Privacy Policy
General Information
The protection of your personal data is very important to us. We treat your personal data confidentially and in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).
This Privacy Policy explains what personal data is processed when you visit our website and use our contact and appointment features.
Person in Charge
The entity responsible for processing your personal data is:
OA Dr. med. Stefan Luhne
Rahlgasse 1, Top 12
1060 Vienna
Austria
Email:office@dr-luhne.at
Phone: 0670 535 1812
Access Data / Server Log Files
When you visit our website, technical access data may be collected and stored as so-called “server log files.”
In particular, the following data may be processed:
website visited
Date and time of access
Amount of data transferred
Referrer URL
Browser type and version used
Operating system used
IP address of the accessing device
This data is processed on the basis of our legitimate interest pursuant to Article 6(1)(f) of the GDPR. In particular, it serves to ensure the secure and trouble-free operation of our website, to analyze errors, and to optimize the site technically.
As a general rule, this data is not combined with data from other sources.
Contact Form
When you use our contact form, the personal data you enter—specifically your name, email address, and the content you submit—will be processed.
Your data is processed for the purpose of handling your inquiry and contacting you.
Please use the general contact form only to submit medical information that is absolutely necessary for your inquiry. Where possible, highly sensitive health information should not be submitted via a general contact form.
Depending on the content and purpose of the request, processing is carried out on the basis of Article 6(1)(b) of the GDPR or another applicable legal basis. To the extent that health data is processed, the specific requirements of Article 9 of the GDPR also apply.
Online Appointment Scheduling via LATIDO
We use the external service provider LATIDO for online appointment scheduling.
When you access the online appointment scheduling feature on our website, you will be redirected to the corresponding LATIDO online appointment scheduling page. The processing of personal data in connection with scheduling an appointment is carried out by LATIDO and in accordance with the applicable data protection regulations.
LATIDO's privacy policy also applies to the processing of personal data by LATIDO.
Contact by Phone and Email
Our website includes links to contact us by phone and to our email address.
If you contact us by phone, the personal data you provide during the call will be processed for the purpose of handling your inquiry.
If you contact us by email, the personal data you provide will be processed for the purpose of handling your inquiry and contacting you.
Please note that transmitting information via email can generally involve certain security risks. Therefore, particularly sensitive health information should not be sent via email in unencrypted form whenever possible.
Processing of Health Data
As part of medical care, health data—and thus special categories of personal data—may be processed in accordance with Article 9 of the GDPR.
Data is processed exclusively in accordance with legal provisions and only to the extent necessary for medical examinations, treatment, documentation, appointment scheduling, billing, or compliance with legal obligations.
Health data is treated with the utmost confidentiality and is processed and disclosed only in accordance with applicable legal provisions.
Disclosure of Personal Information
Personal data will only be disclosed to third parties if such disclosure is permitted by law, necessary to fulfill our services, or required by law.
To the extent that external service providers process personal data on our behalf, they do so in accordance with applicable data protection laws.
Retention period
Personal data is stored only for as long as is necessary for the respective purpose or as required by statutory retention obligations.
In particular, medical records and treatment data are stored in accordance with the applicable legal retention requirements.
Once the respective retention periods have expired, the data will be deleted unless there is another legal obligation or a legitimate reason for further storage.
Cookies
To the best of our current knowledge, our website does not use any non-essential cookies or any analytics or marketing cookies.
Should cookies or similar technologies be used in the future, this privacy policy will be updated accordingly, and, where necessary, the appropriate consent will be obtained.
External Links
Our website contains links to external websites, specifically to LATIDO and IMED6.
When you click on one of these links, you will leave our website and be redirected to the respective external website. The operators of these external websites are solely responsible for the processing of personal data on their sites.
No data is exchanged with IMED6 through our website.
The privacy policies of the respective providers apply to LATIDO and other external websites.
Your Rights
In accordance with applicable laws, you have the right, in particular, to:
Information About Your Stored Personal Data
Correction of Inaccurate Data
Deletion of Your Data
Restriction of Processing
Objection to Certain Forms of Processing
Data portability, provided that the legal requirements are met
To exercise your rights, please contact us at the address listed above.
In addition, pursuant to Article 77 of the GDPR, you have the right to file a complaint with the competent data protection authority.
Austrian Data Protection Authority
Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Austria
Phone: +43 1 52 152-0
Email:dsb@dsb.gv.at
Website:www.dsb.gv.at
Legal Basis
The processing of personal data is carried out exclusively in accordance with the applicable legal provisions.
Depending on the nature and purpose of the processing, the following legal bases, in particular, may apply:
Art. 6(1)(b) of the GDPR – Processing necessary for the performance of a contract or for the implementation of precontractual measures
Art. 6(1)(c) of the GDPR—Processing to fulfill a legal obligation
Art. 6(1)(f) of the GDPR – Processing to Protect Legitimate Interests
Art. 9 of the GDPR – Processing of special categories of personal data, in particular health data
Changes to the Privacy Policy
We reserve the right to amend this Privacy Policy if required due to changes in the law, changes to our services, technical developments, or new features on our website.
As of August 2026