Privacy policy

1. Data protection at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to identify you personally. Detailed information on the subject of data protection can be found in the declaration below.

Who is responsible for the data collection on this website?

Data processing on this website is carried out by the website operator. Their contact details can be found in the Imprint of this website.

How do we collect your data?

One way in which your data is collected is through you providing it to us, e.g. via a contact form. Other data is collected automatically by our IT systems when you visit the website — primarily technical data (e.g. internet browser, operating system or time of access).

What do we use your data for?

Part of the data is collected to ensure the error-free provision of the website. Other data may be used to analyse your user behaviour.

What rights do you have regarding your data?

You have the right to receive information about the origin, recipients and purpose of your stored personal data free of charge at any time. You also have the right to request the rectification, blocking or erasure of this data. For this and any other questions about data protection, you can contact us at any time at the address given in the legal notice. You also have the right to lodge a complaint with the responsible supervisory authority.

2. General information and mandatory information

Privacy

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

We would like to point out that data transmission over the Internet (e.g. communication by e-mail) can have security gaps. Complete protection of data from access by third parties is not possible.

Note on the responsible body

The responsible body for data processing on this website is:
Ärztegemeinschaft Böwing-Molsberger
Prof. Dr. Albrecht Molsberger, Dr. Gabriele Böwing
Kasernenstr. 1b, 40213 Düsseldorf, Germany
Tel. +49 (0)211 866 88 0 · Fax +49 (0)211 866 88 18
[email protected]

The responsible body is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke your selection regarding external content and optional usage analysis separately at any time with immediate effect for future individual requests. For other consents, an informal notification by e-mail to us is sufficient. The legality of the data processing that took place until the revocation remains unaffected by the revocation.

Right to lodge a complaint with the responsible supervisory authority

In the event of violations of data protection law, the data subject has the right to lodge a complaint with the responsible supervisory authority. The responsible supervisory authority is the State Data Protection Commissioner of the federal state in which our practice is based — for North Rhine-Westphalia, this is the State Commissioner for Data Protection and Freedom of Information NRW. A list of data protection officers and their contact details can be found at bfdi.bund.de.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a standard, machine-readable format. If you request the direct transfer of data to another controller, this will only take place if it is technically feasible.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the address line of the browser changing from "http://" to "https://" and by the lock symbol in your browser line.

Information, blocking, erasure

Within the scope of the applicable legal provisions, you have the right to free information about your stored personal data, their origin and recipients and the purpose of the data processing and, if applicable, a right to rectification, blocking or erasure of this data at any time. You can contact us at any time at the address given in the legal notice for this purpose.

Objection to advertising emails

The use of contact data published within the scope of the legal notice obligation for the purpose of sending unsolicited advertising and information material is hereby rejected. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information.

3. Data collection on our website

Cookies

We store your choices separately in local browser storage: ‘axo-cookie-consent’ for external content and ‘axo-analytics-consent-daily-v2’ for optional usage counts. These necessary preferences remain stored until changed, reset or removed by clearing browser data. Previous consent to external content or to the previously inactive platform analytics does not grant consent to these statistics. If browser storage is unavailable, your choice applies only to the current visit.

External content only loads after your consent. Consent to optional services is voluntary and can be revoked separately. Declining does not restrict general information or the possibility of contact by phone. The legal basis for optional processing requiring consent is Art. 6 (1) (a) GDPR; for access to your end device requiring consent, it is § 25 (1) TDDDG. The storage of your data protection decision serves to ensure it is observed (§ 25 (2) no. 2 TDDDG).

You can view and change your current choices here. Resetting withdraws all optional choices and reopens the settings. This does not retrospectively delete data that has already been transmitted.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request and IP address. A merging of this data with other data sources will not be carried out. The basis is Art. 6 (1) (f) GDPR.

Contact form / Appointment request

If you send us enquiries via the contact or appointment form, your details including the contact data you provided will be stored by us for the purpose of processing the enquiry. We will not pass this data on without your consent. Processing is based on your consent (Art. 6 (1) (a) GDPR) or, insofar as the enquiry serves the initiation of a treatment contract, on the basis of Art. 6 (1) (b) GDPR. You can revoke your consent at any time by e-mail.

The data you enter will remain with us until you ask us to delete it, revoke your consent or the purpose for data storage no longer applies. Mandatory statutory retention periods — in particular from the treatment relationship — remain unaffected.

Processing of patient and treatment data

Within the scope of medical treatment, we collect, process and use personal and health-related data (Art. 9 GDPR) insofar as this is necessary for diagnosis, treatment and care. The legal basis is Art. 9 (2) (h) GDPR in conjunction with § 630f BGB as well as professional documentation and retention obligations. Patient records are kept in accordance with statutory retention periods (usually ten years after completion of treatment).

4. Analysis tools and third-party providers

Google Analytics via Cloudflare Zaraz

After your separate consent, we use Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) via Cloudflare Zaraz (Cloudflare, Inc., USA). Only general clicks on phone, email, contact page, directions and appointment booking are recorded. Clicks are not confirmed appointments. Automatic pageviews, condition names, form contents and patient data are not transmitted as analytics events. The page URL and title are replaced with fixed generic values for Google; the referrer is removed.

GA4 uses visitor and session identifiers. It is not our identifier-free daily statistics service and is not anonymous measurement. Technical data is processed by Cloudflare and Google; transfers to the USA are possible. The IP address is hidden for forwarding to Google. Technical hosting logs are separate. Provider information: Google Privacy Policy and Cloudflare Privacy Policy.

The GA4 choice is independent of external content, our own daily statistics and previous Tag Manager consent. Without new GA4 consent, we do not load Zaraz or send GA4 contact actions. Actions before consent are not sent retrospectively. This consent does not permit advertising, Google ad personalization or Facebook Pixel. Google Tag Manager is not additionally loaded on this website.

Your GA4 choice is stored under "axo-ga4-contact-consent-v1" in local browser storage; Zaraz stores the corresponding purpose choice in a necessary consent cookie. You can change or withdraw your choice here at any time. No new contact actions are sent after withdrawal. A previously loaded Zaraz runtime is terminated by reloading the page. Previous transmissions cannot be undone this way. The legal basis is your consent under Article 6(1)(a) GDPR and, where your device is accessed, Section 25(1) TDDDG.

Replit: hosting and minimal-data usage counts

Our website and statistics database are hosted through Replit (Replit, Inc., USA). The statistics use our own endpoint on this website, not an additional tracking service. Further information: Replit Privacy Notice.

Only after explicit, separate consent do we count general contact, booking, download, video, language selection and menu actions. The database stores only the day (Europe/Berlin time zone), the generic action and its total. There are no individual event records or visitor profiles, no visitor or session identifiers, and no storage of IP addresses, page addresses, page titles, referrers, names, contact details, diagnoses, video IDs or patient data in the statistics. Link clicks do not confirm a telephone call, download or booked appointment.

Before consent and after rejection, no statistics requests are sent. Upon withdrawal, we stop new requests and abort pending requests where possible. Totals already counted cannot be attributed to a person and therefore cannot be deleted individually. We respect Do Not Track and Global Privacy Control. External content remains a separate choice. The legal basis for optional collection is your consent under Article 6(1)(a) GDPR.

Reports cover the last 90 calendar days. Older totals are deleted when the next count is recorded or a database report is generated; while collection is inactive, they may remain stored until the next such operation. Reports are not accessible through the public website. Transmission technically requires an IP address and browser data; hosting logs and necessary platform measurements are separate from these counters and are not controlled by consent to or withdrawal from the statistics.

Automatic Replit platform analytics must remain switched off. Independently of our statistics, it may collect pageviews, URLs, titles and referrers, potentially revealing health interests. Before publishing, the actual Replit contractual terms, data processing arrangements, hosting retention periods and possible international transfers with the necessary safeguards must be reviewed. This notice does not guarantee complete anonymity or legal compliance.

Vimeo videos and arzt-direkt appointment booking

Vimeo videos (Vimeo.com, Inc., USA) and appointment booking via arzt-direkt (zollsoft GmbH, Germany) are only embedded after you consent to external content. In doing so, the providers may receive your IP address, browser data and the referring page, and may employ their own storage technologies. If you withdraw your consent, the embedded content will be removed; data already transmitted to the providers will not be deleted as a result. Notes from the providers: Vimeo and arzt-direkt. Data may be transferred to the USA by Vimeo.

Further external connections

The Google Maps display on the contact page is only loaded after you consent to external content and is removed if you withdraw your consent. During this process, Google receives, among other things, your IP address and browser data. Separate links for directions only open Google Maps once you click on them. Google Maps is provided by Google (for the European Economic Area: Google Ireland Limited); transfers to third countries are possible. Notes: Google privacy policy. External booking links also only leave our website after your click and are then subject to the policies of the respective provider.

Locally provided font

The font "Plus Jakarta Sans" is provided locally via our website server. No connection to Google Fonts or other font providers is established to load the font, and no data is transmitted to such providers. The notes described above regarding hosting and server log files apply to provision via our server.

5. Overview of your rights

You have the right at any time to access, rectify, erase or restrict the processing of your personal data stored by us, a right to object to processing and a right to data portability. For this purpose, please contact the address stated in the Imprint address stated.