Privacy policy

1. Controller

The controller responsible for data processing on this website is:

2. Hosting and server log files

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you visit the website, the server automatically stores information transmitted by your browser (server log files):

• IP address of the requesting device
• Date and time of access
• Page or file requested
• Browser type, operating system and referrer URL

Processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and stable operation of the website. Log files are deleted automatically once the retention period set by the hosting provider expires. We have concluded a data processing agreement with the hosting provider pursuant to Art. 28 GDPR.

3. No cookies, no tracking

This website does not set any cookies and does not use any analytics or tracking services. The font is loaded locally from our own server; no connection is made to Google or any other font provider.

The session storage of your browser (sessionStorage) only records whether the start screen has already been shown and whether you have loaded the map. These entries contain no personal data and are deleted automatically when you close the browser tab. The legal basis is Section 25(2) No. 2 TDDDG.

4. Contacting us

If you contact us by email or phone, we process your details (e.g. your name, contact details and the content of your enquiry) in order to respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a treatment contract, and otherwise Art. 6(1)(f) GDPR. If you share health data with us, we process it in accordance with Art. 9(2)(h) GDPR.

We delete your details once your enquiry has been fully dealt with, unless statutory retention obligations apply. If treatment follows, the information in section 8 applies.

5. Online booking via Doctolib

For online appointment booking, we link to Doctolib (Doctolib GmbH, Mehringdamm 51, 10961 Berlin, Germany). Only when you click one of these links are you taken to the Doctolib website. Doctolib processes the data you enter there on our behalf pursuant to Art. 28 GDPR. For details, please refer to Doctolib’s privacy policy:

www.doctolib.de

6. Maps provided by Google Maps

On the home page, you can display an interactive map from Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map only loads once you click “Load map”; no data is transferred to Google before that. After the click, your IP address and information about your browser in particular are transmitted to Google; Google may also set cookies. A transfer to Google LLC in the USA is possible.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG, which you give by clicking. Your consent applies only to the current visit; you can withdraw it at any time by closing the browser tab. Google LLC is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission is in place. Further information:

policies.google.com/privacy

7. Links to social networks

Our website links to our profiles on Instagram, Facebook and LinkedIn. These are simple links, not embedded plugins: no data is transferred to these networks when you visit our website. Only when you click a link are you taken to the provider’s site, where its own privacy policy applies.

8. Health data during treatment

In the course of treatment, we process health data such as findings, medical prescriptions and treatment records. We do so to perform the treatment contract (Art. 6(1)(b), Art. 9(2)(h) GDPR) and to comply with statutory documentation obligations (Art. 6(1)(c) GDPR). We retain treatment records for at least ten years after the end of treatment (§ 630f German Civil Code).

We only pass on data where this is necessary for billing or treatment, for example to your health insurer or Beihilfe office at your request, or to the doctors treating you, with your consent.

9. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the padlock icon and “https://” in your browser’s address bar.

10. Your rights

You have the following rights at any time:

• Access to your stored data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR), unless retention obligations apply
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interests (Art. 21 GDPR)
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

To exercise your rights, an informal message to the contact details above is sufficient.

11. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

12. Changes to this privacy policy

We update this privacy policy when the website or legal requirements change. The version published here at any given time applies.