Privacy policy

Wilden and Tuszing DLC
Lerou 5, House 1
7080 Pyla, Larnaca
Cyprus
Represented by: Dr. Yvonne Tuszing, M.D. (Director) and Dr. medic. Isabella Wilden (Director)
Registration no.: HE 498892
Phone: +49 1512 2682 778
Email: info@hormonexperten.de

For any question about data protection, please write to the email address above.

• This website is purely informational and sets no cookies.
• Booking, questionnaires, the patient portal, video consultations and payment run on Pabau, an external practice management system. When you click a booking button, you leave this website.
• We process your health data only for your treatment and under medical confidentiality.

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA.

When a page is requested, Vercel automatically processes technically necessary data: IP address, date and time, the page requested, the referring URL, browser and operating system. This data is needed to deliver the website, keep it stable and secure, and fend off attacks. We do not combine it with other data.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the website securely and quickly.

Vercel acts as our service provider and may also process data in the USA. Transfers outside the EU rely on the safeguards in Chapter V GDPR, such as an adequacy decision or standard contractual clauses.

More information: vercel.com/legal/privacy-policy

This website sets no cookies, so we show no cookie banner.

Fonts are loaded from our own server. No connection is made to Google Fonts or other font providers when a page loads.

Pabau uses its own cookies on its own pages (booking, patient portal) where needed to run them, and informs you about them there.

We use Vercel Web Analytics to see in aggregate how this website is used, for example which pages are visited and how often. It sets no cookies. It records the page visited, the referrer, country, browser, operating system and device type. Visitors are told apart only by a hash of request data that changes daily and is discarded after 24 hours. No profiles are created across several days or websites.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in improving our website on the basis of anonymous statistics. For the provider and transfers outside the EU, see “Hosting and server log files”.

If you contact us, we process your details (name, contact details, content of your message) to answer your request.

The legal basis is Art. 6(1)(b) GDPR if your request relates to treatment or to arranging it, and otherwise Art. 6(1)(f) GDPR (our legitimate interest in answering requests). If you choose to tell us about your health, we process that information under Art. 9(2)(h) GDPR.

Our mailboxes are hosted by an email provider in Germany (STRATO). If you write to us on WhatsApp, WhatsApp’s operator also processes your data under its own terms; please use WhatsApp for organisational questions only.

Please note: ordinary email is not end-to-end encrypted. Please send findings and other medical documents through the Pabau patient portal, not by email.

We delete requests once they are closed, unless a statutory retention obligation applies.

We use the practice software Pabau for booking, medical history and consent forms, uploading findings, appointment reminders, video consultations, invoices and the patient record.

The provider is Pabau Ltd, United Kingdom.

The booking buttons on this website are plain links. The page run by Pabau opens only when you click one; no data is sent to Pabau before that.

We process in particular:

• master data: name, date of birth, address, email address, phone number
• appointment data: the service booked, date, time, reminders
• health data: answers in questionnaires, uploaded findings, treatment records, prescriptions
• video consultation data: technical connection data (such as IP address and device type), start and duration
• invoice and payment data

Video consultations are not recorded as a matter of principle. Recording takes place only with your explicit consent.

Legal bases: Art. 6(1)(b) GDPR (treatment contract); for health data, Art. 9(2)(h) and (3) GDPR (healthcare provided by medical staff bound by confidentiality); and Art. 6(1)(c) GDPR where the law requires us to keep records.

Where needed for your treatment, we share data with laboratories, pharmacies and other doctors involved in your care. Otherwise we disclose health data only with your consent or where the law requires it.

Pabau acts as our service provider and may use sub-processors of its own. If data is processed in the United Kingdom, the transfer relies on the European Commission’s adequacy decision for the United Kingdom (Art. 45 GDPR).

You are not obliged to give us your data, but we cannot treat you without the information needed for your care.

Retention: we keep medical records for 10 years after treatment ends and invoice data for the statutory tax retention periods, unless the applicable law requires otherwise.

Payments at booking are handled through the booking system by a payment service provider. Depending on the payment method you choose, the provider, your bank or the card or payment scheme receives the data needed for the payment (such as name, amount, and card or account details). They may be partly responsible for this processing themselves, for example to prevent fraud or meet legal obligations. They receive no health data, and we do not see your full card details.

The legal basis is Art. 6(1)(b) GDPR.

This website contains links to other providers, such as Pabau, review platforms and social networks. These pages load only when you click the link. The respective provider is responsible for the data processing there.

You have the right to:

• access the data we hold about you (Art. 15 GDPR)
• have incorrect data corrected (Art. 16 GDPR)
• have data erased (Art. 17 GDPR), unless a statutory retention obligation applies
• restrict processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• withdraw consent at any time, with effect for the future (Art. 7(3) GDPR)

Right to object (Art. 21 GDPR): where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We then stop processing the data, unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves to establish, exercise or defend legal claims.

An email to info@hormonexperten.de is all it takes.

You may complain to a data protection supervisory authority, in particular in the EU member state where you live or work or where the alleged infringement took place (Art. 77 GDPR). The authority responsible for us is:

Office of the Commissioner for Personal Data Protection
Iasonos 1, 1082 Nicosia, Cyprus
www.dataprotection.gov.cy

This website and the Pabau pages are transmitted only in encrypted form over HTTPS.

We update this privacy policy when the website or our services change. The version published here applies.