Privacy policy

1. Controller

The controller responsible for data processing on this website is PAN21.com International LLC, 7533 South Center View CT, STE R, West Jordan, UT 84084, USA, represented by Harald Linhart. Email: dsgvo@pan21.com, phone: +49 30 5684450-0.

2. Hosting

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the website, Vercel processes technically necessary data such as your IP address, date and time, the page requested, referrer and browser information (server log files) in order to deliver the website and protect it against misuse. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation). We have concluded a data processing agreement with Vercel; data transfers to the USA are based on the EU Standard Contractual Clauses.

3. Cookies

This website does not set any cookies for analytics or advertising purposes.

4. Visitor counting with PAN21counter

To count page views, we use our own visitor counter PAN21counter (pan21counter.de). It does not set cookies and does not create user profiles. When a page is called up, a shortened hash value that changes daily is generated from the IP address in order to avoid counting the same visitor several times on the same day; the IP address itself is not stored. Individual page views are deleted after three days; after that, only aggregated daily figures remain. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in simple reach measurement).

5. Advertising banners

Advertising banners are delivered via our own ad server ads.pan21.com. For technical reasons, your IP address is processed in order to deliver the banner; no user profiles are created. The legal basis is Art. 6(1)(f) GDPR.

6. Online booking

When you book a treatment online, we process the information you provide (name, optionally email address, phone number and LINE ID, notes) together with the selected treatment, therapist, date and time in order to carry out your booking. The booking data is stored in our database at Supabase (Supabase Inc., USA) on the basis of a data processing agreement and the EU Standard Contractual Clauses. After payment, our staff and the therapist assigned to you receive a booking notification (name, treatment, date and time, and phone number if provided) via the LINE messaging service (LY Corporation). The legal basis is Art. 6(1)(b) GDPR. The data is deleted as soon as it is no longer required and no statutory retention obligations apply.

7. Payments

Card payments are processed via Stripe (Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland). The data required for payment is transmitted to Stripe. If you pay via PromptPay, the payment is processed by our payment service provider Omise (Opn Payments, Thailand). The legal basis is Art. 6(1)(b) GDPR.

8. Fonts

The fonts used on this website are loaded locally from our own server. No connection is made to servers of Google or other font providers.

9. Embedded content

This website displays banners from ffa-links.de, swiss-quality.de and german-quality.net. When these images are loaded, your IP address is transmitted to the respective server for technical reasons.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). You can withdraw any consent you have given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority. Please send your requests to dsgvo@pan21.com.

Status: October 2026