Privacy notice

Controller within the meaning of the GDPR

Doctor-medic Otilia Gudana
Private medical sole practice, owner: Doctor-medic Otilia Gudana
c/o Praxis am Nussbaumpark
Nussbaumstraße 14, 80336 München, Germany
hello@healthog.org

For data protection enquiries (access, rectification, erasure, withdrawal of consent), please contact the owner directly by email. No data protection officer has been appointed under section 38 BDSG for this sole practice, as the statutory thresholds are not exceeded.

Purposes and legal bases of processing

1. Responding to your inquiry

Your contact details and your concern are used to process your inquiry and to make you an offer. Legal basis: Art. 6(1)(a) GDPR (consent) and Art. 9(2)(a) GDPR (consent to the processing of special categories of personal data, as health data may be affected).

2. Instruction preparation and expert opinion engagement

If an inquiry is successful, your data is stored to prepare and carry out the expert opinion engagement. Legal basis: Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures) and Art. 9(2)(h) GDPR in conjunction with section 22(1) no. 1(b) BDSG.

3. Website visit and technically necessary data

When you visit this website, technically necessary data such as IP address, date and time of access, browser used and requested files are processed in order to provide the website and ensure its functionality. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the operation, security and stability of the website).

Retention periods

• Inquiries without an engagement: up to 12 months after the last contact, unless a statutory retention obligation exists.
• Engagement and expert opinion data: according to the statutory retention periods of medical documentation law (as a rule 10 years after completion of the engagement, longer for certain indications).
• Technical log and server data: usually 7 days, at most 30 days, unless longer retention is required to defend against attacks or to secure evidence.

Recipients and disclosure

Your data is disclosed to third parties only where this is necessary to fulfil your inquiry or for statutory documentation:

• Technical hosting and infrastructure service provider that delivers the website and necessarily processes access log data
• Authorities or courts where legally obliged

Transfers to third countries outside the EU/EEA take place only where an adequate level of data protection under the GDPR is ensured (e.g. by an adequacy decision of the EU).

Your rights

You have the following rights under the GDPR vis-à-vis the private practice of Doctor-medic Otilia Gudana:

• Access (Art. 15 GDPR): information about the stored data.
• Rectification (Art. 16 GDPR): correction of inaccurate or incomplete data.
• Erasure (Art. 17 GDPR): deletion, unless a statutory retention obligation prevents it.
• Restriction (Art. 18 GDPR): restriction of processing in case of justified doubts.
• Objection (Art. 21 GDPR): objection to processing based on legitimate interest.
• Withdrawal of consent (Art. 7(3) GDPR): possible at any time by email to hello@healthog.org.

To exercise your rights, send an email to hello@healthog.org. Your concern will be addressed within the statutory time limits.

Data security

Technical and organisational measures are taken to protect your data against loss, misuse and unauthorised access:

• SSL/TLS encryption for the website and email transmission
• Access restrictions to practice staff
• Regular security updates and infrastructure protection
• No disclosure of health data to advertising or analytics companies

Cookies and tracking

This website uses no cookies and no tracking. The fonts are embedded locally; no connections to external font or analytics services take place.

Right to lodge a complaint with a supervisory authority

If you believe that the processing of your data violates data protection law, you have the right to lodge a complaint with a competent supervisory authority. For the practice in Munich this is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27, 91522 Ansbach
Phone: +49 981 53 1300
Email: poststelle@baylda.bayern.de
Web: www.baylda.bayern.de

Changes to this privacy notice

This privacy notice is updated when the website, the legal situation or the processing activities change. The current version is available on this page. As of: 2026.