This notice describes data processing on this website. Google Analytics is loaded only after your voluntary consent.
1. Controller
Prof. MR. Dr. Friedrich Gill
Margaretenplatz 2/1/21
1050 Vienna, Austria
Telephone: +43 1 587 67 69
Email: praxisklinik@medvital.at
2. Scope and principles
This notice applies to this website at www.frauenarzt-drgill.at, including redirection from frauenarzt-drgill.at. Personal data are processed only where necessary to provide the website securely, respond to a request or meet medical and legal obligations. Health data are special-category data under Article 9 GDPR and are handled with particular care.
3. Website delivery and server logs
When a page is requested, the web server processes the IP address, date and time, requested URL, response status, amount of data transferred, referrer where supplied, and browser/user-agent information. This is necessary to deliver the page, diagnose technical faults and protect the service against misuse and attacks.
Legal basis: Article 6(1)(f) GDPR (legitimate interests in secure and reliable website operation). Recipients: technical hosting and maintenance providers acting under data-protection obligations, and public authorities where disclosure is legally required. Retention: technical logs are retained only as long as needed for secure operation, fault detection and investigation of security incidents; retention depends on completion of the technical review and any statutory retention duties; relevant entries may be retained longer where required to investigate an incident or assert or defend legal claims.
4. Cookies and browser storage
The necessary first-party cookie fg_cookie_consent_v1 saves your choice (necessary or analytics) for 180 days, with Path=/, SameSite=Lax and Secure on HTTPS. It is needed to remember your privacy settings (Article 6(1)(f) GDPR and section 165(3) TKG 2021). An older fg_privacy_choice acknowledgement does not count as analytics consent and is removed when you make a new choice.
Only after consent, Google Analytics may set _ga and _ga_* cookies to recognise a browser and relate visits. Their expiry is limited to 180 days without renewal on each visit. You can reject analytics as easily as accept it. To withdraw consent, open “Privacy settings” in the footer and choose “Necessary cookies only”; analytics cookies are deleted and further collection is stopped.
5. Optional Google Analytics
With your consent under Article 6(1)(a) GDPR and section 165(3) TKG 2021, we use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to measure website use. The tag stays completely blocked before consent. We collect general page views and clicks on telephone, email and appointment links; a click does not confirm a completed booking or consultation.
All page views use the same neutral website address and title. Medical topics, full page paths, URL parameters, referrers, link destinations, names, email addresses, phone numbers and message contents are not included in analytics events. The browser nevertheless connects to Google after consent, exposing technical connection data including its IP address. Google states that GA4 does not log or store individual IP addresses. Cookies can associate visits with the same browser; the data are not anonymous.
Advertising personalisation, Google Signals, user-provided data collection and automatic form, search, download and outbound-link measurements are disabled. Event data are retained for two months; aggregated reporting may remain available longer. See Google’s privacy policy. Fonts, images and videos are delivered locally. Google Ads, Meta pixels and embedded Maps or YouTube players are not used.
6. Contact by telephone or email
The website contains telephone and email links but no contact form. If you contact the practice, the data you provide are processed to deal with the request and, where relevant, to establish or perform the treatment relationship (Article 6(1)(b) GDPR), comply with legal duties (Article 6(1)(c) GDPR), and provide healthcare (Article 9(2)(h) GDPR). Medical documentation must be kept for at least ten years under section 51 of the Austrian Medical Practitioners Act. Purely organisational enquiries are deleted once they have been dealt with, unless they form part of the treatment documentation or retention is required by law or necessary for legal claims. Providing contact details is voluntary; without the details needed to answer or arrange an appointment, we may be unable to handle an enquiry.
7. External appointment service and other links
Online appointment booking opens the external CLICKDOC (CGM LIFE) portal only after an active click. Appointment details are not entered on this website. The privacy information shown in the portal describes processing within that service. The practice remains responsible for appointment or treatment data that it receives and processes; section 6 also applies to that processing.
Directions, external videos and cited sources are ordinary links. No content from these external providers is embedded and no background requests are sent to them when this website loads. Your browser connects to the relevant provider only when you follow a link. That provider then processes technical connection data and, where applicable, further data under its own privacy information. Depending on the provider, processing may also take place outside the European Economic Area. Read its information before entering personal data there.
8. Recipients and international transfers
Recipients include providers needed for hosting and maintenance and, after analytics consent, Google Ireland Limited and affiliated processors, including Google LLC in the USA. Data may therefore be processed outside the EEA. Google describes applicable safeguards, including the EU–US Data Privacy Framework and standard contractual clauses, in its international-transfer information. Website data are not sold.
9. Your rights
Subject to the applicable statutory conditions, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests (Article 6(1)(f) GDPR) on grounds relating to your particular situation. Statutory documentation and retention duties may prevent immediate erasure. Where processing is based on consent, consent can be withdrawn for the future. To exercise a right, contact the controller using the details above; proof of identity may be requested where necessary to protect medical confidentiality.
You may lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, Austria, email dsb@dsb.gv.at.
10. Security, automated decisions and updates
The website is delivered via TLS/HTTPS. No automated decision-making and no profiling within the meaning of Article 22 GDPR take place on this website. This notice will be updated whenever the website or its actual data flows change.