Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

2. General information on data processing

The protection of your personal data is of particular importance to us. As a medical practice, in addition to the provisions of the Datenschutz-Grundverordnung (DSGVO/GDPR) and the Bundesdatenschutzgesetz (BDSG — German Federal Data Protection Act), we are also subject to medical confidentiality pursuant to § 203 StGB (German Criminal Code) and § 9 of the Professional Code of Conduct of the Ärztekammer Nordrhein (North Rhine Medical Association).

Personal data is only collected on this website to the extent that is technically necessary. Data processing is carried out exclusively on the basis of the applicable legal provisions (DSGVO/GDPR, BDSG, TDDDG).

3. Hosting

This website is hosted by IONOS SE (Elgendorfer Str. 57, 56410 Montabaur, Germany). When you access our website, the hosting provider automatically collects information and stores it in so-called server log files. This includes:

• IP address of the accessing device
• Date and time of access
• Name and URL of the page accessed
• Volume of data transferred
• Browser type and version
• Operating system
• Referrer URL (previously visited page)

Legal basis: Art. 6(1)(f) DSGVO (GDPR) (legitimate interest in the secure and efficient provision of the website).

Server location: Data processing takes place exclusively on servers in Germany / the European Union. No transfer to third countries occurs.

Retention period: Server log files are automatically deleted after 30 days.

4. SSL/TLS encryption

For security reasons, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the browser address bar changing from "http://" to "https://" and the padlock icon in the browser bar. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

5. Contact

Contact form

When you send us a message via the contact form on this website, the information you provide (name, email address, telephone number, message) is processed for the purpose of handling your enquiry.

For the technical transmission of the form, we use the service Web3Forms (Jeeva Marketer Ltd). Your form data is forwarded to our registered email address via the Web3Forms API. Web3Forms does not permanently store the transmitted data and serves solely as a transmission service.

Legal basis: Art. 6(1)(b) DSGVO (GDPR) (pre-contractual measures) or Art. 6(1)(f) DSGVO (GDPR) (legitimate interest in responding to enquiries).

Important notice: Please do not send any detailed health information via the contact form. For medical matters, please use telephone contact or arrange an in-person appointment. Unencrypted emails and contact forms do not provide adequate protection for sensitive health data.

Retention period: Your enquiry will be deleted after it has been fully processed, unless statutory retention obligations apply.

Further information: Privacy policy of Web3Forms

Email contact

If you contact us by email, the information you provide, including the contact details you specify, will be stored for the purpose of processing your enquiry. The same notices as for the contact form apply. Please note that data transmission by email is generally unencrypted.

Telephone contact

When you contact us by telephone, your information is processed for the purpose of handling your matter. Telephone conversations are not recorded.

6. Fonts (locally hosted)

This website uses the fonts "Plus Jakarta Sans", "DM Sans" and "DM Mono". The font files are stored locally on our server and are delivered directly from this website. No connection to Google servers or other external font providers is established. Your IP address is not transmitted to third parties.

7. Cookies

This website exclusively uses technically necessary cookies that are required for the operation of the website. No tracking, analytics or marketing cookies are used.

Technically necessary cookies are set on the basis of § 25(2) No. 2 TDDDG and do not require consent.

You can configure your browser to inform you about the setting of cookies and to allow cookies only on a case-by-case basis. Disabling cookies may limit the functionality of this website.

8. Analytics tools and tracking

No analytics tools (such as Google Analytics, Matomo or comparable services) and no tracking are used on this website. No analysis of your usage behaviour takes place.

9. Processing of consultation data

The online spine consultation is a private medical service, not a statutory health insurance treatment. Substantive consultation materials (reports, imaging, written enquiries, telephone or video consultations) are not transmitted via the contact form on this website but through separate channels (postal mail, email, data carriers, video conference) within the direct contractual relationship.

Legal basis for the processing of consultation and health data: Art. 9(2)(h) DSGVO (GDPR) in conjunction with § 22(1) No. 1(b) BDSG (processing for purposes of preventive medicine and medical assessment by a member of a health profession subject to the obligation of professional secrecy), and Art. 6(1)(b) DSGVO (GDPR) (pre-contractual measures and contract performance).

Retention periods:

• Consultation documentation and patient record: at least 10 years after completion of consultation (§ 630f(3) BGB — German Civil Code)
• Fee and billing documents: 10 years (§§ 147 AO, 257 HGB — German Commercial Code)

Recipients of consultation data (only with explicit consent or on a legal basis): physicians or clinics nominated by you for further or co-treatment, and where applicable your private health insurance for reimbursement. No data is transferred to statutory health insurance funds or the Kassenärztliche Vereinigung in the context of this private service.

10. Your rights as a data subject

You have the following rights with regard to your personal data:

• Right of access (Art. 15 DSGVO/GDPR) — You may request information about the personal data we process about you.
• Right to rectification (Art. 16 DSGVO/GDPR) — You may request the rectification of inaccurate data.
• Right to erasure (Art. 17 DSGVO/GDPR) — You may request the deletion of your data, provided no statutory retention obligations apply.
• Right to restriction of processing (Art. 18 DSGVO/GDPR) — You may request the restriction of processing of your data.
• Right to data portability (Art. 20 DSGVO/GDPR) — You may request that we provide your data in a structured, commonly used and machine-readable format.
• Right to object (Art. 21 DSGVO/GDPR) — You may object to the processing of your data at any time on grounds relating to your particular situation.
• Right to withdraw consent (Art. 7(3) DSGVO/GDPR) — You may withdraw any consent you have given at any time with effect for the future.

Please note that in the case of patient data, the medical documentation obligation (§ 630f BGB) and statutory retention periods may prevent deletion.

11. Right to lodge a complaint with a supervisory authority

If you believe that the processing of your personal data violates the DSGVO (GDPR), you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 DSGVO/GDPR).

The supervisory authority responsible for us is:

12. Currency and amendments to this privacy policy

This privacy policy is currently valid and has the status of May 2026.

Due to the further development of our website or changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The current version of the privacy policy can be accessed on this website at any time.