Dr. Marianne Langfischer

1. General

1.1 Responsible Party

1.2 Scope of Processing

We process personal data of our users only to the extent necessary to provide our website, online appointments, and prescription requests via the cloud-based system AWEB. Processing is generally based on the user’s consent. Exceptions apply only when legal regulations permit this or obtaining prior consent is not feasible for practical reasons.

1.3 Legal Basis

• Consent: Art. 6(1)(a) GDPR

• Contract performance: Art. 6(1)(b) GDPR (e.g., online appointments, prescription requests)

• Legal obligation: Art. 6(1)(c) GDPR

• Legitimate interest: Art. 6(1)(f) GDPR, provided the legitimate interests of the practice are not overridden by the rights and freedoms of the data subjects

1.4 Data Deletion and Retention

Personal data will be deleted or blocked as soon as the purpose of processing no longer applies. Data relevant to legal retention obligations will be stored for the required period. AWEB stores data only in an Austrian data center and performs regular backups and security updates.

2. Website

2.1 Scope of Data Processing

When visiting our website, the following data is collected automatically:

• Browser type and version

• Operating system

• IP address

• Date and time of access

• Referrer URL (the website you came from)

• Pages accessed

These data are stored in log files to ensure website functionality, detect misuse, and optimize the website. No analysis for marketing purposes takes place.

2.2 Legal Basis

Art. 6(1)(f) GDPR – legitimate interest of the practice to ensure website operation.

2.3 Retention Period

Log file data is deleted or anonymized after a maximum of seven days. Data required to provide website functionality is stored only for the duration of the session.

3. Online Appointments and Prescription Requests (AWEB)

3.1 Scope of Processing

For appointment booking and prescription requests, the following data is collected:

• Name, date of birth

• Versicherungsnummer (E-Card)

• Contactinformation (Phone, Mail)

• Appointment or prescription request

These data are processed via AWEB, a cloud-based system, which stores the data exclusively on behalf of the practice in a data center in Austria. Only authorized staff of the practice have access.

3.2 Legal Basis

• Contract performance: Art. 6(1)(b) GDPR

• User consent: Art. 6(1)(a) GDPR

3.3 Purpose of Processing

• Appointment organization

• Processing and provision of prescriptions

• Clarification of questions regarding appointments or prescription collection

3.4 Retention Period

Data will be deleted once the purpose no longer applies, unless legal retention obligations exist.

4. Cookies

Our website uses cookies for functionality and optionally for analyzing user behavior.

• Technically necessary cookies: Art. 6(1)(f) GDPR

• Analytics cookies: only with user consent (Art. 6(1)(a) GDPR)

Users can disable or delete cookies in their browser at any time. Certain website functions may be limited without cookies.

5. Web Analytics

Google Analytics is used only with IP anonymization enabled. Data is used to improve our website and is not combined with personal data of users. Users can deactivate Google Analytics using opt-out cookies.

6. Data Subject Rights

Under the GDPR, users have the following rights:

• Access to processed data

• Correction of inaccurate data

• Restriction of processing

• Deletion of personal data

• Notification of third parties about deletion or correction

• Data portability

• Objection to processing or direct marketing

• Withdrawal of consent

• Filing a complaint with the data protection authority

Stand: Datenschutz Dr. Marianne Langfischer, 2026