Protecting your personal data is very important to us. We therefore process your data exclusively in accordance with the applicable legal provisions, in particular the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). This privacy policy informs you about how we process personal data in the course of our medical practice.
1. Data Controller
Eduardo Cortes Roldan and Christina Cortes GbR
Pfarrgasse 32
A-6460 Imst, Austria
Email:
Phone: +43 5412 22280
2. Personal Data We Process
We process personal data that is necessary for medical treatment and for organizational and administrative purposes, including:
- Identification data (name, address, date of birth)
- Contact data (telephone number, email address)
- Health and treatment data
- Billing and payment data
Health data is classified as sensitive data under Art. 9 GDPR and is processed strictly in accordance with legal requirements and medical confidentiality obligations.
3. Purpose of Data Processing
Your data is processed for the following purposes:
- Medical diagnosis, treatment, and care
- Appointment scheduling and administration
- Communication with patients
- Billing of medical services
- Fulfillment of legal documentation and retention obligations
- Legal Basis
4. Data processing is based on:
• Art. 6(1)(b) GDPR (performance of a treatment contract or pre-contractual measures)
• Art. 9(2)(h) GDPR (healthcare and medical diagnosis)
Where applicable, data processing is also based on your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
5. Appointment Reminders & Electronic Communication
We offer appointment reminders and organizational notifications via telephone, SMS, WhatsApp, or email using only the contact details you have provided.
The use of WhatsApp or SMS requires your explicit consent. Please note that WhatsApp may transfer data to servers outside the European Union. Consent is voluntary and can be withdrawn at any time.
Appointment Request Form
When using our appointment request form, we process your name, email address, telephone number, and message. This data is used exclusively to process your request, contact you, and prepare a treatment relationship.
Legal basis:
• Art. 6(1)(b) GDPR
• Art. 9(2)(h) GDPR (if health-related information is provided)
Your data will not be shared with third parties without your explicit consent.
6. Data Disclosure
Your data is disclosed only where legally required, necessary for treatment, or based on your consent. Recipients may include:
- External laboratories
- IT and software service providers
- Tax and billing service providers
- All processors are contractually bound to comply with data protection regulations.
7. Data Retention
Personal data is stored only as long as necessary or as required by law. Medical records are retained for at least ten years.
8. Data Security
We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, or misuse.
9. Your Rights
You have the right to:
- Access your data
- Rectification
- Erasure
- Restriction of processing
- Data portability
- Withdraw consent
- Object to processing
You may lodge a complaint with the Austrian Data Protection Authority if you believe your data is being processed unlawfully.
10. Consent Declarations
Consent for the Use of the Appointment Allocation Form
By submitting the appointment allocation form, I consent to the processing and storage of the personal data I have provided (name, email address, phone number, and the entered text) for the purpose of processing my appointment request, contacting me, and preparing for a treatment relationship. I am aware that I can revoke this consent at any time with effect for the future.
Consent for Appointment Reminder via WhatsApp, SMS, or Email
I explicitly consent to being contacted by the office of Eduardo Cortes Roldan and Christina Cortes GbR for the purpose of appointment reminders and organizational communications via phone, SMS, WhatsApp, or email. I am aware that, especially when using WhatsApp, data may be transmitted to servers outside of the European Union. This consent is given voluntarily and can be revoked at any time without giving any reasons.
11. Contact
For data protection inquiries, please contact:
Last updated: December 2026