Status: 1.7.2023
1. general information
The protection of your personal data is of particular concern to us. We process your personal data exclusively on the basis of the statutory provisions (GDPR, DSG, TKG 2021).
For the provision of our website and for the provision of our services, we process information about your person, so-called personal data – or “data” for short in the following. The term “processing” refers to any handling of data, such as the collection, storage, use and deletion of personal data.
We are happy to inform you about the processing of your personal data and the claims and rights to which you are entitled under data protection regulations in the context of the data protection declaration.
We are responsible for the processing of your personal data:
AR Health Office Services GmbH
Hadikgasse 108/3
1140 Vienna
+43 1 – 89 25 369
[email protected]
If you have any complaints, questions or suggestions on the subject of data protection, please do not hesitate to contact us at any time using the contact details provided.
2. data processing when using our website
2.1. General information
As part of our website, we process data that you disclose to us (e.g. when booking an appointment) and that is generated when using our services (e.g. for usage analysis), logs (our servers log who makes requests for security reasons) and cookies (these are small text files that are stored on your device and contain information to recognize you).
The following cookies are set on your device during your visit:
- PHPSESSID – This cookie is essential for the proper functioning of the website. It stores a unique identifier for the current session.
- _ga – This cookie is used by Google Analytics to track website traffic. It stores a unique identifier for each visitor.
- _gat – This cookie is used by Google Analytics to throttle the request rate. It expires after 1 minute.
- _gid – This cookie is also used by Google Analytics to track website traffic. It expires after 24 hours.
- _fbp – This cookie is used by Facebook to track website traffic. It expires after 3 months.
- cookieconsent_status – This cookie is used by the cookie consent plugin to store the user’s cookie settings. It expires after 1 year.
Here are some of the purposes of these cookies:
- To track website traffic: These cookies are used to track the number of visitors to the website and the pages they visit. This information can be used to improve the content and functionality of the website.
- To save your preferences: These cookies are used to remember your preferences, such as your language settings and whether you have declined marketing cookies. This information can be used to personalize your experience on the website.
- For the provision of social media functions: These cookies are used to provide social media features, such as the ability to share pages on Facebook and Twitter. This information can be used to track your interactions with social media platforms.
- To provide targeted advertising: These cookies are used to deliver targeted advertising, such as ads that are relevant to your interests. This information can be used to track your surfing activities on various websites.
The web server for the operation of our website is technically operated by Cloudways Ltd. as a processor.
To prevent third-party cookies from being set, you can block so-called third-party cookies in your browser. In this case, you may not be able to use all the functions of our website.
2.2. Data processing for the operation and security of our website (server logs):
Purpose of processing: When you visit our website, the web server collects usage data (so-called server logs). The collection of this data is necessary to technically enable the connection to our server and the use of the website. This data is also used to defend against and analyze attacks.
The following data is collected in server logs: The host name of the accessing computer together with the date, the time of the request, identification data of the browser used and the operating system used, as well as the “referrer” URL.
Legal basis for processing: Your data is processed on the basis of our legitimate interest in ensuring the operation of the service and system security.
Recipient of the data: The web server for the operation of our website is technically operated by the IT service center of Cloudways Ltd. as a processor. If there has been a hacker attack, the data from the server logs will be passed on to the law enforcement authorities. Any further disclosure to third parties will not take place.
Further information: The server logs are stored for a maximum of 4 weeks.
2.3. Data processing when contacting us:
Purpose of processing: If you contact us (e.g. by e-mail, telephone or via the contact form), we process the data you provide when contacting us (name, address, subject, your message) insofar as this is necessary to process the request or its handling.
Legal basis of the processing: The processing of your data is carried out for the implementation of pre-contractual measures or for the fulfillment of a contractual relationship or is based on our legitimate interest, namely for the organization of the response to the request.
Recipient of the data: This data will only be transmitted if it is necessary for the purpose of responding to your inquiry.
Further information: We process your data for as long as is necessary to process the request and, in the event of a follow-up request, for a further three years after the last contact with you.
2.4. Registration and use of the patient account:
Purpose of processing: It is possible to use our website and book appointments without a user account. However, you can also register for a patient account, which gives you further advantages: you do not have to re-enter your details each time you book, you can view your appointments, change and cancel appointments. For these purposes, we process all data disclosed in the course of registration and arising during use (master and address data, contact data, communication data, appointment bookings, billing data and feedback), insofar as this is necessary for processing and handling the contractual relationship. It is not necessary to provide any health-related data in order to use our services. If you provide such information – e.g. as part of an inquiry or feedback – this is voluntary.
Legal basis for processing: Your data is processed to fulfill the contractual relationship concluded with you.
Recipient of the data: This data will only be transferred on condition that the transfer is necessary for the performance of the contract.
Further information: We process your data as long as this is necessary for the execution and billing of the contract. Statutory retention obligations, in particular under tax law, remain unaffected.
2.5. Data processing for an appointment booking and billing:
Purpose of processing: When you book appointments via our platform, we collect and store all related data (master data, date, time, booking data, your message). No health-related data is required to book an appointment. If you provide such information (e.g. in a comment field), we will only forward this information to the selected therapist.
Legal basis for processing: Your data is processed to fulfill the contractual relationship concluded with you.
Recipient of the data: This data will only be transferred on condition that the transfer is necessary for the performance of the contract. The request data will be sent to the therapist you have chosen for further processing.
Further information: We store all this data until the end of the agreed appointment or, if you have registered, until you delete your user account. Statutory retention obligations, in particular under tax law, remain unaffected.
2.6. Registration and use of the therapist account:
Purpose of processing: As part of our cooperation agreement, we create a user account for therapists. You can request the following information from us in the internal area: View your appointments, the case and patient data you have saved, billing and reimbursement data. Within the scope of the therapist account, we process all data disclosed in the course of your registration and arising during use (master and address data, contact data, communication data, appointment bookings, billing data), insofar as this is necessary for the processing and handling of the contractual relationship.
Legal basis for processing: Your data is processed to fulfill the contractual relationship concluded with you.
Recipient of the data: This data will only be transferred on condition that the transfer is necessary for the performance of the contract.
Further information: We process your data as long as this is necessary for the execution and billing of the contract. Statutory retention obligations, in particular under tax law, remain unaffected.
2.7. Data processing when using Google Maps:
Purpose of processing: We have integrated the map service Google Maps into our website in order to present our company location to you graphically and to make it easier for you to find us. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.
Legal basis for processing: Your data is processed on the basis of your consent to the use of Google Maps. To do this, you need to display the map with one click.
Recipient of the data: When using Google Maps, information about the use of this website, including your IP address and the address entered as part of the route planner function, may be transmitted to Google in the USA. Your browser establishes a direct connection to Google’s servers. The map content is transmitted by Google directly to your device and integrated into the website.
To the best of our knowledge, at least the following data is transmitted to Google: date and time of the visit to the website in question, Internet address or URL of the website accessed, IP address, address entered as part of route planning.
We have no influence on the further processing and use of the data by Google and can therefore accept no responsibility for this.
We have concluded a data processing agreement with Google. Insofar as personal data is transferred to the USA when using Google Maps, its adequate protection is ensured by corresponding standard data protection clauses (https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE) within the meaning of Chapter V of the GDPR.
Further information: If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in the settings of your Internet browser. In this case, however, you will not be able to use the map service. The purpose and scope of the data collection and the further processing and use of the data by Google as well as your rights in this regard and setting options to protect your privacy can be found in Google’s data protection information at https://policies.google.com/privacy?hl=de.
2.8. Data processing for marketing purposes:
With your consent to web analysis, we use the Google Analytics analysis service of the company Google LLC. The responsible service provider within the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The legal basis for this analysis is your consent (Art. 6 para. 1 lit. a GDPR). We use Google Analytics version 4, which means that no cookies are stored on your end device. Your IP address is only used for geolocalization and then immediately anonymized.
The information collected by Google Analytics about your use of this website is generally transmitted to a Google server in the USA and stored there. On our behalf, Google analyzes your use of our website and creates reports for us on usage. This enables us to better tailor our offerings to the use and needs of our customers. The data will be transferred to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) for analysis. Google works for us as a processor. We have concluded a data processing agreement with Google. If personal data is transferred to the USA when Google Analytics is used, its appropriate protection is ensured by corresponding standard data protection clauses (https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE) within the meaning of Chapter V of the GDPR.
You can prevent the collection of data relating to your use (including your IP address) to Google and the processing of this data by Google by not giving your consent via the cookie banner or by downloading and installing a browser add-on to deactivate Google Analytics at the address https://tools.google.com/dlpage/gaoptout?hl=de.
You can find more information on the terms of use of Google Analytics and data protection at Google at https://policies.google.com/?hl=de.
3. data processing within the framework of the cooperation agreement
Purpose of processing: If you cooperate with us as a therapist, we process your data and all data disclosed in the context of our business relationship for the purpose of processing this contractual relationship and answering any questions you may have in connection with the contractual relationship, as well as for billing purposes.
Legal basis for processing: Your data is processed to fulfill the contractual relationship concluded with you.
Recipients of the data: If a transfer of your data relevant in the respective individual case is necessary for the fulfillment of the contractual relationship or on the basis of a legal basis, this is done to the following categories of recipients:
- Contract and business partners
- Legal representative
- Public accountants, auditors and tax consultants
- Courts
- Competent administrative authorities
- Responsible professional representation
- Collection agency
- Social insurance carrier
- Insurances
Further information: We only process your data for as long as is necessary for the fulfillment of the contractual relationship or due to legal obligations (e.g. according to tax and company law retention obligations). As a rule, we store data for seven years.
4. processing of health data
Purpose of processing: If you provide us with health-related data in the course of contacting us, booking an appointment or in connection with feedback, we store this data exclusively for forwarding to the therapist you have chosen. If you provide health data as part of online feedback, please bear in mind that this data will be published and may be associated with you personally.
Legal basis for processing: Your data is processed on the basis of your consent.
Recipients of the data: Your data will not be transmitted to third parties who pursue their own purposes.
Further information: We process your data until you withdraw your consent.
5. data processing in the context of the newsletter
Purpose of processing: If you have registered for our newsletter, you will receive regular information from us by e-mail about us and our range of services. If you no longer wish to be contacted by us, please unsubscribe at [email protected] or use the unsubscribe link in the newsletter.
Legal basis for processing: Your data is processed on the basis of your consent.
Recipients of the data: Your data will not be transmitted to third parties who pursue their own purposes.
Further information: We process your data until you withdraw your consent.
6. transfer of data, order processing
Your personal data will be used exclusively by us and will not be passed on to third parties without your consent, a legal obligation or a court or official decision. If we use third parties (“processors”) to carry out orders, we ensure that they use your data exclusively within the framework of the agreement concluded with them, our orders and in compliance with data protection regulations.
7. your rights
7.1. Right to information about the stored data in accordance with Art. 15 GDPR
You have the right to request information about whether we process your personal data. If this is the case, you have a right of access to this personal data and to further information related to the processing.
7.2. Right to rectification of inaccurate data pursuant to Art. 16 GDPR
In the event that personal data that we process about you is (no longer) accurate or incomplete, you can request that this data be corrected and, if necessary, completed.
7.3. Right to erasure of data pursuant to Art. 17 GDPR
If the legal requirements are met, you can request the deletion of your personal data.
7.4. Right to restriction of data pursuant to Art. 18 GDPR
If the legal requirements are met, you can request the restriction of the processing of the data concerning you.
7.5. Right to data portability pursuant to Art. 20 GDPR
If the legal requirements are met, you can request the transfer of your data in a structured, commonly used and machine-readable format.
7.6. Right to object to unreasonable data processing in accordance with Art. 21 GDPR
For reasons arising from your particular situation, you can object at any time to the processing of data concerning you that we process on the basis of a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.
7.7. Right to withdraw consent
If the processing is based on a declaration of consent, you have the option of revoking this at any time without affecting the legality of the processing carried out on the basis of the consent until revocation.
7.8. Right to lodge a complaint with the data protection authority
If you are of the opinion that the processing of your personal data by us violates the applicable data protection law or your data protection claims have been violated in any other way, you have the option of complaining to the competent supervisory authority (Austrian Data Protection Authority). The address is:
Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
Phone: +43 1 52 152-0
E-mail: [email protected]
8. further information:
We require the data that we ask you to provide in order to provide our services within the scope of the contractual relationship or to provide information that you have requested. If you do not provide the data, we will not be able to provide our services.
Automated decision-making, including profiling, does not take place. If we process your personal data for a purpose other than that for which we collected it, we will notify you of this fact and inform you of this other purpose.