection or wish to exercise your rights, you can contact:
datenschutz-aesthetics@merz.de