Status: 1.7.2023
1. general information
The protection of your personal data is of particular concern to us. We process your personal data exclusively on the basis of the legal provisions (DSGVO, DSG, TKG 2021).
For the provision of our website and for the provision of our services, we process information about you, so-called personal data – or in the following “data” for short. The term “processing” is to be understood as any handling of data, such as the collection, storage, use or deletion of personal data.
We are happy to inform you about the processing of your personal data and the claims and rights to which you are entitled under the data protection regulations within the framework of the data protection declaration.
Responsible for the processing of your personal data is:
AR Health Office Services Ltd.
Hadikgasse 108/3
1140 Vienna
+43 1 – 89 25 369
[email protected]
If you have any complaints, questions or suggestions regarding data protection, please do not hesitate to contact us at any time using the contact details provided.
2. data processing during the use of our website
2.1. General information
As part of our website, we process data that you provide to us (for example, when you book an appointment) and that is generated when you use our services (for example, for usage analysis), logs (our servers log who makes requests for security reasons) and cookies (these are small text files that are stored on your device and contain information to recognize you).
The following cookies are set on your terminal device during your visit:
- PHPSESSID – This cookie is essential for the proper functioning of the website. It stores a unique identifier for the current session.
- _ga – This cookie is used by Google Analytics to track website traffic. It stores a unique identifier for each visitor.
- _gat – This cookie is used by Google Analytics to throttle the request rate. It expires after 1 minute.
- _gid – This cookie is also used by Google Analytics to track website traffic. It expires after 24 hours.
- _fbp – This cookie is used by Facebook to track website traffic. It expires after 3 months.
- cookieconsent_status – this cookie is used by the cookie consent plugin to store the user’s cookie settings. It expires after 1 year.
Here are some of the purposes of these cookies:
- To track website traffic: These cookies are used to track the number of visitors to the website and the pages they visit. This information may be used to improve the content and functionality of the website.
- To save your preferences: These cookies are used to store your preferences, such as your language settings and whether you have opted out of marketing cookies. This information can be used to make your experience on the website more personalized.
- To provide social media features: These cookies are used to provide social media features, such as the ability to share pages on Facebook and Twitter. This information may be used to track your interactions with social media platforms.
- To provide targeted advertising: These cookies are used to provide targeted advertising, such as ads that are relevant to your interests. This information can be used to track your browsing activity on various websites.
The web server for the operation of our website is technically operated by Cloudways Ltd. as an order processor.
To prevent third-party cookies from being set, you can block so-called third-party cookies in your browser. In this case, you may not be able to use all the functions of our website.
2.2. Data processing for the operation and security of our website (server logs):
Purpose of processing: When you visit our website, the web server collects usage data (so-called server logs). The collection of this data is necessary to technically enable the connection to our server and the use of the website. In addition, this data is used to defend against and analyze attacks.
The following data is collected in server logs: The host name of the accessing computer together with the date and time of the request, identification data of the browser and operating system used, and the “referrer” URL.
Legal basis of processing: Your data is processed on the basis of our legitimate interest in ensuring the operation of the service and system security.
Recipient of the data: The web server for the operation of our website is technically operated by the IT service center of Cloudways Ltd. as a processor. The data from the server logs – should there have been a hacker attack – is passed on to the law enforcement authorities. Any further disclosure to third parties does not take place.
Additional information: Server logs are stored for a maximum of 4 weeks.
2.3. Data processing in case of a contact:
Purpose of processing: If you contact us (e.g. by e-mail, telephone or via the contact form), we process the data you disclose when contacting us (name, adres-se, subject, your message) to the extent necessary to process the request or its handling.
Legal basis of processing: The processing of your data is carried out for the implementation of pre-contractual measures or for the fulfillment of a contractual relationship or is based on our legitimate interest, namely for the organization of the inquiry response.
Recipients of the data: A transfer of this data takes place only under the condition that the transfer is necessary for the inquiry response.
Further information: We will process your data for as long as necessary to process the request and, in addition, for a further three years after the last contact with you in the event of a follow-up request.
2.4. Registration and use of the patient account:
Purpose of processing: The use of our website and also the booking of appointments is possible without a user account. However, you can also register for a patient account and thus have further advantages: you do not have to re-enter your data for each booking, you can view your appointments, change and cancel appointments. For these purposes, we process all data disclosed in the course of registration and accrued during use (master and address data, contact data, communication data, appointment bookings, billing data and feedback), insofar as this is necessary for processing and handling the contractual relationship. No health-related data is required for the use of our offers. If you provide such information – for example, as part of an inquiry or feedback – it is voluntary.
Legal basis of processing: Your data is processed to fulfill the contractual relationship concluded with you.
Recipients of the data: The transfer of this data will only take place on condition that the transfer is necessary for the execution of the contract.
Further information: We process your data as long as this is necessary for the execution and billing of the contract. Statutory storage obligations, in particular under tax law, shall remain unaffected.
2.5. Data processing for an appointment booking and billing:
Purpose of processing: When you book appointments via our platform, we collect and store all related data (master data, date, time, booking data, your message). No health-related data is required to book an appointment. If you provide such information (e.g. in a comment field), we will forward this information exclusively to the selected therapist(s).
Legal basis of processing: Your data is processed to fulfill the contractual relationship concluded with you.
Recipients of the data: The transfer of this data will only take place on condition that the transfer is necessary for the execution of the contract. The request data will be transmitted to the therapist(s) you have selected for further processing.
Further information: We store all this data until the completion of the agreed appointment or, if you have registered, until you delete your user account. Statutory retention obligations, in particular under tax law, shall remain unaffected.
2.6. Registration and use of the therapist account:
Purpose of processing: As part of our cooperation agreement, we create a user account for therapists. In the internal area, you can request the following information from us, if necessary: View your appointments, the case and patient data you have stored, billing and reimbursement data. Within the framework of the therapist account, we process all data disclosed in the course of your registration and accruing during use (master and address data, contact data, communication data, appointment bookings, billing data) to the extent required for processing and handling the contractual relationship.
Legal basis of processing: Your data is processed to fulfill the contractual relationship concluded with you.
Recipients of the data: The transfer of this data will only take place on condition that the transfer is necessary for the execution of the contract.
Further information: We process your data as long as this is necessary for the execution and billing of the contract. Statutory storage obligations, in particular under tax law, shall remain unaffected.
2.7. Data processing when using Google Maps:
Purpose of the processing: In order to present our company location graphically and to make it easier for you to find us, we have integrated the Google Maps service into our website. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.
Legal basis of processing: The processing of your data is based on your consent to the use of Google Maps. To do this, you need to click to display the map.
Recipient of the data: When using Google Maps, information about the use of this website, including your IP address and the address entered as part of the route planner function, may be transmitted to Google in the USA. This is because your browser establishes a direct connection to Google’s servers. The map content is transmitted by Google directly to your end device and integrated into the website by it.
According to our knowledge, at least the following data is transferred to Google: date and time of the visit to the website in question, Internet address or URL of the website accessed, IP address, address entered as part of route planning.
We have no influence on the further processing and use of the data by Google and therefore cannot accept any responsibility for this.
We have concluded an order processing agreement with Google. If personal data is transferred to the USA when using Google Maps, its appropriate protection is ensured by corresponding standard data protection clauses (https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE) within the meaning of Chapter V of the GDPR.
Further information: If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your internet browser settings. However, in this case you will not be able to use the map service. For the purpose and scope of the data collection and the further processing and use of the data by Google, as well as your rights in this regard and setting options for protecting your privacy, please refer to Google’s data protection information at the address https://policies.google.com/privacy?hl=de.
2.8. Data processing for marketing purposes:
With your consent to web analysis, we use the analysis service Google Analytics of the company Google LLC. The responsible service provider within the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The legal basis for this analysis is your consent (Art. 6 para. 1 lit. a DSGVO). We use Google Analytics version 4, which means that no cookies are stored on your terminal device. Your IP address is only used for geolocation and then immediately anonymized.
The information collected by Google Analytics about your use of this website is usually transferred to a Google server in the USA and stored there. On our behalf, Google evaluates your use of our offer and creates usage reports for us. This enables us to better tailor our offerings to the usage and needs of our customers. The data will be transferred to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) for analysis. Google works for us as a processor. We have concluded an order processing agreement with Google. If personal data is transferred to the USA when using Google Analytics, its appropriate protection is ensured by corresponding standard data protection clauses (https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE) within the meaning of Chapter V of the GDPR.
You can prevent the collection of data related to your use (including your IP address) by Google and the processing of this data by Google by not giving your consent via the cookie banner or by downloading and installing a browser add-on to deactivate Google Analytics at the address https://tools.google.com/dlpage/gaoptout?hl=de.
For more information on Google Analytics’ terms of use and Google’s privacy policy, please visit https://policies.google.com/?hl=de.
3. data processing within the framework of the cooperation agreement
Purpose of processing: If you cooperate with us as a therapist, we process your data and all data disclosed in the course of our business relationship for the purpose of processing this contractual relationship and answering questions that you address to us in connection with the contractual relationship, as well as for billing purposes.
Legal basis of processing: Your data is processed to fulfill the contractual relationship concluded with you.
Recipients of the data: If a transfer of your data relevant in the respective individual case is necessary for the fulfillment of the contractual relationship or due to a legal basis, this is carried out to the following categories of recipients:
- Contract and business partner
- Legal representative
- Chartered accountants, auditors and tax consultants
- Dishes
- Competent administrative authorities
- Competent professional representation
- Collection agency
- Social security agency
- Insurances
Further information: We only process your data for as long as is necessary for the fulfillment of the contractual relationship or due to legal obligations (for example, in accordance with tax and company law retention obligations). As a rule, we keep data for seven years.
4. processing of health data
Purpose of processing: If you provide us with health-related data in the course of contacting us, booking an appointment or in connection with feedback, we store this data exclusively for forwarding to the therapist(s) selected by you. If you disclose health information as part of online feedback, please keep in mind that it will be published and may be attributed to you.
Legal basis of processing: The processing of your data is based on your consent.
Recipients of the data: Your data will not be transferred to third parties who pursue their own purposes.
Further information: We process your data until you revoke your consent.
5. data processing within the scope of the newsletter
Purpose of processing: If you have subscribed to our newsletter, you will receive regular information from us by e-mail about us and our range of services. If you no longer wish to be contacted by us, please unsubscribe at [email protected] or use the unsubscribe link in the newslet-ter.
Legal basis of processing: The processing of your data is based on your consent.
Recipients of the data: Your data will not be transferred to third parties who pursue their own purposes.
Further information: We process your data until you revoke your consent.
6. disclosure of data, order processing
Your personal data will be used exclusively by us and will not be passed on to third parties without your consent, a legal obligation or a judicial or official decision. If we use third parties (“contract processors”) to carry out orders, we ensure that they use your data exclusively within the framework of the agreement concluded with them, our orders and in compliance with data protection regulations.
7. your rights
7.1. Right to information about the stored data according to Art 15 DSGVO
You have the right to request information about whether we process personal data about you. If this is the case, you have a right of access to this personal data and to further information related to the processing.
7.2. Right to rectification of inaccurate data pursuant to Art 16 DSGVO
In the event that personal data that we process about you is not (or no longer) accurate or incomplete, you may request that this data be corrected and, if necessary, completed.
7.3. Right to erasure of data according to Art 17 DSGVO
If the legal requirements are met, you can request the deletion of your personal data.
7.4. Right to restriction of data according to Art 18 DSGVO
If the legal requirements are met, you may request the restriction of the processing of the data concerning you.
7.5. Right to data portability according to Art 20 DSGVO
If the legal requirements are met, you may request that your data be transferred in a structured, common and machine-readable format.
7.6. Right to object to unreasonable data processing according to Art 21 DSGVO
For reasons arising from your particular situation, you may object at any time to the processing of data relating to you that we process on the basis of a legitimate interest pursuant to Art 6(1)(f) DSGVO.
7.7. Right to withdraw consent
If the processing is based on a declaration of consent, you have the option to revoke this at any time without affecting the lawfulness of the processing carried out on the basis of the consent up to the revocation.
7.8. Right to complain to the data protection authority
If you are of the opinion that the processing of your personal data by us violates the applicable data protection law or that your data protection rights have been violated in any other way, you have the possibility to complain to the competent supervisory authority (Austrian Data Protection Authority). The address is:
Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
Phone: +43 1 52 152-0
E-mail: [email protected]
8. further information:
We need the data we ask you to provide in order to provide our services within the framework of the contractual relationship or to provide the information you have asked us for. If you do not provide the data, we cannot provide our services.
Automated decision-making, including profiling, does not take place. If we process your personal data for a purpose other than the one for which we collected it, we will disclose this fact to you and inform you of this other purpose.