Privacy protection
Agreement on data protection in the context of website visits
​
​
1. Person responsible and contact details
The person responsible for data processing in accordance with the General Data Protection Regulation (GDPR) is:
Mag. Sandra Anna Zaunfuchs
Steinfeldgasse 21/16, 8020 Graz
The protection of your data is particularly important to us. We can be reached at any time using the contact details below to answer your questions or revoke your consent.
Email: praxis@zaunfuchs.com
Telephone: 0043 677 625 605 13
2. Personal data and its use
If you have provided us with personal data, we will only use it for the purposes agreed with you or if there is another legal basis in accordance with the GDPR; this in compliance with data protection and civil law regulations.
Only such personal data is collected that is necessary for the implementation and processing of our services or that you have provided to us voluntarily.
We will not process the data provided to us for any purposes other than those covered by contract or by your consent or otherwise by a provision in accordance with the GDPR.
3. Information and deletion
As a data subject, you have the right at any time to information about your stored personal data, its origin and recipient and the purpose of data processing, as well as a right to correction, data transfer, objection, restriction of processing and blocking or deletion of incorrect or unlawfully processed data.
If there are any changes to your personal data, we ask you to inform us accordingly.
You have the right to revoke your consent to the use of your personal data at any time. Your request for information, deletion, correction, objection and/or data transfer, in the latter case, provided this does not cause disproportionate effort, can be sent to our address.
If you believe that the processing of your personal data by us violates applicable data protection law or your data protection rights have been violated in some other way, you have the option of complaining to the responsible supervisory authority. In Austria, the data protection authority is responsible for this.
4. Data security
Your personal data is protected through appropriate organizational and technical precautions. These precautions relate in particular to protection against unauthorized, unlawful or even accidental access, processing, loss, use and manipulation.
Despite efforts to maintain an appropriately high standard of care, it cannot be ruled out that information you provide to us via the Internet will be viewed and used by other people.
Please note that we therefore assume no liability whatsoever for the disclosure of information due to errors in data transmission not caused by us and/or unauthorized access by third parties (e.g. hack attack on email account or telephone).
5. Cookies and web analytics
​
The websites of the above-mentioned responsible parties use “cookies” to make the offer more user-friendly, effective and secure. Cookies help to determine the frequency of use and the number of users of the website. The content of the cookies used is limited to an identification number, which does not allow any personal reference to the user. The main purpose of cookies is to recognize visitors to the website.
Two types of cookies are used on this website:
1. Persistent cookies:
To improve user-friendliness, cookies remain stored on your device and allow us to recognize your browser on your next visit.
2. Session cookies:
These are temporary cookies that remain in your browser's file until you leave the website and are automatically deleted at the end of the visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when you close the browser. However, if cookies are deactivated, the functionality of the website may be restricted.
6. Server log files:
In order to optimize the website in terms of system performance, user-friendliness and provision of useful information, the website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This includes your IP address
​
7. Newsletters
You have the option of subscribing to our newsletter via our website. For this we need your email address and your declaration that you agree to receive the newsletter.
You can cancel your newsletter subscription at any time by sending an email to (fill in email address). Your sending email address will subsequently be deleted from the newsletter distribution list.
8. Transfer of data to third parties
Your data will only be forwarded on the basis of the GDPR, in particular to fulfill your order or based on your prior consent.
In principle, we do not pass on any data to third parties unless there are obligations and needs that may arise from our business relationship (e.g.: accounting, bookkeeping).
9. Disclosure of data breaches
We strive to ensure that data breaches are identified early and, if necessary, immediately reported to you or the responsible supervisory authority, taking into account the respective data categories that are affected.
10. Retention of data
We do not store data longer than is necessary to fulfill our contractual or legal obligations and to defend against any liability claims.
​
​
Agreement on data protection in the context of clinical psychological & health psychological treatment (also applies to occupational psychological coaching & consulting)
​
​
Subject of agreement
The subject of this contract is the implementation of the following tasks: clinical-psychological and/or health-psychological advice and treatment, psychological-therapeutic interventions such as relaxation procedures
The following data categories are processed: name, contact details, age, information from the treatment units, if applicable medical or clinical-psychological (preliminary) findings/assignments, information from telephone conversations, email contacts or online meetings, etc.
Duration and scope of the agreement
By booking and the subsequent written data protection agreement, I agree that, until revoked, Ms. Sandra Zaunfuchs may store and process all information entrusted to her and otherwise provided by me as part of the consulting contract concluded with me. The agreement is concluded for an indefinite period and can be revoked by either party at any time. The lawfulness of the processing of my data remains unaffected until the revocation is received.
The legal basis is the Psychotherapy Act 1990 and the Psychologists Act 2013. The data is archived anonymously for 10 years as part of the documentation requirement for the Federal Ministry of Health and Women in accordance with Sections 14 and 16a of the Psychologists Act 2013. The obligation of confidentiality according to §15 PG 2013 remains in place alongside the new GDPR regulations.
I acknowledge that, particularly through the unencrypted transmission of data (e.g. via email), third parties can gain knowledge of this information and that this data can be changed. I understand that this may result in the disclosure of information. The person responsible undertakes to implement all security measures in accordance with the GDPR in order to reduce the risk to a minimum.
​
Duties of those responsible
​
The person responsible undertakes to process data and processing results exclusively within the scope of the contractual partner's orders. If the person responsible receives an official order to release the contractual partner's data, they must - if legally permissible - immediately inform the contractual partner of this and refer the authority to them. Likewise, processing the data for the controller's own purposes requires a written order.
The person responsible declares in a legally binding manner that it has taken all necessary measures to ensure the security of processing in accordance with Article 32 of the GDPR.
The person responsible takes the technical and organizational measures so that the contractual partner can exercise the rights of the data subject in accordance with Chapter III of the GDPR (information, information, correction and deletion, data portability, objection, and automated decision-making in individual cases) within the legal deadlines at any time can fulfill.
All data processing activities are carried out exclusively within the EU or EEA. Processing outside of these legal areas is subject to the respective country-specific legal bases.
The controller is not entitled to use sub-processors unless this is done with the exclusive consent of both parties.
Categories of personal data processing:
​
Name, previous names if applicable
Telephone number, email address etc