Privacy information for hautarzt-trost.at and termine.hautarzt-trost.at, including online appointment booking and login.
The controller for this practice website and appointment administration is OA Dr. Alexander Trost, specialist in dermatology and venereology, Neustiftgasse 64, ground floor, 1070 Vienna, Austria. Telephone: +43 660 886 36 88.
Please contact the practice by telephone or post for privacy enquiries. Please do not send sensitive health information through unsecured messages.
When you visit these pages, we process technical data including your IP address, time of access, requested address, browser information and technical status messages. This enables delivery of the website, troubleshooting and protection against misuse. The legal basis is our legitimate interest in secure operation under Article 6(1)(f) GDPR.
Webserver access logs are rotated daily, normally retaining 14 rotations. Relevant evidence may need to be retained longer to investigate specific security incidents or pursue legal claims. Retention by technical providers operating in front of the webserver is separate.
Fonts use those available locally on your device; JavaScript libraries and stylesheets are served under our own website addresses. We do not use advertising or analytics trackers.
Booking takes place on hautarzt-trost.at. The website sends the data needed for your request server-to-server to our booking application at termine.hautarzt-trost.at. The homepage also retrieves current opening hours from that application directly through your browser, which involves technical access data.
We process your email address, selected appointment and appointment type, and the personal and contact details required by the form. This also includes reservation and security identifiers, confirmation status and, where applicable, cancellation information. We use these data to reserve, book and administer appointments and send related emails. A code or link verifies your email address.
Appointment arrangements and steps taken at your request before booking are based on Article 6(1)(b) GDPR. Where health data are needed, they are processed for healthcare purposes under Article 9(2)(h) GDPR and the applicable duties of confidentiality.
Details marked as required in the form are needed to complete online booking. Without them, the online process cannot be completed. You may alternatively arrange an appointment by telephone.
We use strictly necessary cookies for the login and booking services you request. They keep related steps together and protect forms against forged or repeated requests. We do not use these identifiers for advertising or cross-site tracking.
This strictly necessary storage does not require cookie consent under section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021). Depending on the purpose, associated personal-data processing is based on the requested appointment arrangements (Article 6(1)(b) GDPR) or our legitimate interest in secure operation and access protection (Article 6(1)(f) GDPR). This is why we do not display an “Accept cookies” dialog.
The following cookies are set only when you use the relevant function, not all when you visit the homepage. “Session” means the cookie has no fixed expiry and is managed by your browser as a session cookie. Browser session restoration may preserve it after a window is closed. Separate server-side expiry and access restrictions still apply.
| Cookie / domain | Purpose | Duration |
|---|---|---|
trost_booking_sessionhautarzt-trost.at |
Booking progress, verified access and cancellation flow | Session |
trost_booking_csrfhautarzt-trost.at |
Protection of booking forms against forged requests | Session |
__Host-abp_csrftermine.hautarzt-trost.at |
Form protection for login, password reset and other forms | Session |
__Host-abp_sidtermine.hautarzt-trost.at |
Login session for patients and authorised staff | Session |
__Host-abp_guesttermine.hautarzt-trost.at |
Association of a guest reservation when booking directly in the central application | 2 hours |
__Host-abp_appointment_managetermine.hautarzt-trost.at |
Protected access to appointment management through the relevant link | Session |
__Host-abp_review_formtermine.hautarzt-trost.at |
Protected review form after opening an invitation | 30 minutes |
__Host-abp_review_managetermine.hautarzt-trost.at |
One-time handover of access to your own review | 10 minutes |
__Host-abp_review_manage_sessiontermine.hautarzt-trost.at |
Protected management of your own review | Session |
Website booking uses session cookies. A reservation expires at the deadline shown during booking; keeping a cookie does not extend it. Security identifiers and reservations are not permanent booking receipts. Once an appointment is booked, its record exists independently of the reservation cookie.
Central login has role-dependent server-side limits: patient access normally expires after two hours of inactivity; explicitly selected extended login lasts no longer than 14 days. Practice staff access is limited to twelve hours. Particularly privileged access has a 15-minute inactivity limit and a maximum of eight hours. These technical limits are separate from the retention of appointment or medical records.
Appointment and contact data are retained as needed for appointment administration, related communication, statutory documentation duties or the establishment or defence of specific legal claims. They are then deleted or anonymised. Medical records have separate statutory retention requirements; deleting browser cookies does not delete a patient record. You may ask the practice for the retention periods applicable to your data.
The websites and booking application are hosted with netcup at the operator-confirmed server location in Nuremberg, Germany. Hosting is separate from the web-traffic and email-delivery services described below.
Authorised practice personnel can access appointment and contact data. Technical providers support application operation and maintenance, hosting, protection of web traffic and email delivery. Data are not sold for advertising or disclosed to advertising networks.
The Cloudflare web proxy was disabled on 13 September 2026. The websites and booking application have since been served directly by the Netcup server; Cloudflare remains involved in DNS resolution. Website content and booking requests made over a direct connection do not pass through the Cloudflare web proxy. The booking application’s optional Turnstile CAPTCHA feature is not enabled.
As the DNS provider, Cloudflare processes technical data relating to domain queries. Further information: Cloudflare privacy policy.
We use Resend (Plus Five Five, Inc., USA) as a processor to deliver booking and access messages. Resend receives your email address and the complete message content. Access messages contain a verification code and access link. Appointment confirmations include your first name, date and time, appointment type, doctor and location, and a cancellation link. These details may reveal information about your health. Where appointment summaries are emailed to the practice, attachments may also contain patient lists with names and appointment details.
Resend stores message content and delivery logs in the United States; a European sending region does not change the storage location. According to Resend’s privacy information, its processing agreement applies from account creation. The Data Processing Addendum, including EU Standard Contractual Clauses, describes safeguards for international transfers. You may request a copy of the applicable safeguards from the practice.
The technical connection to the email provider is encrypted. This is not end-to-end encryption: the provider processes message content. Please protect verification codes and access or cancellation links from access by others. As an alternative to online booking, you can arrange an appointment by telephone on +43 660 886 36 88.
The applications use encrypted connections, access restrictions, email verification, limits on repeated requests and security logs. A protection rule may temporarily block a request; if this prevents online booking, please contact the practice by telephone. There is no automated medical diagnosis or decision about treatment.
The application does not retain page snapshots containing form content in localStorage. Any HTMX history cache remaining from an earlier version is removed when you next visit a page of the central application. Necessary cookies are unaffected. You may delete or block cookies in your browser, but this can interrupt login, booking and cancellation.
Links to services such as Apple Maps, DocFinder and public authorities open the respective provider’s website. A connection to that provider is made when you open the link; its privacy notice then applies. External maps, videos and social-media plugins are not embedded in these pages.
Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. You may withdraw any separately given consent at any time for the future, without affecting the lawfulness of earlier processing.
You can lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna. You can also contact the practice directly to exercise your rights. Appropriate proof of identity may be needed to handle your request securely.
Last updated: 13 September 2026