Privacy policy

The protection of your personal data is of particular concern to us. We therefore process your data exclusively on the basis of the statutory provisions (GDPR, TKG).

Responsible body

Association of Urticaria

Obere Augartenstraße 26-28, 1020 Vienna

E-Mail: E-Mail

ZVR Number: 564379138

contacting

If you contact us by e-mail or via a contact form, the data you provide will be stored for the purpose of processing your request and in the event of follow-up questions.

We will not pass on this data without your consent.

Hosting

Our website is hosted by IONOS SE. When you visit our website, the hosting provider processes technical information (e.g. IP address, date and time of access, browser information) to ensure the secure operation of the website.

Further information can be found in the privacy policy of IONOS.

Server log files

The hosting provider automatically collects and stores information in so-called server log files, which your browser automatically transmits. These include in particular:

• IP address
• Date and time of access
• Browser type and browser version
• OS
• Referrer URL
• Host name of the accessing computer

These data are used exclusively for the technical monitoring and security of the website.

Appointment booking and payment

Appointment booking via meetergo

Consultation appointments can be booked via the meetergo booking system of meetergo GmbH, Hauptstraße 44, 40789 Monheim am Rhein, Germany. In doing so, we process the data you provide in the booking form, in particular your name, e-mail address, selected advice, date and, if applicable, your information on the request. We use this data to make an appointment, send you confirmations and reminders and carry out the consultation.

The legal basis is the implementation of pre-contractual measures and the fulfilment of the consulting contract (Article 6(1)(b) GDPR). meetergo processes the data on our behalf on servers in the European Economic Area. With meetergo there is a contract for order processing in accordance with Art. 28 GDPR.

Payment via Stripe

The advice is paid for when booking through the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. You enter your payment details (e.g. card details) directly into Stripe. We do not receive complete card or account data, but only the information as to whether and to what extent the payment has been made.

The legal basis is the performance of the contract (Art. 6 (1) (b) GDPR). Stripe is partly responsible for the payment processing itself and can also process data in third countries, in particular in the USA. The basis for this are standard contractual clauses of the EU Commission or the adequacy decision on the EU-US Data Privacy Framework. For more information, see Stripe's Privacy Policy.

We keep invoice and payment documents for seven years due to statutory retention obligations (§ 132 BAO, Art. 6 (1) (c) GDPR).

Online counselling

Our consultations take place online through Microsoft Teams, a service of Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. You do not need your own Microsoft account to participate. The data necessary for the connection such as name, IP address, device and connection data as well as image and sound are processed during the conversation. We do not record consultations.

The legal basis is the fulfilment of the consulting contract (Art. 6 (1) (b) GDPR). Microsoft processes the data on our behalf within the framework of the EU data limit. There is a contract with Microsoft for order processing in accordance with Art. 28 GDPR.

Questionnaires, findings and health data

In order to prepare a consultation, we kindly ask you to complete questionnaires and, if necessary, to submit medical findings. These documents contain health data and therefore particularly sensitive data within the meaning of Art. 9 GDPR.

We process this data exclusively for the preparation and execution of your consultation and only on the basis of your express consent (Art. 9 para. 2 lit. a GDPR), which you give during the transmission. You can revoke your consent at any time with effect for the future, for example by e-mail to E-Mail.

The transfer takes place via a protected upload link in Microsoft OneDrive (Microsoft Ireland Operations Ltd., see above). Via this link you can only upload files, not view them. Only the advisory person of the association has access to the documents. We do not share health data with third parties.

We delete questionnaires and findings as soon as they are no longer needed for the consultation, at the latest three years after the last consultation date, unless you request the deletion beforehand.

newsletters

When you subscribe to our newsletter, we process your e-mail address to send you information from the association. The registration is done in a double opt-in procedure: You will first receive an e-mail confirming your registration. We store the time of registration and confirmation in order to be able to prove the consent. The legal basis is your consent (Art. 6 (1) (a) GDPR).

Members receive information about the association on the basis of membership (Art. 6 (1) (b) GDPR).

For shipping we use the WordPress plugin MailPoet with the MailPoet Sending Service of Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. Automattic is certified under the EU-US Data Privacy Framework. We do not evaluate if and when you open our emails.

You can unsubscribe from the newsletter at any time via the unsubscribe link in every e-mail or by e-mail to office@urtikariaverband.eu. Your address will then be deleted from the shipping list.

Links to social networks

On our website you will find links to social networks such as Facebook, Instagram or other platforms.

Only by clicking on the respective link is a connection established to the servers of the respective provider. For the data processing by these providers, their respective data protection regulations apply.

Your rights

In principle, you have the right to:

• informations
• rectification
• erasure
• Restriction of processing
• Data portability
• Withdrawal of consent
• Objection to processing

If you believe that the processing of your data violates data protection law, you can complain to the Austrian Data Protection Authority.

contact

If you have any questions about the processing of your personal data, please contact:

Association of Urticaria

[admin(at)urtikariaverband.eu]