Adjust privacy

Click the button below to change your privacy settings.

General Information

Copyright Notice

All content on this website (images, photos, texts, videos) is subject to copyright. If necessary, we will take legal action against the unauthorized use of parts of the content on our site.

EU Dispute Resolution

In accordance with the Regulation on Online Dispute Resolution in Consumer Matters (ODR Regulation), we would like to inform you about the Online Dispute Resolution Platform (ODR Platform).
Consumers have the opportunity to submit complaints to the Online Dispute Resolution Platform of the European Commission at http://ec.europa.eu/odr?tid=221146982. The necessary contact details can be found above in our legal notice.

However, we would like to point out that we are neither willing nor obliged to participate in dispute resolution proceedings before a consumer arbitration board.

Image Credits

The images, photos, and graphics on this website are protected by copyright.

Liability for Content on this Website

We are constantly developing the content of this website and strive to provide correct and up-to-date information. Unfortunately, we cannot accept liability for the correctness of all content on this website, especially for content provided by third parties. As a service provider, we are not obliged to monitor the information transmitted or stored by them or to investigate circumstances that indicate illegal activity.

Our obligations to remove information or to block the use of information under general laws due to court or official orders remain unaffected even in the event of our non-responsibility.

If you notice any problematic or illegal content, please contact us immediately so that we can remove the illegal content. You can find the contact details in the legal notice.

Liability for Links on this Website

Our website contains links to other websites for whose content we are not responsible. We do not accept liability for linked websites, as we had and have no knowledge of illegal activities, no such illegalities have been noticed so far, and we would remove links immediately if we became aware of any illegalities.

If you notice any illegal links on our website, please contact us. You can find the contact details in the legal notice.

Privacy Policy

Contact Details of the Data Protection Officer

Below you will find the contact details of our data protection officer.

Email: BABAK.BAHADORI@LIVE.AT
Phone: +43 (0) (3687) 22 470

Introduction and Overview

We have written this privacy policy (version 12.07.2021-221146982) to explain to you, in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, which personal data (short: data) we as controllers – and the processors commissioned by us (e.g. providers) – process, will process in the future, and what lawful options you have. The terms used are to be understood as gender-neutral.
In short: We inform you comprehensively about the data we process about you.

Privacy policies usually sound very technical and use legal terminology. This privacy policy, however, is intended to describe the most important things to you as simply and transparently as possible. Where it helps transparency, technical terms are explained in a reader-friendly way, links to further information are provided, and graphics are used. We inform you in clear and simple language that we only process personal data in the course of our business activities if there is a corresponding legal basis. This is certainly not possible if you provide the shortest, most unclear, and legal-technical explanations, as is often standard on the Internet when it comes to data protection. I hope you find the following explanations interesting and informative, and maybe there is some information you did not know.
If you still have questions, please contact the responsible office mentioned below or in the legal notice, follow the available links, and look for further information on third-party sites. You will of course also find our contact details in the legal notice.

Data Transfer to Third Countries

We only transfer or process data in countries outside the EU (third countries) if you consent to this processing, if it is legally required, or contractually necessary, and in any case only to the extent that this is generally permitted. Your consent is, in most cases, the most important reason for us to have data processed in third countries. The processing of personal data in third countries such as the USA, where many software providers offer services and have their server locations, may mean that personal data is processed and stored in unexpected ways. Where possible, we try to use server locations within the EU, if offered.

We will inform you in the appropriate places in this privacy policy in more detail about data transfers to third countries, if applicable.

Security of Data Processing

To protect personal data, we have implemented both technical and organizational measures. Where possible, we encrypt or pseudonymize personal data. This makes it as difficult as possible, within our means, for third parties to infer personal information from our data.

Art. 25 GDPR refers to "data protection by design and by default" and means that you always think about security and take appropriate measures, both in software (e.g. forms) and hardware (e.g. access to the server room). Below, we will go into specific measures if necessary.

TLS Encryption with https

TLS, encryption, and https sound very technical, and they are. We use HTTPS (Hypertext Transfer Protocol Secure) to transmit data securely on the Internet.
This means that the entire transmission of all data from your browser to our web server is secured – no one can "listen in".

With this, we have introduced an additional security layer and fulfill data protection by design Article 25(1) GDPR. By using TLS (Transport Layer Security), an encryption protocol for secure data transmission on the Internet, we can ensure the protection of confidential data.
You can recognize the use of this data transmission security by the small lock symbol at the top left in the browser, to the left of the Internet address (e.g. example.com) and the use of the https scheme (instead of http) as part of our Internet address.
If you want to know more about encryption, we recommend searching Google for "Hypertext Transfer Protocol Secure wiki" to find good links to further information.

Rights under the General Data Protection Regulation

According to Article 13 GDPR, you have the following rights to ensure fair and transparent data processing:

• According to Article 15 GDPR, you have the right to know whether we process data about you. If this is the case, you have the right to receive a copy of the data and to learn the following information:

  • for what purpose we carry out the processing;

  • the categories, i.e. the types of data processed;

  • who receives this data and, if the data is transferred to third countries, how security can be guaranteed;

  • how long the data is stored;

  • the existence of the right to rectification, erasure, or restriction of processing and the right to object to processing;

  • that you can lodge a complaint with a supervisory authority (links to these authorities can be found below);

  • the origin of the data if we did not collect it from you;

  • whether profiling is carried out, i.e. whether data is automatically evaluated to create a personal profile about you.

• According to Article 16 GDPR, you have the right to rectification of data, which means that we must correct data if you find errors.

• According to Article 17 GDPR, you have the right to erasure ("right to be forgotten"), which specifically means that you may request the deletion of your data.

• According to Article 18 GDPR, you have the right to restriction of processing, which means that we may only store the data but not use it further.

• According to Article 19 GDPR, you have the right to data portability, which means that we will provide you with your data in a common format upon request.

• According to Article 21 GDPR, you have the right to object, which, if enforced, results in a change in processing.

  • If the processing of your data is based on Article 6(1)(e) (public interest, exercise of official authority) or Article 6(1)(f) (legitimate interest), you may object to the processing. We will then check as soon as possible whether we can legally comply with this objection.

  • If data is used for direct marketing, you can object to this type of data processing at any time. We may then no longer use your data for direct marketing.

  • If data is used for profiling, you can object to this type of data processing at any time. We may then no longer use your data for profiling.

• According to Article 22 GDPR, you have the right, under certain circumstances, not to be subject to a decision based solely on automated processing (e.g. profiling).

If you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated, you can complain to the supervisory authority. For Austria, this is the Data Protection Authority, whose website you can find at https://www.dsb.gv.at/, and for Germany, you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI).

In short: You have rights – do not hesitate to contact the responsible office listed above!

Communication

Communication Summary
👥 Affected: All who communicate with us by phone, email, or online form
📓 Processed data: e.g. phone number, name, email address, entered form data. More details can be found for each contact method used
🤝 Purpose: Handling communication with customers, business partners, etc.
📅 Storage period: Duration of the business case and legal requirements
⚖️ Legal bases: Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract), Art. 6(1)(f) GDPR (legitimate interests)

If you contact us and communicate by phone, email, or online form, personal data may be processed.

The data is processed for the handling and processing of your inquiry and the associated business transaction. The data is stored for as long as necessary or as required by law.

Affected Persons

All those who contact us via the communication channels we provide are affected by these processes.

Phone

If you call us, the call data is pseudonymized and stored on the respective device and by the telecommunications provider used. In addition, data such as name and phone number may be sent by email and stored for the purpose of responding to the inquiry. The data will be deleted as soon as the business case is completed and legal requirements allow.

Email

If you communicate with us by email, data may be stored on the respective device (computer, laptop, smartphone, etc.) and data may be stored on the email server. The data will be deleted as soon as the business case is completed and legal requirements allow.

Online Forms

If you communicate with us via online form, data is stored on our web server and may be forwarded to one of our email addresses. The data will be deleted as soon as the business case is completed and legal requirements allow.

Legal Bases

The processing of data is based on the following legal bases:

• Art. 6(1)(a) GDPR (consent): You give us consent to store your data and use it for purposes related to the business case;

• Art. 6(1)(b) GDPR (contract): It is necessary for the fulfillment of a contract with you or a processor such as the telephone provider, or we need to process the data for pre-contractual activities, such as preparing an offer;

• Art. 6(1)(f) GDPR (legitimate interests): We want to conduct customer inquiries and business communication in a professional manner. For this, certain technical facilities such as email programs, exchange servers, and mobile network operators are necessary to enable efficient communication.

Legal Bases

In the following privacy policy, we provide you with transparent information about the legal principles and regulations, i.e. the legal bases of the General Data Protection Regulation, which allow us to process personal data.
As far as EU law is concerned, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016. You can of course read this General Data Protection Regulation of the EU online on EUR-Lex, the access to EU law, at https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex%3A32016R0679.

We only process your data if at least one of the following conditions is met:

1. Consent (Article 6(1)(a) GDPR): You have given us your consent to process data for a specific purpose. An example would be the storage of the data you entered in a contact form.

2. Contract (Article 6(1)(b) GDPR): To fulfill a contract or pre-contractual obligations with you, we process your data. For example, if we conclude a purchase contract with you, we need personal information in advance.

3. Legal obligation (Article 6(1)(c) GDPR): If we are subject to a legal obligation, we process your data. For example, we are legally required to keep invoices for accounting. These usually contain personal data.

4. Legitimate interests (Article 6(1)(f) GDPR): In the case of legitimate interests that do not restrict your fundamental rights, we reserve the right to process personal data. For example, we need to process certain data to operate our website securely and economically efficiently. This processing is therefore a legitimate interest.

Other conditions such as the performance of a task carried out in the public interest and the exercise of official authority as well as the protection of vital interests usually do not apply to us. If such a legal basis should nevertheless be relevant, it will be indicated at the appropriate place.

In addition to the EU regulation, national laws also apply:

• In Austria, this is the Federal Act on the Protection of Natural Persons with regard to the Processing of Personal Data (Data Protection Act), abbreviated DSG.

• In Germany, the Federal Data Protection Act, abbreviated BDSG, applies.

If other regional or national laws apply, we will inform you in the following sections.

Contact Details of the Responsible Person

If you have any questions about data protection, you will find the contact details of the responsible person or office below:

Priv. Doz. Dr. Babak Bahadori
Specialist in Internal Medicine, Gastroenterology and Hepatology
Europaplatz 585
A-8970 Schladming

Tel.: +43 (0) (3687) 22 470
Email: BABAK.BAHADORI@LIVE.AT

Embedded Social Media Elements Privacy Policy

We integrate elements from social media services on our website to display images, videos, and texts.
By visiting pages that display these elements, data from your browser is transmitted to the respective social media service and stored there. We have no access to this data.
The following links will take you to the pages of the respective social media services where it is explained how they handle your data:

• Instagram Privacy Policy: https://help.instagram.com/519522125107875

• For YouTube, the Google Privacy Policy applies: https://policies.google.com/privacy?hl=en

• Facebook Data Policy: https://www.facebook.com/about/privacy

• Twitter Privacy Policy: https://twitter.com/en/privacy

Google Maps Privacy Policy

Google Maps Privacy Policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: Optimization of our service
📓 Processed data: Data such as entered search terms, your IP address, and also latitude and longitude coordinates.
More details can be found further down in this privacy policy.
📅 Storage period: depends on the stored data
⚖️ Legal bases: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)

What is Google Maps?

We use Google Maps on our website, a service of Google Inc. For the European area, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. With Google Maps, we can show you locations better and thus adapt our service to your needs. By using Google Maps, data is transmitted to Google and stored on Google servers. Here we want to explain in more detail what Google Maps is, why we use this Google service, what data is stored, and how you can prevent this.

Google Maps is an online map service from Google. With Google Maps, you can search online via a PC, tablet, or app for exact locations of cities, sights, accommodations, or companies. If companies are represented on Google My Business, further information about the company is displayed in addition to the location. To display directions, map sections of a location can be embedded in a website using HTML code. Google Maps shows the earth's surface as a road map or as an aerial or satellite image. Thanks to Street View images and high-quality satellite images, very accurate representations are possible.

Why do we use Google Maps on our website?

All our efforts on this site aim to provide you with a useful and meaningful time on our website. By integrating Google Maps, we can provide you with the most important information about various locations. You can see at a glance where our company headquarters are located. The directions always show you the best or fastest way to us. You can retrieve the route for driving, public transport, walking, or cycling. For us, providing Google Maps is part of our customer service.

What data is stored by Google Maps?

In order for Google Maps to provide its service in full, the company must collect and store data from you. This includes, among other things, the search terms you enter, your IP address, and also latitude and longitude coordinates. If you use the route planner function, the entered starting address is also stored. However, this data storage takes place on the Google Maps websites. We can only inform you about this, but have no influence. Since we have integrated Google Maps into our website, Google sets at least one cookie (name: NID) in your browser. This cookie stores data about your user behavior. Google uses this data primarily to optimize its own services and to provide you with individual, personalized advertising.

The following cookie is set in your browser due to the integration of Google Maps:

Name: NID
Value: 188=h26c1Ktha7fCQTx8rXgLyATyITJ221146982-5
Purpose: NID is used by Google to customize ads to your Google search. With the help of the cookie, Google "remembers" your most frequently entered search queries or your previous interaction with ads. This way, you always get tailor-made ads. The cookie contains a unique ID that Google uses to collect your personal settings for advertising purposes.
Expiration date: after 6 months

Note: We cannot guarantee the completeness of the information about the stored data. Especially when using cookies, changes can never be ruled out. To identify the NID cookie, a separate test page was created where only Google Maps was integrated.

How long and where is the data stored?

Google's servers are located in data centers around the world. Most servers are located in America. For this reason, your data is also increasingly stored in the USA. Here you can read exactly where Google's data centers are located: https://www.google.com/about/datacenters/inside/locations/?hl=en

Google distributes the data across different storage devices. This makes the data faster to access and better protected against possible manipulation attempts. Each data center also has special emergency programs. For example, if there are problems with Google hardware or a natural disaster paralyzes the servers, the data is still quite well protected.

Some data is stored by Google for a specified period. For other data, Google only offers the option to delete it manually. Furthermore, the company also anonymizes information (such as advertising data) in server logs by deleting part of the IP address and cookie information after 9 or 18 months.

How can I delete my data or prevent data storage?

With the automatic deletion function for location and activity data introduced in 2019, information on location determination and web/app activity is stored for either 3 or 18 months, depending on your decision, and then deleted. In addition, you can also manually delete this data from your history at any time via your Google account. If you want to completely prevent your location tracking, you must pause the "Web & App Activity" section in your Google account. Click on "Data & Personalization" and then on the "Activity Setting" option. Here you can enable or disable activities.

In your browser, you can also disable, delete, or manage individual cookies. Depending on which browser you use, this always works a little differently. The following instructions show how to manage cookies in your browser:

Chrome: Delete, enable, and manage cookies in Chrome

Safari: Manage cookies and website data with Safari

Firefox: Delete cookies to remove the data websites have stored on your computer

Internet Explorer: Delete and manage cookies

Microsoft Edge: Delete and manage cookies

If you generally do not want to have cookies, you can set your browser to always inform you when a cookie is to be set. This way, you can decide for each individual cookie whether you allow it or not.

Please note that when using this tool, data about you may also be stored and processed outside the EU. Most third countries (including the USA) are currently considered unsafe under European data protection law. Data may therefore not simply be transferred, stored, and processed in unsafe third countries unless there are appropriate guarantees (such as EU standard contractual clauses) between us and the non-European service provider.

Legal Basis

If you have consented to the use of Google Maps, the legal basis for the corresponding data processing is this consent. According to Art. 6(1)(a) GDPR (consent), this consent is the legal basis for the processing of personal data, as may occur when Google Maps collects data.

We also have a legitimate interest in using Google Maps to optimize our online service. The corresponding legal basis for this is Art. 6(1)(f) GDPR (legitimate interests).

If you want to learn more about Google's data processing, we recommend the company's own privacy policy at https://policies.google.com/privacy?hl=en.

Social Media

Social Media Privacy Policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: Presentation and optimization of our service, contact with visitors, interested parties, etc., advertising
📓 Processed data: Data such as phone numbers, email addresses, contact details, user behavior data, information about your device, and your IP address.
More details can be found for each social media tool used.
📅 Storage period: depends on the social media platforms used
⚖️ Legal bases: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)

What is Social Media?

In addition to our website, we are also active on various social media platforms. User data may be processed so that we can specifically address users who are interested in us via social networks. In addition, elements of a social media platform may be directly embedded in our website. This is the case, for example, if you click on a so-called social button on our website and are taken directly to our social media presence. Social media are websites and apps where registered members can produce content, exchange content openly or in certain groups, and network with other members.

Why do we use Social Media?

For years, social media platforms have been the place where people communicate and connect online. With our social media presences, we can bring our products and services closer to interested parties. The social media elements embedded on our website help you to quickly and easily switch to our social media content.

The data stored and processed through your use of a social media channel is primarily intended to enable web analytics. The aim of these analyses is to develop more precise and personalized marketing and advertising strategies. Depending on your behavior on a social media platform, the data evaluated can be used to draw appropriate conclusions about your interests and create so-called user profiles. This also enables the platforms to present you with tailor-made advertisements. Cookies are usually set in your browser for this purpose, which store data about your user behavior.

As a rule, we and the provider of the social media platform are so-called joint controllers within the meaning of Art. 26 GDPR and work on the basis of a corresponding agreement. The essence of the agreement is reproduced below for the relevant platform.

Please note that when using social media platforms or our embedded elements, data about you may also be processed outside the European Union, as many social media channels, such as Facebook or Twitter, are American companies. As a result, you may not be able to assert or enforce your rights regarding your personal data as easily.

What data is processed?

Exactly what data is stored and processed depends on the respective provider of the social media platform. But usually, it is data such as phone numbers, email addresses, data you enter in a contact form, user data such as which buttons you click, who you like or follow, when you visited which pages, information about your device, and your IP address. Most of this data is stored in cookies. Especially if you have your own profile on the visited social media channel and are logged in, data can be linked to your profile.

All data collected via a social media platform is also stored on the providers' servers. Thus, only the providers have access to the data and can provide you with the appropriate information or make changes.

If you want to know exactly what data is stored and processed by social media providers and how you can object to data processing, you should carefully read the respective company's privacy policy. If you have any questions about data storage and data processing or want to assert corresponding rights, we also recommend that you contact the provider directly.

Duration of Data Processing

We will inform you about the duration of data processing below, if we have further information on this. For example, the social media platform Facebook stores data until it is no longer needed for its own purposes. Customer data that is matched with its own user data is deleted within two days. In general, we only process personal data for as long as it is absolutely necessary to provide our services and products. If, as in the case of accounting, this is required by law, this storage period may also be exceeded.

Right to Object

You also have the right and the opportunity at any time to revoke your consent to the use of cookies or third-party providers such as embedded social media elements. This works either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection by cookies by managing, deactivating, or deleting cookies in your browser.

Since social media tools may use cookies, we also recommend that you read our general privacy policy on cookies. To find out exactly what data is stored and processed about you, you should read the privacy policies of the respective tools.

Legal Basis

If you have consented to the processing and storage of data about you by embedded social media elements, this consent is the legal basis for data processing (Art. 6(1)(a) GDPR). In principle, your data will also be stored and processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in fast and good communication with you or other customers and business partners if consent is given. Most social media platforms also set cookies in your browser to store data. Therefore, we recommend that you read our privacy text on cookies carefully and look at the privacy policy or cookie guidelines of the respective service provider.

You can find information about specific social media platforms – if available – in the following sections.

Source: Created with the Privacy Policy Generator from firmenwebseiten.at