Datenschutz

Privacy Policy

Dermatological Private Practice Dr. med. Sabine Zenker

1. Data Controller

2. General Information

The protection of your personal data is very important to us. We treat your data confidentially and in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

Personal data: Any information relating to an identified or identifiable natural person, such as name, address, email address, telephone number, or health-related data.

3. Collection and Processing of Personal Data

We collect personal data when you contact our practice, use our website, or make use of medical services.

Data collected:

• First and last name
• Address
• Telephone number
• Email address
• Health-related information (e.g. medical history forms, medical correspondence)
• IP address, browser type, access times when visiting the website

Purpose of processing:

• Appointment scheduling, consultation, and medical treatment
• Management of patient records
• Compliance with statutory retention obligations
• Provision of information about practice services
• Website optimization and anonymized analysis

4. Legal Basis for Processing

• Consent: Art. 6 (1)(a) GDPR (e.g. contact forms, newsletters)
• Performance of a contract: Art. 6 (1)(b) GDPR (medical treatment)
• Legal obligation: Art. 6 (1)(c) GDPR (retention of patient records)
• Legitimate interest: Art. 6 (1)(f) GDPR (website operation, IT security)

Special categories (Art. 9 GDPR): Health data is processed only to the extent necessary for medical treatment.

5. Data Disclosure

Personal data is disclosed only:

• with your explicit consent,
• for the purpose of medical treatment (e.g. laboratories, pharmacies, referrals),
• where legally required (e.g. public health authorities), or
• to external service providers acting as data processors (e.g. practice management software, IT support).

Data processors may include:

• Practice management software providers (name, website)
• Email service providers
• Newsletter service providers (data transfer limited to what is strictly necessary)

6. Cookies and Web Analytics

Our website uses cookies. Information about our cookies

7. Rights of Data Subjects

You have the right to:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)
• Withdraw consent at any time with effect for the future

8. Data Security

We implement appropriate technical and organizational measures, including:

• SSL encryption of the website
• Access controls to practice data
• Regular data backups

9. Data Retention Periods

• Patient records: at least 10 years (in accordance with professional regulations and German civil law)
• Other personal data: as long as necessary, generally no longer than 5 years after last contact, unless statutory retention periods apply

10. Contact for Data Protection Matters

11. Updates to this Privacy Policy

We reserve the right to amend this Privacy Policy in response to legal, technical, or operational changes.