Privacy policy

This English version of our privacy policy is provided for your convenience. Only the German version is legally binding: Datenschutzerklärung.

In this privacy policy we inform you which personal data are processed when you visit davincimedic.de, for what purpose and on what legal basis. In brief: this website does not use any analytics or advertising services and does not set any cookies. Content from other providers is only loaded when you access it yourself.

1. Controller

The operator of this website and the controller responsible for data processing on this website is
Tattoo GbR
represented by its partner Dr. Univ.-PD Amro Homssi
Greifswalder Str. 137-138
10409 Berlin

Davinci Medic Berlin is a service of the practice of Dr. Univ.-PD Amro Homssi, specialist in orthopaedics and trauma surgery, at the same address.

Email: info@davincimedic.de

If you have any questions about data protection, you can reach us using these contact details.

2. Hosting and server log files

The website is hosted by a hosting service provider with servers in Germany. It processes the data only on our behalf and only to the extent necessary for the operation of the website.

Each time a page is accessed, the server automatically stores information transmitted by your browser (server log files):

• IP address
• date and time of access
• page or file accessed
• previously visited page (referrer)
• browser and operating system

We need these data in order to deliver the website, ensure its security and detect errors. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). The log files are stored only for as long as is necessary for these purposes and are then deleted. They are not combined with other data.

The connection to the website is encrypted using TLS. You can recognise this by ‘https://’ in the address bar of your browser.

3. No cookies, no analytics

This website does not set any cookies and does not use any analytics, tracking or advertising services. For this reason, no cookie notice appears either. Only a technical indication of whether your browser can display emojis is stored in your browser’s session storage and deleted when you close the browser. It contains no personal data and serves solely to display the page correctly (Section 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act)).

Fonts, images and all other components of the pages are loaded from our own server. When you access the website, there is no connection to Google Fonts or other providers.

4. Contact by email

If you send us an email, we process the information you provide (for example name, email address and your concern) in order to answer your enquiry and, where applicable, to arrange an appointment. If you share information about your health with us in doing so, we also process this information.

The legal basis is the initiation or performance of the treatment contract (Art. 6(1)(b) GDPR) and, for health data, Art. 9(2)(h) GDPR in conjunction with Section 22(1) no. 1(b) BDSG (German Federal Data Protection Act). We answer general enquiries on the basis of our legitimate interest (Art. 6(1)(f) GDPR).

We delete your information as soon as the enquiry has been dealt with and there are no statutory retention obligations. If treatment takes place, the medical retention periods apply, as a rule ten years after completion of the treatment (Section 630f(3) BGB (German Civil Code)).

We receive emails via the servers of our hosting provider (section 2). Emails are generally not end-to-end encrypted. For confidential information about your health, we therefore recommend a personal conversation at the practice.

If your email concerns a matter that we do not deal with at Davinci Medic (for example prescriptions, referrals or orthopaedic questions, or the treatment of ingrown toenails and nail fungus by Dr. Homssi), you will automatically receive a reply telling you which address you can contact. This allocation is based on fixed keywords in the subject line and text, without artificial intelligence and without passing your message on to third parties. Your email is not forwarded.

5. Enquiry via termin.davincimedic.de

Via our page termin.davincimedic.de you can send us an enquiry: the area, your message, your email address and, optionally, your first name and your telephone number. We use this information only to answer your enquiry and, where applicable, to arrange an appointment. Because your message may contain information about your health, we store it only with your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR); you can withdraw your consent at any time by email to info@davincimedic.de. The page, storage, protection against misuse and erasure periods are the same as for the initial assessment by photo (section 5a). Please do not send us detailed information about your health; a personal conversation is better suited for this.

5a. Initial assessment by photo (termin.davincimedic.de)

For an assessment with an estimated price, you can send us, via our page termin.davincimedic.de, photos of your tattoo, your permanent make-up or the area of skin that is to be treated with the CO2 laser, together with some information: body area or area, size (for tattoos), colours or your concern, age, where it was tattooed or done or whether the area has already been treated, your email address and, optionally, your first name and a comment. We use this information only to reply to you and to prepare any possible treatment.

Because photos of areas of skin may contain information about your health, we process them only with your explicit consent, which you give by ticking the box on the page (Art. 6(1)(a) and Art. 9(2)(a) GDPR). You can withdraw your consent at any time with effect for the future; an email to info@davincimedic.de is sufficient.

The page and the storage run on our own practice system with a cloud service provider that works on our behalf (the photos and information are stored in the EU; see section 9). We remove location and device information from the photos; photos and information are stored in encrypted form, and only the practice has access, after logging in. The page does not set any cookies. To protect against misuse, we limit the number of submissions per internet connection and, for this purpose, briefly process your IP address (Art. 6(1)(f) GDPR). To protect against automated submissions, we use a verification service from the same service provider on this page; this checks technical characteristics of your browser without setting cookies (Art. 6(1)(f) GDPR).

We send our reply by email from info@davincimedic.de; for this we use the email service of a cloud provider that works on our behalf.

If no treatment takes place, we delete the photos and information after 6 months. If treatment begins, the statutory retention periods for treatment documentation apply. During treatment, we may ask you by email to send us a current photo taken from the same angle via a personal link; the same applies to this.

6. Google Maps and Google reviews

On the contact page you will find the link ‘Open route in Google Maps’, and on the home page a link to our reviews on Google. Maps and reviews are not embedded in the website. Only when you click on one of these links does Google Maps open, and Google receives your IP address and other usage data. The provider is Google Ireland Limited. Google’s privacy notice applies: policies.google.com/privacy.

7. YouTube video

On the page about permanent make-up removal, we show a video from YouTube. It is embedded in privacy-enhanced mode and is only loaded when you click on play. Until then, you only see a preview image from our server, and no data are transmitted to YouTube.

After you click, your browser establishes a connection to YouTube’s servers. In doing so, YouTube receives, among other things, your IP address and the information about which page you have visited, and may use cookies or similar technologies in your browser. If you are logged in to Google, YouTube can associate the access with your account. The provider is Google Ireland Limited. Data may also be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which there is an adequacy decision of the European Commission.

The legal basis is your consent, which you give by clicking on play (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). It applies only to this page view. On your next visit, the video will again only be loaded after a click. Further information: policies.google.com/privacy.

8. Links to other websites

The website contains links to other services, for example to drhomssi.de, our practice’s specialist website for ingrown toenails and nail fungus. Data are only transmitted to these providers when you click on a link. The privacy notice of the respective provider applies there.

9. Recipients and service providers

For hosting, email and our online pages, we use service providers who process data only on our instructions (processors, Art. 28 GDPR). Some of them belong to companies based in the USA. Insofar as data may be transferred there, this is based on the adequacy decision of the European Commission on the EU-US Data Privacy Framework and, where agreed, on standard contractual clauses of the European Commission. We will tell you the names of our service providers on request.

10. Your rights

You have the right to

• access to the data stored about you (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• withdrawal of consent given, with effect for the future (Art. 7(3) GDPR).

Right to object: Insofar as we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

To do so, please use the contact details in section 1. You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information), Alt-Moabit 59-61, 10555 Berlin, datenschutz-berlin.de.

11. Further information

We do not make any automated decisions and do not create profiles. You are not obliged to provide us with data. Without the server log files, however, the website cannot be delivered.

Last updated: November 2026