Privacy Policy
How your data is handled – briefly and completely.
1. Controller
Dr. rer. nat. Gregor Heiss, Neubaugasse 40A, Top 1, 1070 Vienna, Austria.
2. Collection and processing of personal data
When you visit this website, technical access data that your browser transmits to our server is recorded automatically. This data cannot be attributed to specific individuals and is not combined with other data sources.
3. Getting in touch
If you contact me through the booking calendar or by phone, the details you provide are stored in order to process your enquiry. This data is not passed on without your consent.
4. Therapeutic records & statutory retention period
As part of psychotherapy, I am required by law under § 44 (3) of the Austrian Psychotherapy Act 2024 (PThG 2024) to maintain records. These therapeutic records and session notes must be retained for at least 10 years in accordance with § 44 (3) PThG 2024. All records are kept strictly confidential, encrypted, and password-protected, and are subject to the statutory psychotherapeutic duty of confidentiality (§ 45 PThG 2024); third-party access is excluded.
5. Your rights
You have the right to information about the data stored about you, to rectification of inaccurate data, to erasure of your data, to restriction of processing, to data portability and to object to processing.
6. Cookies
Web analytics are entirely cookieless. External services such as Google Maps are only linked. Identifiers from an ad click are stored briefly in the browser's session storage and deleted when the tab is closed.
7. SSL encryption
For security reasons this site uses SSL encryption.
8. Right to lodge a complaint
You have the right to lodge a complaint with the data protection authority: Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna.
9. External services
Web fonts: Web fonts are served locally. No connection to Google servers is made.
Web analytics (Matomo): First-party analytics on the same domain, entirely cookieless. IP addresses are anonymised immediately after processing and before storage; the data is hosted on a server in Germany. Legal basis: legitimate interest under Art. 6 (1) (f) GDPR.
Google Maps: The practice location is only linked, not embedded. Clicking the link transmits data to Google, including your IP address. Google privacy policy
Online appointment booking: Own booking platform, hosted entirely in the EU, at booking.psychotherapie-heiss.at. Only first name, last name, email address, phone number and the appointment itself are processed. For calendar synchronisation the time slot and contact details are transmitted to Google Calendar; treatment or health data is expressly not passed on. Legal basis: Art. 6 (1) (b) and (a) GDPR.
This is a translation of the German privacy policy. In case of doubt, the German version is authoritative.