- Catalog
- Services
- About company
- For customers
- Blog
- Contacts
Language and delivery country
English · United States
Last updated: 5 September 2026. This English text is a translation provided for convenience. In the event of discrepancies, the German version prevails.
The controller for the processing of personal data on this website is:
TTT HealthCare GmbH
Heimat 89
D-14165 Berlin
Germany
E-mail: info@ttt-gmbh.com
Phone: +49 151 15353792
Managing Directors: Arkadi Eliasson, Elena Elson
Commercial register: Amtsgericht Charlottenburg, HRB 174114 B
We have not appointed a data protection officer. In our assessment there is no obligation to do so, because fewer than 20 people in our company are permanently engaged in the automated processing of personal data (Art. 37 GDPR, Section 38 BDSG) and none of the other conditions set out there apply. For any data protection matter, please use the contact details above.
We process personal data only where this is necessary for a specific purpose and a legal basis exists. We do not sell your data. Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.
Audience measurement only takes place with your consent. Until you agree in the consent banner, no analytics service is loaded and no connection to Google or Yandex is established. We do not use advertising services, the Meta pixel, Hotjar or comparable tools at all. Details in section 11.
When you visit our website, your browser transmits technically necessary data to our server. We process:
This data is technically required to deliver the pages and additionally serves the stability and security of our systems. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the trouble-free and secure operation of the website.
Retention: 14 days, after which the log files are deleted automatically. This data is not combined with other sources.
From these log files we additionally produce our own aggregated statistics (number of page views, countries of origin, language used, search engines as a source). These statistics are produced exclusively on our own server, contain no IP addresses and do not permit any conclusions about individual persons. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is to be able to assess the operation of our website without involving third parties.
Our website is operated at OVH SAS, 2 rue Kellermann, 59100 Roubaix, France. The servers used are located in a data centre in Frankfurt am Main, Germany. No transfer to a third country takes place in this respect.
OVH processes the data exclusively on our behalf and on our instructions, on the basis of a data processing agreement pursuant to Art. 28 GDPR. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a professionally operated web presence) and, where the website serves the initiation and performance of a contract, Art. 6 (1) (b) GDPR.
Without your consent we only use cookies that are strictly necessary for the service you have expressly requested (Section 25 (2) no. 2 TDDDG). Cookies for analytics purposes are added only once you have agreed in the consent banner (Section 25 (1) TDDDG); details in section 11.
| Name | Purpose | Content | Retention |
|---|---|---|---|
heine_consent | Remembers your decision in the consent banner so that we do not ask again on every page | all or necessary | 12 months |
heine_country | Remembers the country you selected so that prices are shown correctly with or without VAT | two-letter country code, e.g. DE | 12 months |
| Session cookie of the Joomla content management system | Assigns your requests to a session; without it the shopping cart does not work | random session identifier | end of session |
None of these three cookies contains an identifier that would allow your device or your person to be
recognised beyond our website. The heine_country cookie is not set
automatically; it is created only when you operate the country selector yourself. The legal
basis for the subsequent processing of this value is Art. 6 (1) (b) GDPR, since showing the correct
price is part of initiating a contract.
If the cookie is not set, we determine the country from your IP address. This happens exclusively on our own server using a locally stored database; your IP address is neither transmitted to third parties nor stored for this purpose. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is to show you the price applicable to you from the outset.
You can delete cookies in your browser at any time or restrict their storage. If
heine_country is deleted, server-side country detection applies again. If
heine_consent is deleted, we will ask you again, and no analytics service is loaded
until you answer.
When you place an order, we process:
The legal basis for processing order data is Art. 6 (1) (b) GDPR (pre-contractual measures and performance of the contract). We process the IP address not to perform the contract but to prevent abusive orders; the legal basis for this is Art. 6 (1) (f) GDPR. It is stored as part of the order record and deleted together with it.
Retention of order data: orders and order confirmations are commercial letters within the meaning of Section 257 (1) nos. 2 and 3 HGB and are retained for six years from the end of the calendar year in which the order was received. Invoices and other accounting records are retained for eight years (Section 147 (3) AO, Section 257 (4) HGB). The legal basis for this further storage is Art. 6 (1) (c) GDPR. During the retention period, processing is limited to these statutory purposes.
You can send us an enquiry using the forms on our website. In doing so we process:
The legal basis is Art. 6 (1) (b) GDPR where your enquiry is aimed at concluding a contract, and otherwise Art. 6 (1) (f) GDPR; our legitimate interest lies in answering your request. We process the IP address and the originating page exclusively to prevent automated form abuse; the legal basis for this is Art. 6 (1) (f) GDPR.
We retain enquiries for as long as this is necessary to handle them and to deal with follow-up questions. If your enquiry leads to a contract, the commercial and tax retention periods in section 6 apply. You may request deletion at any time (section 13).
We send confirmations and notifications via the Brevo service of Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France. The sender address is no-reply@not-heine.com. Processing takes place within the European Union. Brevo processes the data exclusively on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. The legal basis is Art. 6 (1) (b) GDPR where the e-mail serves the performance of the contract, otherwise Art. 6 (1) (f) GDPR.
To protect our forms against abusive automated use we use Cloudflare Turnstile, a service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.
The script from challenges.cloudflare.com is loaded only on pages that contain a
form, and even there only when you open the form. On all other pages there is no connection
to Cloudflare. Your IP address, technical details of your browser and characteristics of your usage
behaviour are transmitted and evaluated by Cloudflare in order to distinguish human users from
automated access. In the configuration we use, Turnstile does not set recognition cookies and is not
used by us to analyse your behaviour.
The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in preventing spam and automated attacks on our forms. Where information on your device is accessed, this is strictly necessary under Section 25 (2) no. 2 TDDDG in order to provide the form function you requested securely.
Cloudflare also processes data in the United States. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework; by its adequacy decision of 10 July 2023 the European Commission determined that certified companies in the USA provide an adequate level of protection. In addition, we have agreed standard contractual clauses with Cloudflare pursuant to Art. 46 (2) (c) GDPR.
Further information: https://www.cloudflare.com/privacypolicy/
On individual pages we offer videos stored on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; for processing in the USA, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA is responsible.
The preview images are stored on our own server. The video itself is loaded only when you
click the preview image. Before that there is no connection to YouTube and none to other
Google services. By clicking you consent to the connection being established. In doing so, your IP
address, details of your browser and device and the address of the page on which you started the
video are transmitted to Google in particular. If you are logged in to Google at the same time,
Google can assign playback to your account. We use the more privacy-friendly
youtube-nocookie.com variant. We have no influence on the scope and purpose of the
processing by Google.
The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and, where information on your device is accessed, Section 25 (1) TDDDG. You may withdraw your consent at any time with effect for the future by not starting any further videos; the lawfulness of processing carried out until withdrawal remains unaffected.
Google LLC is certified under the EU-U.S. Data Privacy Framework. The transfer is based on the European Commission's adequacy decision of 10 July 2023 and, in addition, on standard contractual clauses pursuant to Art. 46 (2) (c) GDPR.
Google privacy policy: https://policies.google.com/privacy
To understand how our website is used, we would like to use analytics services. These are loaded only after your consent. On your first visit we ask you in a banner; if you choose "Necessary only" or do not answer, no analytics service is loaded and no connection to the providers named below is established.
The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. You may
withdraw your consent at any time with effect for the future by deleting the
heine_consent cookie in your browser; we will then ask you again. The lawfulness of
processing carried out until withdrawal remains unaffected.
The provider is Yandex Oy, Moreenikatu 6, 04600 Mäntsälä, Finland; processing also takes place through affiliated companies in the Russian Federation. We process in particular your IP address, details of your browser and device, the pages visited, time spent, clicks and the page from which you came to us. Session recording ("Webvisor") is switched off.
There is no adequacy decision of the European Commission for the Russian Federation. A level of protection equivalent to European law cannot be guaranteed there; in particular, state authorities may access the data without effective legal remedies being available to you. The transfer therefore takes place exclusively on the basis of your explicit consent pursuant to Art. 49 (1) (a) GDPR, which you give in the knowledge of these risks.
Provider's privacy information: https://yandex.com/legal/confidential/
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; for processing in the USA, Google LLC is responsible. We process in particular your truncated IP address, details of your browser and device, the pages visited and the source of your visit. Google LLC is certified under the EU-U.S. Data Privacy Framework; the transfer is based on the adequacy decision of 10 July 2023 and, in addition, on standard contractual clauses pursuant to Art. 46 (2) (c) GDPR.
Google privacy policy: https://policies.google.com/privacy
On individual pages you will find links to WhatsApp and Telegram. These are simple links; no content from these providers is loaded and no data is transmitted to them as long as you do not click the link. If you click the link, you leave our website; from that point the privacy policy of the respective provider applies. We do not operate social media plug-ins or buttons that transmit data in the background.
We pass on your data only where this is necessary:
Data is not passed on for advertising purposes.
The following processing operations are prepared but not yet active. We list them here so that you know in advance what will change when they are activated. Before they start we will update this privacy policy and change the date in the header.
Payment processing via Mollie. As soon as we offer online payments, we will handle them through Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands. Your name, the invoice amount, an order identifier and the payment method you chose will then be transmitted. You enter payment data such as card or account numbers directly with Mollie; we do not receive them. The legal basis is Art. 6 (1) (b) GDPR. Processing takes place within the European Union.
Verification of VAT identification numbers (VIES). For supplies to businesses in other EU member states we must verify the VAT identification number you provide in order to apply the exemption. The number is transmitted for this purpose to the European Commission's VAT Information Exchange System (VIES), together with the company name. The legal basis is Art. 6 (1) (c) GDPR in conjunction with Sections 18e and 6a UStG. We retain the result of the query as evidence together with the accounting record.
Customer account. We plan to introduce a customer account with registration. As soon as it is available, we will add the data processed, the legal basis and the deletion periods here.
You have the following rights in relation to us:
Right to object under Art. 21 GDPR: where we process data on the basis of our legitimate interest under Art. 6 (1) (f) GDPR — this concerns in particular the server log files, country detection, form protection and the IP addresses in orders and enquiries — you have the right to object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
How to exercise your rights: an informal message to info@ttt-gmbh.com or to the postal address above is sufficient. We reply without undue delay and at the latest within one month of receipt. If your request is extensive, we may extend this period by up to two further months and will inform you of this within the first month, stating the reasons. In order not to disclose your data to unauthorised persons, we may request additional information necessary to identify you; we limit ourselves to what is necessary and do not request a copy of your ID if identification is possible in another way. Handling your request is free of charge.
Please note: backups are not deleted immediately for technical reasons. Following a deletion request we remove your data from live operation and block it in existing backups against any further processing; it disappears permanently at the end of the respective backup cycle.
Competent supervisory authority:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin, Germany
Phone: +49 30 13889-0
E-mail: mailbox@datenschutz-berlin.de
You may also contact the supervisory authority of your place of residence or work.
Providing your data is neither required by law nor by contract. However, without the information marked as required in the order form we cannot conclude a contract with you or execute your order.
We adapt this policy when the processing changes or the legal situation requires it. The version published on this page at the relevant time applies; the date of the last change is shown above.
Product successfully added to cart
Go to cart