This notice explains which personal data is processed when you visit this website and use our contact and online services. It applies to dr-schulze-eyssing.eu. The practice’s separate patient privacy notice also applies to data processing as part of your medical treatment.

1. Controller

Praxis Dr. med. Georg Schulze-Eyßing
Pauline-Maier-Straße 1
69168 Wiesloch-Baiertal
Germany

Telephone: +49 (0) 6222 71481
Email: kontakt@dr-schulze-eyssing.eu

2. Website provision and server log data

Technically necessary connection data is processed whenever you access this website. This may include your IP address, the date and time of access, the requested address or file, the volume of data transferred, the referrer URL, browser and operating-system details, and the HTTP status code. This processing is necessary to deliver the website securely and reliably.

Processing is based on Article 6(1)(f) GDPR. Our legitimate interests are the secure and stable provision of the website, preventing misuse and analysing technical errors. We do not combine log data with other data sources or use it to create user profiles.

Hosting by Vercel

This website is hosted by Vercel. The provider is Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Vercel processes the data required to deliver, secure and operate the website. Where Vercel acts as a processor, processing is carried out in accordance with Article 28 GDPR.

Processing in the United States and by subcontractors in other countries cannot be ruled out. For transfers to countries without an adequacy decision by the European Commission, appropriate safeguards are used, in particular the European Commission’s standard contractual clauses under Article 46(2)(c) GDPR. Further information is available in Vercel’s Data Processing Addendum.

Log data is deleted or anonymised once it is no longer required for the stated purposes and there are no legal or security reasons for retaining it longer. The specific period may depend on the type of log and the hosting provider’s security requirements.

3. Cookies, local storage and audience measurement

We do not use our own cookies, web analytics, marketing tracking, tracking pixels or social-media plugins on this website. Fonts and images are served directly by this website. The integrated 321 MED online service requests any necessary consent itself before the service is opened.

4. External links and route planning

We use the MapTiler map service provided by MapTiler AG, Zugerstrasse 22/Unterägeri, Zug 6314, Switzerland, to display the location of the practice. When the map loads, your browser retrieves map styles and map tiles from MapTiler. In particular, this transmits your IP address to MapTiler.

This integration is based on Article 6(1)(f) GDPR. Our legitimate interest is to provide a user-friendly display of the practice location. Further information is available in the MapTiler privacy policy.

This website contains a link to route planning in Google Maps. No connection to Google is made when our website loads. Only when you select the link do you leave our website. Google then processes the request under its own data-protection responsibility; this may include your IP address, device information and location data. Google’s privacy policy applies.

5. Online service provided by 321 MED

For digital enquiries, including appointment, prescription and referral requests, we use the online reception service provided by 321 MED GmbH, Ohmstraße 1a, 93055 Regensburg, Germany. To display the online reception on this website, your browser loads the required program files from 321 MED. In particular, this technically transmits your IP address to 321 MED. The online reception itself opens only after you actively select it and accept the privacy notice displayed there.

The additional data processed depends on your enquiry and the information you enter. This may include personal and contact details, date of birth, insurance details, information about medication, symptoms or treatment requests, and therefore health data. Required fields are marked in the relevant dialogue. Please provide only the information needed to deal with your enquiry.

Processing is carried out to receive, assign and deal with your enquiry and to communicate with you. Depending on the content, the legal basis for general enquiries is Article 6(1)(b) or (f) GDPR. Where health data is processed for medical care, processing is based on Article 9(2)(h) GDPR in conjunction with Section 22(1)(1)(b) BDSG and the treatment contract. Our legitimate interest is the secure and efficient organisation of the practice. You may withdraw any separate consent requested by the service at any time with future effect.

321 MED processes data submitted through the practice service as a technical service provider. 321 MED GmbH states that it stores online-reception data on servers in Germany. The integration is governed by a data-processing agreement pursuant to Article 28 GDPR.

Data in the online service is deleted once it is no longer required to deal with the enquiry and no retention obligation applies. If information becomes part of the medical record, statutory and professional retention periods apply; medical records are generally kept for ten years after treatment ends. Further information about data processing within the online reception is available in the 321 MED privacy policy.

6. Contact by telephone or email

If you contact us by telephone or email, we process the information you provide to respond to your enquiry and deal with any necessary follow-up questions. The legal basis is Article 6(1)(b) GDPR where the communication relates to entering into or performing a treatment contract, and otherwise Article 6(1)(f) GDPR. Our legitimate interest is dealing with your enquiry.

Where you provide health data and its processing is necessary for your care, Article 9(2)(h) GDPR and Section 22(1)(1)(b) BDSG also apply. Content relevant to treatment may be added to the patient record and generally retained for ten years after treatment ends. We delete other enquiries once they have been fully resolved, unless legal retention or documentation obligations apply.

Standard email is not always end-to-end encrypted. Please do not send urgent or extensive medical information by email. Use the online service or contact us by telephone instead. In an emergency, call 112.

7. Recipients

Within the practice, personal data is accessible only to people who need it to deal with your enquiry and who are bound by confidentiality. Carefully selected IT, hosting and communication providers may also receive data as part of their engagement. Where required, they are bound by agreements under Article 28 GDPR and confidentiality obligations. We do not disclose data for advertising purposes. Further disclosure takes place only where permitted or required by law, or where you have consented.

8. Data security

Data transmitted through this website is protected by TLS encryption. We and our service providers take appropriate technical and organisational measures to protect personal data against loss, alteration and unauthorised access. However, complete protection of data transmitted over the internet cannot be guaranteed.

9. Your data-protection rights

Where the relevant legal requirements are met, you have the following rights in particular:

• Access to your personal data (Article 15 GDPR),
• Rectification of inaccurate data (Article 16 GDPR),
• Erasure (Article 17 GDPR),
• Restriction of processing (Article 18 GDPR),
• Data portability (Article 20 GDPR),
• Objection to processing based on Article 6(1)(f) GDPR (Article 21 GDPR),
• Withdrawal of consent with future effect (Article 7(3) GDPR).

Statutory retention obligations and the medical documentation duty may prevent immediate deletion. To exercise your rights, send a message using the contact details above. We may request suitable proof of identity to protect your data.

10. Right to object

Where we process personal data on the basis of legitimate interests under Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then stop processing the data unless we can demonstrate compelling legitimate grounds or the processing is required to establish, exercise or defend legal claims.

11. Right to lodge a complaint

Under Article 77 GDPR, you may lodge a complaint with a data-protection supervisory authority. The following authority is particularly responsible for the practice:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Heilbronner Straße 35
70191 Stuttgart
Telephone: 0711 615541-0
Email: poststelle@lfdi.bwl.de
www.baden-wuerttemberg.datenschutz.de

12. Requirement to provide data and automated decisions

You do not have to actively provide data merely to browse this website. However, the website cannot be delivered without technically necessary connection data. Required fields in the online service are necessary for us to deal with the relevant enquiry. We do not use solely automated decision-making, including profiling, within the meaning of Article 22 GDPR.

13. Updates to this privacy policy

We update this privacy policy when the website, the services used or legal requirements change. The version published on this page applies.

Last updated: 30 July 2026