This statement describes which personal data is processed when visiting this website. It applies to the website. For the processing of your data in connection with a medical treatment, the information you receive at the practice applies.
Controller
Praxis Dr. med. Monika Lakatos
Isoldestraße 3, 76185 Karlsruhe, Germany
Phone: 0721 55 28 80
Email: [email protected]
What this website does not do
This website does not set any cookies. It does not integrate any analytics or tracking services, no advertising networks, no fonts from external servers, and no social networks. No data is transmitted to third parties when the pages are accessed.
Server log files
When you access this website, the web server automatically collects data transmitted by your browser:
- IP address of the requesting device
- Date and time of access
- Name and URL of the file retrieved
- Amount of data transferred and notification of successful retrieval
- Browser and operating system used
- Previously visited page (referrer), if transmitted
This data is technically required to deliver the website, ensure its stability, and detect attacks. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure operation of the website. This data is not combined with other data sources.
Map (OpenStreetMap)
A map may be displayed on the “How to find us” page. It is only loaded after you have given your consent. On your first visit, we ask you via a notice at the bottom of the screen whether the map may be loaded. Without your consent, no connection to OpenStreetMap is established.
We store your decision exclusively locally in your browser (local storage) so that we do not have to ask you again on every visit. This storage is necessary for the service you requested and takes place pursuant to § 25(2) No. 2 TDDDG (German Telecommunications-Digital-Services-Data-Protection Act) without separate consent. No data is transmitted to us or to third parties in the process.
If you allow the map, your IP address will be transmitted to the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. Further information can be found in OpenStreetMap’s privacy policy: osmfoundation.org/wiki/Privacy_Policy
Withdrawing consent: You can change your decision at any time with effect for the future. To do so, use the “Privacy settings” link in the footer of every page.
Encryption
This website is delivered via an encrypted connection (TLS). You can recognize this by the address bar of your browser, which begins with https://, as well as by the lock symbol. Requests via an unencrypted connection are automatically redirected to the encrypted address.
Contacting us
If you contact us by phone, fax, or email, we process your information in order to handle your request. The legal basis is Art. 6(1)(b) GDPR if the request serves to initiate or carry out a medical treatment, otherwise Art. 6(1)(f) GDPR.
The same applies if you use the contact form on this website: your details are forwarded to the practice by email and additionally stored as a backup in this websites database, so that no enquiry is lost if the email fails to arrive. Only the practice has access to it.
Insofar as your request contains health data, processing takes place on the basis of Art. 9(2)(h) GDPR in conjunction with § 22(1) No. 1(b) BDSG (German Federal Data Protection Act). All staff are bound by medical confidentiality pursuant to § 203 of the German Criminal Code (StGB).
Please note: an unencrypted email can be read by third parties during transmission. Therefore, please avoid sending us health data by email where possible, and call us instead.
Online appointment booking
This website links to an external provider for online appointment scheduling. This is a simple link: you only leave this website once you click on it. The provider on the target page is responsible for processing your data there. Please inform yourself there about how your data is handled.
Retention period
Server log files are deleted after seven days at the latest. Enquiries by email, phone, or contact form are deleted as soon as they have been dealt with and no statutory retention obligations apply. Medical treatment records are subject to the statutory retention period of ten years pursuant to § 630f(3) BGB (German Civil Code), and longer in certain cases.
Your rights
You have the right at any time to:
- Information about the data stored about you (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR), insofar as no retention obligations apply
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing based on legitimate interests (Art. 21 GDPR)
- Withdraw consent given, with effect for the future (Art. 7(3) GDPR)
Please use the contact details given above.
Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for our practice is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg)
Lautenschlagerstraße 20, 70173 Stuttgart, Germany
www.baden-wuerttemberg.datenschutz.de