The following information provides an overview of the processing of your personal data and your rights as a data subject in accordance with data protection law.
Information pursuant to Article 13 of the EU General Data Protection Regulation (GDPR):
Data Protection Officer
Luka Nadine, Hietzinger Hauptstraße 136/Top 4, 1130 Vienna, Phone: +43 677 615 359 68
Purpose of Data Processing
Data processing is carried out based on legal requirements to fulfill the treatment contract and the associated obligations. For this purpose, I process your data for invoicing, subsidy applications, appointment coordination, maintaining the patient file, and in emergencies.
Legal Basis for Data Processing
The legal basis for processing your data is Article 9(2)(h) (medical treatment) of the GDPR 2018. Additionally, your data is also processed on the legal grounds of contract fulfillment and vital interests.
Categories of Data Collected
Personal data, contact details, medical data, diagnoses, treatment data, session data, financial data.
Categories of Data Recipients
Your personal data will only be transmitted to third parties when legally required, necessary for invoicing, or in emergencies. Recipients of your personal data include public authorities, tax advisors, legal representatives, supply associations, and health insurance companies.
Storage Duration
Your data will be processed as long as necessary to fulfill the contract, to meet legal (storage) obligations (see Psychotherapy Act – § 16a – Documentation Requirement – retention of documents: at least 15 years), and for asserting or defending (potential) legal claims within the applicable statute of limitations.
Rights of the Data Subject
You have the right to access the personal data concerned, the right to correction or deletion, the right to restrict processing, the right to object to processing, and the right to data portability. Furthermore, you have the right to lodge a complaint with the supervisory authority (in Austria, the Data Protection Authority, Barichgasse 40-42, 1030 Vienna).
Acknowledgment
Your data will be stored in an encrypted folder on an external hard drive, which will be securely stored. I acknowledge that the data protection officer, Luka Nadine, is permitted to store and process all information entrusted to her or otherwise communicated by me, which is necessary for psychotherapy, until further notice, as outlined in the previous sections.
I acknowledge that, in particular, unencrypted transmission of data may result in third parties gaining access to this information, and that the data could be altered. I am aware that this may lead to the disclosure of information.