1. Data Controller
Moser Milani Medical Spa & Medical Centre
Dr. Shirin Milani & Dr. Veith Moser
Schottengasse 7/5, 1010 Vienna, Austria
Phone: +43 1 236 1336
Email: office@milani.at
Website: www.milani.at
2. Principles of Data Processing
The protection of your personal data is of particular concern to us. We therefore process your data exclusively on the basis of the applicable legal provisions (GDPR, Austrian Telecommunications Act 2021, Austrian Data Protection Act). In this privacy policy, we inform you about the most important aspects of data processing on our website and in connection with our medical services.
3. Collection and Storage of Personal Data
3.1 Visiting the Website
When you access our website, your browser automatically sends information to our website's server. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until automatic deletion:
- IP address of the requesting device (anonymised)
- Date and time of access
- Name and URL of the page accessed
- Browser used and, where applicable, your computer's operating system
- Referrer URL (the previously visited page)
The aforementioned data is processed for the following purposes: ensuring a smooth connection to the website, ensuring comfortable use of our website, evaluating system security and stability, and for other administrative purposes. The legal basis is Art. 6(1)(f) GDPR (legitimate interest).
3.2 Contact Form and Appointment Booking
If you send us enquiries via the contact form or our online booking system, your details from the form, including the contact details you provided (name, email address, phone number), will be stored for the purpose of processing the enquiry and in case of follow-up questions. We do not share this data without your consent. The legal basis is Art. 6(1)(b) GDPR (contract fulfilment or pre-contractual measures).
3.3 Online Appointment Booking (Mobimed)
We use the Mobimed service of the Austrian Medical Association for online appointment booking. When booking an appointment, your entered data (name, contact details, desired treatment) is transmitted to and processed by Mobimed. Further information can be found in the Mobimed privacy policy at www.mobimed.at/datenschutz.
4. Analytics and Tracking
4.1 Website Analytics
We use analytics tools on our website to statistically evaluate its usage. This serves to improve our offering and to design our website according to user needs. The legal basis is Art. 6(1)(a) GDPR (consent). You may withdraw your consent at any time with effect for the future.
The following data is collected in anonymised or pseudonymised form:
- Pages visited and time spent
- Browser used and device information
- Origin of visit (referrer)
- Approximate location (based on anonymised IP address)
4.2 Cookies
Our website uses so-called cookies. These are small text files that are stored on your device via your browser. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (session cookies). Other cookies remain on your device and allow us to recognise your browser on your next visit (persistent cookies).
Technically necessary cookies: These cookies are required for the operation of the website and cannot be deactivated. They are usually only set in response to actions you have taken (e.g. language selection, font size).
Analytics cookies: These cookies allow us to count visits and traffic sources so that we can measure and improve the performance of our website. These cookies are only set with your consent.
You can set your browser to inform you about the setting of cookies and only allow cookies on a case-by-case basis, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser.
5. Disclosure of Data
Your personal data will not be transmitted to third parties for purposes other than those listed below. We only share your personal data with third parties if:
- You have given your express consent (Art. 6(1)(a) GDPR)
- Disclosure is necessary for contract fulfilment (Art. 6(1)(b) GDPR)
- There is a legal obligation (Art. 6(1)(c) GDPR)
- Disclosure is necessary to protect legitimate interests (Art. 6(1)(f) GDPR)
6. Hosting
Our website is hosted by a professional hosting provider. For the purpose of secure and efficient delivery, your data (e.g. IP address, browser type) is processed on the hosting provider's servers. This is based on Art. 6(1)(f) GDPR (legitimate interest in efficient and secure delivery).
7. Your Rights
You generally have the rights of access, rectification, erasure, restriction, data portability and objection. If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can lodge a complaint with the supervisory authority:
Austrian Data Protection Authority
Barichgasse 40-42, 1030 Vienna
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: www.dsb.gv.at
To exercise your rights, you can contact us at any time at: office@milani.at
8. Data Security
We use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments. Data is transmitted using SSL/TLS encryption.
9. Retention Period
We only store personal data for as long as is necessary to fulfil the purposes for which it was collected or as required by law. Medical documentation is retained in accordance with statutory retention periods (generally 10 years after the last treatment).
10. Updates to this Privacy Policy
This privacy policy is currently valid as of April 2026. Due to the further development of our website and offerings or changes in legal or regulatory requirements, it may become necessary to amend this privacy policy.