Privacy policy

1. Controller

Dr. med. Darius Bartczak Ahornstraße 30, 83451 Piding, Germany Phone: +49 8651 62338 Email: [email protected]

2. General

As a medical practice, protecting your data – especially your health data – is our highest priority. We only process personal data to the extent necessary to provide this website, to answer your enquiries or to fulfil legal obligations. This website does not use analytics or advertising cookies and no tracking.

3. Hosting and server log files

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When the website is accessed, technically necessary data (IP address, date and time, page accessed, browser information) is processed in server log files. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and stable operation of the website. A data processing agreement is in place with Vercel; transfers to the USA are based on the EU-US Data Privacy Framework or standard contractual clauses.

The content of the website is managed with the content management system Ghost. Ghost is used exclusively by the practice team and does not collect any data from visitors.

4. Contact form and email

If you contact us via the contact form or by email, we process your name, email address, the selected topic and your message in order to handle your enquiry. Your enquiry is stored in a protected database that only the practice team can access, and you receive a confirmation of receipt by email.

The legal basis is Art. 6(1)(b) GDPR (initiation or performance of the treatment contract) and – where you share health data with us, for example with a prescription request – Art. 9(2)(h) GDPR. Please only send the information necessary for your request via the form. The data will be deleted as soon as it is no longer needed and no statutory retention obligations (e.g. medical documentation duties) apply.

5. Protection against abuse (Cloudflare Turnstile)

To protect the contact form against automated requests, we use Cloudflare Turnstile by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Technical characteristics of your browser and your IP address are transmitted to Cloudflare. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is protection against spam and abuse.

6. Online appointment booking (Webtermin)

For online appointment booking we embed the "Webtermin" service of medatixx GmbH & Co. KG. The service is only loaded when you click on "Appointment". The data entered during booking is processed by medatixx on our behalf. The legal basis is Art. 6(1)(b) GDPR or Art. 9(2)(h) GDPR.

7. Map

To show our location we use the open-source library MapLibre with map tiles from OpenFreeMap (data © OpenStreetMap contributors). When the map is loaded, your IP address is transmitted to the tile server. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is an easy-to-find presentation of our practice.

8. Fonts

All fonts are served locally from our server. No connection is made to servers of Google or other font providers.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). You can withdraw any consent given at any time with effect for the future.

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

10. Status

Status: October 2026. The German version of this privacy policy is legally binding.