DEENENTWURF · DRAFT · Sample for Mustermann Physiotherapy, not binding, no bookings possible. Built by Thomas Eichinger · peaksites.de. © Thomas Eichinger · Creator’s legal notice
Home › Privacy policy
Under the GDPR

Privacy­policy

Sample details. On a real site, this text is written to fit the actual business.

Controller

Mustermann Physiotherapy, Maria Mustermann, Musterstraße 1, 83xxx Musterdorf
Phone 08641 · 0000, e-mail info@mustermann.de

When you visit this site

When you open a page, the server automatically stores access data, namely the page visited, date and time, amount of data transferred, browser type and a shortened IP address. The legal basis is Article 6(1)(f) GDPR, our legitimate interest in running the site securely. The data is deleted after seven days.

This site uses no advertising cookies, no analytics services and no fonts from third-party servers. All fonts are system fonts.

Health data under Article 9 GDPR

Information about your health belongs to the special categories of personal data and is specially protected. That’s why the form on this site deliberately does not collect any health data. We only ask for your name, phone number, whether you have a doctor’s prescription and when you’d like to come in.

Please don’t mention symptoms, diagnoses or treatments in the free text field either. Anything medical we discuss in person, on the phone or at the practice.

If you are treated at the practice, we process health data as part of the treatment records. The legal basis is Article 9(2)(h) GDPR in conjunction with § 630f BGB (German Civil Code). Treatment records are kept for ten years.

Appointment requests through the form

We use your details only to handle your request. The legal basis is Article 6(1)(b) GDPR. If you don’t end up being treated here, we delete the request after three months.

Data sent to your health insurer

To meet our legal obligations, we send the necessary data to your health insurer and, where applicable, to an authorized billing service. The legal basis is Article 9(2)(h) GDPR in conjunction with the provisions of SGB V (German Social Code, Book V).

Your rights

You have the right of access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and objection (Article 21). You can withdraw any consent you have given at any time, with effect for the future.

You also have the right to lodge a complaint with a supervisory authority. The responsible authority is the Bayerisches Landesamt für Datenschutzaufsicht (Bavarian Data Protection Authority), Promenade 18, 91522 Ansbach.

Confidentiality

Everyone on our team is bound by professional confidentiality under § 203 StGB (German Criminal Code). We only pass information on to third parties, including family members, with your express consent.

Sample notice: This is a sample page by PEAK. The text is a template and is not legal advice. A real privacy policy has to fit the business and the services it actually uses.