Privacy Policy

Information pursuant to Art. 13 GDPR

1. Controller

Abdelwadoud Youssef Abdrabou
Hausarzt Abdrabou – Family Medicine & Internal Medicine Practice
Kurfürstenstraße 10-12, 34117 Kassel
Phone: +49 561 76644940
Email: info@hausarzt-abdrabou.de

2. Your Rights

You have the right at any time to:

  • request information about the personal data we hold about you (Art. 15 GDPR),
  • request correction of inaccurate data (Art. 16 GDPR),
  • request deletion of your data (Art. 17 GDPR),
  • request restriction of processing (Art. 18 GDPR),
  • receive your data in a portable format (Art. 20 GDPR),
  • object to processing (Art. 21 GDPR), and
  • lodge a complaint with a supervisory authority (Art. 77 GDPR).

3. Hosting and Server Log Files

This website is operated by an external hosting provider (server hosting). Every time the website is accessed, the hosting provider automatically collects server log files transmitted by your browser (e.g. IP address, date and time of the request, page accessed, referrer URL, browser type). This data is used exclusively to ensure the secure and stable operation of the website (Art. 6(1)(f) GDPR) and is not combined with other data sources.

4. Appointment Request Form

When you submit an appointment request via the contact form, we process the data you provide (name, email address, optionally phone number, reason for the request, preferred date, message) exclusively to process your request and to contact you.

The legal basis is Art. 6(1)(b) GDPR (initiation of a treatment contract). Where information about the reason for your request allows conclusions about your health, this constitutes health data within the meaning of Art. 9 GDPR; its processing is based on Art. 9(2)(h) GDPR (medical diagnosis/treatment) in conjunction with § 22(1) No. 1(b) BDSG and is subject to medical confidentiality.

The data is stored in a database and accessed exclusively by authorized practice staff. It is deleted as soon as it is no longer required to process your request, subject to statutory retention obligations.

5. Map Image and Route Links

On our homepage we show a map section with the location of the practice. It is an image file delivered from our own server (map data © OpenStreetMap contributors, licensed under the ODbL). Loading the page does not open a connection to any map service and no data is transmitted to third parties. The buttons "Route in Google Maps", "Apple Maps" and "OpenStreetMap" as well as the "Get directions" link are simple links. Only when you click one of these links does your browser leave our website and connect to the respective provider (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Apple Distribution International Ltd., Cork, Ireland; OpenStreetMap Foundation, Cambridge, United Kingdom); from that point on their privacy policies apply. The legal basis for providing the links is our legitimate interest in giving simple directions (Art. 6(1)(f) GDPR). For more information, please see Google's Privacy Policy.

6. Cookies and Admin Area

This website uses only technically necessary cookies: (1) a cookie that stores your language choice, (2) security cookies of the login system (CSRF protection and return address), and (3) for the password-protected admin area of our practice, a session cookie that is used exclusively for staff login and expires when the session ends. These cookies are required to operate the website and are set without your consent (Section 25(2) No. 2 TDDDG; Art. 6(1)(f) GDPR). This website does not use cookies for analytics, marketing, or tracking purposes and does not embed third-party services that would require consent.

7. Storage Period

Personal data is deleted as soon as the purpose of storage no longer applies and no statutory retention obligations (e.g. under § 630f BGB for treatment records) apply.

Note: This is a translation of the German original covering the features present in the website's source code (server hosting, appointment form, map image and route links, admin login). It does not replace a legal review and should be approved by the practice management or a data protection consultant before publication — in particular the name/address of the specific hosting provider and any future analytics or marketing tools. In case of discrepancies, the German version is legally binding.