Legal
Privacy Notice
Information under Art. 13 and 14 GDPR
1. Data controller
Dr. med. Christine Walser
Hardtgasse 8/5, 1190 Vienna, Austria
Phone: +43 699 11 1190 85
Email: office@frauenaerztin-walser.net
2. What data we process
In the course of medical treatment we process the following personal data:
- Master data (name, date of birth, address, contact details, social-insurance number)
- Health data (medical history, diagnoses, findings, treatments, medication) — special categories under Art. 9 GDPR
- Insurance data
- Appointment data and correspondence
3. Legal basis
Processing is based on:
- Art. 6(1)(b) GDPR — performance of the treatment contract
- Art. 6(1)(c) GDPR — compliance with legal obligations (Austrian Physicians' Act, social-insurance law)
- Art. 9(2)(h) GDPR — healthcare, medical diagnosis and treatment
- Art. 6(1)(a) GDPR — consent (e.g. for non-medical communication)
4. Recipients
We only share your data where necessary for treatment or required by law:
- Public and private health insurance providers (for billing)
- Other treating physicians and hospitals (with your consent)
- Laboratories and diagnostic facilities
- Pharmacies (when issuing prescriptions)
- Tax advisors to the extent required by law
- Online appointment booking via meineakte.at (see section 7)
5. Retention period
Patient records are retained for at least 10 years (§ 51 Austrian Physicians' Act). Billing and tax-related data for 7 years (Austrian Federal Tax Code). Non-medical data is deleted as soon as the purpose of processing no longer applies.
6. Your rights
You have the right to:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR — limited by medical retention obligations)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR)
- Withdrawal of consent with future effect
You may file a complaint with the Austrian Data Protection Authority: www.dsb.gv.at.
7. Website and external services
This website is hosted on Cloudflare Pages. When you visit, technically necessary data (IP address, time, requested page, browser information) is processed for the duration of the connection.
Fonts: We use Google Fonts (loaded from Google servers). Your IP address is transmitted to Google. Privacy policy: policies.google.com/privacy.
Online booking: With your personal access code you are redirected to meineakte.at. The meineakte.at privacy policy applies: meineakte.at/datenschutz.
Cookies: This website sets no tracking cookies. Only technically necessary cookies may be set by the CDN.
8. Necessity of providing data
Providing your data is necessary for proper medical treatment. Without it we cannot provide medical care.
See also: Legal notice
Last updated: May 2026