Privacy Information

1. Controller

The controller responsible for data processing on this website is:
Private Hautarztpraxis Dr. med. Tobias Schmook
Schloßstraße 68, 12165 Berlin, Germany
Phone: +49 30 5562-9550 · Contact form

2. Hosting and server log files

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, on servers located in Germany. When pages are accessed, the hosting provider automatically processes technically necessary data: IP address, date and time of access, page requested, referrer URL, browser and operating system. This data is required to deliver the website securely and reliably (Art. 6(1)(f) GDPR) and is deleted after a short period. A data processing agreement pursuant to Art. 28 GDPR is in place with STRATO.

The website does not load external fonts and does not embed maps or videos.

3. Cookies & consent

The technically necessary cookie dermaprivat_consent (plus a corresponding entry in your browser's local storage) is used to store your cookie selection. It records whether you have allowed analytics or marketing services and is stored for up to 180 days. The legal basis is Section 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(c) and (f) GDPR.

Analytics and marketing services are activated only after your explicit consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can change or withdraw your selection at any time with effect for the future via “Cookie Settings” in the footer.

4. Google Analytics and Google Ads

The website is technically prepared for Google Analytics 4 and Google Ads (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). These services are loaded only if the relevant IDs have been configured and you have consented to the corresponding category. In that case, pseudonymous usage data (e.g. truncated IP address, pages viewed, device information) is processed and may be transferred to Google LLC in the USA (EU-U.S. Data Privacy Framework). The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

5. Contact by phone or email

If you contact us by phone or email, we process the information you provide in order to handle your enquiry (Art. 6(1)(b) and (f) GDPR; for health data Art. 9(2)(h) GDPR).

6. Contact form & Cloudflare Turnstile

When you use the contact form, we process the information you enter (name, email address, optional phone number, subject and message) in order to handle your enquiry (Art. 6(1)(b) and (f) GDPR). Please do not submit sensitive medical information, medical reports, diagnoses, photos or insurance documents through this form.

To protect the form against automated submissions, we use Cloudflare Turnstile (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). Technically required information such as IP address, browser and device information and interaction data may be processed to distinguish human access from automated requests. Turnstile is loaded only on the contact page, is used solely for security and spam prevention (Art. 6(1)(f) GDPR) and is not used for analytics or advertising. Transfers to the USA are based on the EU-U.S. Data Privacy Framework.

Messages are validated server-side and forwarded over an encrypted connection to the practice’s email inbox. Emails are sent via STRATO under the data processing agreement. Form data is not stored on the website itself. To prevent abuse, only an encrypted (hashed) form of your IP address is stored for a maximum of one hour in order to limit mass submissions.

7. Appointment booking via Doctolib

For online appointment booking we link to Doctolib (Doctolib GmbH, Mehringdamm 51, 10961 Berlin, Germany). Doctolib is not embedded in this website; data is only transferred once you click the link. Doctolib's own privacy policy applies to processing on its platform.

8. Links to map services

The “Google Maps” and “Apple Maps” links open the respective service in a new window. No data is transferred to these providers before you click. The location map on this website is a graphic stored on our server and based on OpenStreetMap data (© OpenStreetMap contributors, ODbL); no data is transferred to third parties when it is displayed.

9. Storage period

We store personal data only for as long as necessary for the respective purpose or as required by statutory retention obligations. Enquiries are deleted once they have been fully handled, unless retention obligations apply.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). You can withdraw any consent at any time with effect for the future. Please use the contact details above.

You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin.

11. Encryption

For security reasons, this website uses TLS encryption (recognisable by “https://” in the address bar).

Last updated: September 2026