Privacy Policy
1. Privacy at a Glance
General Information
The protection of your personal data is important to us. The following notices provide you with an overview of what happens to your personal data when you visit our website, contact us, or use our online services.
Personal data is any information that can be used to personally identify you.
Detailed information on the processing of your personal data can be found in the following sections of this Privacy Policy.
Controller (Responsible Party)
The controller responsible for data processing on this website is:
PHANNEE by piani
Owner: Pia Janssen
Kaiserswerther Str. 33
40477 Düsseldorf
Germany
Phone: +49 (0)151 295 207 41
Email: info@phannee.de
Website: www.phannee.de
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
2. General Notes on Data Processing
We treat your personal data confidentially and in accordance with the applicable statutory data protection regulations.
When you use our website, various personal data may be processed. This Privacy Policy explains what data is processed, for what purposes, and on what legal basis this occurs.
Please note that data transmission over the Internet (e.g., when communicating by email) may generally involve security risks. Complete protection of data against access by third parties cannot be guaranteed.
3. SSL / TLS Encryption
For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption.
You can recognize an encrypted connection by the fact that the address line of your browser changes from "http://" to "https://" and by the display of a lock icon in your browser bar.
4. Your Rights
Subject to statutory requirements, you have the right at any time to:
Access information about your stored personal data,
Request the rectification of incorrect or incomplete data,
Request the erasure of your personal data,
Request the restriction of processing,
Data portability,
Object to specific processing activities,
Withdraw any consent previously granted, with effect for the future.
Furthermore, you have the right to lodge a complaint with a competent data protection supervisory authority.
You may revoke any consent previously granted at any time. The lawfulness of the data processing carried out prior to the revocation remains unaffected by this. These data subject rights derive from the GDPR.
5. Hosting and Website System Duda
Our website is created and operated using the website building system Duda.
When you visit our website, personal data may be processed by the technical infrastructure of the website provider. This includes, in particular, technical data required for the provision, security, and stability of the website.
Specifically, the following data may be processed:
IP address,
Date and time of access,
Pages and files accessed,
Browser type and browser version,
Operating system used,
Referrer URL, and
Technical connection data.
Technically required data is processed on the basis of our legitimate interest in providing a secure, stable, and technically error-free website pursuant to Art. 6(1)(f) GDPR.
6. Cookies and Similar Technologies
Our website uses cookies and comparable technologies.
Technically necessary cookies serve to enable core functions and the secure operation of our website.
Furthermore—depending on your consent—additional cookies or technologies may be used, for example, for statistical analysis, reach measurement, and advertising.
Where consent is required, the corresponding services are generally only activated after you have given your consent via the consent or cookie management system used on our website.
You can modify or revoke your consent at any time with effect for the future via the cookie settings on our website.
7. Server Log Files
When visiting our website, technical information may be automatically recorded by the servers or hosting systems used.
This may include in particular:
IP address,
Browser type and browser version,
Operating system used,
Referrer URL,
Date and time of access, and
Pages or files accessed.
This information is required primarily to provide the website technically, ensure system security, and detect technical errors.
The processing is based on our legitimate interest in providing a secure and reliable website pursuant to Art. 6(1)(f) GDPR.
8. Contacting Us by Email or Phone
If you contact us by email or phone, we process the data provided by you to handle and respond to your inquiry.
This may include, in particular, your name, contact details, and the content of your message.
If your inquiry is related to an existing or prospective booking or contractual relationship, the legal basis for processing is Art. 6(1)(b) GDPR.
In all other cases, processing is based on our legitimate interest in effectively handling your inquiry pursuant to Art. 6(1)(f) GDPR.
The data will be deleted as soon as the purpose of processing ceases to exist and no statutory retention obligations prevent its erasure.
9. Online Appointment Booking via Shore
For online booking of massage appointments, we use the booking service Shore.
When you book an appointment through our website, the personal data provided during the booking process will be processed.
This may include in particular:
Name,
Email address,
Phone number,
Requested date and time,
Selected treatment, and
Additional information provided by you during the booking process.
Processing takes place to manage the appointment scheduling and to prepare and fulfill the service requested by you, based on Art. 6(1)(b) GDPR.
When using the Shore booking system, technical connection data may also be processed by Shore.
10. Google Analytics
We use Google Analytics on our website to analyze the usage of our online presence.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables us to obtain statistical information about how visitors interact with our website. This may include information about pages visited, duration of stay, devices used, and general interactions with the site.
Where cookies or comparable technologies are used for this purpose, processing is based on your consent pursuant to Art. 6(1)(a) GDPR.
You can change or revoke your consent at any time with effect for the future via the cookie settings on our website.
In the context of using Google services, data processing may take place outside the European Union or the European Economic Area. The applicable data protection mechanisms comply with current agreements and legal standards.
11. Google Ads and Conversion Tracking
We use Google Ads to promote our offerings in Google search results and advertising networks.
Conversion tracking may be implemented within Google Ads. This allows us to determine whether a user performed specific actions on our website after clicking an ad (e.g., visiting a booking page).
The information gathered is used to measure the effectiveness of our campaigns and optimize our advertising.
Where cookies or comparable technologies are used, processing takes place on the basis of your consent pursuant to Art. 6(1)(a) GDPR.
You may revoke your consent at any time via the cookie settings on our website.
12. Google Maps
The mapping service Google Maps may be integrated into our website.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Maps allows you to view our location on an interactive map and plan your journey.
When Google Maps is loaded, technical data—specifically your IP address—may be transmitted to Google.
Where Google Maps is loaded only after your consent, processing is based on Art. 6(1)(a) GDPR.
You can modify or revoke your consent at any time with effect for the future via the cookie settings on our website.
13. Payment Processing via SumUp
We use services provided by SumUp for certain payment transactions.
In the context of a payment, personal data required for processing and executing the respective transaction may be processed.
This may include in particular:
Name,
Payment amount,
Payment details,
Transaction data, and
Technical data related to payment processing.
The processing of this data is necessary for executing the payment transaction and fulfilling contractual obligations pursuant to Art. 6(1)(b) GDPR.
SumUp also processes certain data under its own data protection responsibility as part of payment handling.
14. Links to Social Networks
Our website may contain links to our profiles on social media networks.
With simple links, no connection to the respective social network is established merely by accessing our website.
Only when you click a corresponding link will you be redirected to the platform of the respective provider. From that point on, the privacy policies of the platform operator apply.
15. Data Disclosure to Third Parties
Personal data is generally only disclosed to third parties if necessary for contract performance, if a legal obligation exists, if you have given explicit consent, or if another legal basis permits the transfer.
Service providers processing personal data on our behalf are engaged in compliance with statutory requirements.
16. Storage Duration
We store personal data only as long as necessary for the respective processing purpose.
Where statutory retention periods exist, the relevant data will be stored for the duration of these periods.
Upon cessation of the processing purpose or expiry of statutory retention limits, data is deleted unless another legal basis permits continued storage.
17. Updates to this Privacy Policy
We reserve the right to amend this Privacy Policy to ensure it complies with current legal requirements or to reflect changes to our services or website structure. (As of July 2026)
