DEEP CARE GmbH – PRIVACY POLICY

Status: 11.03.2026

Data Protection Officer: Jorge Avante Reyes

1. Person in charge

Deep Care GmbH
Königsallee 43, 71638 Ludwigsburg, Germany
Phone: +49 (0) 7141 473 2210
E-Mail: info@deep-care.de
Represented by: Dr. Milad Geravand
Commercial Register: Stuttgart District Court, HRB 731472
VAT ID No.: DE326604972

2. Subject of the Data Protection Declaration

This privacy policy informs you about the nature, scope, and purposes of the processing of personal data when using our website and online shop (WooCommerce), including orders, payments, shipping, customer accounts, and marketing/tracking (only with consent).

3. Terms

The definitions in the GDPR apply.

4. Categories of data processed

  • File data (name, address)
  • Contact details (email, telephone)
  • Contract/Order details (Products, Terms, Subscriptions)
  • Payment details (payment status, transaction data; payment processing primarily with the payment provider)
  • Shipping details (delivery address, shipment information)
  • Usage data (page views, interactions – with analysis/marketing only with consent)
  • Device/Log data (IP address, browser/OS, timestamp)

5. Purposes and Legal Bases

5.1 Shop/Contract (Article 6(1)(b) GDPR)

Order, Delivery, Customer Account, Billing, Support

5.2 Legal obligations (Art. 6(1)(c) GDPR)

Commercial and tax retention obligations

5.3 Legitimate Interest (Art. 6(1)(f) GDPR)

IT security, abuse prevention, shop stability

5.4 Consent (Art. 6(1)(a) GDPR) in conjunction with § 25 TTDSG

Setting/Reading of non-essential cookies/trackers (analysis/marketing)

6. Hosting, Server Logs

When the website is accessed, server-side log data (including IP address, timestamp, user agent, referrer) is processed to ensure operation and security.

7. WooCommerce (Shopping functions)

For orders, we process mandatory details (name, delivery/billing address, email) for contract fulfilment.

8. Payment Services (PayPal, Stripe, WooCommerce Payments)

For payment processing, we transmit payment-relevant data to the chosen payment service provider.

  • PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg)
  • Stripe/WooCommerce Payments: Stripe Payments Europe (Ireland)

The providers process data independently according to their data protection notices

9. Shipping service provider (DHL)

For delivery, we will transmit your name and delivery address to the shipping service provider. Optionally, your email address/telephone number may be transmitted if this is necessary for delivery communication or if you have consented to a parcel notification.

10. Cookie Consent / Consent Management (Borlabs Cookie)

We use Borlabs Cookie as a consent management tool. This includes storing your consent decision in the „borlabs-cookie“ cookie. You can revoke or adjust consent at any time via „Cookie Settings“. Non-essential cookies/trackers will only be set after consent has been given.

11. Analysis & Marketing (only with consent)

11.1 Matomo (Web Analytics)

We use Matomo for audience measurement. Matomo can be operated with opt-out/consent mechanisms. If Matomo sets cookies or uses comparable technologies, this will only be done with your consent.

11.2 Google Ads conversion tracking

We use Google Ads Conversion Tracking. This allows cookies/IDs to be set to measure conversions. Use only after consent.

11.3 Meta Pixel

We use the Meta Pixel for campaign measurement and audience building. Use only with consent.

11.4 LinkedIn Insight Tag

We use the LinkedIn Insight Tag for campaign measurement. Use only with consent.

11.5 HubSpot

We use HubSpot for forms/CRM/marketing automation. HubSpot can set cookies; use of relevant cookies only with consent.

12. YouTube Embeds

When YouTube videos are embedded, a connection can be made to YouTube/Google when the page is accessed. We recommend embedding in enhanced privacy mode and only activating after consent (the “2-click solution”), where technically feasible.

13. Recipient / Processor

We use service providers (hosting, payment providers, shipping, marketing/analytics). Insofar as they process data on our behalf, we have data processing agreements in accordance with Article 28 of the GDPR.

14. Transfer to a third country

Depending on the service (especially US providers), data may be transferred to third countries. Where necessary, this will be done on the basis of suitable guarantees (e.g. standard contractual clauses) and/or other applicable mechanisms.

15. Storage duration

Order/Invoice data: usually according to statutory retention periods
Account/Support data: for as long as necessary; deletion upon request, provided no obligations prevent it
Consent data: as long as required for proof
Tracking data: by purpose, typically shorter deadlines or aggregation/anonymisation

16. Rights of data subjects

You have rights to access, rectification, erasure, restriction, data portability, objection, and to withdraw any consent given.

17. Right to complain

You have the right to lodge a complaint with a supervisory authority for data protection.

18. Amendments

We will adapt this privacy policy if it is necessary.