Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Dr. med. univ. Julia Treff & Dr. med. Thomas Fischer

Bahnhofstraße 4 b
85386 Eching
Germany

Phone: +49 89 3192773
Email:

2. Data Protection in Our Medical Practice

Protecting your personal data is important to us. We process personal data as part of our medical services in compliance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the professional regulations governing medical practitioners.

Health data constitutes a special category of personal data under Article 9 GDPR. Such data is processed solely for the provision of medical care, communication with patients, and the fulfilment of our legal obligations.

Further information regarding the processing of personal data within our medical practice is available upon request.

3. Online Appointment Booking via DocVisit

Through our website, you can conveniently book an appointment with our practice online. For appointment scheduling, we use the DocVisit service provided by DGN Deutsches Gesundheitsnetz GmbH, Niederkasseler Lohweg 185, 40547 Düsseldorf, Germany.

When booking an appointment, the data you enter, as well as your preferred appointment date, are processed exclusively for the purpose of scheduling, conducting and, if necessary, following up on your appointment. The appointment data required for this purpose is stored on DocVisit’s servers. Information on data processing by the provider can be found in DGN’s privacy policy: https://www.dgn.de/datenschutz/

The data you provide during the appointment booking process will only be stored for as long as necessary for the purposes stated above or as required by statutory retention obligations. If you withdraw your consent or request the deletion of your data, and there are no legal obligations requiring continued storage, your data will be deleted accordingly.

The processing of data is based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to provide you with a simple and convenient option for online appointment scheduling. Where consent is required for individual processing activities, the data processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR, Art. 9 para. 2 lit. a GDPR and, where applicable, Section 25 para. 1 TTDSG. Any consent given may be withdrawn at any time with effect for the future.

4. Hosting

This website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany.

To ensure the secure operation and availability of this website, the hosting provider processes technical data in so-called server log files. These may include:

  • IP address of the requesting device,
  • date and time of access,
  • pages or files accessed,
  • amount of data transferred,
  • browser type and browser version,
  • operating system,
  • referrer URL, where transmitted by the browser.

Processing is based on Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our website.

A data processing agreement pursuant to Article 28 GDPR has been concluded with the hosting provider.

5. Cookies

This website uses only technically necessary cookies that are essential for the operation of the website. No cookies are used for analytics, marketing, or tracking purposes.

The following session cookies are used:

PHPSESSID
This session cookie stores information associated with a single browser session. It is required for the technical operation of the website and is generally deleted when the browser is closed.

Contao CSRF Protection
This cookie protects the website against Cross-Site Request Forgery (CSRF) attacks and ensures the security of essential website functions.

The storage of these technically necessary cookies is based on Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). The associated processing of personal data is based on Article 6(1)(f) GDPR.

As only technically necessary cookies are used, no consent via a cookie banner is required.

6. Contact by Telephone or Email

You may contact us using the telephone number or email address provided on this website.

When you contact us, we process the personal data you provide insofar as this is necessary to handle your enquiry.

Please note that sensitive health information should not be transmitted by email unless a secure communication method has been agreed.

Depending on the purpose of the enquiry, processing is based on Article 6(1)(b) or Article 6(1)(f) GDPR.

7. SSL/TLS Encryption

For security reasons, this website uses SSL/TLS encryption. This protects transmitted data from being intercepted or read by unauthorised third parties.

8. Your Rights

Under the GDPR, you have the following rights:

  • the right of access to your personal data (Article 15 GDPR),
  • the right to rectification of inaccurate data (Article 16 GDPR),
  • the right to erasure (Article 17 GDPR),
  • the right to restriction of processing (Article 18 GDPR),
  • the right to data portability (Article 20 GDPR),
  • the right to object to certain processing activities (Article 21 GDPR).

You also have the right to lodge a complaint with a supervisory authority responsible for data protection.

9. Competent Supervisory Authority

For medical practices in Bavaria, the competent data protection supervisory authority is generally:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany

Phone: +49 (0) 981 180093-0
Email: poststelle@lda.bayern.de

10. Data Retention

Personal data is stored only for as long as necessary to fulfil the respective purposes or as required by statutory retention obligations.

Medical records are retained in accordance with the applicable professional and healthcare legal retention periods.

11. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy where necessary due to changes in legal requirements or technical developments.

Last updated: July 2026