1. Controller
Dental Practice Dr. Valentina Baldoni
Egger-Lienz-Straße 12 A, EG
6020 Innsbruck
Austria
Phone: 0512 / 312025
E-Mail: praxis@zahnarzt-baldoni.at

2. General Information on Data Processing
The protection of your personal data is of particular concern to us. We therefore process your data exclusively on the basis of the statutory provisions (GDPR, DSG, TKG 2003).
In this privacy policy, we inform you about the most important aspects of data processing in the context of our website and our practice.

3. Data Processing in the Context of Dental Treatment
3.1 Purpose and Legal Basis
We process personal data and health data for the purpose of dental treatment and care. The legal basis for this is:

Art. 6 para. 1 lit. b GDPR (performance of a contract)
Art. 9 para. 2 lit. h GDPR (healthcare)
Dental Act (ZÄG) – statutory documentation obligation

3.2 Categories of Data Processed
Master data (name, address, date of birth, contact details)
Insurance data (social security number, health insurance)
Health data (medical history, findings, diagnoses, treatments, X-rays)
Billing data

3.3 Retention Period
Pursuant to § 42 of the Dental Act, we are obliged to retain patient documentation for at least 10 years after the conclusion of treatment. Longer retention periods apply to certain documents (e.g. X-rays).

3.4 Recipients of Data
Your data will only be passed on to third parties if this is required by law or you have expressly consented:

Social insurance institutions (billing)
Dental laboratories (for dental prosthetics)
Referrals to specialists (with your consent)
Tax advisors (anonymised billing data)

4. Contact
4.1 Contact Form and E-Mail
If you contact us via the contact form or e-mail, your details will be stored for the purpose of processing the enquiry and in the event of follow-up questions.
Legal basis: Art. 6 para. 1 lit. b GDPR (pre-contractual measures) or Art. 6 para. 1 lit. f GDPR (legitimate interest in responding to enquiries).
Retention period: Your data will be deleted after the enquiry has been processed, unless statutory retention obligations apply.

4.2 Online Appointment Booking
When booking an appointment online, the data you enter will be processed for the purpose of scheduling and managing appointments.
Legal basis: Art. 6 para. 1 lit. b GDPR (initiation of a contract).

5. Website and Technical Data
5.1 Server Log Files
Each time our website is accessed, the following data is automatically collected and stored in server log files:

IP address (anonymised)
Date and time of access
Page accessed
Browser type and version
Operating system

This data cannot be attributed to specific individuals. It is not combined with other data sources.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in the technical functionality and security of the website).
Retention period: Log files are automatically deleted after 14 days.

5.2 Cookies
Our website uses cookies. These are small text files stored on your device.
Technically necessary cookies
These cookies are required for the operation of the website and cannot be deactivated.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest).
Analytics cookies (optional)
With your consent, we use cookies to analyse website usage.
Legal basis: Art. 6 para. 1 lit. a GDPR (consent).
You can change your cookie settings at any time via the cookie banner on our website.

6. Your Rights
You have the right at any time to:

Access (Art. 15 GDPR) – information about your stored data
Rectification (Art. 16 GDPR) – correction of inaccurate data
Erasure (Art. 17 GDPR) – deletion of your data, provided no statutory retention obligations apply
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection (Art. 21 GDPR) – against processing based on legitimate interests
Withdrawal of consent (Art. 7 para. 3 GDPR) – at any time with effect for the future

To exercise your rights, you can contact us at any time.

7. Right to Lodge a Complaint
You have the right to lodge a complaint with the competent supervisory authority:
Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
Phone: +43 1 52 152-0
E-Mail: dsb@dsb.gv.at
Website: www.dsb.gv.at

8. Data Security
We employ technical and organisational security measures to protect your data against accidental or deliberate manipulation, loss, destruction or access by unauthorised persons. Our security measures are continuously improved in line with technological developments.
Data transmission on our website is encrypted via HTTPS.

9. Changes to this Privacy Policy
We reserve the right to adapt this privacy policy to reflect changes in the legal situation or changes to our services. The current version can always be found on our website.