GDPR compliant

Privacy Policy

Information pursuant to Art. 13 GDPR  ·  Last updated: 27/10/2026

Controller
Dr. med. dent. Muhlis Akarsu
SSL Encrypted
All data transferred securely
Professional Secrecy
Medical confidentiality per ZÄG
1

Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit our website or contact our practice. Personal data is any data by which you can be personally identified.

How do we use your data?

Your data is used for appointment management, treatment, billing, the error-free provision of the website and the processing of your enquiries. Health data is processed exclusively on the basis of your consent and the legally required treatment documentation.

Your rights

You have the right at any time to obtain free information about the origin, recipient and purpose of your stored personal data, and to request its correction, restriction or deletion. Treatment data can only be deleted after the expiry of statutory retention periods.

2Controller
Practice Name
Dentalaesthetics
Proprietor
Dr. med. dent. Muhlis Akarsu
Address
Goldschmiedgasse 10/3/1, 1010 Vienna
3

Professional Confidentiality & Patient Data

Professional Confidentiality

As a dentist, Dr. Akarsu is subject to the statutory duty of professional confidentiality pursuant to § 9 of the Austrian Dental Act (ZÄG). All treatment data, diagnoses and health-related information are treated as strictly confidential and not passed on to third parties without your express consent.

Legal Basis for Health Data

The processing of special categories of personal data (health data) is carried out on the basis of Art. 9(2)(h) GDPR (healthcare, medical treatment) in conjunction with § 27(1)(1) DSG (Austrian Data Protection Act), as well as your express consent pursuant to Art. 9(2)(a) GDPR.

Retention Periods

Patient records and treatment documentation are retained for a minimum of 10 years in accordance with § 51 ZÄG and applicable tax law requirements. X-rays are retained in accordance with the applicable radiation protection regulations.

4

Data Collection on This Website

How do we collect your data?

Your data is collected in part by you providing it to us (e.g. via the contact form, by email or when booking an appointment). Other data is collected automatically by our IT systems when you visit the website (technical data such as browser, operating system, time of page visit).

5

Server Log Files

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing device
  • Time of the server request
  • IP address (anonymised shortly after)
6

Appointment Booking & Contact Form

Appointment enquiries

When you request an appointment via our website, by email or by telephone, your contact details are stored for appointment management purposes. Processing is carried out on the basis of Art. 6(1)(b) GDPR (performance of a contract).

Contact form

When you submit a contact form enquiry, your details (subject, name, email address, phone number and, if provided, your message) including the contact information you provide are stored for the purpose of processing your enquiry. We do not pass this data on without your consent.

Log of form submissions

To ensure delivery and to prevent misuse, we log every submission on our server with the time, your form details, the page it was sent from, the result and a shortened IP address (last block removed). This way your enquiry is not lost even if sending the e-mail fails. The legal basis is our legitimate interest in a functioning, secure contact form (Art. 6(1)(f) GDPR). Retention period: 3 months, after which the entries are deleted automatically.

7

Contact by Telephone

When you contact us by telephone, your enquiry and the resulting personal data (name, request) are stored and processed for the purpose of handling your enquiry. We do not pass this data on without your consent. The legal basis is Art. 6(1)(b) and (f) GDPR.

8

Cookies, Google Tag Manager and Google Maps

Cookies

This website uses technically necessary cookies for the proper functioning of the website. Technically necessary cookies are stored on the basis of Art. 6(1)(f) GDPR (legitimate interest). Marketing or tracking cookies are only used with your express consent (Art. 6(1)(a) GDPR). Your choice in the cookie banner is stored for 12 months and can be changed at any time via "Cookie settings" in the footer.

Google Tag Manager, Google Analytics 4 and Google Ads

We use Google Tag Manager with Google Consent Mode V2. Without your consent, no analytics or advertising cookies are set; in this state Google only receives cookieless, non-personalised signals (Consent Mode "Advanced") from which no user profiles are built. Google Analytics 4 (audience measurement) and Google Ads (conversion measurement) only run with cookies after you have given consent. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information: Google Privacy Policy.

Measuring enquiries

If you send an enquiry via the contact form or confirm a call or e-mail link, we report this as an event (e.g. "enquiry sent", page of origin) to Google Analytics and Google Ads. Your form details such as name, email address or phone number are not transmitted to Google.

Google Maps

On the practice and contact pages you can load a Google Maps map. The map is only embedded after you click "Load map"; only then is data (including your IP address) transmitted to Google. The legal basis is your consent given by clicking (Art. 6(1)(a) GDPR).

9

SSL / TLS Encryption

For security reasons and to protect the transmission of confidential content – in particular sensitive health data – this site uses SSL or TLS encryption. You can recognise an encrypted connection by the "https://" in the browser address bar and the padlock symbol.

10

Your Rights as a Data Subject

Access, rectification and erasure

You have the right to obtain free information about your stored personal data and to request its rectification or erasure. Treatment data can only be deleted after the expiry of statutory retention periods.

Restriction of processing

You have the right to request restriction of the processing of your personal data (Art. 18 GDPR) where the statutory requirements are met.

Right to object

Where your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to the processing pursuant to Art. 21 GDPR.

Right to lodge a complaint

In the event of GDPR violations you have the right to lodge a complaint with the Austrian Data Protection Authority (DSB): Barichgasse 40-42, 1030 Vienna, Tel.: +43 1 52 152-0, Email: dsb@dsb.gv.at, Web: www.dsb.gv.at

11Privacy Enquiries
Practice Name
Dentalaesthetics
Proprietor
Dr. med. dent. Muhlis Akarsu

Change your consent

You can adjust your cookie settings at any time:

Last updated: 27/10/2026 · Dentalaesthetics – Dr. Muhlis Akarsu

CallBookE-mail