Privacy Policy
Information on how we process and protect your personal data
Summary
We process your personal data only to the extent that this is technically essential for the operation of the website or for the practice functions you use. For selected functions, such as booking appointments, you submit your data to Dr. Wait - our patient app (see below).
You may have already noticed that you do not need to accept cookies on our site - we do not use any analytics or marketing cookies. We are, however, always delighted to receive home-baked biscuits.
Data Controller
The data controller for data processing on this website is:
Provision of the Website
When you access this website, the web server processes connection data that is technically necessary. This may include, in particular, the IP address, the date and time of access, the page accessed, the browser type and the operating system.
This processing is necessary to ensure the website is provided securely and without technical faults. The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure and reliable operation of our website.
The website is hosted by the following service provider:
STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin
We have a data processing agreement in place with the web host. In the access logs available to us, hostnames and IP addresses are anonymised by STRATO. The access logs are made available to us for the last six weeks. Older logs are not available to us.
Dr. Wait
Our website incorporates features provided by Dr. Wait UG (limited liability), Rebhuhnweg 2, 75365 Calw. Depending on the feature accessed, these include, in particular, the display of opening hours, appointment booking, video consultations, and the ordering of prescriptions and medical certificates. You are probably already familiar with these from our separate app - Dr. Wait - which you can use to book your appointment with us.
When loading and using these features, a connection is established with Dr. Wait's systems. In the process, technical connection data and the data you enter within the Dr. Wait feature are processed.
When booking an appointment, the following data in particular may be processed:
- Name
- Contact details
- Date of birth
- Appointment time and type
- Selected practitioner
- Any messages entered
Dr. Wait processes patient data as a data processor on our behalf under a contract in accordance with Article 28 GDPR, while processing certain technical operational and session data under its own responsibility. Technical provision is based on Article 6(1)(f) GDPR (our legitimate interest in digital service provision). Processing of the data you enter is carried out to fulfill requested practice and appointment services based on Article 6(1)(b) GDPR (and Article 9(2)(h) GDPR where health data is processed). Technically necessary browser storage occurs pursuant to Section 25(2)(2) TDDDG. Dr. Wait does not use any analytics, tracking, or marketing cookies. Our legitimate interest lies in ensuring that the digital practice functions are provided in a secure, functional and user-friendly manner.
Information marked as mandatory fields is required in order to process the relevant enquiry or appointment booking. Without this information, the function in question cannot be used. Appointments and associated patient data are stored for our configured retention period of seven days and subsequently deleted automatically. Audio and video data from video consultations are not stored permanently, and technical server log files are deleted after seven days at the latest.
Dr. Wait uses other service providers to operate its platform, in particular for hosting and the sending of emails and text messages. Where data is processed outside the European Union or European Economic Area, transfers take place on the basis of the European Commission's Standard Contractual Clauses.
Contacting Us
If you contact us by telephone or email, we will process the data you provide in order to deal with your enquiry. Where processing is based on Article 6(1)(f) of the GDPR, our legitimate interest lies in the proper handling and response to your enquiry.
Depending on the content of the enquiry, processing is carried out on the basis of Article 6(1)(b) or (f) of the GDPR. Where you provide us with health data, processing is also carried out on the basis of Article 9(2)(h) of the GDPR.
We will delete the data as soon as it is no longer required for processing and there are no statutory retention obligations preventing us from doing so.
Please do not send us any medical information by email. These emails are not end-to-end encrypted.
Your Rights
Subject to the statutory requirements, you have the right to:
- Access your personal data
- Have inaccurate data rectified
- Have your data erased
- Restrict processing
- Data portability
- Object to processing
You may withdraw any consent you have given at any time with effect for the future.
To exercise your rights, you can contact us using the contact details provided above or speak to us about this during your next appointment at our practice.
Last updated: July 2026