1. Data controller

Who is responsible for processing

2. Operation of the website

Hosting and server log files

When you access this website, your browser transmits technically necessary data to the web server. These may include your IP address, date and time, page accessed, amount of data transferred, referrer URL, browser type, browser version and operating system.

This processing is necessary to provide the website, ensure its stability and security and detect technical attacks. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website.

The hosting provider processes these data on our behalf. Log data are stored only for as long as necessary for operation and security or as required by law. They are not combined with data from other sources for advertising purposes.

3. Communication

Contact by telephone or email

If you contact us by telephone or email, we process the data you provide in order to respond to your enquiry and, where applicable, prepare an appointment.

The legal basis is Article 6(1)(b) GDPR where processing is required for arranging an appointment, performing a treatment contract or taking pre-contractual steps. For general enquiries, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is responding to your enquiry.

If you provide health data, they are processed for healthcare purposes on the basis of Article 9(2)(h) GDPR and subject to professional confidentiality. Please send sensitive medical documents only by prior arrangement.

The data are deleted once your enquiry has been dealt with, unless statutory retention obligations or requirements arising from the treatment relationship prevent deletion.

4. Appointment booking

Lemniscus

We use Lemniscus, a service provided by pgt technology scouting GmbH, for online appointment booking. The booking form is not loaded automatically on this website. A connection to my.lemniscus.de is established only when you click “Load appointment booking”. In particular, your IP address, browser information and the date and time of access may then be transmitted to Lemniscus.

The external booking form is loaded on the basis of your consent pursuant to Article 6(1)(a) GDPR and, insofar as information is stored on or read from your terminal equipment, Section 25(1) TDDDG. Your decision applies only to the current page view; when you revisit the page, Lemniscus will again be loaded only after another click.

If you subsequently book an appointment, the information you enter is processed for appointment administration. The legal basis is Article 6(1)(b) GDPR. Where health data are provided, Article 9(2)(h) GDPR also applies. Lemniscus processes the data as a processor within the practice management system.

Further information is available in the Privacy policy von Lemniscus.

5. Local and external services

Cookies, analytics and external links

Cookies and audience measurement

Under the current configuration, we do not use analytics or marketing cookies on publicly accessible pages. No external web fonts are loaded and no analytics or advertising service is used. Technically necessary cookies may be used in the protected WordPress administration area, which is not intended for patients.

Maps and other external links

Google Maps, OpenStreetMap, Ruhrbahn, VOD and other external services are included only as links. Simply visiting our website does not establish a connection to these providers. Only when you click a link do you leave our website; the privacy policy of the respective provider then applies.

No automated decision-making

No automated decision-making, including profiling, takes place through this website. Personal data are not sold for advertising purposes.

6. Data subject rights

Your data protection rights

Subject to the statutory requirements, you have in particular the following rights:

• access to the personal data processed about you (Article 15 GDPR),
• rectification of inaccurate data (Article 16 GDPR),
• erasure (Article 17 GDPR),
• restriction of processing (Article 18 GDPR),
• data portability (Article 20 GDPR),
• objection to processing based on Article 6(1)(e) or (f) GDPR (Article 21 GDPR),
• withdrawal of consent with effect for the future (Article 7(3) GDPR).

To exercise your rights, you may contact us using the details above. You also have the right to lodge a complaint with a data protection supervisory authority. For North Rhine-Westphalia, this is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.

7. Updates

Changes to this notice

We update this privacy policy if the website, the services used or the legal requirements change. The version published on this page at the relevant time applies.