Dataprivacy

This Privacy Policy informs you about which personal data we process when you visit this website, submit enquiries through our forms, or book appointments online. The legal basis is the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), and the Austrian Telecommunications Act 2021 (TKG 2021).

The data controller is:

Ordination Dr. Carina Wick
Mariahilfer Straße 105/1/14
1060 Vienna, Austria
Email: [email protected]

If you have any questions about data protection, you can contact us at this address at any time.

This website is hosted by DigitalOcean, with its server located in Frankfurt am Main, Germany. Cloudflare is used as a proxy; the public DNS records for carinawick.at point to Cloudflare.

Whenever you access a page, the server automatically stores technical data transmitted by your browser:

• IP address, date and time of acces
• Page accessed and previously visited page (referrer)
• Browser, operating system and device type

We require this data to ensure the secure and stable operation of our website. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). Server log files are deleted after 14 days. The hosting provider acts as a data processor on our behalf.

Cookies are small text files stored on your device. We use technically necessary cookies without your consent (Section 165(3) TKG 2021). All other cookies and services are only loaded after you have given your consent via the cookie banner (Art. 6(1)(a) GDPR).

You can change or withdraw your consent at any time using the "Cookie Settings" link at the bottom of the website.

We use the following cookies:

• i18n_redirected: Remembers your selected language; technically necessary; 1 year
• hide-cookie-banner: Remembers that you have made a selection; technically necessary; 1 year
• statistics-cookies-accepted: Stores your consent to statistics cookies; technically necessary; 1 year
• marketing-cookies-accepted: Stores your consent to marketing cookies; technically necessary; 1 year
• _ga, ga…: Google Analytics, distinguishes visitors; statistics, only with consent; 2 years

We currently do not use any marketing services such as advertising pixels.

You can also delete or block cookies in your browser. However, this may limit certain functions of the website.

With your consent to "Statistics", we use Google Analytics 4 to understand how our website is used and to improve it. Google Analytics is loaded via Google Tag Manager, a tool for managing such services. Both are only activated after you have given your consent.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The data processed includes your IP address (shortened), device and browser information, pages visited, time spent on the website and approximate location.

Data may be transferred to Google LLC in the USA (see Section 9). Advertising features and personalised advertisements are disabled.

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 165(3) TKG 2021). Analytics data is deleted after 14 months.

Further information: https://policies.google.com/privacy

On pages containing contact and referral forms, we use Google reCAPTCHA to prevent automated spam submissions.

Google analyses characteristics such as IP address, browser information, mouse movements and time spent on the page to determine whether a submission is made by a human.

The provider is Google Ireland Limited, Dublin. Data may be transferred to Google LLC in the USA (see Section 9).

The legal basis is our legitimate interest in protecting our forms against misuse (Art. 6(1)(f) GDPR).

reCAPTCHA is not loaded on other pages of the website.

Contact Form:

When you contact us via the contact form, we process the information you provide (e.g. name, email address, telephone number and message) in order to respond to your enquiry.

The legal basis is the initiation or performance of a treatment contract (Art. 6(1)(b) GDPR) or our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).

If you voluntarily provide health-related data, we process this information on the basis of your consent (Art. 9(2)(a) GDPR).

We recommend that you do not send detailed medical reports through the form, but instead bring them with you to your appointment.

Referral Form:

Doctors can use the referral form to refer patients to our practice. In this process, we receive information about the referring medical professional or institution, as well as the patient's name, contact details and medical information.

We process this data for the purpose of providing dental treatment (Art. 6(1)(b) and (c), Art. 9(2)(h) GDPR).

Data is transmitted in encrypted form.

Form submissions are forwarded by email via SendGrid to the recipients specified in the content management system and are additionally stored in the website system.

The stored information includes name, email address, telephone number, service, location and message.

There is no automatic deletion process. The data remains stored in the website system until it is manually deleted.

[Add retention period or criteria for manual deletion.]

If treatment takes place, the necessary information becomes part of the patient's medical records and is retained for the statutory period of 10 years.

You can book appointments online via termine.softdent.at.

This system is part of our Soft Dent practice management software and is operated by SOFTDENT GmbH,
Kapfingerstraße 8, 6263 Fügen, Tirol Österreich.

The data processed includes your name, contact details, requested appointment and, where applicable, the reason for your visit.

We use this information to schedule and confirm your appointment and to contact you if necessary (Art. 6(1)(b) GDPR; for information concerning the reason for treatment, Art. 9(2)(h) GDPR).

Appointment details become part of your patient record.

SOFTDENT GmbH
Kapfingerstraße 8
6263 Fügen, Tyrol
Austria
E-Mail: [email protected]
(FN 426419m, Landesgericht Innsbruck)

Some content on our website is provided by third-party services. This content is only loaded when you click on it.

Only then is data such as your IP address and browser information transmitted to the respective provider.

The legal basis is your consent given by clicking (Art. 6(1)(a) GDPR, Section 165(3) TKG 2021).

• Google Maps (Contact and About Us pages): Provider: Google Ireland Limited, Dublin. https://policies.google.com/privacy
• YouTube (Contact page, orthodontics pages and selected news articles): Provider: Google Ireland Limited, Dublin. We use privacy-enhanced mode. https://policies.google.com/privacy
• Spotify (playlist on the homepage): Provider: Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden. The player is only loaded when opened. https://www.spotify.com/legal/privacy-policy/

Social Media:

Facebook, Instagram and TikTok are integrated solely as standard links.

No data is transmitted to these platforms when you visit our website. The privacy policies of the respective platforms only apply once you click on a link.

When using Google services, data may be transferred to Google LLC in the USA.

Google LLC is certified under the EU-US Data Privacy Framework.

These transfers are therefore covered by an adequacy decision of the European Commission (Art. 45 GDPR). The EU Standard Contractual Clauses also apply as supplementary safeguards.

For your dental treatment, we process personal data and health-related information, such as medical history, examination findings, X-ray images and treatment documentation.

The legal basis is the treatment contract and our statutory documentation obligations (Art. 6(1)(b) and (c), Art. 9(2)(h) GDPR).

We retain treatment records for at least 10 years.

To support our documentation processes, we use AI-assisted speech recognition.

Treatment conversations are only recorded with your consent. The AI does not make diagnoses, and every suggestion is reviewed by your dentist.

Detailed information about the recipients of your data and the services we use is provided in our Privacy Information for Patients.

This information is displayed at reception, and we will gladly provide you with a copy upon request.

You have the right to:

• Access your personal data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data, provided that no statutory retention obligations apply (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
  
  

You may withdraw your consent at any time with effect for the future.

For cookies, you can withdraw your consent via the Cookie Settings. For all other matters, you can withdraw your consent by sending us an informal email.

To exercise your rights, simply contact us at [email protected].

You also have the right to lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).

Last updated: October 2026