Data protection | Privatpraxis Georg Wiegand

1. Responsible person

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Georg Wiegand
Georg Wiegand Private Practice
Marienplatz 1
33098 Paderborn
Telephone: +49 52 51 - 2 53 56
Email: admin at Hautarzt-Wiegand.de

2. General Information

We process personal data only to the extent necessary for providing this website, processing inquiries, or carrying out pre-contractual or contractual measures. Personal data is any information relating to an identified or identifiable natural person.

The website can generally be visited without registration and without actively providing personal data. No automated decision-making, including profiling, takes place.

3. Hosting and server log data

This website is hosted by the following provider:

Team Blau UG (limited liability)
Schönenberg 22
33039 Nieheim

When you access the website, your browser transmits technically necessary data to the web server. In particular, the following data may be processed in server log files:

IP address of the requesting device
Date and time of the request
accessed page or file
Amount of data transferred and access status
Previously visited page (referrer URL), if transmitted by the browser
Browser type, browser version and operating system

This processing is necessary to deliver the website, ensure its stability and security, and detect and prevent unauthorized access. The legal basis for this is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and uninterrupted operation of our website.

The log data is deleted after 30 days, unless longer retention is required to investigate a specific security incident. Where necessary, a data processing agreement pursuant to Article 28 GDPR has been concluded with the hosting provider.

4. Encrypted transmission

This website uses an encrypted HTTPS connection. This protects data transmitted between your browser and the web server from being intercepted by third parties. However, an encrypted website connection does not automatically mean that a message subsequently sent via a standard email program is end-to-end encrypted.

5. Contact via telephone or email

When you contact us by phone or email, we process the information you provide in order to answer your inquiry and, if necessary, to schedule an appointment. This may include, in particular, your name, contact details, the content of your inquiry, and any health information you voluntarily provide.

The legal basis is Article 6(1)(b) GDPR, insofar as the inquiry serves the purpose of initiating or executing a treatment contract. For other inquiries, processing is based on Article 6(1)(f) GDPR; our legitimate interest lies in the proper handling of the inquiry. Insofar as health data is processed within the context of a treatment inquiry, this is done on the basis of Article 9(2)(h) GDPR in conjunction with Section 22(1)(1)(b) BDSG.

The data will be deleted as soon as it is no longer required for processing and there are no legal obligations to retain it, in particular medical, tax or commercial law obligations.

Please do not send medical findings and other highly confidential information unencrypted via email. Use a secure transmission method that has been agreed upon with the practice beforehand.

6. Contact and appointment request forms on this website

The contact form and online appointment request do not transmit any data to a form server and do not store the entries on this website. After submission, a pre-formatted email will open in your default email program on your device. Only when you actually send this message will the entered information be processed by your email provider and our email provider. The privacy policies of the respective email providers involved also apply to this transmission.

When requesting an appointment, the following information is processed: name, email address, optional phone number, patient status, appointment type, preferred date, alternative date, and preferred time slot. A field for complaints, diagnoses, or findings is intentionally omitted. The requested appointment only becomes binding after a personal confirmation from the practice and is then manually entered into the practice calendar.

7. Provision of downloads

When you access a document provided on this website, a standard web server access occurs. The technical access data mentioned in section 3 is processed. We do not perform any further recording or analysis of the download.

8. Bootstrap and Bootstrap Icons via jsDelivr

For consistent and technically reliable display, the website currently loads stylesheets, icons, and JavaScript files from the Bootstrap project via the Content Delivery Network cdn.jsdelivr.net . The provider of the jsDelivr CDN is Volentio JSD Limited, Suite 2a1, Northside House, Mount Pleasant, Barnet, England, EN4 9EB, United Kingdom.

When these files are accessed, your IP address is transmitted to jsDelivr and/or to the CDN subcontractors used by jsDelivr. According to jsDelivr, CDN access is processed by Cloudflare, Fastly, and Gcore and used for security and statistical purposes; individual user tracking is not permitted.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in providing a fast, secure, and consistent website experience across all devices. Data may also be processed by infrastructure located outside the European Union or the European Economic Area. jsDelivr describes the subcontractors and safeguards used in its privacy policy and contract documents.

Further information:

9. Range measurement with Matomo

With your consent, we use Matomo for the statistical analysis of website usage. The Matomo installation can be accessed at https://service.hgpb.de/matomo/ . The private practice of Georg Wiegand remains responsible for the analysis; the technical operator processes the analytics data within the scope of the agreed service.

Matomo can process the following data in particular:

Abbreviated or full IP address, depending on the server-side Matomo configuration
Date and time of page view
accessed page and page title
Previously visited page and origin of access
Browser type, operating system, device category and screen resolution
Clicked links and downloaded files
pseudonymous visitor and session IDs

The Matomo code and tracking request will only be loaded after you have given your consent via the displayed selection window. The legal basis for storing and reading information on your device is Section 25 Paragraph 1 of the German Telemedia Act (TMG). The legal basis for the subsequent processing of personal data is Article 6 Paragraph 1 Letter a of the GDPR.

With your consent, Matomo uses, among other things, the first-party cookies _pk_id to recognize your browser and _pk_ses for the duration of a session. Matomo specifies default expiration times of 13 months for _pk_id and 30 minutes for _pk_ses . Additionally, we store your selection under the key gw-matomo-consent in your browser's local storage so that the prompt doesn't appear again on every page request.

You can withdraw your consent at any time with effect for the future. To do so, open the selection again via "Privacy settings" in the footer of the website and select "Reject". Processing carried out before the withdrawal remains lawful.

Before publishing in the Matomo administration, please check and specify the following: IP anonymization, deletion period of the analysis data, deactivated additional functions, and the name and address of the technical operator of service.hgpb.de .

The image tracker is disabled for visitors without JavaScript for privacy reasons. No Matomo tracking takes place when JavaScript is disabled, because prior consent cannot be verified on this static website.

10. Other cookies, services and embedded third-party content

Apart from consent management and Matomo tracking, which only starts after consent has been given, this website does not currently use any analytics, advertising, or social media tracking services. No Google Maps, videos, or social media plugins are automatically embedded.

The automatic translation service is used exclusively during the editorial creation of static language versions. No text, IP addresses, or other visitor data are transmitted to Google Cloud Translation when you visit the website.

Should future features be added that store data on your device or access non-essential third-party providers, this privacy policy will be updated before their use and consent will be obtained if necessary.

11. External Links

This website contains links to websites of other providers. Data is only transferred to these providers when you click on the respective link. The respective provider is responsible for the data processing that takes place there.

12. Recipients and processors

Recipients of personal data may include the technical service providers we use for hosting and communication. These service providers process data only within the framework of legal requirements and, where necessary, on the basis of a data processing agreement. Data will only be transferred to other recipients if this is legally permitted or required, or if you have given your consent.

13. Your rights

Subject to the legal requirements, you have in particular the following rights:

Right to information pursuant to Article 15 GDPR
Right to rectification pursuant to Article 16 GDPR
Right to erasure pursuant to Article 17 GDPR
Right to restriction of processing pursuant to Article 18 GDPR
Right to data portability pursuant to Article 20 GDPR
Right to object pursuant to Article 21 GDPR
Right to withdraw consent with effect for the future pursuant to Art. 7 para. 3 GDPR

To exercise your rights, you can contact us using the contact details provided in section 1. Processing carried out based on consent remains lawful until it is withdrawn.

14. Objection to processing based on legitimate interests

Insofar as we process personal data on the basis of Article 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data in question unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims.

15. Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for our practice location is:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Cavalry Street 2–4
40213 Düsseldorf
Telephone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
www.ldi.nrw.de

16. Update of this privacy policy

We will update this privacy policy if the website, the services used, or the legal requirements change.

As of July 2026