Legal
Privacy Policy
The protection of your personal data is important to me. I process data exclusively on the basis of applicable legal provisions (GDPR, Austrian DSG 2018, TKG 2021).
1. Controller
Controller within the meaning of the GDPR: Raphael Schwanthaler, Hernalser Hauptstraße 130, 1170 Vienna, Austria. Email: physio.schwanthaler@gmail.com. For data protection enquiries, please contact me at this email address.
2. Contact Form
When you use the contact form on this website, the data you provide (name, email address, optional phone number, optional desired appointment date, subject and message) is processed to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). Please do not submit confidential health data via this form – for sensitive matters, please contact me directly by phone. To deliver your enquiry by email, the service Resend (Resend Inc., USA) is used as a data processor pursuant to Art. 28 GDPR; form data is transferred to Resend for email delivery. Transfers to the USA are based on standard contractual clauses (Art. 46 GDPR). Resend's privacy policy: resend.com/legal/privacy-policy. Data is retained for as long as necessary to process your enquiry or as required by statutory retention obligations.
3. Server Logs & Hosting
When you visit this website, certain technical data is automatically recorded in server logs (IP address, browser type, operating system, referrer URL, date and time of access). This data is used exclusively to ensure technical operation and error analysis and deleted once the purpose of processing has ceased. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in IT security). The website is hosted by Vercel Inc. (USA). Vercel operates a global edge network; requests may therefore be processed outside the EU. Transfers to third countries are based on standard contractual clauses (Art. 46 GDPR). Further information: vercel.com/legal/privacy-policy.
4. Cookies & Local Storage
This website uses local browser storage (localStorage) to store your cookie preferences. With your explicit consent, Google Analytics is also used (see section 8). You can withdraw or change your consent at any time via the "Cookie settings" link in the footer of this website.
5. External Links
This website contains links to external third-party websites: Google Maps (contact page), Austrian health insurers (ÖGK, SVS, BVAEB, KFA Wien) and Physio Austria (costs & process page). These links open the respective external website in a new tab only when you actively click on them. No content is automatically embedded. The respective privacy policies of each provider apply. When opening the Google Maps link: policies.google.com/privacy.
6. Your Rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20) at any time. To exercise your rights, contact: physio.schwanthaler@gmail.com. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna – dsb.gv.at).
7. Data Security
This website is secured by SSL/TLS encryption (HTTPS). The transmission of your data is encrypted accordingly. Please note that transmitting data via a contact form carries inherent security risks – for sensitive health information, I recommend direct contact by phone.
8. Google Analytics
This website uses Google Analytics 4 (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) – exclusively following your explicit consent (Art. 6(1)(a) GDPR). Google Analytics anonymously records how visitors interact with the website (pages visited, time on site, origin). IP addresses are truncated before transmission. Data is stored on Google servers in the USA; transfers are based on standard contractual clauses (Art. 46 GDPR). You may withdraw your consent at any time via the "Cookie settings" link in the footer of this website. As an additional option, you can install the Google Analytics opt-out browser add-on at tools.google.com/dlpage/gaoptout. Further information: policies.google.com/privacy.
9. Currency of this Policy
Last updated: July 2026. This privacy policy will be updated in the event of changes to the technical infrastructure or applicable law.