The protection of your personal data is of particular concern to us. We process personal data exclusively on the basis of the statutory provisions (General Data Protection Regulation – GDPR, Austrian Data Protection Act – DSG, Telecommunications Act – TKG 2021). In this privacy policy, we inform you about the most important aspects of data processing on our website www.pvzentrum.at.
Controller within the meaning of the GDPR:
PVE Gesundheitspraxis Josefstadt Dr. Pichler & Dr. Amir Allgemeinmedizin GmbH
Lammgasse 5, 1080 Vienna
Telephone: +43 1 406 06 98
Email: backoffice@pvzentrum.at
The protection of your personal data is of particular concern to us. We process personal data exclusively on the basis of the statutory provisions (General Data Protection Regulation – GDPR, Austrian Data Protection Act – DSG, Telecommunications Act – TKG 2021). In this privacy policy, we inform you about the most important aspects of data processing on our website www.pvzentrum.at.
Controller within the meaning of the GDPR:
PVE Gesundheitspraxis Josefstadt Dr. Pichler & Dr. Amir Allgemeinmedizin GmbH
Lammgasse 5, 1080 Vienna
Telephone: +43 1 406 06 98
Email: backoffice@pvzentrum.at
Contacting us: If you contact us by email, telephone, or via a form, we process the data you provide (e.g. name, email address, telephone number, content of your message) to process the enquiry and for any follow-up questions. The legal basis is the initiation or performance of a contract (Art. 6 para. 1 lit. b GDPR) as well as our legitimate interest in responding to your enquiry (Art. 6 para. 1 lit. f GDPR). As a healthcare facility, we process health data on the basis of Art. 9 para. 2 lit. h GDPR. We do not disclose this data to third parties without your consent; it will be deleted after the statutory retention periods have expired.
Contacting us: If you contact us by email, telephone, or via a form, we process the data you provide (e.g. name, email address, telephone number, content of your message) to process the enquiry and for any follow-up questions. The legal basis is the initiation or performance of a contract (Art. 6 para. 1 lit. b GDPR) as well as our legitimate interest in responding to your enquiry (Art. 6 para. 1 lit. f GDPR). As a healthcare facility, we process health data on the basis of Art. 9 para. 2 lit. h GDPR. We do not disclose this data to third parties without your consent; it will be deleted after the statutory retention periods have expired.
Hosting and Server Log Files
Hosting and Server Log Files
Our website is hosted by Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, Netherlands (Processor in accordance with Art 28 GDPR). When visiting the website, access data is automatically processed in so-called server log files (e.g. IP address, date and time of retrieval, retrieved file, browser type and operating system). This data serves exclusively to ensure trouble-free operation, technical security and the prevention of misuse. The legal basis is our legitimate interest in the secure operation of the website (Art 6 para 1 lit f GDPR). For the rapid delivery of content (images, fonts, scripts), Framer uses content delivery networks (CDNs); in the process, your IP address may be transmitted to CDN servers.
Our website is hosted by Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, Netherlands (Processor in accordance with Art 28 GDPR). When visiting the website, access data is automatically processed in so-called server log files (e.g. IP address, date and time of retrieval, retrieved file, browser type and operating system). This data serves exclusively to ensure trouble-free operation, technical security and the prevention of misuse. The legal basis is our legitimate interest in the secure operation of the website (Art 6 para 1 lit f GDPR). For the rapid delivery of content (images, fonts, scripts), Framer uses content delivery networks (CDNs); in the process, your IP address may be transmitted to CDN servers.
TLS encryption with HTTPS
TLS encryption with HTTPS
We use HTTPS to transmit data securely on the Internet, preventing eavesdropping (data protection by design, Art 25 Para 1 GDPR). By utilizing TLS (Transport Layer Security), an encryption protocol for secure data transmission, the protection of confidential data is ensured. You can recognize the encrypted connection by the padlock symbol in the address bar of your browser and by the use of the https:// schema as part of our internet address.
We use HTTPS to transmit data securely on the Internet, preventing eavesdropping (data protection by design, Art 25 Para 1 GDPR). By utilizing TLS (Transport Layer Security), an encryption protocol for secure data transmission, the protection of confidential data is ensured. You can recognize the encrypted connection by the padlock symbol in the address bar of your browser and by the use of the https:// schema as part of our internet address.
Our website uses cookies and comparable technologies. Cookies are small text files that are stored on your terminal device via the browser. We use technically necessary cookies (e.g. to store your cookie settings or your language selection) on the basis of Section 165 Paragraph 3 TKG 2021 or Article 6 Paragraph 1 lit f GDPR – they are required for the operation of the website and do not cause any damage. All non-essential cookies and technologies are only used if you have given your express consent via our cookie banner (Article 6 Paragraph 1 lit a GDPR). You can withdraw your consent at any time with effect for the future by deleting the cookies in your browser – the banner will appear again on your next visit. The consent is stored for a maximum of 12 months, after which we will ask again.
Our website uses cookies and comparable technologies. Cookies are small text files that are stored on your terminal device via the browser. We use technically necessary cookies (e.g. to store your cookie settings or your language selection) on the basis of Section 165 Paragraph 3 TKG 2021 or Article 6 Paragraph 1 lit f GDPR – they are required for the operation of the website and do not cause any damage. All non-essential cookies and technologies are only used if you have given your express consent via our cookie banner (Article 6 Paragraph 1 lit a GDPR). You can withdraw your consent at any time with effect for the future by deleting the cookies in your browser – the banner will appear again on your next visit. The consent is stored for a maximum of 12 months, after which we will ask again.
Web analytics (Framer Analytics)
Web analytics (Framer Analytics)
We use the privacy-friendly analytics feature of our hosting provider, Framer (Framer B.V., Amsterdam, Netherlands). Framer Analytics works completely without cookies or cross-device tracking; it only generates aggregated, anonymised statistics (such as page views, country of origin, and device type). Your IP address is never permanently stored, nor is it used to identify you personally. The legal basis for this is our legitimate interest in statistically evaluating and improving our online services for you (Art. 6(1)(f) GDPR). We do not use Google Analytics or any similar third-party tracking services.
We use the privacy-friendly analytics feature of our hosting provider, Framer (Framer B.V., Amsterdam, Netherlands). Framer Analytics works completely without cookies or cross-device tracking; it only generates aggregated, anonymised statistics (such as page views, country of origin, and device type). Your IP address is never permanently stored, nor is it used to identify you personally. The legal basis for this is our legitimate interest in statistically evaluating and improving our online services for you (Art. 6(1)(f) GDPR). We do not use Google Analytics or any similar third-party tracking services.
For the uniform display of fonts (including "Outfit"), our website uses Web Fonts, some of which are provided via Google servers (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When accessing a page, your browser loads the required font files; in doing so, your IP address is transmitted to Google, and Google becomes aware that our website was accessed via your IP address. Transmission to the USA cannot be excluded; Google LLC is certified under the EU-US Data Privacy Framework, which guarantees an adequate level of data protection (adequacy decision pursuant to Art 45 GDPR). The legal basis is our legitimate interest in a uniform, technically secure presentation of our website (Art 6 para 1 lit f GDPR). Further information can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy
For the uniform display of fonts (including "Outfit"), our website uses Web Fonts, some of which are provided via Google servers (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When accessing a page, your browser loads the required font files; in doing so, your IP address is transmitted to Google, and Google becomes aware that our website was accessed via your IP address. Transmission to the USA cannot be excluded; Google LLC is certified under the EU-US Data Privacy Framework, which guarantees an adequate level of data protection (adequacy decision pursuant to Art 45 GDPR). The legal basis is our legitimate interest in a uniform, technically secure presentation of our website (Art 6 para 1 lit f GDPR). Further information can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy
Book your appointment online (CGM LIFE / CLICKDOC)
Book your appointment online (CGM LIFE / CLICKDOC)
For online appointment booking, we integrate the CGM LIFE eSERVICES / CLICKDOC service of CompuGroup Medical (CompuGroup Medical SE & Co. KGaA, Maria Trost 21, 56070 Koblenz, Germany) as an external booking module (iFrame) on our appointment page. When accessing the appointment booking page, your browser establishes a direct connection to the CGM servers, during which your IP address is transmitted. The data entered into the booking module (e.g. name, contact details, preferred appointment, and, where applicable, medical data) are processed by CGM on behalf of our medical practice for the purpose of appointment administration (data processing on behalf of a controller pursuant to Article 28 GDPR). Medical data are processed on the basis of Article 9(2)(h) GDPR. In addition, the privacy policy of CGM applies, which can be accessed directly within the booking module.
For online appointment booking, we integrate the CGM LIFE eSERVICES / CLICKDOC service of CompuGroup Medical (CompuGroup Medical SE & Co. KGaA, Maria Trost 21, 56070 Koblenz, Germany) as an external booking module (iFrame) on our appointment page. When accessing the appointment booking page, your browser establishes a direct connection to the CGM servers, during which your IP address is transmitted. The data entered into the booking module (e.g. name, contact details, preferred appointment, and, where applicable, medical data) are processed by CGM on behalf of our medical practice for the purpose of appointment administration (data processing on behalf of a controller pursuant to Article 28 GDPR). Medical data are processed on the basis of Article 9(2)(h) GDPR. In addition, the privacy policy of CGM applies, which can be accessed directly within the booking module.
Newsletter (Brevo)
If you sign up for our newsletter via the form in the footer, we will process your email address for the purpose of sending you information about our centre. For the dispatch, we use the service Brevo (Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany) as a data processor pursuant to Art 6(1)(a) of the GDPR. The legal basis is your consent (Art 6(1)(a) GDPR). You can withdraw your consent at any time – via the unsubscribe link in every newsletter or by email to marketing@pvzentrum.at. Following your unsubscription, your email address will be deleted from the distribution list.
Digital Phone Assistant (Ordicall)
For telephone appointment scheduling and enquiries outside of our consultation hours, we use the digital telephone assistant "Emilia" provided by Ordicall (ordicall.ai). When using this service, the data you provide during the call (e.g. name, telephone number, preferred appointment, enquiry) is processed in order to record your request and forward it to our team (data processing on behalf of a controller pursuant to Art 28 GDPR). The legal basis is the initiation or performance of a contract (Art 6(1)(b) GDPR); health data is processed on the basis of Art 9(2)(h) GDPR.
External content & content delivery networks
For the technical provision of individual functions, we load resources (e.g. CSS files of the Lenis scroll library) via the content delivery network unpkg.com (operated by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). In doing so, your IP address is transmitted to the CDN's servers. Cloudflare is certified under the EU-US Data Privacy Framework (adequacy decision pursuant to Art. 45 GDPR). The legal basis is our legitimate interest in the secure and performant provision of our website (Art. 6 para. 1 lit. f GDPR).
Links to external services & social media
Our website contains links to external services, such as Google Maps (directions), Instagram, Facebook, and LinkedIn. These are purely links – simply visiting our website does not transfer any data to these providers. Only when you click on a link do you leave our website; from this point on, the data protection regulations of the respective provider apply.
How long we keep your data
We only keep your personal data for as long as we need it to support your care or to meet our legal obligations. For your medical records, we follow the retention periods set by the Austrian Physicians Act, which is typically 10 years (§ 51 ÄrzteG 1998). For any business or financial documents, we keep these for 7 years in line with local corporate and tax laws (UGB and BAO).
In principle, you have the rights to access (Art 15 GDPR), rectification (Art 16 GDPR), erasure (Art 17 GDPR), restriction of processing (Art 18 GDPR), data portability (Art 20 GDPR), withdrawal of consent granted (Art 7(3) GDPR) and objection (Art 21 GDPR). To exercise these rights, simply contact us – you can find our contact details below or in the legal notice. If you believe that the processing of your data violates data protection law, you have the right to lodge a complaint with the supervisory authority. In Austria, this is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, Telephone: +43 1 52 152-0, Email: dsb@dsb.gv.at, Web: www.dsb.gv.at
In principle, you have the rights to access (Art 15 GDPR), rectification (Art 16 GDPR), erasure (Art 17 GDPR), restriction of processing (Art 18 GDPR), data portability (Art 20 GDPR), withdrawal of consent granted (Art 7(3) GDPR) and objection (Art 21 GDPR). To exercise these rights, simply contact us – you can find our contact details below or in the legal notice. If you believe that the processing of your data violates data protection law, you have the right to lodge a complaint with the supervisory authority. In Austria, this is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, Telephone: +43 1 52 152-0, Email: dsb@dsb.gv.at, Web: www.dsb.gv.at
