Legal
Privacy policy
How Praxis Pelvia handles your data — the short version first: this website sets no tracking, the self-check never leaves your browser, and your reason for visiting is never sent to us by email.
Privacy policy
1. Controller
Praxis Pelvia — Marlene Ostwald, Kalkumer Straße 84, 40468 Düsseldorf, Germany. Telephone +49 211 4728190, email praxis@praxis-pelvia.de.
We have not appointed a data protection officer; we are below the threshold of § 38 (1) BDSG. Data protection enquiries go directly to the address above.
2. The self-check contains no data processing by us
The six-question self-check on the booking page runs entirely in your browser. Your answers are not transmitted to our server, to any hosting provider or to any third party. No request leaves your device while you answer.
If you save the result, it is stored in your browser's local storage on that device only, under the key "pelvia.selfcheck". We have no access to it. You can delete it at any time with the button on the result card, or by clearing your browser's site data.
The reference code generated at the end is a random string produced in your browser. It encodes nothing about your answers.
3. Booking requests
When you send a booking request we process: the name or pseudonym you enter, your chosen contact route and the telephone number or email address for it, the time windows you tick, your payment route (statutory with or without a prescription, private, self-pay, unknown), whether you are a new patient or want a video appointment, the optional organisational note, and the optional reference code.
The form deliberately contains no field for your symptoms, your diagnosis or your reason for visiting, and the categories from the self-check are not transmitted. Your reason for coming is first recorded in your patient file, in the practice, after you have told us in person.
Legal basis: Art. 6 (1) (b) GDPR — steps prior to entering into a treatment contract at your request — and Art. 6 (1) (a) GDPR for the consent you give with the tick box.
Retention: booking requests that do not lead to an appointment are deleted after 90 days. If an appointment takes place, the contact details are transferred into your patient record and follow the retention rules in section 4.
Requests are processed inside our practice management system, which is hosted in Germany by our IT service provider under a data processing agreement pursuant to Art. 28 GDPR.
4. Patient data in the practice
Once you are a patient, we process health data: history, findings, treatment documentation, prescriptions, correspondence with your doctors and billing data. Legal basis: Art. 9 (2) (h) GDPR in conjunction with § 22 (1) no. 1 (b) BDSG and, for the treatment contract, Art. 6 (1) (b) GDPR; for billing with statutory insurers, Art. 6 (1) (c) GDPR in conjunction with §§ 294 ff. SGB V.
Recipients: your statutory health insurer or our billing service provider for statutory claims (under a data processing agreement); referring or treating physicians only with your explicit consent; tax advisers and, where legally required, authorities.
Retention: patient documentation is kept for ten years after the conclusion of treatment pursuant to § 630f (3) BGB, longer where other statutory retention periods apply. Billing documents are kept for ten years under § 147 AO.
Everybody in the practice is bound by professional confidentiality under § 203 StGB.
5. Server log files
Our hosting provider automatically collects the technically necessary access data your browser transmits: the page requested, the date and time, the amount of data transferred, the referrer, the browser and operating system, and the IP address in shortened form. This data is not merged with other sources and is used only to operate and secure the site.
Legal basis: Art. 6 (1) (f) GDPR, our legitimate interest in a technically faultless and secure website. Log data is deleted after seven days.
Hosting: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA, on the basis of a data processing agreement including the EU standard contractual clauses. Delivery is via European edge locations wherever possible.
6. Cookies and local storage
We use no analytics, no advertising and no profiling cookies. There is no Google Analytics, no Meta pixel and no consent management platform from a third party on this site.
If you accept the notice at the bottom of the screen, we store one entry in your browser's local storage ("pelvia.consent") so that the notice does not reappear. If you decline, nothing at all is stored. Your language preference is held in the URL (/en, /de), not in a cookie.
Legal basis for storing your choice: § 25 (1) TDDDG and Art. 6 (1) (a) GDPR; for the technically necessary transmission of the page itself, § 25 (2) no. 2 TDDDG.
7. Map
The map on the practice page is not loaded until you press the button on it. Only then is a connection established to the servers of the OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge CB4 0WS, United Kingdom, which receives your IP address. Before that, no third-party request is made from this site.
Legal basis: Art. 6 (1) (a) GDPR, your consent by pressing the button. The United Kingdom is covered by an adequacy decision of the European Commission.
8. Video appointments
Video appointments are conducted through a video service certified for use in German healthcare under the requirements of the Kassenärztliche Bundesvereinigung, with end-to-end encryption and processing in Germany, on the basis of a data processing agreement under Art. 28 GDPR.
The consultation is not recorded, not transcribed and not stored. Only the clinical documentation is written into your patient record, exactly as for an appointment in the practice.
9. Your rights
You have the right of access (Art. 15), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object (Art. 21 GDPR). Where processing is based on consent you may withdraw it at any time with effect for the future.
The right to erasure is limited for patient documentation by the statutory retention periods in section 4; we then restrict processing instead of deleting.
You also have the right to lodge a complaint with a supervisory authority: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf.
10. Changes
This privacy policy is dated 1 February 2026. We will update it if we change the site or the way we work; the current version is always the one on this page.