LEGAL

Privacy Policy (Datenschutzerklärung)

Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Dr. med. Alexandra Fischer
Practice for Gynecology and Obstetrics
Nordstraße 2a
40477 Düsseldorf, Germany

Phone: +49 211 498961
Email: info@fischer-frauenarztpraxis.de

Hosting (Vercel)

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you visit the website, Vercel automatically processes server log files transmitted by your browser, in particular:

IP address of the requesting device
date and time of access
requested page or file (URL)
browser type and version, operating system
referrer URL (previously visited page)

This processing is based on Art. 6 (1) (f) GDPR. Our legitimate interest lies in the technically reliable delivery and security of the website. Log files are not merged with other data sources. Data may be transferred to the USA; such transfers are based on the EU Standard Contractual Clauses and Vercel’s certification under the EU-US Data Privacy Framework. We have concluded a data processing agreement (DPA) with Vercel pursuant to Art. 28 GDPR, ensuring that data is processed in compliance with data protection law.

No cookies, no tracking

This website does not set any cookies and does not use any analytics, tracking or advertising services. The only exception: the Google Maps embed on the contact page is loaded only after your explicit click-consent (see the “Google Maps” section). No usage profiles are created and no data is collected for marketing purposes.

Contacting us by phone, email or the appointment form

If you contact us by phone, by email or via the appointment request form on this website, we process the data you provide (e.g. name, contact details, requested appointment type, the nature of your request) in order to handle your enquiry. Form submissions are transmitted to our server using TLS encryption and delivered to us as an email to the mailbox named below; no further storage takes place on the web server. The legal basis is Art. 6 (1) (b) GDPR (initiation or performance of the treatment contract). Where your message contains health data, this constitutes special categories of personal data within the meaning of Art. 9 GDPR; such data is processed on the basis of Art. 9 (2) (h) GDPR in conjunction with Section 22 of the German Federal Data Protection Act (BDSG).

Please note: unencrypted email is not a secure transmission channel. Please do not send sensitive health information (findings, diagnoses, medication details) by email — contact us by phone or in person at the practice instead.

Our email mailbox is hosted via Google Workspace (Gmail), a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We have concluded a data processing agreement (DPA) with Google pursuant to Art. 28 GDPR. Data may be transferred to the USA; such transfers are based on the EU Standard Contractual Clauses and Google’s certification under the EU-US Data Privacy Framework.

Appointment booking via Doctolib

For online appointment booking we link to the external service Doctolib (Doctolib GmbH, Mehringdamm 51, 10961 Berlin, Germany). Data is only transmitted to Doctolib once you follow the link; no processing by Doctolib takes place on this website itself. Doctolib GmbH is an independent controller for the processing of your data in the course of appointment booking. Doctolib’s privacy policy applies: www.doctolib.de/terms/agreement.

Google Maps on the contact page

On our contact page we embed a map from Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The map is only loaded after you explicitly allow it by clicking “Load map” (two-click solution); before that, no data is transmitted to Google. By clicking, you consent to data (in particular your IP address) being transmitted to Google and possibly to servers of Google LLC in the USA. The legal basis is your consent (Art. 6 (1) (a) GDPR, Section 25 (1) of the German TDDDG); it applies to the current page visit and ends when you leave the page. For more information, see Google’s privacy policy: policies.google.com/privacy.

Your rights as a data subject

Under the GDPR you have the following rights:

access to the personal data processed about you (Art. 15 GDPR)
rectification of inaccurate data (Art. 16 GDPR)
erasure (Art. 17 GDPR) — insofar as no statutory retention obligations (e.g. for patient records) prevent this
restriction of processing (Art. 18 GDPR)
data portability (Art. 20 GDPR)
objection to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.

Medical confidentiality

Irrespective of data protection law, all information you entrust to us in the course of your treatment is subject to medical confidentiality (Section 203 of the German Criminal Code, Section 9 of the professional code of conduct). It is only disclosed to third parties with your consent or where required by law.

Version of this privacy policy

Effective date: 22 July 2026. We will update this policy whenever data processing on this website changes.