Privacy policy

The controller within the meaning of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG 2018) is:

Dott. Mag. Dr. med. univ. Dr. med. dent. Christian Müller-Guttenbrunn — Albertine practice, Hauptstrasse 17, A-3423 St. Andrä-Wördern, Austria.

Email: beratung@festezaehne.at · Phone: +43 677 6430 8373. For data protection enquiries, contact us at this email address with the subject “Data protection”.

We process personal data exclusively on the legal bases provided by the GDPR, in particular Article 6. Processing takes place only where a legal basis exists.

• •Article 6(1)(a) GDPR — consent (e.g. newsletters).
• •Article 6(1)(b) GDPR — steps prior to entering into a contract and performance of a treatment contract (e.g. consultation requests, appointment scheduling).
• •Article 6(1)(f) GDPR — legitimate interests (e.g. visitor statistics, spam protection, security), provided your interests do not override them.

When you access our website, technical and attribution information is collected and stored in an internal VisitLog: session ID, landing page, referrer URL, user agent, UTM parameters (source, medium, campaign, keyword, content) and, where applicable, a Google Analytics client ID. This data is used solely for anonymised audience measurement and to improve our services.

The legal basis is Article 6(1)(f) GDPR (legitimate interest in audience analysis and service optimisation). The data is not combined with your name or email address and is not passed on to third parties. It is retained for a maximum of 180 days, after which the entries are automatically deleted.

To measure reach in a simple way, we count page views. Only the date, the visited page path (without parameters) and the number of views are stored. No IP addresses, cookies, session or device identifiers, user agents or other personal data are collected; individual visitors cannot be identified.

Because no personal data is processed and no information is stored on or read from your device, no consent is required. The aggregated figures are used solely for internal purposes to improve our services.

When you use our consultation form, we process the data you provide (salutation, first and last name, email address, phone number, country, affected jaw, insurance, message and preferred contact method), along with technical attribution data, to handle your enquiry and prepare for treatment.

The legal basis is Article 6(1)(b) GDPR (pre-contractual steps). The data is used to contact you and handle your enquiry, and is deleted after completion, no later than six months after the last contact, unless a longer retention obligation applies. Processing takes place through our hosting and platform provider Base44 (see “Data processors”).

For newsletter subscriptions, we process your email address and the subscription source. The legal basis is your consent under Article 6(1)(a) GDPR. By submitting the subscription form, you consent to receiving the newsletter.

You may withdraw your consent at any time, for example via the unsubscribe link in each email or by emailing beratung@festezaehne.at. The data is processed until consent is withdrawn or you unsubscribe. We use a captcha for the subscription process (see below).

Our contact and newsletter forms are protected against abusive automation by a server-side mathematical captcha secured with HMAC. Your answer is used exclusively for validation and is not permanently stored. The legal basis is Article 6(1)(f) GDPR.

This website uses technically necessary storage (e.g. for session identification, spam protection and storing your cookie choice), which is permitted without consent.

Analytics cookies (Google Analytics) are only set if you explicitly consent in the cookie banner. You can withdraw or change your consent at any time with effect for the future via the "Cookie settings" link in the footer.

With your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies (e.g. _ga, _ga_*) to analyse how our website is used, such as pages viewed, time spent, device and browser information and approximate location. IP addresses are truncated.

The legal basis is your consent under Article 6(1)(a) GDPR and Section 165(3) of the Austrian Telecommunications Act 2021 / Section 25(1) TTDSG. Without consent, no analytics cookies are set (Google Consent Mode). Advertising features and personalised ads are disabled.

Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework (EU Commission adequacy decision, Art. 45 GDPR); standard contractual clauses also apply. Data is deleted after 14 months.

More information: https://policies.google.com/privacy. You can also prevent collection with the browser add-on at https://tools.google.com/dlpage/gaoptout.

With your consent, we activate the Google Ads tag (AW-936669269), provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to measure the performance of our ads. Cookies and information about ad clicks, page visits, browser and device may be processed and shared with Google, potentially in the USA. More information: https://policies.google.com/privacy.

The legal basis is your consent under Article 6(1)(a) GDPR and Section 165(3) of the Austrian Telecommunications Act 2021 / Section 25(1) TDDDG. Earlier consent for Google Analytics alone does not activate Google Ads. Personalised advertising remains disabled. You can withdraw your consent at any time with effect for the future via “Cookie settings” in the footer.

Your personal data is not transmitted to third parties unless a legal obligation requires it. As part of processing, we work with the following service providers as processors (Article 28 GDPR) or service providers:

• •Base44, Inc. — hosting, database and platform for form processing. Processing takes place in the USA on the basis of Standard Contractual Clauses (SCCs).

The service provider mentioned above (Base44) processes data in the USA. Transfers are based on the Standard Contractual Clauses (SCCs) issued by the European Commission, which ensure a level of protection compliant with the GDPR.

Under the GDPR, you have the following rights:

• •Access (Article 15 GDPR)
• •Rectification of inaccurate data (Article 16 GDPR)
• •Erasure (Article 17 GDPR)
• •Restriction of processing (Article 18 GDPR)
• •Data portability (Article 20 GDPR)
• •Objection to processing (Article 21 GDPR)
• •Withdrawal of consent (Article 7(3) GDPR)
• •Lodging a complaint with the competent data protection supervisory authority (Article 77 GDPR)

You have the right to lodge a complaint with the Austrian Data Protection Authority if you believe that your data is not being processed lawfully:

Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, https://www.dsb.gv.at. https://www.dsb.gv.at

We process and store personal data only for as long as necessary for the purposes stated or as required by statutory retention periods (e.g. medical documentation obligations). The data is then deleted or anonymised.

Please note that data transmission over the internet (e.g. by email) may have security vulnerabilities. Complete protection against access by third parties is not technically possible.

Last updated: August 2026. This privacy policy may be amended if processing activities or the legal situation change.