Data Privacy

1.    Information pursuant to Art. 13GDPR “Data privacy statement”

We care about protecting your personal data. All processing steps strictly comply with the provisions of the EU General Data Protection Regulation, the Austrian Data Protection Act (DSG), the provisions of the Health Telematics Act relevant to data protection law (GTelG) as well as other applicable laws.

1.1.  Controller responsible for the processing:

HalloGesundheit GmbH
Gumpendorfer Straße 108
1060 Wien

T +43 732 7677 – 53000
F +43 732 7677 – 53007

Your personal data will be processed by the Vinzenz Gruppe Krankenhausbeteiligungs- und Management GmbH, the hospitals of the Vinzenz Group ( “Our facilities”) and the Hallo Gesundheit GmbH as joint controllers in the sense of Art. 28 of the GDPR.

As the data subject, you can assert your rights towards each controller involved in the processing ( “Our facilities”).

1.2.  Contact details of the Data Protection Officer:

Siegfried Gruber, MA (O.P.P. – Compliance GmbH),

1.3.  Data categories

What personal data do we use?

1.4.  Name, data of birth, social security number, patient ID, contact details (email address, photograph (if made available to us), contact and availability details of your treating physician, data relating to past and future appointments, information uploaded by you (results, documents), user name and encrypted password, data relating to use (access to the portal, to information), communication data (exchanged information)  Purposes/legal bases

For what purpose and on what legal basis are the data processed?

Your personal data are used to provide you with information in the context of your health/medical treatment/follow-up care/preventative care and to give you the opportunity to provide us with information.

(legal basis: Art. 6 para. 1 lit. a and Art. 9. para 2 lit. a GDPR (consent))

Consent is given following provision of the required information in the context of registering for our service. You can revoke your consent at any time by deleting your user account (this also deletes all personal data processed for this purpose) or by informing us of your revocation via or by phone (+43) 01 90 122. Your revocation will not affect the legality of the further use of the data processed lawfully before the revocation.

Further use of your personal data for other purposes is not planned.

1.5.  Transfer of data

To whom do we transfer your data?

Your personal data will be transferred to the joint controllers to the extent required.

 If this is required for your medical treatment, the data will be forwarded to other health care experts involved in the treatment.

1.6.  Transfer of data to recipients in third countries?

No personal data are transferred to recipients in third countries.

1.7.  Duration of storage

How long are the data stored?

The personal data are processed for use of the patient portal for the duration of your use for as long as your user account is active. The provider reserves the right to block your account if you are inactive for 3 years (can be reactivated) and, after inactivity for a further 2 years, to delete your user account and all related personal data.

In addition, the provider reserves the right to block access to or delete your user account and all related personal data if the platform is misused in the sense of a failure to comply with legal use.

1.8.  Rights of the data subject

What are your rights as a data subject under data protection law?

You have the following rights pursuant to the GDPR if the legal conditions are met: right to information, correction, erasure, restriction of processing, data portability, objection to the processing. You have the right to lodge a complaint with the following supervisory authority, if you are of the opinion that the processing of your personal data is not lawful.

Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, email: