Privacy policy

1. Controller

Health Center Kior Berg-am-Laim UG (haftungsbeschränkt)
Englmannstraße 2, 81673 München, Germany
E-mail: kiorhealth.center@gmail.com

2. What this website does not do

This website sets no cookies, embeds no analytics or tracking services and loads no content from third-party servers. Fonts, images and scripts are served exclusively from our own server. There is therefore no consent dialogue either.

3. Server log files

Each time the site is accessed, your browser transmits technically necessary data which our host stores in log files: the address requested, date and time, volume of data transferred, notification of successful retrieval, browser type and version, operating system, referring page and the IP address.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically faultless operation and the security of the website. This data is not merged with other data sources.

4. Contact form, e-mail and telephone

If you contact us through the form, by e-mail or by telephone, we process the details you provide — name, e-mail address, telephone number where given, and your message — solely in order to handle your enquiry.

The legal basis is Art. 6(1)(b) GDPR where the enquiry aims at entering into a contract, otherwise Art. 6(1)(f) GDPR. We erase the data once your enquiry has been dealt with conclusively and no statutory retention periods apply.

Please do not send health data through the form. Details of symptoms, diagnoses or treatments are special categories of personal data under Art. 9 GDPR. Please raise such matters in person or by telephone.

5. Treatment data

Data arising in the course of treatment is processed on the basis of Art. 9(2)(h) GDPR in conjunction with § 22(1) no. 1(b) BDSG. Patient records are retained for ten years after the conclusion of treatment pursuant to § 630f(3) BGB. This processing takes place at the practice, not via this website.

6. Recipients

The website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. The host processes the server log data on our behalf and under our instructions on the basis of a data processing agreement pursuant to Art. 28 GDPR. Laboratory tests are analysed by our partner laboratory; we inform you separately before a sample is given.

7. Fonts and media

All fonts are loaded from our own server. There is no connection to Google Fonts or any other third-party CDN; your IP address is not transmitted there.

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Please write to the address given above.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht, Promenade 27, 91522 Ansbach.

This is a courtesy translation. The German version is the legally binding one.