Privacy Policy
Your privacy choices
You can change optional privacy preferences anytime via Privacy & Terms Settings in the footer. Necessary cookies and account data for login remain required for the platform to function.
1. Privacy at a glance
General information
The following notes give a simple overview of what happens to your personal data when you visit our website, book appointments online, or use our digital services for recording and evaluating therapeutic performance and movement parameters. Personal data means any data that can identify you personally. Detailed information is set out in this privacy policy.
2. Controller
The controller responsible for data processing on this website and in the practice is:
PhysioTech Praxis für Physiotherapie
Owner: Dr. Ahmet Kurtoğlu
Address: Venloer Str. 305, 50823 Cologne, Germany
Email: dr.kurtoglu@physiotech-ehrenfeld.de
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g. names, email addresses, health data).
3. Data collection and processing on our website
a) Website provision and server log files
When you access our website, your browser automatically sends information to our server, which is stored temporarily in a log file:
- IP address of the requesting device
- Date and time of access
- Name and URL of the retrieved file
- Browser and operating system used
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the technical stability and security of the website).
b) Online appointments and patient registration
In the context of digital appointment booking and contact, we process your master data (name, date of birth, contact details, health insurance status) and, where applicable, initial treatment-related information.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract / pre-contractual steps) in conjunction with Art. 9(2)(h) GDPR and Section 22(1) No. 1(b) BDSG.
4. Special rules for health and performance parameters (digital performance tracking)
In physiotherapeutic diagnostics, therapy and training control we may record, in addition to classic findings, specific performance, movement and function parameters (e.g. movement analyses, joint angles, strength values, motor performance values and sensor-based tracking data).
- Purpose: Quantitative progress documentation, evidence-based training control, individual adaptation of rehabilitation plans, and monitoring therapeutic success.
- Legal basis: Collection and digital evaluation of these biometric and health-related performance parameters is based on your explicit consent under Art. 6(1)(a) GDPR in conjunction with Art. 9(2)(a) GDPR, and on fulfilling the treatment contract under Art. 9(2)(h) GDPR in conjunction with Sections 630a et seq. German Civil Code (BGB).
- Withdrawal: You may withdraw consent to recording and processing digital performance parameters at any time with effect for the future. Processing carried out before withdrawal remains lawful.
- Recipients: Data is shared only within the legally permitted framework (e.g. billing processors under Art. 28 GDPR, statutory/private payers) or with your separate written consent (e.g. to your treating physician).
- Retention: Under Section 630f(3) BGB we are legally required to retain patient-related treatment and measurement documentation for at least 10 years after the end of treatment.
5. Your rights as a data subject
Under the GDPR you have the following rights vis-à-vis the controller at any time:
- Right of access to your stored data and its processing (Art. 15 GDPR).
- Right to rectification of inaccurate or incomplete data (Art. 16 GDPR).
- Right to erasure, unless statutory retention obligations apply (Art. 17 GDPR).
- Right to restriction of processing (Art. 18 GDPR).
- Right to data portability in a structured, commonly used format (Art. 20 GDPR).
- Right to object to processing (Art. 21 GDPR).
- Right to lodge a complaint with the competent supervisory authority (State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia – LDI NRW, Kavalleriestr. 2-4, 40213 Düsseldorf).
6. Data security (SSL/TLS encryption)
This website uses SSL/TLS encryption to protect the transmission of confidential content such as appointment requests or health-related parameters. You can recognize an encrypted connection by the browser address changing from http:// to https:// and by the padlock icon in the address bar.