Privacy Policy

The protection of your personal data is very important to us. This privacy policy explains how we collect, process, and protect your personal data in accordance with the General Data Protection Regulation (GDPR).

1. Data Controller

2. Types of Data Collected

When you use our website or services, we may collect the following personal data:

• Name and contact details
• Email address and phone number
• Health-related data required for medical consultation or treatment
• Appointment and communication data
• Technical data (IP address, browser type, access time)

3. Purposes of Data Processing

Personal data is processed for the following purposes:

• Provision of medical care and treatment
• Appointment scheduling and communication
• Fulfilment of legal and professional obligations
• Operation, security, and technical functionality of the website

4. Legal Basis for Processing

Data processing is carried out on the following legal bases:

• Art. 6(1)(b) GDPR – performance of a contract
• Art. 6(1)(c) GDPR – compliance with legal obligations
• Art. 9(2)(h) GDPR – processing of health data for medical diagnosis and treatment
• Art. 6(1)(a) GDPR – consent (web analytics)

5. Data Transmission and Data Recipients

Health-related data is transmitted exclusively via secure communication channels and processed in accordance with medical confidentiality obligations.

6. Data Retention

Personal data is stored only for as long as necessary to fulfil the respective purposes or as required by law. Medical documentation is retained for at least 10 years from the last patient contact in accordance with § 51 (3) of the Austrian Medical Act.

7. Your Rights

Under the GDPR, you have the following rights:

• Right of access to your personal data
• Right to rectification
• Right to erasure ("right to be forgotten"), where legally permissible
• Right to restriction of processing
• Right to data portability
• Right to object to data processing

To exercise your rights, please contact ordination@drvyrva.com.

8. Right to Lodge a Complaint

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with the competent supervisory authority:

9. Cookies

Technically necessary cookies (language setting, cookie consent) are always set; they contain no personal data and are stored locally in your browser. Analytics cookies (Google Analytics, see the following section) are set only after your explicit consent.

10. Google Analytics

With your consent we use Google Analytics 4 (GA4) to analyse website use and improve our services. GA4 collects anonymised data on page visits and user interactions. IP addresses are anonymised before processing in accordance with GDPR requirements. Processing is carried out by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; data may be transferred to Google LLC in the USA on the basis of the EU-US Data Privacy Framework. You can withdraw your consent at any time via the “Cookie settings” link in the footer. Further information is available in Google's privacy policy: https://policies.google.com/privacy Google Analytics runs in Google Consent Mode v2: when the page loads, analytics_storage, ad_storage, ad_user_data and ad_personalization are set to “denied”, and the Google script (gtag.js) is loaded only once you click “Accept” in the banner. If you decline, no Google script is loaded and no analytics cookie is set. Your choice is stored locally in your browser under “cookie-consent” (value granted or denied) together with a timestamp.

11. Appointment booking via Dr. Wait

Appointments in the public-insurance practice are organised with the Dr. Wait app (Dr. Wait GmbH, drwait.de). If you book through Dr. Wait, the data you enter there — in particular your name, telephone number and appointment details — is transmitted to the app operator as a recipient and processed there for appointment organisation. The legal basis for your name, telephone number and appointment details is Art. 6(1)(b) GDPR (pre-contractual measures). Where health-related notes are transmitted as an exception, that processing is additionally based on Art. 9(2)(h) GDPR (health care and treatment). The Dr. Wait privacy policy applies in addition: https://drwait.de/datenschutz

12. Language Version

This website is available in multiple language versions. In case of discrepancies between language versions, the German version shall prevail.

13. Contact

If you have any questions regarding data protection or the processing of your personal data, please contact: ordination@drvyrva.com