Data Protection

Scope

This privacy policy applies exclusively to the use of this website (imed22.at). It does not govern data processing in our practice (Ordination) in the context of medical treatment or practice administration. Separate information provided by the practice applies to those matters.

Visiting this website does not collect any personal data. Consent to data processing is only required if you actively contact us via an online form.

Controller

The controller for data processing related to this website is:

Robl & Partner Gruppenpraxis für Innere Medizin OG
Stadlauer Str. 62/6
1220 Wien
E-Mail: office@imed22.at
Telefon: +43 1 336 33 22

Further information can be found in the Impressum.

Data Protection Officer

Mag. Elke Niedermayr
E-Mail: office@imed22.at

Online Forms

On this website you can contact us via the following forms:

• Contact form — name, e-mail address, optional telephone number, message
• Callback service — name, e-mail address, telephone number, message
• Prescription pre-order — name, social security number, optional telephone number and e-mail address, medication details, optional message

Purpose: Processing your request and communicating with you by e-mail.

Legal basis: Your consent pursuant to Art. 6 Abs. 1 lit. a GDPR, which you give by ticking the consent field when submitting the respective form. For prescription pre-orders we also process health data (e.g. medication details, social security number) based on your explicit consent pursuant to Art. 9 Abs. 2 lit. a GDPR in conjunction with Art. 6 Abs. 1 lit. a GDPR.

Storage on the website: Your form entries are not stored in a database on this website. After submission they are transmitted exclusively electronically to the practice.

Transmission: The transfer from the browser to the website is encrypted (HTTPS/TLS). Forwarding to the practice is done via encrypted e-mail. Further processing of your request (e.g. reading, replying, internal forwarding to colleagues, storage in the e-mail inbox) is carried out by the practice as the controller and is subject to the practice's internal rules — not to the technical operation of this website.

Withdrawal: You may withdraw your consent at any time with effect for the future (e.g. by e-mail to office@imed22.at). The lawfulness of processing carried out up to the withdrawal remains unaffected.

Note: Please do not transmit data that are not necessary for handling your request. Confidential medical information should only be transmitted if you consciously choose to do so.

Spam Protection (ALTCHA)

To protect against automated requests, we use ALTCHA on our forms — a self-hosted spam protection based on a computational challenge in the browser. No cookies are set and no data are transmitted to third parties. The verification is performed on our server.

Legal basis: Legitimate interest pursuant to Art. 6 Abs. 1 lit. f GDPR in the security and uninterrupted operation of our website.

Server Log Files

When this website is accessed, technical access data are automatically collected by the web server and stored in log files. These may include: browser type and version, operating system used, referrer URL, hostname of the accessing computer, time of the server request and IP address.

These data are not merged with other data sources. Identification of specific persons is generally not possible. We analyze the data to ensure the operation of the website and to be able to respond in case of attacks or misuse.

Legal basis: Legitimate interest pursuant to Art. 6 Abs. 1 lit. f GDPR in the security and technical operation of the website.

Storage period: Log files are retained only as long as necessary for the purposes mentioned and are then deleted or anonymized.

Cookies

This website uses no tracking or marketing cookies and no analytics tools.

Only technically necessary cookies are used:

• Session cookie (SULUSESSID) — for the basic functionality of the website (e.g. displaying confirmation messages after form submission)
• CSRF cookies — short-lived, to protect forms against unauthorized submissions from other websites

These cookies are required for the operation of the website. Consent is not required for them under applicable law. You can configure your browser to reject cookies; in that case the functionality of the website may be limited (in particular forms).

SSL/TLS Encryption

This website uses SSL/TLS encryption for security reasons. You can recognize an encrypted connection by the address bar in the browser starting with https:// and by a padlock symbol being displayed.

External Links

Our website contains links to external websites (e.g. Google Maps, Facebook). By clicking such a link you leave our website. The operators of the linked sites are solely responsible for data processing on those sites. We have no influence on their content and privacy practices.

Processors

To provide and operate this website technically, we use the following service providers who process personal data on our behalf:

• Klemens Ullmann-Marx Einzelunternehmen (ull.at), Oldenburggasse 62i, 1230 Wien — technical operation, maintenance and development of the website. The server is operated by ull.at; ull.at has no access to the practice's e-mail inboxes.
• Hetzner Online GmbH — hosting infrastructure (data center in the EU), as a sub-processor of ull.at
• OVH — sending of the form e-mails from the website to the practice (SMTP), solely for delivery; no access to the contents of the practice's mailboxes by the website operator

We have concluded or will conclude the legally required agreements for order processing (data processing agreements) with all processors.

Your Rights

Under applicable law you have the following rights with regard to your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR), to the extent applicable
• Right to object to processing (Art. 21 GDPR), insofar as processing is based on legitimate interest
• Right to withdraw given consents (Art. 7 Abs. 3 GDPR) with effect for the future

To exercise your rights, contact office@imed22.at or our data protection officer.

Right to Lodge a Complaint

You have the right to lodge a complaint with the competent supervisory authority:

Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Wien
Telefon: +43 1 52 152-0
E-Mail: dsb@dsb.gv.at
Web: www.dsb.gv.at

Changes

We reserve the right to adapt this privacy policy if the website, the technologies used, or legal requirements change. The current version is available on this page.