Last updated: October 2026
1. Data controller
Heinrich MVZ Trägergesellschaft mbH
MVZ Ihre Augenärzte
Carmerstraße 2
10623 Berlin
Represented by managing directors Stefan Heinrich and Aljoscha Nickel
Telephone: +49 30 313 38 30
E-mail: geschaeftsfuehrung@ihre-augenaerzte.de
Please use the contact details above for any data protection enquiries.
2. General information
We process personal data only where necessary to provide this website securely, respond to your enquiry or meet legal obligations. Personal data means any information that can identify a person, directly or indirectly.
3. Hosting and server logs
This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin. When you visit, the hosting provider records technical data needed to run the service in server logs. These may include your IP address, date and time of access, the page or file requested, data volume transferred, referrer URL, browser, operating system and access status.
We process these data to keep our website secure, stable and working correctly. The legal basis is Article 6(1)(f) GDPR, and our legitimate interest is the secure operation of our website. Data are deleted when they are no longer needed for this purpose, unless statutory retention requirements apply. Processing is governed by our contractual arrangements with the hosting provider.
Further information: STRATO's Privacy Notice.
4. Accessibility settings
If you use the red button to adjust text size, contrast, greyscale or motion, we save your preferences only in your browser, using the local storage entry ihre-augenaerzte-anzeigeeinstellungen. These settings are not sent to us and remain until you delete them with ‘Reset all’ or through your browser.
Local storage is used only when you select a display feature, so your chosen settings remain available on later page visits. The legal basis is section 25(2), no. 2 TDDDG.
5. Locally hosted fonts and media
The fonts, images and videos we provide are hosted locally with the website. Loading a font does not connect to Google Fonts. Videos do not play automatically, and simply viewing a page does not send data to external video platforms.
6. External links to Google Maps
Our location pages include links to Google Maps. Maps are not embedded in this website: you leave our site only when you follow one of these links. Google may then process data including your IP address, device information and the location you view. Google is generally responsible for that processing.
The European provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information: Google Privacy Policy.
7. Contact by e-mail or telephone
If you contact us by phone or email, we process the information you provide to respond to your enquiry. When it relates to treatment or another contractual relationship, the legal basis is Article 6(1)(b) GDPR. In other cases, processing is based on our legitimate interest in handling your enquiry appropriately, under Article 6(1)(f) GDPR.
Do not send sensitive medical documents or detailed health information by unencrypted email. Use the secure contact method agreed with the practice.
We delete the data when your enquiry has been resolved and no statutory documentation or retention duties remain.
8. Online appointment booking
Our ‘Book an appointment’ page uses online.arzttermin-widget.de for an embedded booking system provided by samedi GmbH, Rigaer Straße 44, 10247 Berlin. We remain responsible under data protection law for planning and carrying out appointments. samedi GmbH provides the technical platform and processes booking data on our behalf under Article 28 GDPR.
Visiting our appointment page alone does not connect you to the booking provider. The connection is established when you select ‘Start booking’ or follow the direct link to the booking system. Necessary technical data, including your IP address, access time, device and browser information, are then processed. According to samedi GmbH, server logs are normally deleted within seven days. They may be kept longer in exceptional cases to investigate a security incident.
If you book online, we process the information you enter during the booking process. This may include your preferred appointment and practice, name, date of birth, contact details, health insurance information and, depending on the appointment type and what you provide, health data. We use these details to arrange and organise your treatment appointment. The legal basis is Article 6(1)(b) GDPR. Where special categories of personal data are processed and consent is required, it is obtained during booking; the legal basis is then Article 9(2)(a) GDPR. Please enter only the information needed to book your appointment.
According to samedi GmbH, it uses T-Systems International GmbH to host the booking service. retarus GmbH may be used to send appointment notifications by email or SMS. Data are generally processed within the European Union or European Economic Area. Appointment and treatment data are retained according to the purpose of processing, our statutory documentation and retention duties, and the deletion arrangements agreed with the provider.
The booking system may use cookies or similar storage technologies that are technically necessary to make the appointment you have requested. The legal basis is section 25(2), no. 2 of the German TDDDG. Analytics and marketing functions are currently disabled in our booking widget.
The booking window loads as a separate part of the page, without passing on the address of the page you visited previously. If it does not work in your browser, you can request an appointment by phone or email using the details on our ‘Practices’ page.
Further details of how the platform processes data are available in samedi GmbH’s privacy information for patients.
8a. Online requests via medflex
We are trialling online enquiries through medflex at our Savignyplatz practice. A small medflex button appears on the practices page. When that page loads, the widget script and button are loaded from arzt.medflex.de. medflex receives the necessary connection data, including your IP address and browser information.
Selecting the button or one of our medflex links opens our practice’s medflex contact page in a new tab. You enter your request and personal details there. The button itself does not send a patient enquiry. You can still contact us by phone or email.
The provider is medflex GmbH, Reichenaustraße 39a, 78467 Konstanz. Details of how medflex processes data are available in Privacy Policy of medflex and on the contact page there.
9. Online job applications
When you use the application form on our careers page, we process the contact details you enter, your preferred role and working hours, your message and any CV you upload. Please provide only information needed for your application.
We process your information to assess your application and decide whether to offer you employment. The legal basis is section 26(1) of the German Federal Data Protection Act (BDSG). Within our organisation, only people involved in the recruitment process have access to your details.
The form is processed on our STRATO webspace and sent to bewerbung@ihre-augenaerzte.de. We also send an automatic acknowledgement to the email address entered in the form. An uploaded PDF is processed temporarily to check its file type and active content and to send it by email; it is not stored permanently in the website directory. To prevent automated abuse, we apply a short-term, pseudonymised sending limit without storing IP addresses in plain text. The associated protection files are deleted within two hours.
If you are employed, the necessary application documents become part of your personnel file. Otherwise, we normally delete application data no later than six months after the selection process ends, unless statutory retention duties or specific legitimate interests require a longer period. We add applicants to a talent pool only with separate consent and for the period stated in that consent.
10. No analytics or marketing services
This website currently uses no visitor analytics, advertising or marketing trackers, or social media plugins.
11. Your rights
Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction of processing, data portability and objection. You can withdraw consent at any time, with effect for future processing.
Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation.
12. Right to lodge a complaint
You may complain to a data protection authority. The authority particularly responsible for us is:
Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
E-mail: mailbox@datenschutz-berlin.de
Website: www.datenschutz-berlin.de
13. Encryption and updates
This website uses an encrypted HTTPS connection. We update this privacy policy when the website, services used or legal requirements change.