Privacy policy

We have drafted this privacy policy in order to explain to you, in accordance with the requirements of the EU General Data Protection Regulation, what information we collect, how we use data and what choices you have as a visitor to this website.

Unfortunately, it is in the nature of the subject matter that these explanations sound very technical; in preparing them, however, we have endeavoured to describe the most important matters as simply and clearly as possible.

When you visit websites today, certain information is created and stored automatically, and this is also the case on this website.

When you visit our website as you are doing right now, our web server (the computer on which this website is stored) automatically stores data such as the IP address of your device, the addresses of the subpages visited, details about your browser (e.g. Chrome, Firefox, Edge,…) and the date and time. We do not use this data and, as a rule, do not pass it on, but we cannot rule out that this data may be inspected in the event of unlawful conduct.

Personal data that you transmit to us electronically on this website, such as your name, e-mail address, address or other personal details in the course of submitting a form or comments on the blog, is used by us, together with the time and the IP address, only for the purpose stated in each case, is kept securely and is not passed on to third parties.

We therefore use your personal data only for communication with those visitors who expressly wish to be in contact and for the handling of the services and products offered on this website. We do not pass on your personal data without your consent, but we cannot rule out that this data may be inspected in the event of unlawful conduct.

In connection with your access, data that may allow identification (for example IP address, date, time and name of the requested file) is temporarily stored on our server for the purposes of data security. No analysis takes place, except for statistical purposes in anonymised form or for security measures.

When you contact us directly (e.g. via contact form, e-mail, telephone or by other means), the user's details are processed for the handling of the contact enquiry and its processing pursuant to Art. 6 para. 1 lit. b) GDPR. If you disclose to us particularly sensitive personal data (such as health data), or if such data arises in connection with the handling and performance of the contractual relationship, we process it in accordance with the relevant European and national legal provisions (see the paragraph on “sensitive data” above).

In principle, the following types of data may be collected on our website:

• Usage data (e.g. pages visited, interest in content, access times).
• Meta and communication data (e.g. device information, IP addresses)

We process this data for the following purposes:

• Provision of the online offering, including the functions and content offered.
• Security measures
• Reach measurement

If you send us personal data by e-mail – that is, outside of this website – we cannot guarantee secure transmission or the protection of your data. We recommend that you never send confidential data by e-mail without encryption.

By filling in online forms, booking an appointment or making a written enquiry, you agree that the data you enter (name, address, telephone number, e-mail address, date of birth) may be used for the purpose of maintaining contact – in particular appointment reminders, sending of information, newsletters and advertising material by e-mail and SMS. These consents can be withdrawn at any time by e-mail to Dermacare, stating your contact details. The withdrawal does not affect the lawfulness of the processing carried out until then. Data is not passed on to third parties.

Test results are sensitive data and have therefore been protected by medical confidentiality for centuries. We take this responsibility very seriously and therefore inform you, pursuant to Art. 13 EU General Data Protection Regulation (GDPR), about the handling of your data, which we need for the correct preparation of findings and for billing (in particular with the health insurance funds) and which we process on the basis of Art. 6/1/b and 9/2/h GDPR.

If the data required for the performance of the contract (preparation of the findings and billing) is not provided, we cannot perform the contract with you.

In the interest of optimal patient care, we make your specific data available electronically to the laboratory carrying out the analysis. You receive your findings directly from the laboratory carrying out the analysis.

In the case of infectious diseases, we and our partner laboratory are obliged to report to the health authority (Epidemic Act, Venereal Diseases Act; Art. 9/2/i GDPR).

For some analyses, we send your samples together with the associated data to accredited laboratories in Austria or Germany, which are of course also subject to professional secrecy and the GDPR.

Furthermore, we may disclose your personal data to the following categories of recipients: our employees, who need it to fulfil contractual and legal obligations, laboratories, external service providers (e.g. IT service providers) and partners who provide data processing services for us or who otherwise process personal data for the purposes stated here.

Findings and thus particularly sensitive data, as provided for in § 51 of the Austrian Medical Act (Ärztegesetz), are kept by us for at least 10 years, securely and protected against unauthorised access.

You have the right at any time, in accordance with the statutory provisions, to obtain information about your stored data and, in addition, the rights to rectification, erasure, restriction, objection and data portability, as well as the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde).

Automated decisions within the meaning of the GDPR do not take place.

Our employees are available to you for the exercise of these rights and for further information. If you have concerns or comments regarding any of these points or do not agree with them, we ask that you inform us of this at the registration desk before handing over your referral.

In principle, you have the rights of access, rectification, erasure, restriction, data portability, withdrawal and objection. If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed in some way, you can lodge a complaint with the supervisory authority. In Austria this is the Austrian Data Protection Authority (Datenschutzbehörde), whose website you can find at https://www.dsb.gv.at/.

We use https to transmit data securely, protected against interception, over the internet. By using TLS (Transport Layer Security), an encryption protocol for secure data transmission on the internet, we can ensure the protection of confidential data. You can recognise the use of this protection of data transmission by the small padlock symbol at the top left of the browser and by the use of the scheme https as part of our internet address.

Our website uses HTTP cookies to store user-specific data. A cookie is a short data packet that is exchanged between web browser and web server, but is entirely meaningless to them and only acquires a meaning for the web application, e.g. an online shop, such as the contents of a virtual shopping basket.

There are two types of cookies: first-party cookies are created by our website, third-party cookies are created by other websites (e.g. Google Analytics). Three categories of cookies are distinguished: strictly necessary cookies to ensure basic functions of the website, functional cookies to ensure the performance of the website, and targeting cookies to improve the user experience.

We use cookies to make our website more user-friendly. Some cookies remain stored on your end device until you delete them. They enable us to recognise your browser on your next visit.

If you do not want this, you can set up your browser so that it informs you about the placing of cookies and you only allow this on a case-by-case basis. You can delete cookies that are already on your computer or deactivate cookies at any time. The procedure for doing so differs depending on the browser; it is best to look for the instructions on Google using the search term “delete cookies Chrome” or “deactivate cookies Chrome” in the case of a Chrome browser, or to replace the word “Chrome” with the name of your browser, e.g. Edge, Firefox, Safari. If you generally do not permit us to use cookies, i.e. deactivate them via the browser settings, some functions and pages may not work as expected.

To manage the cookies and similar technologies (tracking pixels, web beacons, etc.) used and the related consents, we use the consent tool "Real Cookie Banner". You can find details on how "Real Cookie Banner" works at https://devowl.io/rcb/data-processing/.

The legal bases for the processing of personal data in this context are Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the management of the cookies and similar technologies used and of the related consents.

The provision of the personal data is neither required by contract nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we cannot manage your consents.

If you sign up for our newsletter, you transmit the personal data mentioned above and give us the right to contact you by e-mail. We use the data stored in the course of the newsletter registration exclusively for our newsletter and do not pass it on.

If you unsubscribe from the newsletter – you will find the link for this at the very bottom of every newsletter – we will delete all data that was stored in connection with the newsletter registration.

We use Google Fonts from Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on our website. Google Fonts is used without authentication and no cookies are sent to the Google Fonts API. If you have a Google account, none of your Google account data is transmitted to Google while Google Fonts is being used. Google merely records the use of CSS and of the fonts used and stores this data securely. You can find more on these and further questions at https://developers.google.com/fonts/faq.

You can read about which data is collected by Google and what this data is used for at https://www.google.com/intl/de/policies/privacy/.

We use Google Maps from Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on our website.

By using the functions of this map, data is transmitted to Google. You can read about which data is collected by Google and what this data is used for at https://www.google.com/intl/de/policies/privacy/.

On this website we use Google Analytics from Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) to statistically evaluate visitor data. In doing so, Google Analytics uses targeting cookies.

You can find more detailed information on the terms of use and data protection at http://www.google.com/analytics/terms/de.html and at https://support.google.com/analytics/answer/6004245?hl=de.

Our concern within the meaning of the GDPR is the improvement of our offering and of our web presence. Because the privacy of our users is important to us, user data is pseudonymised. Data processing takes place on the basis of the statutory provisions of § 96 para. 3 TKG and of Art. 6 para. 1 lit. a (consent) and/or f (legitimate interest) of the GDPR.

With the help of the browser add-on for deactivation of Google Analytics JavaScript (ga.js, analytics.js, dc.js), website visitors can prevent Google Analytics from using their data.

You can prevent the collection of the data generated by the cookie and relating to your use of the website by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

We have concluded a direct customer agreement with Google for the use of Google Analytics by accepting the “Data Processing Addendum” in Google Analytics.

You can find out more about the data processing addendum for Google Analytics here: https://support.google.com/analytics/answer/3379636?hl=de&utm_id=ad

We have switched on the advertising reporting features in Google Analytics. The reports on demographics and interests contain information on age, gender and interests. This allows us to form a better picture of our users – without being able to assign this data to individual persons. You can find out more about the advertising features at https://support.google.com/analytics/answer/3450482?hl=de_AT&utm_id=ad.

You can end the use of the activities and information of your Google account under “Ads Settings” at https://adssettings.google.com/authenticated by means of a checkbox.

On this website we use functions of Facebook, a social media network operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland. You can read about which functions (social plug-ins) Facebook provides at https://developers.facebook.com/docs/plugins/. By visiting our website, information may be transmitted to Facebook. If you have a Facebook account, Facebook may assign this data to your personal account. If you do not want this, please log out of Facebook. You can find the privacy policies, which state what information Facebook collects and how it uses it, at https://www.facebook.com/policy.php.

On this site we use the video service YouTube, operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

By calling up pages of our website that have YouTube videos integrated, data is transmitted to YouTube, stored and evaluated. If you have a YouTube account and are logged in, this data is assigned to your personal account and the data stored in it.

You can read about which data is collected by Google and what this data is used for at https://www.google.com/intl/de/policies/privacy/.

On this website we use functions of Twitter, a social network operated by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland.

As a result, personal data may also be transmitted to Twitter. We do not monitor this data exchange and do not store anything about it.

If you would like to know more about Twitter's use of your data, you will find all the information in the Twitter privacy policy at https://twitter.com/de/privacy.

If you have a Twitter account, you can change your privacy settings in the account settings at https://twitter.com/settings/account.

On our website we use functions of Google+, the social network of Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA).

If you wish to make full use of the functions offered, you need a Google account.

Even when the functions (Google +1 buttons, Google+ badge, follow button, Google+ share button and link, sign-in button, Hangout button) are used without a Google account, information is already transmitted to Google.

If you are logged in with your Google account while using the functions listed above, your data will, depending on the settings at https://plus.google.com/settings/, be published worldwide and collected and evaluated by Google.

You can read about which data is collected by Google and what this data is used for at https://www.google.com/intl/de/policies/privacy/.

The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is:

Dermacare GmbH Gonzagagasse 2/5 1010 Wien / Österreich

Tel.: 01-532 03 34 Email: info(at)dermacare(dot)at

The data protection officer of the controller responsible for processing can be reached as follows:

Dermacare GmbH for the attention of the data protection officer personally Gonzagagasse 2/5 1010 Wien / Österreich

Tel.: 01-532 03 34 Email: info(at)dermacare(dot)at

Source: Created with the Datenschutz Generator by AdSimple