Legal

Privacy policy

Version 1.9 · As of 23 October 2026

The protection of your personal data is important to us. Below, in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR), we inform you about which personal data we process when you visit our online shop and place an order, for what purposes and on what legal basis this is done, and what rights you have.

1. Controller

The controller within the meaning of the GDPR is:

Fortis Medical GmbH
Erlhofer Straße 61, 95032 Hof, Germany
Business and shipping address: Fuhrmannstraße 11, 95030 Hof, Germany
Represented by the Managing Director Sinem Kamalak
Email: info@tremove.eu

For all questions about data protection and the exercise of your rights, you can contact us at info@tremove.eu or at the address above. A data protection officer is not required by law for our company (Art. 37 GDPR, Section 38 BDSG) and has therefore not been appointed.

2. Principles of processing

We only process personal data insofar as this is necessary to provide our online shop, to process orders and enquiries or due to legal obligations, or if you have given your consent. The relevant legal bases are in particular:

• Art. 6(1)(a) GDPR – consent
• Art. 6(1)(b) GDPR – performance of a contract or pre-contractual measures
• Art. 6(1)(c) GDPR – compliance with legal obligations (e.g. retention obligations under commercial and tax law)
• Art. 6(1)(f) GDPR – legitimate interests
• Section 25(1) and (2) TDDDG – storage of and access to information on your device (cookies)

We do not carry out automated decision-making, including profiling, within the meaning of Art. 22 GDPR. For the credit check by Klarna, see section 8.

3. Provision of the online shop (Shopify)

Our online shop is operated on the e-commerce platform Shopify. The provider for merchants in the European Economic Area is Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). Shopify provides the technical infrastructure, stores the shop content and processes on our behalf the data arising from an order, an account login or an enquiry. Shopify also sends the automatic shop emails on our behalf (e.g. order confirmation, shipping confirmation with tracking link, access code for the partner login).

When the shop is accessed, technically necessary information transmitted by your browser is processed (including IP address, date and time of access, page accessed, browser type and operating system). This is necessary to deliver the website, for stability and to prevent misuse. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and functional operation of the shop.

A data processing agreement in accordance with Art. 28 GDPR has been concluded with Shopify. Shopify may also transfer data to Shopify Inc. (Canada) and to service providers in the USA; see section 15. Further information: Shopify privacy policy.

Shopify Network Intelligence: Shopify also uses data from orders and from the use of our shop (e.g. contact details, order and device information) under its own responsibility, combining it with data from other Shopify shops in order to improve its own products and services, the targeting of advertising and the personalisation of shopping experiences. Other merchants do not gain access to your data. Shopify is solely responsible for this processing; we share the data on the basis of our legitimate interest in using the full functions of the Shopify platform (Art. 6(1)(f) GDPR). You can object to this processing at any time (see section 18), contact Shopify directly and exercise your rights via the Shopify privacy portal.

4. Cookies and consent management

Technically necessary cookies: our shop uses cookies and similar technologies that are strictly necessary for its operation, for example to store the contents of your shopping cart, to carry out the ordering process, to maintain your login to the partner area, to ensure security and to store your cookie selection. The legal basis is Section 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(b) and (f) GDPR.

Statistics (Shopify analytics): only if you give your consent via our cookie banner do we use Shopify's analytics functions to record, in aggregated form, how our shop is used (e.g. pages viewed, length of visit, referring page, device type). The legal basis is your consent pursuant to Section 25(1) TDDDG and Art. 6(1)(a) GDPR.

TikTok Pixel (measuring advertising success): only if you consent to the “Marketing” category via our cookie banner do we use the TikTok Pixel of TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (“TikTok”), on our website. This allows us to measure whether visitors reach us via our content or ads on TikTok and which actions they take in our shop (e.g. viewing a product page, adding to cart, completing an order), and to optimise our advertising on TikTok accordingly. In particular, your IP address, device and browser information, cookie identifiers, the pages viewed and the time and type of action are transmitted to TikTok. We only use the standard data sharing via the pixel; we do not use advanced matching, in which contact data such as email address or telephone number (including in encrypted form) is transmitted to TikTok. We are jointly responsible with TikTok for the collection and transmission of the data to TikTok (Art. 26 GDPR); further processing is carried out by TikTok under its own responsibility. The legal basis is your consent pursuant to Section 25(1) TDDDG and Art. 6(1)(a) GDPR. For transfers to third countries, see section 15. Further information can be found in TikTok’s privacy policy.

Meta Pixel (measuring advertising success): only if you consent to the “Marketing” category via our cookie banner do we use the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”), on our website. It is integrated via the Shopify app “Facebook & Instagram”. This allows us to measure whether visitors reach us via our content or ads on Facebook or Instagram and which actions they take in our shop (e.g. viewing a product page, adding to cart, completing an order), and to optimise our advertising on Facebook and Instagram accordingly. In particular, your IP address, device and browser information, cookie identifiers, the pages viewed and the time and type of action are transmitted to Meta. We only use the standard data sharing via the pixel; we do not use advanced matching or the Conversions API, which would transmit contact data such as your e-mail address or telephone number (even in hashed form) to Meta. We are jointly responsible with Meta for the collection and transmission of data to Meta (Art. 26 GDPR); further processing is carried out by Meta under its own responsibility. The legal basis is your consent pursuant to section 25(1) TDDDG and Art. 6(1)(a) GDPR. For transfers to third countries, see section 15. Further information can be found in Meta’s privacy policy (facebook.com/privacy/policy).

Google Analytics (statistics): only if you consent to the “Statistics” or “Analytics” category via our cookie banner do we use Google Analytics 4 of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). It is integrated via the Shopify app “Google & YouTube”. Google Analytics records how visitors use our shop (e.g. pages viewed, length of visit, referring page, device type, approximate location and completed purchases). For this purpose, cookies or similar technologies are stored on your device. Google Analytics 4 does not store IP addresses. Google processes the data as our processor (Art. 28 GDPR). The legal basis is your consent pursuant to Section 25(1) TDDDG and Art. 6(1)(a) GDPR. For the storage period, see section 16; for transfers to third countries, see section 15.

Google conversion measurement (marketing): only if you consent to the “Marketing” category via our cookie banner do we additionally use Google Ads conversion tracking (Google tag). This allows us to measure whether visitors reach us via Google services such as Google Search, Google Shopping or YouTube and complete an order. In particular, online identifiers, device and browser information, the pages viewed and the time and type of action are transmitted to Google. We do not use advanced matching, in which contact data such as email address or telephone number (including in encrypted form) is transmitted to Google (“enhanced conversions”). The legal basis is your consent pursuant to Section 25(1) TDDDG and Art. 6(1)(a) GDPR. Further information can be found in Google’s privacy policy (policies.google.com/privacy).

No other third-party advertising or tracking services: beyond this, we currently do not use any other third-party analytics or advertising services on our website. For Shopify's own use of data ("Shopify Network Intelligence"), see section 3. Should this change, such services will only be used after your prior consent, and this privacy policy will be supplemented accordingly beforehand.

You can withdraw or change your consent at any time with effect for the future by opening the cookie settings via the "Cookie settings" link in the footer of our shop. The lawfulness of the processing carried out until withdrawal remains unaffected.

5. Orders and contract processing

To process your order, we process the following data: first and last name, company name if applicable, billing and delivery address, email address, telephone number, items and quantities ordered, prices, selected payment and shipping method and information on the order history (e.g. shipping, return, warranty claim including the serial number of your product).

The purpose is the conclusion and performance of the purchase contract, including invoicing, delivery, customer communication about the order and the handling of withdrawal, legal guarantee and warranty. The legal basis is Art. 6(1)(b) GDPR. Invoices and accounting records are retained on the basis of legal obligations (Art. 6(1)(c) GDPR in conjunction with Section 147 AO and Section 257 HGB).

The details marked as mandatory in the order form are required for the conclusion of the contract. Without them we cannot accept and execute your order. Further details are voluntary.

We send our shipping and order confirmations, including the tracking link, ourselves via our shop system. It is not necessary to transfer your email address to shipping service providers for this purpose, and we do not do so.

Orders via TikTok Shop: if you buy our product via TikTok Shop, the ordering process and payment take place on TikTok’s platform. TikTok is independently responsible for the data processing there; TikTok’s privacy provisions apply. We receive from TikTok the data required to perform the contract (in particular name, delivery address and items ordered) and process it as described in this section and in sections 7 and 13. The legal basis is Art. 6(1)(b) GDPR.

6. Telephone number

Providing your telephone number is mandatory in the ordering process and in the contact form. We use it exclusively to reach you quickly if there are questions about the delivery of your parcel (e.g. if the delivery address is unclear or incomplete or the parcel cannot be delivered) and for questions in connection with customs clearance for deliveries to European countries outside the European Union (currently Switzerland, the United Kingdom and Liechtenstein). For enquiries via the contact form, we use it to respond to your request if clarification by telephone is appropriate.

The legal basis is Art. 6(1)(b) GDPR; in addition, we have a legitimate interest in the smooth delivery of high-quality medical devices (Art. 6(1)(f) GDPR). We do not use your telephone number for advertising purposes and do not pass it on to shipping service providers.

7. Shipping

We commission DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany, to deliver our parcels. For this purpose, we transfer only your name and delivery address, insofar as this is necessary for delivery (Art. 6(1)(b) GDPR). We do not transfer your email address or telephone number to DHL.

For deliveries to Switzerland, the United Kingdom and Liechtenstein, legally required customs information is necessary for export and import processing (name and address of the recipient as well as description, value and origin of the goods). This information is transferred to DHL and the competent customs authorities. The legal basis is Art. 6(1)(b) and (c) GDPR.

8. Payment processing

Depending on the payment method you choose, payment is processed via the following payment service providers. We transfer to them the data required for payment (in particular name, address, email address, order amount and order number). Your full card or account details are collected directly by the respective payment service provider; they are not stored by us. The legal basis is Art. 6(1)(b) GDPR; the payment service providers are also legally obliged to prevent fraud and money laundering (Art. 6(1)(c) GDPR).

• Credit and debit cards (Visa, Mastercard, American Express, Maestro), Apple Pay, Google Pay and Shop Pay via Shopify Payments: processing is carried out by Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. When using Apple Pay or Google Pay, the privacy policies of Apple Distribution International Ltd., Hollyhill Industrial Estate, Cork, Ireland, or Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, also apply. When using Shop Pay, Shopify's privacy provisions for Shop Pay also apply.
• PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. When paying with PayPal, you will be redirected to PayPal. PayPal privacy policy.
• Klarna (instant payment via online banking, direct debit, purchase on invoice, instalment purchase): Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. With instant payment via online banking, you will be redirected to log in to your bank; your login details are exchanged exclusively between you, Klarna and your bank and are not transmitted to us. For the payment methods invoice and instalment purchase, Klarna carries out an identity and credit check to protect legitimate interests and to avoid payment defaults and may obtain information from credit agencies for this purpose. On the basis of this check, Klarna decides whether the selected payment method can be offered to you (automated decision within the meaning of Art. 22(2)(a) GDPR). You have the right to express your point of view to Klarna, to contest the decision and to obtain human intervention. Klarna processes this data under its own responsibility. Klarna privacy policy.

PayPal, Klarna, Apple and Google process the data partly as independent controllers in accordance with their own privacy policies.

9. Partner login for business customers

Approved retailers and distribution partners can log in via the partner login. For this purpose, we process the company name, company address, VAT identification number, name, email address and telephone number of the contact persons as well as the order history. Login takes place without a password via a one-time code sent to the stored email address. The legal basis is Art. 6(1)(b) GDPR (performance of the business relationship).

10. Contact form, partner request and email

If you contact us via the contact form, the partner request form or by email, we process the data you provide (e.g. name, company if applicable, industry, address, VAT identification number, email address, telephone number and your message) to process your enquiry and for follow-up questions. The legal basis is Art. 6(1)(b) GDPR insofar as your enquiry relates to a contract or its initiation, and otherwise our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR). For partner requests, we also process the details to check commercial eligibility.

Messages from the forms are transmitted to our email inbox via Shopify. Our email inboxes are operated by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, as a processor (Art. 28 GDPR).

11. Online withdrawal function ("Withdraw from contract")

Consumers can use the legally required online withdrawal function in our shop (Section 356a BGB). If you declare a withdrawal using the "Withdraw from contract" button, we process your name, the order number, your email address, the scope of the withdrawal, any voluntary comment and the date and time of receipt. The purpose is to receive and process your withdrawal and to send you the legally required acknowledgement of receipt by email. The legal basis is Art. 6(1)(c) GDPR in conjunction with Section 356a BGB and Art. 6(1)(b) GDPR (unwinding of the contract).

The function is technically provided via the Shopify app "EU Widerrufs-Button & Formular" by 401layers UG (haftungsbeschränkt), Dorothea-Erx.-Str. 1a, 40721 Hilden, Germany, as a processor (Art. 28 GDPR); a data processing agreement has been concluded with the provider. The acknowledgement of receipt is sent by email by the provider on our behalf. Insofar as the provider uses sub-processors outside the European Economic Area for this purpose, this is done on the bases set out in section 15. We store the withdrawal data for the duration of the statutory retention and documentation obligations.

12. Note on health data

Tremove™ is a medical device. When you place an order, we do not collect any information about your health and do not ask for such information. In addition, an order does not allow any conclusion to be drawn about an illness of the person placing the order: relatives, acquaintances or carers often order for another person.

If you voluntarily provide us with information about your health or the health of another person as part of an enquiry, we process it exclusively to respond to your request, in strict confidence and only for as long as necessary for this purpose. The legal basis is your explicit consent pursuant to Art. 9(2)(a) GDPR, which you give by voluntarily providing the information and which you can withdraw at any time with effect for the future. Please only share health data of third parties with us if the person concerned agrees.

13. Inventory management, accounting and tax advice

We transfer order, customer and invoice data to our internal inventory management, customer management and accounting system in order to process deliveries and invoices, handle customer enquiries and warranty claims and fulfil our statutory accounting obligations (Art. 6(1)(b) and (c) GDPR).

We ensure that this data is stored exclusively on servers or in cloud storage within the European Union or the European Economic Area. We only use providers of these systems as processors on the basis of a contract pursuant to Art. 28 GDPR.

To fulfil our obligations under tax and commercial law, we transfer the necessary accounting data to our tax adviser, who is bound by professional secrecy, and, where applicable, to tax authorities (Art. 6(1)(c) GDPR).

14. External links and social media presences

Our shop contains links to external websites, for example to the original publication of the clinical study or to the website of the International Parkinson and Movement Disorder Society. Merely visiting our pages does not transfer any data to these providers. Only when you click on such a link do you leave our shop; the operator of the linked website is solely responsible for data processing on that website. The product videos in our shop are delivered via Shopify's servers; we do not embed third-party video platforms.

Our Facebook and Instagram presences: we operate a Facebook page (“Tremove”) and an Instagram profile (“tremove.official”). Both services are provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). When you visit or interact with these presences (e.g. by following, liking, commenting or sending messages), Meta processes your data in accordance with its own terms, even if you do not have a Facebook or Instagram account yourself.

Meta provides us with aggregated statistics on our presences (“Page Insights”), e.g. on reach, interactions and demographic characteristics of visitors. We cannot identify individual persons from these. We are jointly responsible with Meta for the processing in connection with Page Insights (Art. 26 GDPR). In an agreement on joint controllership, Meta has undertaken to assume primary responsibility for this processing, to provide you with the information under Art. 13 GDPR and to fulfil your data subject rights; the essential content can be found in Meta’s Page Insights Controller Addendum (facebook.com/legal/terms/page_controller_addendum). You may also exercise your rights against us; we will then forward your request to Meta. The legal basis for operating our presences is our legitimate interest in up-to-date public relations and communication with prospective and existing customers (Art. 6(1)(f) GDPR).

If you send us a message or leave a comment via Facebook or Instagram, we process the content to respond to your request (Art. 6(1)(b) GDPR where your request relates to a contract, otherwise Art. 6(1)(f) GDPR). Please do not share any information about your health or the health of other persons with us via these channels, as Meta may also process such content; please use our contact form or e-mail instead (see section 12). For possible transfers of your data by Meta to the USA, see section 15. Further information can be found in Meta’s privacy policy (facebook.com/privacy/policy) and Instagram’s privacy policy (privacycenter.instagram.com/policy).

15. Transfers to third countries

Personal data is only transferred to countries outside the European Economic Area insofar as this is necessary in connection with the services mentioned above, in particular by Shopify to Shopify Inc. in Canada and to sub-processors in the USA. An adequacy decision of the European Commission exists for Canada. Transfers to the USA are made to companies certified under the EU-US Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023) or on the basis of the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR). Individual payment service providers (section 8) may also transfer data to third countries on these bases. The same applies insofar as the provider of our online withdrawal function (section 11) uses sub-processors in third countries.

If you have consented to the use of Google Analytics or Google conversion measurement (section 4), data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework. If you have consented to the use of the Meta Pixel (section 4) or visit our Facebook or Instagram presences (section 14), data may be transferred to Meta Platforms, Inc. in the USA; Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework. If you have consented to the use of the TikTok Pixel (section 4), TikTok may also transfer the data to companies of the TikTok group and to service providers outside the European Economic Area, in particular to the USA, Singapore and the People’s Republic of China. For countries without an adequacy decision of the European Commission, TikTok bases the transfer on the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR). The same applies to data from orders via TikTok Shop (section 5).

For deliveries to Switzerland, the United Kingdom and Liechtenstein, the data required for delivery and customs clearance (section 7) is transferred to the respective destination country. Adequacy decisions of the European Commission exist for Switzerland and the United Kingdom; Liechtenstein is part of the European Economic Area. Otherwise, the transfer is necessary for the performance of the contract (Art. 49(1)(b) GDPR).

16. Storage period

• Order and contract data: for the duration of contract processing including the legal guarantee and warranty period; thereafter for the duration of the statutory retention obligations (accounting records and invoices currently eight years, commercial and business letters and other tax-relevant documents six or up to ten years pursuant to Section 147 AO and Section 257 HGB).
• Enquiries via contact form, partner request or email: until final processing; we then delete the data unless statutory retention obligations apply or the enquiry results in a business relationship.
• Withdrawal declarations via the online withdrawal function: for the duration of the statutory retention and documentation obligations.
• Partner login: for the duration of the business relationship; after it ends, the login data is deleted and business documents are retained within the statutory periods.
• Technical access data and cookies: according to their function; we store consents to cookies for up to twelve months or until you withdraw them.
• Google Analytics: usage data recorded in Google Analytics is automatically deleted after two months.

17. Your rights

You have the following rights vis-à-vis us with regard to your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to withdraw consent with effect for the future (Art. 7(3) GDPR)

To exercise your rights, an informal message to info@tremove.eu or to our address above is sufficient.

19. Right to lodge a complaint with a supervisory authority

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR). The supervisory authority responsible for us is:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18, 91522 Ansbach, Germany
www.lda.bayern.de

20. Data security

For security reasons, our shop uses SSL/TLS encryption, recognisable by the padlock symbol and "https://" in your browser's address bar. We take appropriate technical and organisational measures to protect your data against loss, manipulation and unauthorised access and continuously adapt these to the state of the art.

21. Updates and changes to this privacy policy

This privacy policy is dated 23 October 2026 (version 1.9). Further development of our shop, the use of new services or changes in legal requirements may make an amendment necessary. You can find the current version on this page at any time.