Dr. Christine Walser DE EN

Legal

Privacy Notice

Information under Art. 13 and 14 GDPR

Note: This is a draft. Please have it reviewed by legal counsel / the Vienna Medical Chamber before publishing under the main domain.

1. Data controller

Dr. med. Christine Walser
Hardtgasse 8/5, 1190 Vienna, Austria
Phone: +43 699 11 1190 85
Email: office@frauenaerztin-walser.net

2. What data we process

In the course of medical treatment we process the following personal data:

  • Master data (name, date of birth, address, contact details, social-insurance number)
  • Health data (medical history, diagnoses, findings, treatments, medication) — special categories under Art. 9 GDPR
  • Insurance data
  • Appointment data and correspondence

3. Legal basis

Processing is based on:

  • Art. 6(1)(b) GDPR — performance of the treatment contract
  • Art. 6(1)(c) GDPR — compliance with legal obligations (Austrian Physicians' Act, social-insurance law)
  • Art. 9(2)(h) GDPR — healthcare, medical diagnosis and treatment
  • Art. 6(1)(a) GDPR — consent (e.g. for non-medical communication)

4. Recipients

We only share your data where necessary for treatment or required by law:

  • Public and private health insurance providers (for billing)
  • Other treating physicians and hospitals (with your consent)
  • Laboratories and diagnostic facilities
  • Pharmacies (when issuing prescriptions)
  • Tax advisors to the extent required by law
  • Online appointment booking via meineakte.at (see section 7)

5. Retention period

Patient records are retained for at least 10 years (§ 51 Austrian Physicians' Act). Billing and tax-related data for 7 years (Austrian Federal Tax Code). Non-medical data is deleted as soon as the purpose of processing no longer applies.

6. Your rights

You have the right to:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR — limited by medical retention obligations)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection (Art. 21 GDPR)
  • Withdrawal of consent with future effect

You may file a complaint with the Austrian Data Protection Authority: www.dsb.gv.at.

7. Website and external services

This website is hosted on Cloudflare Pages. When you visit, technically necessary data (IP address, time, requested page, browser information) is processed for the duration of the connection.

Fonts: We use Google Fonts (loaded from Google servers). Your IP address is transmitted to Google. Privacy policy: policies.google.com/privacy.

Online booking: With your personal access code you are redirected to meineakte.at. The meineakte.at privacy policy applies: meineakte.at/datenschutz.

Cookies: This website sets no tracking cookies. Only technically necessary cookies may be set by the CDN.

8. Necessity of providing data

Providing your data is necessary for proper medical treatment. Without it we cannot provide medical care.

See also: Legal notice

Last updated: May 2026