Privacy Policy

In short: this site runs without advertising cookies unless you agree to them. What we do count is counted so that no individual can be reconstructed from it.

Who is responsible

The controller for data processing on this website is Tagan — Massage & Körperarbeit, Joachim-Karnatz-Allee 21, 10557 Berlin, phone +49 176 70494731. Privacy questions go to the contact given there.

If you only read

When you open a page, your browser transmits technically necessary data to our server: the requested address, the time, the amount of data, the browser type and the IP address. These end up in the server logs of our hosting provider, serve secure operation and are deleted there shortly afterwards. Legal basis: Art. 6(1)(f) GDPR.

Our own analytics — without cookies

We count ourselves how often a page is opened, where the visit came from and whether WhatsApp or the phone number was clicked. For this we set no cookies and store no IP address.

Instead of an identifier we store a hash of a secret key, the date, the IP and the browser string. It changes daily and cannot be reversed — the same person on two days is two separate counts for us. The data stays on our own server in Europe. One exception: when you click WhatsApp or the phone number, our server sends a short note to our work chat on Telegram — which page, which source, which service. It contains no name, no number and no IP. That message is processed by Telegram FZ-LLC under its own terms.

Because nothing is stored on or read from your device, this measurement does not require consent under § 25 TTDSG. Legal basis: Art. 6(1)(f) GDPR. You may object at any time.

These numbers are deleted automatically after fourteen months — long enough for a year-on-year comparison, and no longer.

Cookies and your consent

Advertising and statistics services are loaded only after you agree in the banner. Before that, no request goes to those providers.

Your decision is stored locally in your browser together with the time and the version of the notice — otherwise we would have to ask on every page.

You can withdraw your consent at any time and without disadvantage via cookie settings at the bottom of the page. Legal basis: Art. 6(1)(a) GDPR and § 25(1) TTDSG.

Google Analytics 4 — only with consent

If you allow the «Statistics» category, we load Google Analytics 4 from Google Ireland Limited, Dublin, Ireland. The service sets cookies and analyses which pages are read and how visitors arrive. The IP address is truncated.

Data may be transferred to the USA. Google LLC is certified under the EU-US Data Privacy Framework; a residual risk of access by US authorities remains.

Meta pixel — only with consent

If you allow the «Marketing» category, we load the Meta pixel from Meta Platforms Ireland Limited, Dublin, Ireland. It measures which ad led to an enquiry.

For collection and transmission we and Meta are joint controllers (Art. 26 GDPR). Data may reach the USA; Meta Platforms Inc. is certified under the EU-US Data Privacy Framework. Without your consent the pixel is not loaded.

Booking via the Telegram mini-app

If you book through the mini-app, you pass us your name, your phone number and — if filled in — a comment. Inside Telegram your first name and your Telegram account ID are added, so that we can send you the confirmation.

We store this in a database on our own server and send the request to our work chat on Telegram, where Tagan confirms or declines it. Legal basis: Art. 6(1)(b) GDPR — preparing and carrying out the appointment.

Specifically: name, phone number and comment are removed automatically twelve months after the appointment. Date, service and amount remain without any link to a person — tax law requires us to keep them. We delete earlier on request.

Booking via WhatsApp

A click on «Book via WhatsApp» opens WhatsApp with a prepared text — you send it yourself.

Once you write, WhatsApp Ireland Limited processes the message under its own terms. We keep the chat and your number only as long as needed for appointments and delete them on request. Legal basis: Art. 6(1)(b) GDPR.

WhatsApp assistant on +49 163 3938195

Messages to the WhatsApp number +49 163 3938195 are answered by a digital assistant — an AI system, not a person. It says so in its very first message (Art. 50 EU AI Act). The assistant answers questions and books, reschedules or cancels appointments with Tagan. For WhatsApp itself, what is written above under «Booking via WhatsApp» applies.

Menu replies by number («1», «2» …) are handled by the assistant itself. If you write in your own words, the text of your message, the conversation so far and the first name you gave are sent to an AI language model. The request goes through the service OpenRouter (OpenRouter, Inc., USA), which forwards it to a model provider. We only allow providers that, by their own account, do not store inputs (zero data retention). OpenRouter and the model providers are mostly based in the USA, so your messages are transferred there — to a country where the level of data protection does not always match that of the EU.

Legal basis: Art. 6(1)(b) GDPR where booking, rescheduling or cancelling an appointment is concerned, and Art. 6(1)(f) GDPR for answering other enquiries — our legitimate interest in replying quickly, including outside working hours.

In the assistant's database and logs the chat history is kept for no longer than 30 days and then deleted automatically; for the chat in WhatsApp itself, what is said above applies. If the assistant books an appointment, it goes into our calendar and Tagan receives a notification in our work chat on Telegram. This booking data is kept for the same periods as stated above under «Booking via the Telegram mini-app».

You do not have to talk to the AI: just write «human» or that you would like to speak to Tagan in person — and he will reply himself.

The calendar on the site

The calendar shows free times from a file on our server. Which time you click is counted without any personal reference. No booking is created by this.

Fonts, images, maps

Fonts, images and scripts are hosted on our own server — simply reading the page transfers your IP address to no third party. Links to Google Maps and Instagram are ordinary links: data flows only if you click them.

This site as an app

The website can be installed as an app. Your browser then stores pages and images locally so they work offline, and optionally remembers your next appointment. This data stays on your device and is not transmitted to us.

Your rights

You have the right of access (Art. 15), rectification (16), erasure (17), restriction (18), data portability (20) and objection to processing based on legitimate interests (Art. 21 GDPR). Consent can be withdrawn at any time with effect for the future.

The competent supervisory authority is the Berlin Commissioner for Data Protection and Freedom of Information.

Last updated: 2026-09-29