Privacy policy

Please note: This English version is provided for convenience only. The German version is the legally binding one — zur deutschen Datenschutzerklärung.

1. Controller

The controller for data processing on this website is:

2. Special protection of health data

As a medical practice we may process health data. Such data belongs to the special categories of personal data under Art. 9 GDPR (DSGVO) and enjoys enhanced protection. Through this website we collect only the data necessary for you to contact us (principle of data minimisation, Art. 5(1)(c) GDPR), and we ask you not to submit sensitive health information via the form but to discuss it in person.

3. Hosting

This website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). When the pages are accessed, technically necessary access data (including IP address, time, requested resource, browser type) are processed in order to deliver the site securely and reliably (Art. 6(1)(f) GDPR — legitimate interest in stable operation). A data processing agreement is in place with the provider (Art. 28 GDPR); transfers of data to the USA are based on the European Commission’s standard contractual clauses. Processing is carried out on the basis of a data processing agreement pursuant to Art. 28 GDPR.

4. Contact form and email contact

If you send us an enquiry via the contact form, we process the data you provide (name, email address and/or telephone number, the treatment interest selected where applicable, and your message) in order to handle your enquiry and to get in touch with you.

The legal basis is your consent under Art. 6(1)(a) GDPR and — where your information relates to health — additionally Art. 9(2)(a) GDPR (explicit consent). You give this consent actively via the checkbox in the form. You may withdraw your consent at any time with effect for the future, for example by email to kontakt@dr-hosseini-hno.de

Your enquiry is transmitted to our practice mailbox in encrypted form via an email service within the EU. Your details are stored for as long as is necessary to handle the enquiry and are then deleted, unless statutory retention obligations apply.

5. Audience measurement (Vercel Web Analytics)

We use Vercel Web Analytics for the statistical evaluation of website use. This method works without cookies and without recognising individual people; only aggregated, anonymised metrics (for example pages viewed) are collected. The legal basis is our legitimate interest in designing our services to meet demand (Art. 6(1)(f) GDPR). As no cookies or comparable technologies are stored on your device, no separate consent is required for this.

6. Map display (OpenStreetMap, two-click solution)

The directions map is only loaded once you have actively clicked „Karte laden“ (load map) — a two-click solution. Without this click, no data is transferred to third parties. Only upon the click is a connection established to the servers of the OpenStreetMap Foundation (St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom) in order to load the map tiles; in doing so your IP address is transmitted. The legal basis is your consent given by the click (Art. 6(1)(a) GDPR). The privacy policy of the OpenStreetMap Foundation applies.

7. Fonts

The fonts used are embedded locally on our server (self-hosted). There is no connection to third-party servers (for example Google Fonts); no data is transferred to third parties for this purpose.

8. Your rights

Under the GDPR you have, in particular, the following rights:

• Access to the data stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)

9. Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is:

10. Encryption

For security reasons and to protect the transmission of confidential content, this site uses TLS/SSL encryption (recognisable by “https://” and the padlock symbol in your browser’s address bar).

11. Changes to this privacy policy

We adapt this privacy policy as soon as changes to the website or to the legal framework make this necessary. The version published here at any given time applies.