1. Controller
Doctor-medic Otilia Gudana, Nußbaumstraße 14, 80336 Munich, Germany. Email: hello@healthog.org · Phone: +49 177 4480329.
2. Legal basis
Processing of your personal data takes place in accordance with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and professional confidentiality obligations under § 203 StGB. Legal bases are typically Art. 6(1)(b) GDPR (performance of a treatment contract), Art. 9(2)(h) GDPR (healthcare purposes) and, where applicable, Art. 6(1)(a) GDPR (consent).
3. Categories of data
- Contact data (name, email, phone number)
- Appointment and booking data
- Health data (only insofar as necessary for treatment or an expert report)
- Billing data (private insurance / self-payer)
- Technical data when using this website (IP address, browser type, timestamp)
4. Purposes of processing
Appointment scheduling, medical treatment, expert-report preparation, billing under the German Physicians' Fee Schedule (GOÄ), legal record-keeping, and secure operation of this website.
5. Recipients
Data are shared only with recipients authorised or obliged by law: private insurers, billing service providers under a data-processing agreement, tax consultants, and — where required — public authorities. Website hosting is provided by GDPR-compliant service providers within the EU.
6. International transfers
Data are primarily processed within the EU/EEA. Where individual service providers are located outside the EU/EEA, we rely on the EU standard contractual clauses or equivalent guarantees under Art. 46 GDPR.
7. Retention
Medical records are retained for at least 10 years under § 10(3) MBO-Ä, longer where legally required (e.g. § 630f BGB, tax law). After the retention period ends your data are deleted.
8. Your rights
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
Competent supervisory authority: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 27, 91522 Ansbach.
9. Website usage
This website uses only technically necessary cookies by default. Analytics or marketing cookies are only used with your prior consent, which you can withdraw at any time via the cookie settings.
10. Contact for privacy matters
For privacy enquiries or to exercise your rights write to hello@healthog.org.