Privacy Policy

1) Introduction and Contact Details of the Data Controller

1.1 We are delighted that you are visiting our website and thank you for your interest. In the following, we inform you about how we handle your personal data when you use our website. Personal data refers to all data that can be used to personally identify you.

1.2 The data controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is Dr. Michaela Cornehl, Litara Healing, Gonzagagasse 13/3, 1010 Vienna, Austria, Tel.: +4313940051, E-mail: willkommen@litara.com. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 When you use our website for purely informational purposes, i.e. if you do not otherwise transmit information to us (for example via the contact form or by e-mail), we only collect such data as your browser transmits to the server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

Our visited website
Date and time at the moment of access
Amount of data sent in bytes
Source/reference (referrer URL) from which you arrived at our site
Browser used
Operating system used
IP address used (if applicable: in anonymised form)

The processing takes place in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. We reserve the right, however, to retrospectively review the server log files should there be concrete indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. enquiries to the data controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the string "https://" and the lock symbol in your browser bar.

3) Hosting & Content Delivery Network

For the hosting of our website, we use Strato AG, Otto-Ostrowski-Strasse 7, 10249 Berlin, Germany. Strato provides its services exclusively on servers within the Federal Republic of Germany.

All data collected on our website is processed on these servers.

We have concluded a data processing agreement with Strato in accordance with Art. 28 GDPR, which ensures the protection of the data of our site visitors and prohibits unauthorised disclosure to third parties.

4) Cookies

To make visiting our website appealing and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted after the browser is closed (so-called "session cookies"), while others remain on your device for longer and enable the storage of page settings (so-called "persistent cookies"). In the latter case, you can find the storage period in the overview of the cookie settings of your web browser.

If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given, or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a user-friendly and effective design of the site visit.

You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance, or exclude the acceptance of cookies for specific cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be limited.

You can change your settings at any time by clicking on the "Cookie Settings" link in the footer of this website. This will reopen the consent window, where you can adjust or withdraw your selection.

5) Contact

5.1 Online appointment booking via Latido
For online appointment booking, we use the service of the following provider: Latido Health Tech GmbH, Schreyvogelgasse 2, 1010 Vienna, Austria. When you click the "Book appointment" button, you will be redirected to the provider's external platform (patient.latido.at). You can see which data is collected there for online appointment booking from the respective input form or appointment request. Where certain data is required to carry out an online appointment booking, this is marked accordingly. If a free text field is provided, you can describe your concern in more detail there and decide for yourself which additional data you wish to enter. The data you provide is stored and used exclusively for the purpose of arranging the appointment. For the processing of personal data that is necessary for the performance of a contract with you (this also applies to processing operations that are necessary for the implementation of pre-contractual measures), Art. 6 para. 1 lit. b GDPR serves as the legal basis. If you have given us your consent to the processing of your data, the processing is based on Art. 6 para. 1 lit. a GDPR. Any consent given may be withdrawn at any time by sending a message to the controller named at the beginning of this declaration. Where necessary, we have concluded a data processing agreement with Latido in accordance with Art. 28 GDPR. Further information on data protection at Latido can be found at https://www.latido.at.

5.2 When you contact us (e.g. via the contact form or by e-mail), personal data is collected. When using our contact form, the following data is collected: first and last name, e-mail address, telephone number (optional) and your message. The transmission is encrypted (SSL/TLS) and is delivered by e-mail to the address stated in the imprint; for the e-mail delivery, we use the mail server of our host Strato. To protect against automated spam submissions, we use technical measures such as a hidden input field ("honeypot") and a time-based check. No personal data is processed in this context beyond that which is already entered in the form. This data is stored and used exclusively for the purpose of responding to your enquiry or for making contact and for the associated technical administration.

The legal basis for the processing of this data is our legitimate interest in responding to your enquiry in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after the final processing of your request. This is the case if it can be inferred from the circumstances that the matter in question has been finally clarified and provided that no statutory retention obligations stand in the way.

6) Use of Customer Data for Direct Marketing

6.1 Subscription to our email newsletter

When you subscribe to our email newsletter, we will regularly send you information about our therapies, medical services, new offers, events and practice-related news. The only mandatory information for sending the newsletter is your email address. Providing further information is voluntary and is used to address you personally.

For sending the newsletter we process exclusively the contact data you provide during the subscription. Health data is not processed for this purpose.

For sending the newsletter we use the so-called double opt-in procedure. This means that we will only send you an email newsletter after you have expressly confirmed that you consent to receiving the newsletter. We will send you a confirmation email asking you to confirm by clicking on a corresponding link that you wish to receive the newsletter in future.

By activating the confirmation link, you give us your consent to the processing of your personal data in accordance with Art. 6 (1) lit. a GDPR for the purpose of sending the newsletter. When you sign up for the newsletter, we store the IP address assigned to you by your internet service provider (ISP) as well as the date and time of subscription in order to be able to trace any possible misuse of your email address at a later date.

The data we collect when you subscribe to the newsletter will be used exclusively for the purpose of promotional communication via the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the data controller named at the beginning of this declaration. Once you have unsubscribed, your email address will be deleted immediately from our newsletter distribution list, unless you have expressly consented to further use of your data, or unless we reserve the right to use the data in a way that goes beyond this, which is legally permitted and about which we inform you in this privacy policy.

6.2 Brevo

Our email newsletters and other promotional email communications are sent via the following provider:

Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany

The data you provide during the newsletter subscription is transmitted to this provider for the purpose of sending the newsletter; the provider processes this data on our behalf. The legal basis for this is your consent in accordance with Art. 6 (1) lit. a GDPR in conjunction with Art. 28 GDPR.

We reserve the right, exclusively on the basis of your express consent in accordance with Art. 6 (1) lit. a GDPR, to carry out a statistical performance analysis of our email campaigns. For this purpose, web beacons or tracking pixels may be used in the emails sent, by which open rates and interactions with the newsletter content are recorded. In doing so, technical information about your device (e.g. time of access, IP address, browser type and operating system) may also be processed. This data is not combined with other data records.

You can withdraw your consent to newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider, which ensures the protection of your personal data and provides for processing exclusively in accordance with our instructions.

7) Web Analytics Services

7.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.

By default, when you visit the website, Google Analytics 4 sets cookies, which are small text snippets stored on your device that collect certain information. The scope of this information also includes your IP address, which is, however, truncated by Google by removing the last digits in order to rule out direct personal identification.

The information is transferred to Google servers and processed there. Transfers to Google LLC, based in the USA, are also possible.

Google uses the collected information on our behalf to evaluate your use of the website, to compile reports on website activity for us and to provide further services related to website use and internet use. The truncated IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. The data collected in the context of using Google Analytics 4 is stored for a period of two months and then deleted.

All processing described above, in particular the setting of cookies on the device used, only takes place if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR.
Without your consent, Google Analytics 4 is not used during your visit to the site. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate the "Statistics" category, to which this service is assigned, via the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with Google, which ensures the protection of the data of our site visitors and prohibits unauthorised disclosure to third parties.

Further legal information on Google Analytics 4 can be found at https://business.safety.google/intl/en/privacy/, https://policies.google.com/privacy?hl=en and at https://policies.google.com/technologies/partner-sites

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.

7.2 Google Search Console

We use the Google Search Console of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") to analyse and improve the visibility of our website in Google search.

Google Search Console only evaluates aggregated, anonymised data that Google already has in the course of its regular search engine operation (e.g. which search terms our website was displayed for in the Google search results). No additional cookies are set on our website for this purpose, no tracking script is loaded, and no personal data of yours is transmitted to Google.

The legal basis for the use of Search Console is Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in optimising our online discoverability.

Further information on Google Search Console can be found at https://support.google.com/webmasters and on Google's privacy policy at https://policies.google.com/privacy?hl=en.

8) Site Functionalities

8.1 YouTube

This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transferred to: Google LLC, USA

Embedded YouTube videos are not loaded directly on our website by default. Instead, you will first see a preview image with a notice and an activation button. Only when you actively click on the “Load video” button do you give your consent, and your browser establishes a connection to the provider’s servers and the content is loaded. Before your consent is given, no data is transmitted to YouTube and no cookies are set. After consent has been given, certain information, including your IP address, is transmitted to the provider.

If the playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behaviour, to compile playback statistics and to prevent abusive behaviour.

If you are logged in to a user account with the provider during your visit to the site, your data will be assigned directly to your account when you click on a video. If you do not want this assignment to your account, you must log out before pressing the play button.

All of the aforementioned processing operations, in particular the setting of cookies for reading information on the device used, only take place if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. Since each video requires active confirmation, consent is given exclusively by clicking the “Load video” button. You may withdraw your consent simply by not clicking the button. No permanent consent cookies are set by this mechanism.

8.2 Google Maps

This website uses an online map service from the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Google Maps is a web service for displaying interactive (land) maps in order to visually present geographical information. By using this service, our location is displayed to you and possible directions are made easier.

Google Maps is not loaded directly on our website by default. You will first see a preview image with a notice. Only when you actively activate the map and thereby give your consent via the Cookie Consent Tool, the connection to Google's servers is established. Before your consent is given, no data is transmitted to Google.

After consent has been given, information about your use of our website (such as your IP address) is transferred to Google servers and stored there; transfers to Google LLC servers in the USA may also occur. This takes place regardless of whether Google provides a user account through which you are logged in. If you are logged in to Google, your data will be assigned directly to your account. If you do not want this assignment with your profile at Google, you must log out before activating the map. Google stores your data (even for non-logged-in users) as usage profiles and evaluates them.

The collection, storage and evaluation are carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of Google's legitimate interest in displaying personalised advertising, market research and/or the needs-based design of Google websites. You have the right to object to the creation of these usage profiles, whereby you must contact Google to exercise this right. If you do not agree with the future transfer of your data to Google in the context of the use of Google Maps, it is also possible to deactivate the Google Maps web service completely by switching off the JavaScript application in your browser. Google Maps, and thus also the map display on this website, cannot then be used.

Where legally required, we have obtained your consent in accordance with Art. 6 para. 1 lit. a GDPR for the processing of your data as described above. You can withdraw your consent given at any time with effect for the future. To exercise your withdrawal, please follow the option for objection described above.

Further information on Google's data protection can be found here: https://business.safety.google/intl/en/privacy/

9) Tools and Miscellaneous

Cookie Consent Tool

To obtain effective user consent for cookies and cookie-based applications that require consent, this website uses a so-called "Cookie Consent Tool". The "Cookie Consent Tool" is shown to users when they visit the site in the form of an interactive user interface, in which consent for specific cookies and/or cookie-based applications can be granted by ticking boxes. Through the use of the tool, all cookies/services that require consent are only loaded if the respective user gives the corresponding consent by ticking the box. This ensures that such cookies are only set on the user's device if consent has been given.

The tool sets technically necessary cookies in order to save your cookie preferences. As a rule, personal user data is not processed in this context.

If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.

A further legal basis for the processing is Art. 6 para. 1 lit. c GDPR. As the controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.

Where necessary, we have concluded a data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorised disclosure to third parties.

Further information on the operator and the setting options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.

10) Rights of the Data Subject

10.1 Applicable data protection law grants you the following rights vis-à-vis the controller with regard to the processing of your personal data (rights of information and intervention), whereby reference is made to the cited legal basis for the respective requirements for exercising these rights:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to information pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent granted pursuant to Art. 7 para. 3 GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

10.2 RIGHT TO OBJECT

IF, AS PART OF A BALANCE OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESS THE DATA IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING. YOU CAN EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE THE PROCESSING OF THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

11) Duration of Storage of Personal Data

The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and – if applicable – additionally on the basis of the respective statutory retention period (e.g. commercial and tax law retention periods).

For the processing of personal data on the basis of express consent in accordance with Art. 6 para. 1 lit. a GDPR, the data concerned is stored until you withdraw your consent.

If statutory retention periods exist for data processed in the context of legal or quasi-legal obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data is routinely deleted after expiry of the retention periods, provided that it is no longer required for the performance or initiation of the contract and/or there is no longer a legitimate interest on our part in further storage.

For the processing of personal data on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until you exercise your right to object in accordance with Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

For the processing of personal data for direct marketing purposes on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until you exercise your right to object in accordance with Art. 21 para. 2 GDPR.

Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Last updated: 18.06.2026, 10:32:58