Privacy Policy

We take data protection seriously

Protecting your privacy when processing personal data is an important concern for us. When you visit our website, our web servers routinely store the IP address assigned to you by your Internet Service Provider, the website from which you access our website, the pages you visit on our website, as well as the date and duration of your visit. This information is essential for the technical transmission of the website and the secure operation of our servers. These data are not evaluated or analyzed in a personalized manner.

If you send us data via the contact form, this information is stored on our servers as part of our data backup procedures. We use your data exclusively to process your request. Your data will be treated as strictly confidential and will not be disclosed to third parties.

Data Controller

Frauenarztpraxis West
Ziegetsdorfer Str. 113
93051 Regensburg, Germany

Telephone: 0941 41171

Personal Data

Personal data is information relating to you personally. This includes your name, address and email address. You do not need to provide any personal data in order to visit our website. In certain cases, however, we require your name, address and other information in order to provide you with the service you have requested.

The same applies if, at your request, we provide you with informational material or respond to your enquiries. In such cases, we will always inform you accordingly. We only store data that you have provided to us either automatically or voluntarily.

When you use one of our services, we generally collect only the data that is necessary to provide that service. We may ask you for additional information, but providing such information is voluntary. Whenever we process personal data, we do so in order to provide our services to you or to pursue our legitimate commercial purposes.

Contact

When you contact us (e.g. via contact form, email, telephone or social media), we process the information provided by the person making the enquiry to the extent necessary to respond to the enquiry and to carry out any requested actions.

Where contact enquiries arise in connection with contractual or pre-contractual relationships, the processing is carried out for the performance of our contractual obligations or to respond to (pre-)contractual enquiries. In other cases, processing is based on our legitimate interest in responding to enquiries.

  • Categories of data processed:
    Master data (e.g. names, addresses), contact data (e.g. email addresses, telephone numbers), content data (e.g. information entered in online forms).
  • Data subjects:
    Communication partners.
  • Purposes of processing:
    Contact enquiries and communication.
  • Legal bases:
    Performance of a contract and pre-contractual enquiries (Art. 6(1)(b) GDPR), legitimate interests (Art. 6(1)(f) GDPR).

Use of the Online Reception

Our website offers you the opportunity to make use of various services through our online reception. These functions include:

  • Appointment booking: You can book or cancel an appointment with us online by providing your contact details and preferred appointment times.
  • Requesting medical findings: You can request medical findings and medical reports via the website.
  • Requesting a certificate of incapacity for work: You can request a certificate of incapacity for work (sick note) directly from us via the online reception.
  • Requesting a referral: If you require a referral to a specialist, you can request one via the website.
  • Emergency assistance: In urgent situations, an emergency assistance function is available to facilitate rapid communication and support.

Use of these functions is voluntary. In order to process your requests, we collect and process personal data such as your name, contact details, information concerning your request (e.g. appointment preferences or medical documents) and, where necessary, health data and health insurance information.

The processing of this data is carried out exclusively for the purpose of providing the service you have requested pursuant to Art. 6(1)(b) GDPR (initiation and performance of a contract) and, where health data are concerned, on the basis of Art. 9(2)(h) GDPR (processing of health data for the purposes of medical care).

Your data will be treated as strictly confidential and will only be disclosed to third parties where this is necessary to provide the requested service (e.g. to the responsible physician or medical professionals) or where required by law. Data transmission is always carried out via a secure connection (SSL/TLS) in order to protect your data as effectively as possible.

Data collected in connection with the use of the online reception will only be stored for as long as necessary to provide the requested service or as required by statutory retention obligations. You have the right at any time to request information about the personal data stored about you and to request its deletion, provided that there are no statutory retention obligations to the contrary.

Automatically Stored Data

Server Log Files

The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:

  • Date and time of the request
  • Name of the requested file
  • Website from which the file was requested
  • Access status (file transferred, file not found, etc.)
  • Web browser and operating system used
  • Full IP address of the requesting computer
  • Amount of data transferred

This data is not combined with data from other sources. Processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

For reasons of technical security, in particular to defend against attempted attacks on our web server, we temporarily store this data. It is not possible for us to identify individual persons on the basis of this data. After a maximum of seven days, the data is anonymized by shortening the IP address to domain level, so that it is no longer possible to associate the data with an individual user. In anonymized form, the data is also processed for statistical purposes. It is not compared with other data records or disclosed to third parties, even in part.

Cookies

When you visit our website, we may store information on your computer in the form of cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier assigned to a cookie. It consists of a character string that enables websites and servers to associate the cookie with the specific web browser in which it has been stored. This allows websites and servers to distinguish the individual browser of the data subject from other web browsers containing different cookies. A particular web browser can therefore be recognized and identified by means of its unique cookie ID.

By using session cookies, the data controller can provide users of this website with a user-friendly service that would not be possible without the use of cookies. Without your consent, we use only technically necessary cookies on the legal basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.

We use cookies containing personal data to improve our website or for marketing and advertising purposes only with your consent. When you first visit our website, you can voluntarily consent to tracking and analysis via the cookie banner displayed on the website. Where applicable, your data may be disclosed to partners or third-party providers. These cookies are stored only if you have expressly consented to this. The legal basis is then your consent pursuant to Art. 6(1)(a) GDPR.

You can change your cookie settings at any time here:

Matomo

This website uses the open-source web analytics service Matomo. Matomo uses technologies that enable users to be recognized across different pages in order to analyze user behavior (e.g. cookies or device fingerprinting). The information collected by Matomo about the use of this website is stored on our server. The IP address is anonymized before storage.

With the help of Matomo, we are able to collect and analyze data concerning the use of our website by visitors. This allows us, among other things, to determine when particular pages were accessed and from which region visitors accessed our website. We also collect various log files (e.g. IP address, referrer, browsers and operating systems used) and can measure whether our website visitors perform certain actions (e.g. clicks, purchases and similar activities).

The use of this analytics tool is based on the relevant consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information stored on the user’s device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.

When analyzing data with Matomo, we use IP anonymization. Your IP address is shortened before analysis so that it can no longer be clearly attributed to you.

We host Matomo exclusively on our own servers. This means that all analytics data remains with us and is not disclosed to third parties.

Youtube

This website embeds videos from YouTube. The operator of the website is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit one of our webpages on which YouTube is embedded, a connection to YouTube’s servers is established. The YouTube server is informed which of our webpages you have visited.

YouTube may also store various cookies on your device or use comparable technologies to recognize users (e.g. device fingerprinting). In this way, YouTube may obtain information about visitors to this website. This information is used, among other things, to compile video statistics, improve user-friendliness and prevent attempted fraud.

If you are logged into your YouTube account, you enable YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used in the interest of presenting our online services in an appealing manner. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. Where consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information stored on the user’s device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.

Further information on the handling of user data can be found in YouTube’s privacy policy at: https://policies.google.com/privacy?hl=de.

The company is certified under the “EU-U.S. Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards when data is processed in the United States. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

Google Maps

This website uses the mapping service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

In order to use the functions of Google Maps, it is necessary to store your IP address. This information is generally transmitted to a Google server in the United States and stored there. The provider of this website has no influence on this data transmission. When Google Maps is activated, Google may use Google Web Fonts to ensure consistent font display. When Google Maps is accessed, your browser loads the required web fonts into its browser cache in order to display text and fonts correctly.

As consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information stored on the user’s device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.

Data transmission to the United States is based on the European Commission’s Standard Contractual Clauses.

Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

Google is also certified under the Data Privacy Framework Program and therefore meets the requirements for secure data transfers pursuant to the European Commission’s adequacy decision concerning the United States.

Further information on the handling of user data can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

Security

We have implemented technical and administrative security measures to protect your personal data against loss, destruction, manipulation and unauthorized access. All of our employees and service providers working on our behalf are required to comply with applicable data protection laws.

Whenever we collect and process personal data, the data is encrypted before transmission. This means that your data cannot be misused by third parties during transmission. Our security measures are continuously improved, and our privacy policy is regularly reviewed and updated. Please ensure that you are using the most current version.

Rights of Data Subjects

You have the right at any time to obtain information about, correct, delete or restrict the processing of your stored personal data. You also have the right to object to processing, the right to data portability and the right to lodge a complaint in accordance with applicable data protection law.

Right of Access

You may request information from us as to whether and to what extent we process your personal data.

Right to Rectification

If we process personal data that is incomplete or inaccurate, you may request that we correct or complete it at any time.

Right to Erasure

You may request the deletion of your personal data if we process it unlawfully or if the processing disproportionately interferes with your legitimate interests in protecting your data. Please note that there may be reasons preventing immediate deletion, such as statutory retention obligations.

Regardless of whether you exercise your right to erasure, we will delete your data promptly and completely unless there is a contractual or statutory obligation requiring us to retain it.

Right to Restriction of Processing

You may request that we restrict the processing of your personal data if:

  • you dispute the accuracy of the data, for a period enabling us to verify its accuracy;
  • the processing of the data is unlawful, but you refuse its deletion and instead request restriction of its use;
  • we no longer need the data for the intended purpose, but you require it for the establishment, exercise or defense of legal claims; or
  • you have objected to the processing of the data.

Right to Data Portability

You may request that we provide you with the personal data you have provided to us in a structured, commonly used and machine-readable format and that you may transmit this data to another data controller without hindrance from us, provided that:

  • we process the data on the basis of consent that you have given and may withdraw, or for the performance of a contract between us; and
  • the processing is carried out by automated means.

Where technically feasible, you may request that we transmit your data directly to another data controller.

Right to Object

If we process your personal data on the basis of legitimate interests, you may object to this processing at any time. This also applies to profiling based on these provisions.

We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

You may object to the processing of your personal data for the purpose of direct marketing at any time without giving reasons.

Right to Lodge a Complaint

If you believe that we have violated German or European data protection law when processing your personal data, we ask you to contact us so that we can clarify any questions or concerns.

You also have the right to lodge a complaint with the supervisory authority responsible for you, namely the competent state data protection supervisory authority.

If you wish to exercise any of the rights described above against us, please contact our data protection officer. In cases of doubt, we may request additional information to confirm your identity.

Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy if this becomes necessary due to new technologies. Please ensure that you are using the most current version. If fundamental changes are made to this Privacy Policy, we will announce them on our website.

For all enquiries and visitors to our website, our contact details for data protection matters are:

Frauenarztpraxis West
Dr. Andrea Jánky
Ziegetsdorfer Str. 113
93051 Regensburg, Germany

Telephone: 0941 41171