Privacy policy
Note for the practice
1. Controller
Andrea Fabry, Buckower Damm 227, 12349 Berlin, Germany. Phone +49 30 6055516, email [email protected].
2. Data protection officer
[[To be added if one has been appointed. May be required where health data is processed on a larger scale — please have this checked.]]
3. Appointment request form
Through the form we collect: your name, contact details (email and/or phone number), contact preference, whether you are already a patient, the treatment you are after, information about your prescription and insurance, preferred days and times of day, whether you need a home visit, and your free-text message.
The sole purpose of processing is to handle your appointment request. The legal basis is Art. 6(1)(a) GDPR and — where your entries contain health data — Art. 9(2)(a) GDPR (explicit consent).
Your consent is voluntary. You may withdraw it at any time with effect for the future; this does not affect the lawfulness of processing carried out beforehand.
Retention: [[e.g. deletion once the appointment is complete or the request has been dealt with, unless statutory retention periods apply.]]
4. Email delivery and processors
We use service providers for hosting and email delivery, with a data processing agreement in place under Art. 28 GDPR. [[Provider to be added.]]
5. Hosting and server log files
When you visit the site, technically necessary data is processed: IP address, timestamp, the resource requested and the user agent. The legal basis is Art. 6(1)(f) GDPR (operation and security of the website).
Retention: [[e.g. 7 days.]]
7. External maps
No third-party map application is embedded. The directions link only opens an external map service once you actively click it.
8. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection (Art. 21) and withdrawal of consent (Art. 7(3)).
9. Right to lodge a complaint
You may lodge a complaint with a supervisory authority; the authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information.
10. No automated decision-making
There is no automated decision-making and no profiling.
11. Version of this policy
[[Date to be added.]]