Responsible for the content:

 

Ella Laura Anna Shklarek

Klostergasse 19/12

1180 Vienna
praxis@ellashklarek.com

 

Data processing register for the Ella Shklarek practice in accordance with Article 30 Paragraph 1 of the EU General Data Protection Regulation (GDPR)

 

Data processing/Data processing purposes Patients

Legal basis:

Documentation obligation under the Psychotherapy Act

Purposes and description of data processing:

Name, address and social security number are necessary for invoicing according to tax legislation and social security regulations (also includes diagnosis and number of psychotherapy sessions).

Regarding accounting:

A copy of the invoice (three copies of the invoice form) is sent to the tax advisor. The tax advisor acts as a data processor and confirms that the data is processed in compliance with the GDPR.

The telephone number is necessary for possible appointment rescheduling/cancellations, the email address for correspondence regarding appointments. No content will be exchanged via email or telephone. The patient file contains the patient data, all invoices, and any issued confirmations and session minutes, in accordance with the documentation guidelines of the Federal Ministry of Social Affairs, Health, Care and Consumer Protection (BMSGPK).

They are kept in a locked filing cabinet in the doctor's office; the office itself is locked. They will be destroyed after 30 years.

The contents of patient files are only provided in copy upon request of the patient, as required by law, and are otherwise treated with strict confidentiality. If a patient requests information about the storage of their data, they will be granted access to the contents of their patient file.

For patients who have not yet reached the age of 14, the consent of their legal representative (parents, etc.) must be obtained.