Privacy policy
The
controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws, as well as other data protection regulations, is:
Praxis 39 General Practitioners and Internists Kurrle Laudenbach Wagner Partnership of Physicians PartG
(Partnership Register, Stuttgart Local Court PR 721299)
Deckerstraße 39
70372 Stuttgart
Phone: 0711 509 409 0
Email: info@praxis39.de
General Information on Data Processing
The protection of your personal data is of great importance to us. We process your data exclusively in accordance with legal provisions, in particular the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and the relevant professional regulations for physicians. With this privacy policy, we inform you about the most important aspects of data processing in connection with our website and our medical practice.
Access to the Website and Server Log Files
Each time you visit our website, our system automatically collects data and information from the visiting computer system. The following data is collected: Information about the browser type and version used, the user’s operating system, the user’s Internet service provider, the user’s IP address, the date and time of access, and the websites from which the user’s system accesses our website.
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session. The legal basis for the temporary storage of the data is Art. 6(1)(f) GDPR. The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. This data is not combined with other data sources.
Contact via Email or Phone
If you contact us via email or phone, the data you provide (e.g., your name, phone number, email address, and the content of your inquiry) will be stored by us to process your request. Processing is based on Article 6(1)(b) of the GDPR, provided your inquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on your consent (Art. 6(1)(a) GDPR) and/or on our legitimate interests (Art. 6(1)(f) GDPR). We delete the data collected in this context once storage is no longer necessary, or restrict processing if statutory retention obligations apply.
Online Appointment Booking via Doctolib
On our website, we offer you the option to book appointments online via the Doctolib service. Doctolib is an external appointment management system operated by Doctolib GmbH, Mehringdamm 51, 10961 Berlin.
When you book an appointment via Doctolib, the following data is collected and processed: last name, first name, email address, phone number, date of birth, reason for the appointment, and, if applicable, any additional information you provide when booking the appointment. This data is processed by Doctolib as a data processor within the meaning of Art. 28 GDPR on our behalf. The legal basis for data processing is Article 6(1)(b) of the GDPR (performance of a contract or pre-contractual measures) and Article 9(2)(h) of the GDPR in conjunction with Section 22(1)(1)(b) of the BDSG, insofar as health data is concerned.
Doctolib stores your data on servers within the European Union and is subject to strict security standards. Doctolib is ISO 27001 certified and complies with the requirements of the GDPR. Doctolib has also been certified as a health data host (HDS) in France. Data processing is carried out on the basis of a data processing agreement between our practice and Doctolib.
For more information on data protection at Doctolib, please refer to Doctolib’s privacy policy at: https://info.doctolib.de
Processing of Patient Data
As part of medical treatment, we process our patients’ personal data and health data. This includes, in particular, master data (name, address, date of birth, insurance information), medical history, diagnoses, treatment measures, and other medical findings. The processing of this data is based on Art. 9(2)(h) of the GDPR in conjunction with § 22(1)(1)(b) of the BDSG for the purposes of preventive healthcare, medical diagnosis, and treatment. The medical duty of confidentiality pursuant to § 203 of the StGB remains unaffected by this.
Disclosure of Data to Third
Parties Your personal data will only be transferred to third parties if this is necessary to fulfill our contractual obligations, if there is a legal obligation to do so, if you have expressly consented, or if this is permissible to safeguard our legitimate interests and is compatible with your interests. Recipients may include, in particular: other physicians and medical facilities involved in your treatment, laboratories, billing offices, health insurance companies, and other cost bearers, as well as government agencies within the scope of statutory reporting obligations.
Retention Period
We store your personal data only for as long as is necessary for the respective processing purposes or as required by statutory retention periods. For medical documentation, a retention period of ten years following the completion of treatment applies in accordance with Section 10(3) of the (Model) Professional Code of Conduct for Physicians and Section 630f(3) of the German Civil Code (BGB), unless other regulations provide for longer retention periods.
Your Rights as a Data Subject
You have the following rights with respect to your personal data: the right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to object to processing (Art. 21 GDPR), and the right to data portability (Art. 20 GDPR).
To the extent that the processing of your data is based on consent, you have the right to withdraw this consent at any time with effect for the future. The lawfulness of the processing carried out on the basis of consent until its withdrawal remains unaffected.
Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR. The supervisory authority responsible for us is: the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Heilbronner Straße 35, 70191 Stuttgart
SSL or TLS Encryption
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the lock icon in your browser bar.
Updates and Changes to
This Privacy Policy This privacy policy is currently valid and is effective as of April 1, 2026. Due to the further development of our website or changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The most current version of the privacy policy can be accessed at any time on this website.