Privacy Policy

We appreciate your interest in our website and would like to assure you that the security of your personal data is of utmost importance to us. We therefore process your personal data in accordance with the applicable data protection laws and regulations. The following information provides an overview of what happens to your personal data when you visit our website.

Data Controller:

​Dr. Sandra Dinca Sandru
Magdeburgstraße 4
65510 Idstein
Phone: 06126 | 958 08 58
Email: praxis@kfoidstein.de

Your Rights as a Data Subject

Under the General Data Protection Regulation (GDPR), you have the following rights regarding the processing of your personal data:

• Right of Access (Art. 15 GDPR) You have the right to obtain, free of charge and at any time, information about the personal data we store about you, including its origin, recipients, and the purposes for which it is processed.

• Right to Rectification (Art. 16 GDPR) You have the right to request the immediate correction of inaccurate personal data or completion of incomplete personal data stored by us.

• Right to Erasure (Art. 17 GDPR) You have the right to request the deletion of your personal data stored by us unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.

• Right to Restriction of Processing (Art. 18 GDPR) You have the right to request restriction of processing where you contest the accuracy of the data, the processing is unlawful but you oppose its deletion, we no longer require the data but you need it for the establishment, exercise or defence of legal claims.

• Right to Data Portability (Art. 20 GDPR) You have the right to receive the personal data concerning you, which you have provided to us and which is processed by automated means, in a commonly used, machine-readable format, or to request that it be transmitted directly to another controller where technically feasible.

• Withdrawal of Consent (Art. 7(3) GDPR) Many data processing operations are only possible with your express consent. You may withdraw any consent you have previously given at any time with effect for the future. The lawfulness of the processing carried out prior to the withdrawal remains unaffected.

 

Right to Object (Art. 21 GDPR)

Where your personal data is processed on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to such processing on grounds relating to your particular situation. Where your personal data is processed for direct marketing purposes, you have the right to object at any time without giving reasons. If you wish to exercise your right to withdraw consent or your right to object, simply send an email to: praxis@kfoidstein.de.

• Right to Lodge a Complaint (Art. 77 GDPR) If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority. Our primary supervisory authority is: The Hessian Commissioner for Data Protection and Freedom of Information (HBDI). An up-to-date list of German supervisory authorities and their contact details is available at: https://www.bfdi.bund.de.

Protection of Your Data & Encryption

Please note that data transmission over the Internet may be subject to security vulnerabilities. Complete protection against access by third parties cannot be guaranteed. We therefore take extensive technical and organisational measures to protect your data against unauthorised access.

SSL/TLS Encryption
For security reasons and to protect the transmission of confidential information, such as enquiries you send to us, this website uses TLS encryption (formerly referred to as SSL encryption). You can recognise an encrypted connection when your browser's address bar changes from "http://" to "https://" and displays a padlock symbol. When encryption is enabled, any data you transmit to us cannot be read by third parties.

Security Monitoring and IT Security

To ensure IT security, system stability, and to detect, prevent and document cyberattacks (e.g. brute-force attacks), we maintain security logs relating to access to our website. These logs are retained for 30 days.

The following information may be recorded:

• User IP address

• Administrator and user login/logout events

• Changes to website content and files

• Failed login attempts

• Manually blocked users and attempts to access non-existent content

To protect our website against automated attacks and spam, we use security plugins. The collected information is stored locally in the website database and is generally not disclosed to third parties unless disclosure is required by law, for example to law enforcement authorities.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest consists in ensuring the integrity, confidentiality, availability and security of the data processed through this website and protecting our systems against misuse.

Data Collection on Our Website

Server Log Files

The hosting provider of this website automatically collects and stores information in server log files transmitted automatically by your browser. This includes:

• Browser type and browser version

• Operating system

• Referrer URL

• Host name of the accessing device

• Time of the server request

• IP address

This information is processed in particular for the following purposes:

• Ensuring a stable connection to the website

• Ensuring convenient and error-free use of the website

• Evaluating system security and stability and administrative purposes

These data are not combined with other data sources. The data are deleted as soon as they are no longer required for the purposes for which they were collected. Data necessary for providing the website are generally deleted once the respective session has ended. Server log files are automatically deleted or anonymised after no later than seven days.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest follows from the purposes stated above.

Contact by Email or Contact Form

If you contact us via email or our contact form, we will store the information you provide, including your contact details (name, email address and, where applicable, telephone number), for the purpose of processing your enquiry and any follow-up correspondence. We will not disclose this information without your consent.

Your data will be stored until the purpose of storage no longer applies (for example once your enquiry has been fully processed) or until you request deletion, unless statutory retention obligations apply. This includes, in particular, the six-year retention period for business correspondence under Section 257 of the German Commercial Code (HGB), which also applies to business emails.

Legal basis: Processing is based on Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or pre-contractual measures. In all other cases, processing is based on our legitimate interest in handling enquiries efficiently (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), where applicable.

Cookies & Consent Management

This website uses cookies. Cookies are small text files stored on your device by your browser. They do not cause any damage.

Technically necessary cookies (such as session cookies) are used to ensure the proper functioning of the website or to store your privacy preferences. These cookies are set on the basis of Section 25(2) TDDDG in conjunction with Art. 6(1)(f) GDPR.

Cookies that are not strictly necessary (e.g. for analytics, marketing or external media) are only set after you have given your express consent pursuant to Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. You may change or withdraw your cookie preferences at any time via our consent management tool.

Borlabs Cookie
This website uses the consent management platform Borlabs Cookie to obtain and document your consent for the use of cookies.

When you visit our website, a Borlabs cookie is stored in your browser recording your consent decisions or any withdrawal thereof. The following technically necessary cookies are used:

• borlabs-cookie: stores your cookie preferences for one year.

• borlabsCookieUnblockContent: stores which external media you wish to load automatically.

Borlabs Cookie does not process personal data for the purpose of identifying you. It merely stores proof of your consent on your device.

 Cookie-Einstellungen anpassen

Cookie Settings

Cookie Settings
You can configure your browser so that you are informed whenever cookies are set, allow cookies only in individual cases, exclude cookies generally or for specific cases, or automatically delete cookies when closing your browser.

Disabling cookies may limit the functionality of this website. As browser settings differ, please refer to your browser manufacturer's documentation for instructions regarding cookie management.

Chrome
Internet Explorer
Edge
Firefox
Safari
Opera


WP Statistics

This website uses the privacy-friendly analytics plugin WP Statistics. The plugin operates entirely on our own web hosting server. No data are transmitted to the plugin developer or any third party.

WP Statistics collects anonymised statistical information regarding the use of our website, such as visited pages and referring websites.

• Important information regarding IP addresses: Your IP address is irreversibly hashed or fully anonymised before it is stored in the database. It is therefore impossible to identify you or your internet connection.

• Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is the statistical optimisation of our website and the improvement of our online services.

Objection to Unsolicited Advertising Emails

In accordance with our legal obligation to publish contact information pursuant to Section 5 DDG (German Digital Services Act), we hereby expressly object to the use of the published contact details for sending unsolicited advertising or informational material. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited transmission of advertising material, including spam emails.

Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy where necessary due to the continued development of our website, technological changes or changes in applicable legal requirements. The current version of this Privacy Policy is always available on this website.

Last updated: June 2026