Legal

privacy policy

This is a courtesy translation. Only the German version is legally binding.

The controller for this website is

Long Covid Online Klinik
Cormedis FlexCo
Speisinger Straße 25/9
1130 Vienna, Austria
FN 680935
www.longcovidklinik.at
Email: info@pais-care.online

For health data processed in docsy as part of treatment, the treating private physician is the controller; details are set out in the privacy policy of MediPrime GmbH.

Our data protection officer is heyData GmbH, Schützenstraße 5, 10117 Berlin, Germany, www.heydata.eu, datenschutz@heydata.eu.

1. Preamble

1.1. The protection of natural persons in the processing of personal data is a fundamental right that we take very seriously. All data processing complies with the EU General Data Protection Regulation (GDPR) and the relevant laws of the Republic of Austria.

1.2. This policy informs you how we, as controller, process your personal data in connection with this website and what rights you have as a data subject. Personal data is any data that can be related to you personally, e.g. name, address, email addresses.

2. Purpose and legal basis of processing

2.1. On our website “www.longcovidklinik.at” we present our company and wish to get in touch with our clients. The data we collect when you visit our website is used to provide and improve this website. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR in being able to offer this website.

3. Data processed when you visit our website

This website provides information and runs a waiting list (see section 4). Booking and telemedicine treatment take place via the systems of MediPrime GmbH (practice software docsy; for patients, the MediPrime app), which provides its own privacy policy that patients accept separately there. No findings, diagnoses or other treatment data are collected via this website.

4. Waiting list

4.1. If you join the waiting list, we process your first name, last name, email address, whether the appointment is for an adult or a child/adolescent, whether it is a first or follow-up appointment, and the time of your sign-up and consent.

4.2. The sole purpose is to notify you by email as soon as new appointments are released. Because a request for an appointment on a platform specialising in PAIVS and ME/CFS may allow conclusions about your health, we base the processing on your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR). Consent is voluntary; without it, sign-up is not possible.

4.3. You can withdraw your consent at any time with effect for the future, via the unsubscribe link in every email or by email to info@pais-care.online. The lawfulness of processing carried out before withdrawal remains unaffected.

4.4. The data is deleted as soon as you unsubscribe, and at the latest 12 months after you signed up. Sign-ups that you do not confirm via the link in the confirmation email are deleted after 30 days. The waiting list is run using Wix Forms and Wix email sending (see section 8). It is not passed on to the platform's physicians; booking itself takes place via the booking system of MediPrime GmbH.

5. Data transfers

Your data is transferred only where necessary to perform a contract or where you have explicitly consented. Transfers to third parties for marketing purposes take place only with your explicit consent.

6. Your rights

6.1. You have the following rights regarding your personal data:

• right of access,
• right to rectification or erasure,
• right to restriction of processing,
• right to object to processing,
• right to data portability,
• right to withdraw consent.

6.2. You also have the right to lodge a complaint with a data protection supervisory authority (for us: the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at) about the processing of your personal data by our company.

7. Patient management software and transfers to third parties

7.1. To manage the practice and patient data we use the practice software “docsy” by MediPrime GmbH, Mohsgasse 11/3-5, 1030 Vienna. The software is used for documentation, appointment management, billing and organisational purposes as part of medical activities. We are joint controllers, i.e. we store data jointly in the MediPrime GmbH system.

7.2. MediPrime GmbH acts as a processor and processes your data exclusively on our behalf and according to our instructions. Data is stored exclusively on servers in Austria. Sensitive medical data is stored encrypted. Access is only via a secure connection (HTTPS). Further information at docsy.at.

7.3. It may also be necessary to transfer medical records to another treating physician or a hospital. For tax purposes, the invoicing data for our services is transferred to our tax adviser; medical history data is of course not included. In individual cases data may also be forwarded to pharmacies or the Medical Chamber.

8. Processing of personal data by Wix.com

8.1. Our website is hosted on the platform of Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel (“Wix”). Personal data of our website visitors is therefore also processed on Wix servers. The website processes: server log files (e.g. IP address, time) for secure operation, and the details from the waiting-list form (section 4), including sending the notification emails.

8.2. Wix acts as a processor within the meaning of Art. 28 GDPR. We have concluded a data processing agreement with Wix ensuring that your data is processed only according to our instructions and in compliance with applicable data protection law.

8.3. Wix may also process data outside the European Union, in particular in Israel and the USA. Under the GDPR, Wix is obliged to provide appropriate safeguards. The European Commission recognises Israel as providing an adequate level of data protection. Where data is transferred to third countries, Wix provides appropriate safeguards such as standard contractual clauses.

8.4. The data processed includes in particular master data (e.g. name), contact data (e.g. email address), IP address and technical information (e.g. browser, device type).

8.5. Further information on data processing by Wix can be found in the Wix privacy policy at https://de.wix.com/about/privacy.

9. Fonts

The fonts used on this website are loaded from our own web space. No connection to servers of Google or other font providers is made when you visit the site.

10. Retention period

10.1. Technical data is deleted after 12 months.

10.2. Data we receive by email is deleted according to the contractual periods if the enquiry relates to a contract, otherwise once storage is no longer necessary, or its processing is restricted if statutory retention obligations apply. If storage is based solely on your consent and you withdraw it, we will delete the data immediately in accordance with Art. 17(1)(b) GDPR. Your personal data is kept only as long as necessary for the respective purposes.

10.3. In individual cases data may be stored for longer (e.g. as evidence for court proceedings). In that case it is deleted once the purpose of the extended storage has been achieved.

11. Place of storage, type of data collection

11.1. All data processing on our website and communications traffic take place within the EU/EEA, unless exceptions apply to individual services such as Wix, which are expressly mentioned in this policy.

11.2. Apart from technically necessary data (such as your device's IP address), only data you enter deliberately is processed. We do not collect data from people who have given no reason for storing it.

12. Cookies and local storage

This website does not set any cookies for statistics or marketing. When the waiting-list form is submitted, a technically necessary anonymous access token is requested from Wix so that your sign-up can be transmitted (Section 165(3) Austrian Telecommunications Act 2021).

13. External links / YouTube

We link to our videos on YouTube. Only when you click the link are you taken to YouTube (Google Ireland Ltd.), where its own privacy terms apply. Videos are not embedded directly on this website.

14. Retention

Server logs: deleted after 12 months at the latest. Waiting list: deleted when you unsubscribe, at the latest 12 months after sign-up; unconfirmed sign-ups after 30 days. Email enquiries: deleted once resolved, at the latest after 6 months. Medical treatment records are not kept on the website but in docsy by the treating physician, for the statutory periods.

Vienna, 30 September 2026