Privacy policy

Only with your voluntary consent does this website count page views and contact clicks in aggregate. For expert reports, we also count form views and confirmed submissions; the selected report category and contact details are not included in these statistics. It records the day, event, broad website section, language and a general source category such as Google or direct access. Specific medical page addresses, search terms, full referrer URLs, form contents and visitor identifiers are not included. These statistics are not linked to contact inquiries or book registrations.

Your choice is stored without a visitor identifier under berthold-statistics-choice-v1 in your browser’s local storage and used for up to 180 days. You can change it at any time through Statistics settings. Without consent, or when your browser sends a Do Not Track or Global Privacy Control signal, this optional measurement remains off. The legal bases are Article 6(1)(a) GDPR and, where applicable, section 25(1) TDDDG; storing your choice serves to implement it.

Aggregate counters are stored in the existing website database on ChatGPT Sites and Cloudflare infrastructure. Values older than 400 days are deleted on the next statistics event. To prevent automated abuse, a daily changing hash of the IP address and a request counter are kept until the end of the day and deleted on the next request. This protection value is not linked to statistics or contact information. Abuse prevention is based on Article 6(1)(f) GDPR.

The operator can read totals in a protected overview or through their ChatGPT account. Contact clicks are not confirmed appointments. Stored contact inquiries and waitlist registrations are shown as separate totals. The information about hosting, possible international processing and your rights also applies to these functions.

This policy concerns the personal website of PD Dr. med. Daniel P. Berthold. You can read the content without an account. Technical access data are processed during your visit. Additional data may be processed when you contact us or activate an external service such as YouTube.

Personal data such as your name, address, email address or telephone number are processed in accordance with the General Data Protection Regulation (GDPR) and applicable German data-protection law. This policy explains the nature, scope and purposes of processing and the rights of data subjects.

Technical and organizational measures are used to protect processed data. Nevertheless, internet-based transmissions can have security vulnerabilities and absolute protection cannot be guaranteed. Personal data can therefore also be communicated through alternative means, such as by telephone.

The following terms reflect the GDPR definitions and are intended to make this policy clear and understandable.

Personal data: any information relating to an identified or identifiable natural person. A person is identifiable directly or indirectly, particularly by a name, identification number, location data, online identifier or characteristics specific to their identity.

Data subject: any identified or identifiable natural person whose personal data are processed.

Processing: any operation involving personal data, whether or not performed by automated means. This includes collection, recording, organization, storage, adaptation, retrieval, consultation, use, disclosure, matching, restriction, erasure or destruction.

Restriction of processing: marking stored personal data with the aim of limiting their future processing.

Profiling: automated processing of personal data used to evaluate, analyze or predict particular personal aspects of an individual.

Pseudonymization: processing that prevents personal data from being attributed to a specific person without additional information held separately. That additional information must be protected by technical and organizational measures.

Controller: a natural or legal person, public authority, agency or other body that determines the purposes and means of processing, alone or jointly with others.

Processor: a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.

Recipient: a natural or legal person, public authority, agency or other body to which personal data are disclosed. Public authorities acting within a particular statutory inquiry are not necessarily considered recipients.

Third party: a body other than the data subject, controller, processor or persons authorized to process data under the direct authority of the controller or processor.

Consent: a freely given, specific, informed and unambiguous indication of the data subject’s wishes by which they agree to the processing of their data.

Sites automatically records website traffic and provides the operator with statistics about unique visitors, page views and changes over time. These statistics help understand how the information on this website is used.

These provider-side statistics are separate from the website-code functions. Our optional aggregate website statistics are described separately below; we do not embed advertising trackers; this does not mean the hosting provider processes no usage data or never uses cookies. Our website code does not transmit answers from the local interactive checks. The Sites documentation provides further information about visitor statistics.

When you register, we store your email address, the time and version of your consent, and your choice about optional running updates. These details are used to inform you about the official presale and publication of The Run Code. You receive running updates only if you select that additional option. The legal basis is your consent under Article 6(1)(a) GDPR.

Registrations are stored in this website’s database. The website operator has access to a protected overview and can receive information about new registrations in their ChatGPT account. This involves processing the email address, registration time and selected updates. ChatGPT Sites and ChatGPT are used for hosting and operator notifications. The form does not request health data. Registering does not create a treatment relationship or constitute a book purchase.

You may withdraw your consent at any time with effect for the future and request deletion of your registration by emailing info@ortho-center.eu. We retain your details until you withdraw consent or the relevant information purpose no longer applies. The other sections of this policy describe technical providers and your further rights.

To protect against abusive registrations, the waiting-list function stores a daily changing hash of the IP address with a request counter. Expired counters are deleted on the next request after the day ends. The waiting-list function does not store the full IP address.

You can exercise your rights at any time using the contact details above. Each right applies subject to the relevant legal conditions.

Confirmation and access: you may request confirmation of whether personal data are being processed. If they are, you may request access and a copy free of charge. The information includes, in particular, purposes, data categories, recipients, retention periods, the source of the data, your other rights, automated decisions and, where relevant, transfers to third countries.

Rectification: you may request prompt correction of inaccurate personal data and completion of incomplete personal data.

Erasure: you may request erasure, particularly where data are no longer necessary, consent has been validly withdrawn, a valid objection applies, processing was unlawful or a legal obligation requires erasure. Statutory retention obligations and other legal exceptions remain unaffected.

Restriction of processing: you may request restriction if you contest the accuracy of data, processing is unlawful and you prefer restriction to erasure, the data are needed for legal claims, or a decision on an objection is pending.

Data portability: where automated processing is based on consent or a contract, you may receive the data you provided in a structured, commonly used and machine-readable format and, where technically feasible, have them transferred directly to another controller.

Objection: for reasons relating to your particular situation, you may object to processing based on Article 6(1)(e) or 6(1)(f) GDPR. Following such an objection, processing stops unless compelling legitimate grounds or legal claims justify its continuation. You may object to direct marketing at any time without giving a specific reason; your data must then no longer be processed for direct marketing.

Automated decisions, including profiling: you have the right not to be subject to a decision based solely on automated processing that produces legal effects or similarly significantly affects you, unless a statutory exception applies. This website does not carry out such automated decision-making or profiling.

Withdrawal of consent: you may withdraw data-protection consent at any time with effect for the future. This does not affect the lawfulness of processing carried out before withdrawal.

Right to complain: you may complain to a data-protection supervisory authority, particularly in the member state of your habitual residence, workplace or the suspected infringement. The Bavarian State Office for Data Protection Supervision is one possible contact for non-public bodies in Bavaria.

Providing personal data may be legally required, contractually agreed or necessary to enter a contract. If required information is not provided, an inquiry may be impossible to process or a contract may not be concluded.

You may contact the practice before sending information. The practice can explain in the individual case which details are required, the basis on which they are processed and the possible consequences of not providing them.

Doctolib booking, Google Maps, Jameda, PubMed, ORCID, specialist journals, media articles and, where applicable, social networks are opened only as external links. A connection to the provider is established only when you click the link. The respective service’s privacy information then applies.

Videos initially display only a locally stored preview image. The YouTube player is loaded through youtube-nocookie.com’s privacy-enhanced mode only after you select Play video. This establishes a connection to YouTube or Google. In particular, your IP address, device and usage information, and the page accessed may be processed. If you are signed in to YouTube, the visit may be associated with your account. Google’s privacy policy provides further information.

The website does not automatically embed Google Maps, Jameda widgets, Facebook or Instagram feeds, or plugins from X, XING or LinkedIn. Simply viewing a page with a YouTube preview image does not establish a connection to YouTube.

If the type or scope of external integrations changes, this information will be updated before activation.