Privacy Policy
Transparency about the handling of your personal data in accordance with GDPR.
Responsible Entity
Institution
NeuroSpine Düsseldorf
Address
Graf-Adolf-Straße 4940210 DüsseldorfGermany
Phone
0211 30 36 82 78
Website
www.neurospine-duesseldorf.com
Data We Collect
We collect and process personal data only as necessary for our medical services and website operation.
Contact Data
Name, address, phone number, and email address provided for appointments or contact.
Medical Data
Health data, medical history, and treatment information required for medical care.
Usage Data
IP address, browser type, page views, and visit duration on our website.
Communication Data
Emails, form submissions, appointment requests, and correspondence.
Legal Basis for Processing
The processing of your personal data is based on the following legal grounds under GDPR:
Art. 6(1)(a)
Consent — for example newsletters or optional contact forms.
Art. 6(1)(b)
Contract performance — to provide and bill our medical services.
Art. 6(1)(c)
Legal obligation — for example tax and professional retention duties.
Art. 6(1)(f)
Legitimate interest — for example IT security and fraud prevention.
Art. 9(2)(h)
Medical care — processing special categories of data for diagnosis and treatment.
Cookies & Analytics Tools
Our website uses cookies. We distinguish between technically necessary cookies and optional analytics cookies.
Technically necessary cookies are required for website operation. Additional cookies are used only with your consent.
Necessary Cookies
Session management, security, and basic functions.
Analytics Cookies
Anonymised usage statistics to improve our services.
Cookie Lifetime
Session cookies are deleted at session end; persistent cookies after a maximum of 12 months.
Disclosure to Third Parties
Your personal data is generally not disclosed to third parties unless required for contract performance, required by law, or explicitly consented to.
For website operation, we use technical service providers bound as processors under Art. 28 GDPR.
Transfers outside the EU/EEA take place only when an adequate level of data protection applies.
Your Rights as a Data Subject
You have the following rights regarding your stored personal data:
Art. 15 — Access
Access to stored data, processing purposes, and recipients.
Art. 16 — Rectification
Correction of inaccurate or incomplete personal data.
Art. 17 — Erasure
Deletion of your data where no retention obligation applies.
Art. 18 — Restriction
Restriction of processing under certain conditions.
Art. 20 — Portability
Receipt of your data in a structured, machine-readable format.
Art. 21 — Objection
Objection to processing based on legitimate interests.
Data Protection Officer & Supervisory Authority
For questions about data protection or to exercise your rights, please contact our Data Protection Officer:
Supervisory Authority
Landesbeauftragte für Datenschutz und Informationsfreiheit NRW
https://www.ldi.nrw.de/Transfers outside the EU/EEA take place only when an adequate level of data protection applies.