1. Data Controller

Dr. David D’Andrea
Rotenhausgasse 6 - TOP 4 - 1090 Vienna - Austria
Phone: +43 681 10126018
Email: ordi@urologie-dandrea.at

2. General Data Collection

When you visit urologie-dandrea.at, we do not use cookies and do not perform user tracking unless you have given your consent (see section 3). Our web server automatically processes limited technical information that is necessary to deliver the website, including:

• Anonymized IP address
• Date and time of access
• Requested page
• Browser type and operating system

This data is processed exclusively for technical security, error analysis, and performance optimization.

3. Cookies, Google Tag and Conversion Tracking

The basic operation of this website sets no cookies — in particular no analytics, marketing or profiling cookies.

Only with your explicit consent (via the cookie banner) do we use the Google tag (gtag.js) provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Its purpose is to measure how our website is used (Google Analytics, e.g. pages visited) and how our ads perform (Google Ads conversion tracking), for example whether visitors start an appointment booking or make phone contact after clicking one of our ads. This sets cookies (e.g. _ga, _gcl_au) and transfers data such as your IP address, browser information and page interactions to Google. A transfer to the USA cannot be ruled out; Google is certified under the EU-US Data Privacy Framework.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. Without your consent, the Google tag is not loaded, no connection to Google is established for measurement or advertising purposes and no tracking cookies are set (for Google reCAPTCHA on the contact form, see section 4). You can withdraw or renew your consent at any time via the "Cookie Settings" link at the bottom of every page.

For more information, see Google's privacy policy.

4. Contact by Email or Contact Form

If you contact us via email or the contact form, the personal data you provide (such as name, email address, phone number, and message content) will be processed solely for the purpose of handling your inquiry. We ask patients not to transmit sensitive medical information via unencrypted email.

To protect the contact form against automated spam, we use Google reCAPTCHA v3 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). reCAPTCHA is loaded from Google only when you submit the form after accepting this privacy policy; it may process your IP address, browser information and interaction signals and may set a Google cookie. A transfer to the USA cannot be ruled out. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR, given by ticking the privacy checkbox before sending. For details, see Google's privacy policy.

5. Appointment Booking via Third-Party Provider

This website offers online appointment scheduling via an external booking service. When you click a booking link or the appointment bar, the provider's booking page opens in a new browser tab, and personal data you enter there is processed directly by the external provider. We do not control or access the data processed within the booking system. Please consult the privacy policy of the appointment provider for details on their data processing practices.

6. Server Log Files

Our hosting provider automatically collects server log files, which may include:

• IP address (anonymized)
• Browser information
• Date and time of access

These logs are not merged with other data sources and are not used to identify individual visitors.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data. This website uses SSL/TLS encryption (https://), which you can recognize by the padlock symbol in your browser’s address bar.

8. Your Rights

You have the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. To exercise these rights, contact the Data Controller above or file a complaint with the Austrian Data Protection Authority: www.dsb.gv.at.