Privacy Policy
You have the right to the best possible protection of your personal data. We therefore process your data exclusively in accordance with legal provisions (GDPR, TKG 2021). In this Privacy Policy, we inform you about the most important aspects of data processing in connection with our website.
Privacy Policy
Applies to the website www.pvz17.at · Last updated: 07/26
1. Controller
PVZ 1170 Dr. Böhm, Dr. Brose & Dr.in Radlspöck Allgemeinmedizin GmbH, Bergsteiggasse 36-38/4.1, 1170 Vienna, Austria
Phone: 01/3860333 · Email: ordination@pvz17.at · Company register number: FN 649106 v
2. Data Protection Officer
Mag.a Julia Morgenbesser, who can be reached at ordination@pvz17.at or by post at the address given above.
3. Scope of this policy
This policy relates exclusively to the use of this website. We provide separate information at the practice regarding the processing of your health data in the context of medical treatment.
4. Cookies
This website does not set any cookies.
If you use the “Plan a route (Google Maps)” button, you leave this website and access Google Maps. From that point onwards, Google’s privacy policy applies.
If you use the “Book appointment” button, you leave this website and access the website timesloth.io. From that point onwards, TimeSloth’s privacy policy additionally applies.
5. Server log files
When the website is accessed, the web server automatically logs the following: IP address, date and time of access, the requested address including any parameters transmitted, the method and protocol version used, the status code, the volume of data transferred, the referring page (referrer) as well as the browser and operating system identifier.
This data serves exclusively for the technical operation, stability and security of the website as well as for preventing and investigating abusive access. It is not combined with other data sets, analysed for advertising purposes, or subjected to automated decision-making.
The hosting provider in turn engages sub-processors within the EU or the EEA; the current list is available from the provider.
Legal basis: Art 6(1)(f) GDPR. Retention period: 14 days, followed by automatic deletion. Processor: world4you Internet Services GmbH.
6. Audience measurement with Plausible
We use Plausible Analytics to analyse the use of this website. Plausible does not set cookies, does not create cross-device or cross-site profiles and does not store IP addresses. Only aggregated information is recorded, such as the page visited, referral source, device type, browser and country.
The processor is Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia. Processing takes place on servers within the European Union; no transfer to third countries takes place.
Legal basis: Art 6(1)(f) GDPR (legitimate interest in designing our online offering to meet users’ needs). Retention period: 14 months
7. Forms and enquiries
We process the information you submit via our forms exclusively in order to deal with your request. Transmission is TLS-encrypted.
Depending on the nature of your enquiry, different statutory deletion periods apply.
Please note that unencrypted email is not a secure means of transmission. For matters of a particularly sensitive nature, please contact us by telephone or in person.
8. Online appointment booking
For arranging appointments we operate a booking platform that can be reached via a link on this website. The booking itself takes place on a page belonging to our service provider.
The data processed are your name, your email address, your telephone number, your social insurance number (optional; makes it easier to assign your request unambiguously) and the appointment time you select. The data serves exclusively for appointment management and is deleted automatically once the appointment has passed.
Processor: TimeSloth GmbH, Witzelsbergergasse 8/22, 1150 Vienna, Austria.
Processing takes place on servers in Belgium and Germany. Sub-processors, including providers based in the USA, are engaged for sending the booking confirmation, for error logging and for protecting the infrastructure. The transfer is based on standard data protection clauses pursuant to Art 46(2)(c) GDPR. The current list is available at timesloth.io/sub-auftragsverarbeiter.
9. Recipients and processors
Recipient; Purpose; Place of processing
world4you Internet Services GmbH; Operation of the web server; Austria / EU / EEA)
Plausible Insights OÜ; Audience measurement; Estonia / EU
TimeSloth GmbH; Provision of the appointment booking platform; Belgium and Germany, sub-processors incl. USA
10. Your rights
You have the rights of access, rectification, erasure, restriction of processing, data portability and objection to processing (Art 15 to 21 GDPR). To exercise them, please use the contact details given above or contact our Data Protection Officer.
You also have the right to lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at.
11. Changes
We will amend this policy as soon as the technologies used or the legal situation change. The version published on this page at any given time is the authoritative one.
