Privacy Policy

The controller responsible for this website is:

Long Covid Online Clinic
Cormedis FlexCo
Speisinger Straße 25/9
1130 Vienna, Austria
Company Register No. (FN): 680935

www.longcovidklinik.at

The physician treating you is the data controller for any health data processed through the docsy platform in connection with your medical treatment. Further information is provided in docsy's Privacy Policy.

Our Data Protection Officer is:

heyData GmbH
Schützenstraße 5
10117 Berlin, Germany
www.heydata.eu
datenschutz@heydata.eu

1. Preamble

1.1

The protection of natural persons with regard to the processing of personal data is a fundamental right that we take very seriously. All processing of personal data is carried out in accordance with the EU General Data Protection Regulation (GDPR) and the applicable laws of the Republic of Austria.

1.2

This Privacy Policy explains how we, as the data controller, process your personal data in connection with this website and our online presence, and informs you about your rights as a data subject.

Personal data means any information relating to an identified or identifiable natural person, such as your name, address, or email address.

2. Purpose and Legal Basis of Data Processing

2.1

On our website, www.longcovidklinik.at, we present our services and provide information about our company. The data collected when you visit our website is necessary to make the website available to you and to continuously improve its functionality.

The legal basis for this processing is our legitimate interest pursuant to Article 6(1)(f) GDPR, namely to provide and maintain this website.

3. Data Processed When You Visit Our Website

This website is provided for informational purposes only.

Appointment bookings and telemedical consultations are carried out exclusively through the docsy platform operated by MediPrime GmbH. Docsy provides its own Privacy Policy, which patients accept separately when using the platform.

No patient data or health data is collected through this website.

4. Transfer of Data

Your personal data will only be transferred where this is necessary for the performance of a contract or where you have expressly consented to such transfer. Personal data will only be transferred to third parties for marketing purposes with your explicit consent.

5. Your Rights

5.1

You have the following rights regarding your personal data:

Right of access
Right to rectification or erasure
Right to restriction of processing
Right to object to processing
Right to data portability

5.2

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority for our company is the Austrian Data Protection Authority (Datenschutzbehörde):

Barichgasse 40–42
1030 Vienna, Austria
www.dsb.gv.at

6. Patient Management Software and Transfer of Data to Third Parties

6.1

For the administration of our medical practice and patient records, we use the practice management software docsy, provided by MediPrime GmbH, Mohsgasse 11/3–5, 1030 Vienna, Austria.

The software is used for medical documentation, appointment scheduling, billing, and other administrative purposes related to medical treatment. We act as joint controllers together with MediPrime GmbH, meaning that patient data is jointly stored within the docsy system (see Section 7 of docsy's Privacy Policy).

6.2

MediPrime GmbH acts as our data processor pursuant to Article 28 GDPR and processes your personal data solely on our behalf and in accordance with our instructions.

All data is stored exclusively on servers located in Austria. Sensitive medical data is stored in encrypted form, and access is protected via secure HTTPS connections.

Further information is available at:

https://www.docsy.at/wp-content/uploads/2024/01/MediPrime-Datenschutzinformation-20240101.pdf

6.3

Where necessary for your medical treatment, your medical records may be transmitted to another treating physician or to a hospital.

For accounting and tax purposes, invoice data relating to our services may be transferred to our tax advisor. Medical records and health information are not included in such transfers.

In individual cases, data may also be transferred to pharmacies or the Austrian Medical Chamber where legally required or necessary for your treatment.

7. Processing of Personal Data by Wix.com

7.1

Our website has been created and is hosted using the website platform provided by Wix.com Ltd., 40 Namal Tel Aviv Street, Tel Aviv 6350671, Israel ("Wix").

Wix provides the technical infrastructure for operating this website. In this context, personal data of visitors may also be processed on Wix servers.

The website processes, in particular:

server log files (e.g. IP address, access time) to ensure secure operation;
information submitted via the contact form to process your inquiries;
registration or application information submitted by physicians.

7.2

Wix acts as a data processor within the meaning of Article 28 GDPR.

We have concluded a Data Processing Agreement (DPA) with Wix to ensure that your personal data is processed exclusively in accordance with our instructions and in compliance with applicable data protection laws.

7.3

Wix may process personal data outside the European Union, particularly in Israel and the United States.

However, Wix is required to implement appropriate safeguards in accordance with the GDPR.

Israel has been recognized by the European Commission as providing an adequate level of data protection.

Where personal data is transferred to other third countries, Wix relies on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs).

7.4

Our website also includes an online shop operated through the Wix platform, allowing customers to purchase products online.

In connection with the ordering process, Wix processes personal data on our behalf.

7.5

The categories of personal data processed include, in particular:

Master data (e.g. name, address)
Contact details (e.g. email address, telephone number)
IP address and technical information (e.g. browser type, device information)

7.6

Further information on Wix's processing of personal data can be found in Wix's Privacy Policy:

https://www.wix.com/about/privacy

8. Data Retention

8.1

Technically required data is deleted from our server after a maximum retention period of 12 months.

8.2

Data received via email or our contact form will be deleted once it is no longer required for the purpose for which it was collected. Where the inquiry relates to a contractual relationship, the applicable statutory retention periods will apply. Where legal retention obligations exist, processing will be restricted accordingly.

If the lawfulness of processing is based solely on your consent and you withdraw that consent, we will delete your personal data without undue delay in accordance with Article 17(1)(b) GDPR.

Personal data will only be retained for as long as necessary to fulfill the respective processing purposes. Health data will be deleted as soon as it is no longer required to be retained for a legally permissible purpose.

8.3

In individual cases, personal data may be retained for a longer period, for example where necessary as evidence in legal proceedings. In such cases, the data will be deleted once the purpose requiring the extended retention period no longer exists.

9. Place of Storage and Collection of Data

9.1

All data processing activities relating to this website and all electronic communications are carried out exclusively within the European Union (EU) or the European Economic Area (EEA), unless expressly stated otherwise in this Privacy Policy (for example, with regard to Wix).

9.2

Apart from technically necessary information (such as the IP address of your device), we only process personal data that you voluntarily provide.

We do not collect or store personal data from individuals without a legitimate reason for doing so.

10. Cookies

This website, hosted by Wix, uses cookies and similar technologies.

Technically necessary cookies are processed on the basis of our legitimate interest.

All non-essential cookies, in particular those used for analytics or marketing purposes, are only placed after you have given your consent through the cookie banner in accordance with Section 165 of the Austrian Telecommunications Act (TKG 2021) and Article 6(1)(a) GDPR.

You may withdraw your consent at any time with future effect.

11. External Links / YouTube

Our website contains external links to videos hosted on YouTube.

Only after you click such a link will you be redirected to YouTube, a service provided by Google Ireland Ltd., where YouTube's own Privacy Policy applies.

If videos are exceptionally embedded directly on our website, we will obtain your prior consent using a two-click solution before any connection to YouTube is established.

12. Retention Periods

Server log files: deleted after a maximum of 12 months.
Contact inquiries: deleted once the request has been completed, and no later than six months thereafter.
Application documents: deleted once the recruitment process has been completed.

Medical treatment records are not stored on this website. They are stored exclusively within the docsy platform by the treating physician in accordance with the applicable statutory retention periods.

Vienna, 5 August 2026