Data Privacy

1. Controller

The controller responsible for the processing of your personal data is:

The Aurora Ärztezentrum GmbH
Währinger Straße 39/2
1090 Vienna, Austria

Phone: +43 1 358 83 40
Email: [email protected]

Commercial Register: FN 489752 z
VAT Number: ATU73263112

2. General Information

Protecting your personal data is important to us. We process your personal data exclusively in accordance with applicable data protection laws, including:

  • Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR)
  • Austrian Data Protection Act (Datenschutzgesetz – DSG)
  • Austrian Telecommunications Act (Telekommunikationsgesetz – TKG), where applicable

This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website and use our services.

3. Categories of Personal Data We Process

Depending on your interaction with us, we may process the following categories of personal data:

Information You Provide Voluntarily

  • Name
  • Email address
  • Telephone number
  • Address
  • Information submitted via contact forms
  • Appointment requests
  • Correspondence with us
  • Other information voluntarily provided by you

Automatically Collected Information

When you visit our website, certain technical information may be collected automatically, including:

  • IP address
  • Browser type and version
  • Device information
  • Operating system
  • Date and time of access
  • Referring website
  • Pages visited
  • Technical log data

4. Purposes and Legal Bases of Processing

We process personal data for the following purposes and based on the following legal grounds:

Contract Performance

(Art. 6(1)(b) GDPR)

  • Processing appointment requests
  • Providing medical and healthcare-related services
  • Communicating regarding requested services
  • Performing pre-contractual measures

Consent

(Art. 6(1)(a) GDPR)

  • Newsletter subscriptions
  • Optional cookies and tracking technologies
  • Marketing communications
  • Contact forms where consent is required

Consent may be withdrawn at any time.

Legitimate Interests

(Art. 6(1)(f) GDPR)

  • Website security and administration
  • Prevention of fraud and abuse
  • Improving website functionality
  • Statistical analysis and performance measurement
  • Assertion, exercise, or defense of legal claims

Legal Obligations

(Art. 6(1)(c) GDPR)

  • Compliance with healthcare regulations
  • Accounting and tax obligations
  • Legal retention requirements
  • Compliance with requests from public authorities

5. Retention of Data

We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law.

Retention periods may vary depending on:

  • Legal obligations
  • Medical record retention requirements
  • Tax and accounting requirements
  • Limitation periods for legal claims

When data is no longer required, it will be securely deleted or anonymized.

6. Recipients of Personal Data

We may share personal data with carefully selected service providers and processors where necessary for the operation of our business.

These may include:

  • IT service providers
  • Website hosting providers
  • Cloud service providers
  • Email and communication providers
  • Marketing service providers
  • Legal and tax advisors
  • Public authorities where legally required

All processors are contractually bound in accordance with Article 28 GDPR.

7. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), appropriate safeguards are implemented in accordance with Chapter V GDPR.

Such safeguards may include:

  • European Commission Adequacy Decisions
  • Standard Contractual Clauses (SCCs)
  • Additional technical and organizational safeguards where required

Further information is available upon request.

8. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Essential Cookies

These cookies are necessary for the operation and security of the website and cannot be disabled.

Analytics and Marketing Cookies

Subject to your consent, we may use cookies and similar technologies to:

  • Analyze website usage
  • Improve user experience
  • Measure website performance
  • Deliver relevant marketing content

You may manage your preferences through our cookie banner at any time.

9. Analytics Services

Where activated through your consent preferences, we may use analytics services such as Google Analytics 4 or equivalent tools.

Analytics data is generally processed in a pseudonymized form and used to better understand website usage and improve our services.

You may withdraw your consent at any time through the cookie settings.

10. Contact Forms and Communication

If you contact us via email, telephone, or contact forms, the information provided will be processed for the purpose of handling your inquiry and any related follow-up communication.

The legal basis is typically:

  • Art. 6(1)(b) GDPR (pre-contractual measures)
  • Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries)

11. Newsletter

If you subscribe to our newsletter, we process your email address based on your consent pursuant to Art. 6(1)(a) GDPR.

You may unsubscribe at any time by using the unsubscribe link contained in every newsletter or by contacting us directly.

12. Your Rights Under GDPR

You have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent at any time

To exercise your rights, please contact us using the details provided above.

13. Right to Lodge a Complaint

If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority.

In Austria:

Austrian Data Protection Authority (Datenschutzbehörde)
Barichgasse 40–42
1030 Vienna, Austria

Website: https://www.dsb.gv.at

14. Automated Decision-Making

We do not use automated decision-making or profiling within the meaning of Article 22 GDPR that produces legal effects concerning you or similarly significantly affects you.

15. Data Security

We implement appropriate technical and organizational measures to protect your personal data against:

  • Unauthorized access
  • Accidental loss
  • Alteration
  • Disclosure
  • Destruction

Security measures are regularly reviewed and updated.

16. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy to reflect changes in legal requirements, regulatory guidance, or our services.

The latest version will always be available on our website.