Privacy Policy

1. Data Controller

The controller responsible for data processing on this website and in connection with our digital patient communication services is:

Neuro Praxis Düsseldorf
Prof. Dr. med. Christina Haubrich
im Pradus am Kaiserteich
Reichsstraße 59
40217 Düsseldorf
Germany

📞 Phone: +49 211 229 575 59
✉️ E-mail: info@neuro-praxis-dus.de

2. Data Protection at a Glance

The protection of your personal data, and in particular your health data, is of the utmost importance to us.

We process personal data exclusively in accordance with applicable legal requirements, including in particular:

• General Data Protection Regulation (GDPR)
• German Federal Data Protection Act (BDSG)
• Professional regulations governing medical practitioners
• Other applicable legal provisions

Our practice follows a digitally supported healthcare model. To this end, we use modern practice management software, digital communication tools, and selected artificial intelligence (AI) systems.

Important

All diagnoses, treatment decisions, and medical assessments are made and supervised exclusively by qualified healthcare professionals.

3. Data Protection Officer

We have appointed a Data Protection Officer:

IITR Datenschutz GmbH
Dr. Sebastian Kraska
Marienplatz 2
80331 Munich
Germany

✉️ E-mail: email@iitr.de

4. Your Rights

You have the following rights under applicable data protection laws:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

The competent supervisory authority is generally:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW)

5. Website Hosting and Technical Provision

Our website is hosted by IONOS SE.

When you visit our website, technically necessary data is processed, including:

• IP address
• Date and time of access
• Browser type
• Operating system
• Referrer URL
• Pages visited

This processing is necessary to ensure the secure provision and operation of the website.

Legal basis: Art. 6 (1) (f) GDPR

6. Cookies

Our website uses only technically necessary cookies.

We currently do not use analytics or marketing cookies.

The use of technically necessary cookies is based on our legitimate interest in providing a secure and functional website.

Legal basis:

• Art. 6 (1) (f) GDPR
• Section 25 (2) German Telecommunications Digital Services Data Protection Act (TDDDG)

7. Contacting Our Practice

When you contact us, we process the information you provide in order to handle your request.

This may occur via:

• Telephone
• E-mail
• Online Reception
• Patient Portal
• Online Appointment Booking Systems
• Video Consultations

Legal basis:

• Art. 6 (1) (b) GDPR
• Art. 9 (2) (h) GDPR (for health data)

8. MIKA AI Telephone Assistant

To improve our telephone accessibility, we use the AI-supported telephone assistant MIKA.

The technical infrastructure is provided through the Placetel communications platform.

When contacting our practice by telephone, conversation content, contact details, and organizational information may be automatically captured, structured, and forwarded to our practice team.

MIKA serves exclusively to support communication and organizational processes.

Important Notice

Like any software system—and indeed any human being—MIKA may make mistakes or misunderstand information. Therefore, all requests are subsequently reviewed and processed by qualified members of our practice team.

MIKA:

• does not provide diagnoses,
• does not provide treatment recommendations,
• does not make medical decisions.

Legal basis:

• Art. 6 (1) (b) GDPR
• Art. 9 (2) (h) GDPR

9. Documentation Support Through Heidi Health

Where appropriate, we use Heidi Health to assist with medical documentation.

Heidi Health may analyze conversations and generate draft medical documentation.

The software is used exclusively to support documentation processes.

Heidi Health

• does not provide diagnoses,
• does not provide treatment recommendations,
• does not make medical decisions.

All documentation drafts are reviewed and, where necessary, corrected by qualified healthcare professionals before use.

Responsibility for all medical documentation remains entirely with our practice team.

The German-language version used by our practice has been selected with particular consideration for European data protection requirements.

Legal basis:

• Art. 6 (1) (b) GDPR
• Art. 9 (2) (h) GDPR

10. Online Reception and Patient Portal

Our website integrates the Online Reception service provided by:

Docmedico GmbH
Ehrengutstraße 7
80469 Munich
Germany

The Online Reception service enables, among other things:

• Appointment requests
• Submission of medical reports
• Referral requests
• Prescription and medication requests
• Other digital communication services

Data is transferred on the basis of your consent pursuant to Art. 6 (1) (a) GDPR.

Further information is available in the privacy policy of Docmedico GmbH.

11. Electronic Medical Records and medatixx Practice Software

For treatment, appointment management, medical documentation, video consultations, and billing, we use systems provided by medatixx GmbH & Co. KG.

The following categories of data may be processed:

• Master data
• Contact information
• Health data
• Diagnoses
• Medical findings
• Examination results
• Medication data
• Medical correspondence
• Appointment information

Processing is carried out exclusively for the provision of medical care and compliance with statutory documentation and billing obligations.

Legal basis:

• Art. 6 (1) (b) GDPR
• Art. 9 (2) (h) GDPR

12. Online Appointment Booking

We use x.webtermin, a service provided by medatixx GmbH & Co. KG, for online appointment scheduling.

When using this service, personal data required for appointment booking is processed.

Further information:

https://medatixx.de/datenschutz

13. Video Consultations

Where appropriate, our practice offers video consultations.

These consultations are conducted using systems provided by medatixx GmbH & Co. KG.

Personal and health-related data is processed only to the extent necessary for medical consultation and treatment.

Legal basis:

• Art. 6 (1) (b) GDPR
• Art. 9 (2) (h) GDPR

14. Use of Artificial Intelligence

Our practice uses selected AI-based systems to support:

• Communication
• Documentation
• Practice administration
• Structuring of medical information

These systems serve solely as supportive tools.

Guiding Principle

• Diagnoses are made exclusively by qualified healthcare professionals.
• Treatment decisions are made exclusively by qualified healthcare professionals.
• Medical findings are assessed exclusively by qualified healthcare professionals.

No automated decision-making within the meaning of Art. 22 GDPR takes place.

15. Recipients of Personal Data

Where necessary, personal data may be transferred to:

• IONOS (hosting services)
• Placetel (telecommunications infrastructure)
• Docmedico (digital patient communication)
• Heidi Health (documentation support)
• medatixx GmbH & Co. KG
• IT service providers
• Medical laboratories
• Referring and treating physicians
• Hospitals and healthcare institutions
• Billing service providers
• Public authorities where legally required

Where required by law, external service providers are engaged under data processing agreements pursuant to Art. 28 GDPR.

16. YouTube

Our website may contain embedded videos from YouTube.

Provider:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Further information:

https://policies.google.com/privacy

17. Google Maps

Our website may contain maps provided by Google Maps.

Provider:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Further information:

https://policies.google.com/privacy

18. International Patients

Neuro Praxis Düsseldorf regularly provides care for international patients.

For this purpose, communication and documentation may be offered in English.

Digital support systems and AI-based tools may be used to facilitate communication.

The following principles always apply:

• Diagnoses are made exclusively by qualified healthcare professionals.
• Treatment recommendations are provided exclusively by qualified healthcare professionals.
• Medical decisions are made and supervised exclusively by qualified healthcare professionals.

In the event of discrepancies, the German-language original medical records maintained in the patient's file shall prevail.

19. SSL/TLS Encryption

Our website uses modern SSL/TLS encryption technologies to ensure the secure transmission of your data.

20. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy where necessary due to technical, organizational, or legal changes.

The version published on our website at the time of access shall apply.