Data protection

1. Controller


The controller responsible for the processing of personal data on this website is:


Doctor-medic Anita Angela Posa


Praxis Posa


Berliner Allee 56
40212 Düsseldorf
Germany
Phone: 0211 15866231
Fax: 0211 15866232
Email: info@praxisposa.de



2. General information


The protection of your personal data is important to us. We treat your data confidentially and in accordance with statutory data protection regulations, in particular the General Data Protection Regulation, the Federal Data Protection Act, and the professional confidentiality obligations applicable to doctors.


When you visit this website and contact our practice, personal data may be processed. Health data is particularly sensitive data. Please do not send medical findings, diagnoses, or other sensitive health data unsolicited by normal email.



3. Purpose of data processing


We process personal data only to the extent necessary, in particular for:


  • providing this website
  • responding to inquiries
  • arranging appointments
  • communicating with patients
  • carrying out medical treatment
  • fulfilling statutory documentation obligations
  • billing medical services
  • fulfilling professional and statutory obligations


4. Legal bases


Processing is carried out, depending on the process, on the basis of:


Art. 6 para. 1 lit. b GDPR, insofar as processing is necessary for the performance of pre-contractual measures or a treatment contract


Art. 6 para. 1 lit. c GDPR, insofar as we are legally obliged to process the data


Art. 6 para. 1 lit. f GDPR, insofar as we have a legitimate interest in the secure and functional provision of the website


Art. 6 para. 1 lit. a GDPR, insofar as you have given us your consent


Art. 9 para. 2 lit. h GDPR, insofar as health data is processed for the purposes of medical care


Art. 9 para. 2 lit. a GDPR, insofar as you have expressly consented to the processing of special categories of personal data



5. Access data and server log files


When our website is accessed, the website’s technical provider automatically processes information transmitted by your browser. This may include:


  • IP address
  • date and time of access
  • page accessed
  • amount of data transferred
  • browser type and browser version
  • operating system used
  • referrer URL

This data is required in order to provide the website technically, ensure stability and security, and prevent misuse. This data is not combined with other data sources.



6. Contact by phone, fax, or email


If you contact us by phone, fax, or email, we process the data you provide in order to handle your inquiry. This may include your name, contact details, the content of your inquiry, and, where applicable, health-related information.


Please note that normal emails are not fully protected against access by third parties. For confidential medical information, we recommend personal contact, telephone consultation, or a secure communication channel.



7. Online appointment booking


If you book an appointment online through an external provider, the data protection information of the respective provider also applies. Processing is carried out by the provider and by our practice for appointment management and patient communication.


Please enter only the information required for scheduling the appointment when booking online.



8. Medflex


Our practice may use the medflex service for secure digital communication. If you use medflex, the data you enter will be processed for communication with the practice. The data protection information of medflex also applies to the use of medflex.



9. Doctolib


Our practice may use the Doctolib service for online appointment booking. If you use Doctolib, the data you enter will be processed for arranging appointments. The data protection information of Doctolib also applies to the use of Doctolib.



10. Cookies


This website uses only technically necessary cookies, insofar as they are required for the operation of the website. Technically necessary cookies serve the secure and error-free provision of the website.


If services such as statistics, marketing, embedded maps, videos, or external media are used beyond this, this will only take place on the basis of your consent, provided such consent is legally required.



11. External links


This website may contain links to external websites, for example to appointment booking services, patient portals, or social networks. If you click on such a link, you leave our website. The respective provider is responsible for data processing on external websites.



12. Storage period


We store personal data only for as long as this is necessary for the respective purpose or as long as statutory retention obligations exist. Medical documentation is retained in accordance with statutory and professional requirements.



13. Disclosure of data


Personal data is disclosed only if this is legally permitted or required, if you have given your consent, or if disclosure is necessary for carrying out treatment, billing, appointment management, or the technical provision of the website.


Recipients may include, in particular:


  • medical service providers
  • laboratories
  • billing offices
  • Association of Statutory Health Insurance Physicians
  • health insurance providers
  • IT service providers
  • hosting providers
  • appointment booking providers
  • communication services

All service providers are contractually obliged to maintain confidentiality and data protection, where required.



14. Your rights


In accordance with the GDPR, you have the right to:


  • access information about your stored data
  • rectification of inaccurate data
  • erasure of your data
  • restriction of processing
  • data portability
  • object to certain processing activities
  • withdraw consent previously given with effect for the future

To exercise your rights, please contact:


Doctor-medic Anita Angela Posa
Email: info@praxisposa.de



15. Right to lodge a complaint with the supervisory authority


You have the right to lodge a complaint with a data protection supervisory authority.


Competent data protection supervisory authority:


State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia


Kavalleriestraße 2 to 4
40213 Düsseldorf
Phone: 0211 38424 0
Email: poststelle@ldi.nrw.de
www.ldi.nrw.de


16. Validity of this Privacy Policy


This Privacy Policy applies as of June 2026. We reserve the right to amend this Privacy Policy if legal, technical, or organizational changes occur.