Privacy policy

This Privacy Policy describes how personal data is processed by MOHS.AT - Medical Center for Skin Cancer and Mohs Surgery - Dr. Lena Hampel and its staff (hereinafter also referred to as MOHS.AT). The gender forms used represent the male and female genders and all other gender identities.

Further more MOHS.AT bans all types of existing and in future to be devolved artificial intelligence, data collection and data mining technologies are to access, read, collect, mine and process all types of data, services and website of MOHS.AT to keep data and copyrights protected, see Legal notice.

1. Legal basis of processing

The basis of the processing of personal data, in the same way whether it concerns interested parties or already existing customers, patients and business partners, is carried out in accordance with the provisions of the EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of personal data (hereinafter also EU GDPR).

1.1 Interested parties

Interested parties are future parties, customers, patients and business partners, who can be natural and legal persons and who have an interest in a relationship to MOHS.AT.

In case of using the MOHS.AT website https://mohs.at, voluntary disclosure of personal information via eMail, website and voluntary consent (EU GDPR Art. 6, 1a), personal information is processed for the legitimate interests of the controller (EU GDPR Art. 6, 1f) and for contacting, initiating business, sending information and advertising (EU GDPR Art. 6, 1b).

1.2 Existing service users, members, cooperation partners and other business partners

Existing service users, members, cooperation partners and other business partners are defined as all natural and legal persons with whom a relationship to MOHS.AT already exists.

In this case, the personal information provided is processed on the basis of voluntary consent (EU GDPR Art. 6, 1a), for the purpose of the legitimate interests of the controller (EU GDPR Art. 6, 1f) and for the purpose of sending information and advertising, service or contract performance (EU GDPR Art. 6, 1b).

1.3 Voluntary provision of personal data

If personal data is provided by interested parties, customers, patients and business partners, the provision is fundamentally voluntary.

If no voluntary disclosure of the necessary personal data is provided, it is possible that the desired requests and contractual services of MOHS.AT can not be fulfilled.

2. Data controller for data processing

The controller of the personal data is MOHS.AT:

• Post address: see Imprint
• E-mail: see Imprint

3. Purpose of data processing

Personal data will be processed depending on paragraph 1.1 and 1.2 for the following purposes:

3.P.1 General conditions for processing along the entire life cycle of the business relationship to MOHS.AT:

• Promotion of services
• Planning, administration, implementation, deployment and maintenance of services and maintenance services
• Termination of services and archiving according to legal requirements
• Obligation by laws, regulations and authorities

3.P.2 Service provision to interested parties, customers, patients and business partners:

• Promotion of services
• Master data management
• Service implementation, deployment and maintenance services
• Periodic reminder services and information delivery
• Information exchange with subcontractors for service provision
• Cost settlement with banks and payment service providers
• Continuing education, trainings and research purposes on an anonymous data basis
• Claims management for outstanding payments

3.P.3 Website and interested parties contacting MOHS.AT

• Technically necessary information within the scope of the legitimate interests of the controller
• Provided information through requests by phone, e-mail and website https://mohs.at

4. Data processor

According to the processing mentioned in paragraph 3 Purpose of data processing, the personal data is processed by MOHS.AT and may also be processed by the correspondingly necessary involved business partners and suppliers, otherwise the service provision cannot take place.

Due to the provision of services, it may happen that the place of business of business partners and suppliers are located outside of Austria. However, the aim is to ensure that the same or a similar level of data protection exists as provided for in the respective current requirements of the EU GDPR.

If the controller subcontracts a respective processors within the framework of the processing of persaonal data, they are also subject to the provisions of the EU GDPR, and if their place of business is in Austria, also to the Austrian Data Protection Act and are bound to process the data in accordance with the law.

5. Website without Cookies

The MOHS.AT website serves exclusively to present information about MOHS.AT and its services. No cookies, web analytics or social media plugins are used for user tracking. The scripts used are unavoidably necessary for the implementation of the technical functionality of the website and IT security. The technically necessary data for this purpose, which may also include personal, technical data, are therefore subject to the purpose of the legitimate interests of the controller (EU GDPR Art. 6, 1f).

6. Storage period

The storage period of personal data depends on the processing mentioned in paragraph 3 Purpose of data processing and must at least comply with the legal requirements, which is determined not only by the EU GDPR but also by various other laws. In addition, it may be in the interest of the interested parties, customers, patients and business partners or in the legitimate interest of MOHS.AT that data is stored longer.

7. Questions about data protection and the execution of all rights of the data subjects

Please contact
a) for all questions regarding data protection and
b) for the execution of all rights of the data subjects (e.g. information, modification, correction, restriction, deletion)

the data controller, see paragraph 2.

8. Severability clause and final provision

Should individual provisions of this privacy policy be invalid in whole or in part, this shall not affect the validity of the remaining provisions of this privacy policy. An invalid provision shall be replaced by the corresponding correct legal provision.

interested parties, customers, patients and business partners, expressly waiving their own jurisdiction or any other that may correspond to them, submit to the competent authorities and courts in Vienna, Austria, for the resolution of all disputes that may arise in connection with the interpretation, validity, effectiveness or performance of this agreement.