Data Protection Declaration
1. Data Controller
The party responsible for the processing of personal data is:
Dr. med. Shahzada Amir, M.Sc., Ph.D.
Mein-GenMed – Practice for General and Personalized Medicine
Trillergasse 8/2
1210 Vienna
Austria
Telephone: +43 1 292 98 98
Email: praxis@mein-genmed.at
For questions or concerns regarding data protection, you may contact our practice directly at any time.
2. General Information on Data Processing
The protection of your personal data, and in particular your health data, is important to us. We process personal data only to the extent necessary for the operation of our website, the organization of the medical practice, communication with patients, or medical care.
Depending on the processing involved, these are based in particular on the execution or preparation of medical care, legal obligations, legitimate interests or – where necessary – your consent. Health data is processed in particular insofer as this is required for medical diagnosis, treatment, or healthcare provision.
3. Website, Framer, and Traffic Measurement
This website is created using Framer and is provided via the Framer infrastructure. When accessing the website, technically required connection data are processed, specifically to ensure the secure and reliable provision of the website.
Framer B.V., based in Amsterdam, is utilized as a technical service provider within the scope of the services we use.
Framer also features an integrated reach measurement tool. According to Framer, Framer Analytics does not use cookies or permanent identifiers.
We do not currently use any additional services such as Google Analytics, Google Tag Manager, Meta Pixel, Matomo, or Hotjar.
4. Fonts
The fonts used on this website are provided via the website or Framer infrastructure.
Inter, Erode, and Vazirmatn are provided as dedicated web fonts via Framer. No Google Fonts are loaded from Google servers to display our website's typography.
5. Online Forms and Prescription Requests
For certain matters we use arzt-direkt, a service provided by zollsoft GmbH. The following online forms are currently available: sick leave (Krankenstand), prescription (Rezept), referral (Überweisung), physiotherapy prescription (Physiotherapie-Verordnung), remedy prescription (Heilmittelverordnung), health check for adults (Gesundheitscheck Erwachsene), Junior Health Check (Gesundheitscheck-Junior), consent form (Einwilligungserklärung) and new-patient medical history (Neupatienten-Anamnese). The forms are transmitted via arzt-direkt and subsequently processed in the practice or via our practice software tomedo.
Depending on the form, identification and contact details, as well as information on medication, symptoms, medical history, or other health data required for processing, may be processed.
According to the provider, the transmission of the arzt-direkt patient forms is encrypted; the completed forms can only be read by the respective medical practice.
An online prescription request does not constitute automatic approval. The medical review and decision-making are carried out by the practice.
6. Appointment Booking and Video Consultation
Appointments can be booked online via arzt-direkt. This may include appointments at the medical practice as well as video consultations.
When booking an appointment, the data required for scheduling, identification, communication, and, if applicable, medical preparation will be processed.
According to the provider, appointment booking data is initially cached for technical reasons and subsequently transmitted in encrypted form to the practice information system. The appointment booking data stored on the web server is deleted by the end of the respective calendar quarter at the latest.
The video consultation is also conducted via arzt-direkt. The provider describes the transmission of audio, video, chat, and files as encrypted.
Whether a medical issue can be conclusively assessed via video consultation or if an in-person appointment is required remains a medical decision made on a case-by-case basis.
7. Arzt-Direkt App and Secure Communication
The Arzt-Direkt Messenger app is our protected messaging channel for findings, medical documents and sensitive messages.
Via the Arzt-Direkt Messenger, messages as well as documents and medical reports can be exchanged between patients and the medical practice.
According to the provider, messenger content is processed with encryption. Encrypted data packets that have not yet been retrieved are deleted after four weeks at the latest. According to the provider, medical files are additionally encrypted before upload.
8. tomedo and the transmission of medical documentation via email
For the organisation of our medical practice and medical documentation, we use tomedo by zollsoft GmbH.
We send medical documents by email exclusively via the password-protected email function of our practice software tomedo.
For the exchange of findings, medical documents, and sensitive medical communications, we prefer, however, secure communication via Arzt-Direkt.
Ordinary email is not a secure means of communication. We therefore recommend that patients do not send sensitive medical information to the practice unencrypted by ordinary email.
9. AI-supported telephone assistant – VITAS
For our telephone availability, we utilize an AI-powered telephone assistant from VITAS.
In particular, this can record requests for prescriptions, referrals, callbacks, and other organizational matters and make them available to our practice team. The medical review and decision are carried out by our medical practice and not automatically by the telephone assistant.
At the beginning of the call, callers are informed about data processing. To the extent that call contents are recorded or transcribed in accordance with the configuration used, these can be viewed by authorized staff members of the medical practice in order to process the inquiry.
VITAS states that it operates its platform on servers of German cloud providers and utilizes a customizable deletion concept. Therefore, a flat-rate fixed storage period is not specified here.
10. Current Medical Practice Status
For current special opening hours, holiday periods and temporary changes, the website retrieves status information via Google Apps Script.
No prescription data, diagnoses, medication details, form contents, or other medical patient data are transmitted in this process. However, due to technical requirements, the external server receives, in particular, the IP address as well as browser and connection information when the connection is established.
The purpose of this processing is the reliable display of current medical practice and opening hours information.
11. Google Maps and External Links
On the Directions page, a Google Maps map can be loaded.
The Google Maps map is not loaded automatically when accessing the page. A connection to Google is only established after your active selection of "Show map". In doing so, the IP address and technical browser or device information, in particular, may be processed.
In addition, our website contains standard links to external services, such as Arzt-Direkt, Google Maps, Apple Maps, and WienMobil. In the case of a standard link, the respective external service is generally only accessed when you open the link yourself.
12. Cookies and similar technologies
According to its current configuration, our website does not use any additional marketing or advertising trackers such as Google Analytics, Meta Pixel, or comparable tracking services.
According to information provided by Framer, Framer Analytics operates without the use of cookies or permanent identifiers.
Google Maps will only be loaded after your active selection.
13. Retention Period
Personal data is generally only stored for as long as is necessary for the respective purpose or as required by statutory retention periods.
According to the applicable legal regulations, medical documentation is subject to a minimum retention period of ten years.
For individual technical services, additional, function-dependent storage periods apply. For example, arzt-direkt specifies that certain appointment booking data is deleted from the web server at the latest by the end of the calendar quarter, and unretrieved messenger data packages are deleted after four weeks at the latest.
14. Recipients and Service Providers
Insofar as this is necessary for the described purposes, data may be processed in particular by Framer, zollsoft/tomedo/arzt-direkt, VITAS, and, in the case of the described Google functions, by Google services.
Furthermore, within the scope of medical care, data may be transmitted to legally designated recipients, such as social security providers, health insurance agencies for public servants, or other medical institutions, provided that the legal requirements for this are met.
15. Your Data Protection Rights and Contact
In accordance with statutory requirements, you have, in particular, the right to access, rectification, erasure, restriction of processing, data portability, and objection. Any consent previously granted may be revoked with future effect.
Individual rights may be restricted due to statutory obligations – for example, medical retention periods (ärztliche Aufbewahrungspflichten).
If you have any questions or concerns regarding data protection, please feel free to contact our practice directly first:
Email: praxis@mein-genmed.at
Telephone: +43 1 292 98 98
We endeavor to address your concerns promptly and transparently.
Irrespective of this, you have the right to lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde) if you believe that the processing of your personal data violates data protection law.
Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40–42
1030 Vienna
Email: dsb@dsb.gv.at
Telephone: +43 1 52 152-0
16. No automated medical decisions
Through the website, online forms, video consultations, or the telephone assistant, no solely automated medical decisions are made regarding patients.
In particular, diagnoses, therapeutic decisions, prescription approvals, and the medical assessment of sick leave are reviewed by a doctor or by appropriately authorized practice personnel.
17th Update
We shall adapt this privacy policy in the event of changes to the services used, technical procedures, or legal requirements.
As of: August 2026