Legal

Privacy

A draft, not a finished legal text and not legal advice. Before live use, the controller, retention period, processors and a full notice under Article 13 GDPR must be added.

Controller

AUTmed, autmed.at, hallo@autmed.at. Placeholder. Name, address and any data-protection officer are not fixed yet and are not invented here.

What the forms ask

Patient request: description of the concern, rough time span, desired specialty, postcode, place, state, urgency, insurance or fee type, name, email, phone and preferred contact. Doctor’s note: name, contact details, specialty, practice location and a short message. No social-insurance number, no e-card data, no reports, no documents.

Purpose and basis

The intended purpose is handling a matching request. The planned bases are consent and pre-contractual steps under Article 6 (1) (a) and (b) GDPR. That is a product intention, not a lawyer’s finding.

Storage

Entries are currently stored only as a draft: locally in a JSON file or, if the file system is read-only, in the server log. A database and email notification are not connected yet. A binding retention period is therefore not set. No sharing for advertising is intended.

Hosting

The website is intended to be hosted on Vercel. Technically necessary connection data can arise. A completed data-processing agreement is not claimed here.

Your rights

You can request access, correction, erasure, restriction, portability and objection, and you can withdraw consent. Complaints go to the Austrian data protection authority: dsb.gv.at.