Skip to main content
en
de en
Contact
praxis@dr-denia.at
+43 1 53324970
Hours

MON 13:00 - 19:00
TUE 09:00 - 13:00
WED 09:00 - 13:00
THUR 09:00 - 13:00
FRI 09:00 - 11:00

By appointment only!

By appointment only!

Privacy Policy

This notice describes how I, Dr. med. univ. Ülkü Denia, process your personal data.

1. Data processing, personal data, purposes of processing, legal basis

I will process the personal data you have communicated or disclosed to me only in compliance with data protection, telecommunications and civil law provisions and for the following purposes:

To initiate, perform and handle the treatment/consultation contract concluded between you and me, and to fulfil legal obligations in this context.

Only such personal data is collected and processed that is necessary for carrying out and handling the services I owe (i.e. for performance of the contract) and/or for fulfilling a legal obligation (e.g. the documentation duty under Section 51 of the Austrian Medical Act, Ärztegesetz), or that you have provided to me voluntarily. Personal data is all data containing individual details about personal or factual circumstances, for example name, address, email address, telephone number, date of birth, age, gender, social insurance number, medical history, video recordings, photos, account number, etc.

Providing your personal data is voluntary unless required by law or contract. Please note, however, that failure to provide it may have disadvantages, such as the impossibility of carrying out the treatment, delayed processing, etc.

2. Data security

I have taken organisational and technical measures in accordance with the regulations to protect against unauthorised, unlawful or accidental access, processing, loss, use and manipulation of your data. Despite efforts to maintain a consistently high standard of care, it cannot be ruled out that information you disclose to me electronically may be viewed and used by other persons. Please note that I therefore accept no liability of any kind for the disclosure of information due to errors in data transmission not attributable to me and/or unauthorised access by third parties (e.g. hacking of an email account or telephone, interception of faxes).

3. Transfer of personal data

For the purposes stated above, I may transfer your personal data to the following recipients:

  • Banks
  • Legal representatives, debt collection companies
  • Contractual and business partners
  • Tax advisers, auditors
  • Courts
  • Competent administrative authorities
  • Insurance companies and social insurance institutions
  • Statistics Austria
  • Interest groups
  • Provident funds, severance funds, social insurance funds, pension funds
  • IT service provider used by me
  • Social insurance institutions
  • Hospitals or their operators, doctors, outpatient clinics, laboratories, physiotherapists, nursing homes
  • Pharmacies, healthcare providers
  • Suppliers
  • External financiers
  • Labour inspectorates

4. Storage period

I will not retain your personal data longer than is necessary to fulfil (assert) my contractual or legal obligations (rights) and as is permitted under applicable law. In any case, I store your personal data for as long as statutory retention obligations apply or limitation periods for potential legal claims have not yet expired.

5. Data processing when visiting my website dr-denia.at

Server log files

When you visit my website dr-denia.at, the website provider automatically collects and stores information in so-called server log files that your browser transmits to me - for the purpose of optimising the website with regard to system performance and user-friendliness, creating usage statistics, and detecting, preventing and investigating possible attacks on my website. This information consists of: your IP address, the name and version of your web browser, the web page (URL) you visited before accessing this website, and the date and time of the page request on my website. Server log files are stored for 3 months. Longer storage takes place only if a legal obligation requires it and/or in order to investigate detected attacks on my website. The legal basis is my legitimate interest (Art. 6(1)(f) GDPR).

Cloudflare (delivery and protection of the website)

My website is delivered through the Cloudflare network (provider: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). All requests to my website therefore pass through Cloudflare servers. In doing so, Cloudflare processes in particular your IP address, information about your browser and operating system, the page requested and the date and time of the request, in order to deliver the website quickly and reliably and to protect it against attacks (e.g. overload attacks) and abuse. The legal basis is my legitimate interest in the secure and stable operation of the website (Art. 6(1)(f) GDPR). Insofar as data is transferred to the USA, this takes place on the basis of the EU-US Data Privacy Framework, under which Cloudflare is certified, and the EU Standard Contractual Clauses (Art. 45 and Art. 46(2) GDPR).

Contact form and email contact

If you contact me via the form on the website or by email, the data you voluntarily provide (e.g. name, email address, message text) will be stored by me in order to process your request and in case of follow-up questions. For the form function I use the form of the Oxygen website builder; the data is stored in the database of my website and sent to me by email. It will not be passed on to third parties unless I am under a legal obligation. Processing is based on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time informally by email. Data voluntarily provided via form or email is stored - regardless of whether a contract is concluded - for a maximum of 3 years, unless processing your request or a legal obligation requires longer storage.

Spam protection (Cloudflare Turnstile)

To protect my forms against spam and automated access, I use Cloudflare Turnstile (provider: Cloudflare, Inc., USA). When a form is submitted, Turnstile checks whether the input comes from a human. For this purpose, in particular your IP address and technical information about your browser and device are transmitted to Cloudflare and evaluated there. According to Cloudflare, this data is not used for advertising purposes. The legal basis is my legitimate interest in protecting my website against abuse (Art. 6(1)(f) GDPR). For the transfer to the USA, what is said above about Cloudflare applies.

Cookies and local storage

This website currently does not use a cookie banner (consent management). Technically necessary storage is only set insofar as it is required for the operation of the website. The audience measurement (AnalyticsWP, see below) stores a random session identifier (unique_session_id) as a cookie and in the local storage of your browser (duration: 365 days). You can delete these entries at any time in your browser settings.

Online appointment booking (DocFinder)

For online appointment booking I embed the booking widget of DocFinder (provider: DocFinder GmbH, Austria). When the Book appointment button loads, a connection to DocFinder servers is established, in particular transmitting your IP address. If you book an appointment via the widget, the data you enter is processed directly by DocFinder and made available to me for scheduling. The legal basis is the performance of pre-contractual measures or of the treatment contract (Art. 6(1)(b) GDPR) and my legitimate interest in simple online appointment scheduling (Art. 6(1)(f) GDPR). For details, please refer to the privacy policy of DocFinder.

Google Maps (location map)

On the page Location Map and Directions, a map from Google Maps is embedded (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The map is loaded directly when this page is opened; in doing so, in particular your IP address and technical information about your browser are transmitted to Google. This may also involve a transfer to the USA, which takes place on the basis of the EU-US Data Privacy Framework. The legal basis is my legitimate interest in easy directions (Art. 6(1)(f) GDPR).

AnalyticsWP (audience measurement)

For the statistical analysis of website usage I use AnalyticsWP. The analysis is self-hosted: the usage data collected (page viewed, referrer URL, device type, browser identifier, IP address, time, random session identifier and, for logged-in users, the user ID) is stored in the database of my own website and is not passed on to third parties or to third countries. The session identifier (unique_session_id) is stored as a cookie and in the local storage of your browser (365 days). The stored IP address is mostly the address of the Cloudflare server. Recording has been running since 25 November 2024; no automatic deletion has been set up, and deletion takes place on request. The legal basis is my legitimate interest in evaluating website usage (Art. 6(1)(f) GDPR).

Link to Instagram

This website contains links to the Instagram profile @dr.denia.feel.alive (provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland). No content from Instagram is embedded; data is only transmitted to Instagram once you click the link.

6. Your rights regarding personal data

Among other things, you are entitled (i) to obtain information about whether and which personal data I have stored about you and to receive copies of this data, (ii) to demand the correction, completion or deletion of your personal data that is incorrect or not processed in compliance with the law, (iii) to demand that I restrict the processing of your personal data, (iv) under certain circumstances to object to the processing of your personal data or to withdraw the consent previously given for processing, (v) to demand data portability, (vi) to know the identity of third parties to whom your personal data is transferred.

If you believe that the processing of your personal data by me violates applicable data protection law or that your data protection rights have been violated in any other way, you can lodge a complaint with the data protection authority (for Austria).

7. My contact details

The protection of your data is particularly important to me. You can reach me at any time with your questions or your withdrawal at the following contact details:

Dr. med. univ. Ülkü Denia
Herrengasse 6-8/2/4
1010 Wien
Email: praxis@dr-denia.at

Last updated on 04.11.2026