Privacy policy

The controller responsible for processing your personal data is:

Controller

[to be completed]

Address

[to be completed]

Email

contact@drshahdawad.com

Phone

+421 915 159 862

If you have any questions about data protection, you can reach us at any time using these details.

• We use no tracking or advertising cookies and show no advertising.
• Fonts and all files of this website are served from our own server, with no connection to Google Fonts or other CDNs.
• We use the details from the request form only to contact you and arrange an appointment.
• Anonymous visit statistics without cookies run only with your consent.
• We never sell your data or use it for advertising.

Whenever a page is loaded, your browser automatically sends technical data, which the server of our hosting provider ([to be completed]) records in log files:

• IP address, date and time of the request
• the page or file requested and the response status code
• the page you came from (referrer)
• browser type and version, and operating system

This data is technically necessary to deliver the website and to keep it secure and stable, for example to fend off attacks. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). Log files are deleted after [to be completed] days at the latest and are not combined with other data.

When you send us a consultation request, we process the following data:

Full name

so that we can address you

Phone number

so that we can call you back and arrange an appointment

Email (optional)

if you would like a confirmation by email

Area of interest and call time

to prepare for the call

Message (optional)

anything you would like to tell us in advance

Language, time sent and consent text

as a record of your consent

VIP pass code and validity

if you sent the request with the VIP pass offer

Your request is stored on our server in a file that cannot be accessed from the internet, and it is also sent to us by email. To protect the form against abuse, we store a pseudonymised (hashed) form of your IP address together with the time of the request; the form never stores the IP address itself. These entries are used only to limit the number of requests (at most 5 in 10 minutes), and older entries are deleted continuously.

Form data is not part of any medical record. Please do not include details about your health in the message; we will discuss them in person.

Contact and appointment

based on your consent (Art. 6(1)(a) GDPR) and as steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR)

Health information

if your area of interest or your message reveals health information, we process it only with your explicit consent (Art. 9(2)(a) GDPR)

Website security

our legitimate interest in a secure and stable service, i.e. server logs and form protection (Art. 6(1)(f) GDPR)

Medical records

if you become our patient, we comply with our legal obligations (Art. 6(1)(c) and Art. 9(2)(h) GDPR)

Visit statistics

only with your consent (Art. 6(1)(a) GDPR)

You can withdraw your consent at any time, for example by email to contact@drshahdawad.com. Withdrawal does not affect the lawfulness of processing carried out before it.

If you call or write to us, we process your contact details and the content of your message to deal with your request (Art. 6(1)(b) and (f) GDPR).

WhatsApp is a voluntary option provided by WhatsApp Ireland Limited (Meta group). Data may also be processed outside the EU, for example in the USA; for such transfers Meta relies on the EU–US Data Privacy Framework (Art. 45 GDPR) and on standard contractual clauses (Art. 46 GDPR). Please use WhatsApp only to arrange appointments and do not send health information through it.

If you choose to confirm your request on WhatsApp after sending the form, the app opens with a pre-filled message (name, phone number, area of interest and, where applicable, your VIP pass code). Whether you send it is entirely up to you.

This website uses no tracking or advertising cookies. In your browser’s local storage (localStorage) it keeps only these necessary entries:

drsa-lang

the language you chose

drsa-consent

your decision about statistics and when you made it

plausible_ignore

only if you declined statistics, so that they do not start

In session storage (sessionStorage) the website remembers that the opening animation has already played (drsa-intro); this entry disappears when you close the tab.

These entries stay on your device, are not sent to us and can be deleted at any time in your browser settings. Storing them is strictly necessary to provide the service you requested (Art. 5(3) of the ePrivacy Directive 2002/58/EC as implemented in Slovak and Austrian law).

If statistics are enabled on this website, we ask for your consent on your first visit. Only then is the Plausible Analytics script loaded (Plausible Insights OÜ, Estonia; servers in the EU).

Plausible uses no cookies, stores no IP addresses and counts visits anonymously with an identifier that changes daily. Besides page views, it counts in the same way clicks on booking, WhatsApp or phone, opening an area on the face map, scroll depth and sending the form (only the area of interest chosen and whether it came with the VIP pass, never your name, phone number, email address or message). We use the results only to improve the website (Art. 6(1)(a) GDPR).

You can change your decision at any time with the “Cookie settings” link in the footer.

If a map is shown in the contact section, it loads only after you click “Load map”. The map is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When it loads, your IP address and other technical data are transferred to Google, including to the USA (EU–US Data Privacy Framework). The legal basis is your consent (Art. 6(1)(a) GDPR).

Instagram, TikTok, Facebook and LinkedIn are included as simple links, not as embedded content. No data is transferred until you click a link; after that, the privacy policy of the respective network applies.

We do not sell your data or use it for advertising. Access is limited to:

Hosting

[to be completed], operating the server and the form as our processor (Art. 28 GDPR)

Email

[to be completed], delivering and storing emails as our processor

WhatsApp (Meta)

only if you contact us via WhatsApp

Plausible

only with your consent to statistics; anonymised visit data

Public authorities

only where the law requires it

We process your data in the European Union. It leaves the EU only if you choose to use WhatsApp or load the Google map (see above).

Consultation requests

12 months from receipt if you do not become our patient; then we delete them

Medical records

for the periods required by law (in Slovakia under Act No. 576/2004 Coll., in Austria at least ten years under § 51 of the Physicians Act 1998)

Server logs

at most [to be completed] days

Hashed IP address (form protection)

briefly; older entries are deleted continuously

Browser storage

until you delete it; the sessionStorage entry until you close the tab

You have the right to:

• access your personal data (Art. 15 GDPR)
• rectification (Art. 16) and erasure (Art. 17)
• restriction of processing (Art. 18)
• data portability (Art. 20)
• object to processing based on legitimate interests (Art. 21)
• withdraw your consent at any time (Art. 7(3))

Simply write to contact@drshahdawad.com. We will reply without undue delay and within one month at the latest.

Providing your data is voluntary, but without your name and phone number we cannot contact you. We do not use automated decision-making or profiling.

If you believe that the processing of your data infringes data protection law, you can lodge a complaint with a supervisory authority, in particular in the country where you live or work:

Slovakia

Úrad na ochranu osobných údajov Slovenskej republiky (Office for Personal Data Protection), Hraničná 12, 820 07 Bratislava 27, www.dataprotection.gov.sk (opens in a new tab)

Austria

Österreichische Datenschutzbehörde (Austrian Data Protection Authority), Barichgasse 40–42, 1030 Wien, www.dsb.gv.at (opens in a new tab)

This website is transmitted in encrypted form (HTTPS). The file containing requests is protected against access from the internet; only we and our hosting provider, as our processor, have access to it.

We update this policy when the website or the law changes. The version published on this page applies.