Privacy policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Gemeinschaftspraxis Dr. A. Kochs / Dr. H. Rode
Roermonder Str. 326
52072 Aachen, Germany
Phone: +49 241 17029
Email: info@ortho-aachen.de

2. Visiting the website and server log files

When you visit our website, our hosting provider automatically processes information transmitted by your browser: IP address, date and time of access, page accessed, referrer URL, browser type and version, operating system, amount of data transferred and status code.

This processing is necessary to deliver the website and ensure its security and stability (e.g. to defend against attacks). The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and error-free operation of the website. Log files are deleted as soon as they are no longer needed for these purposes. They are not combined with other data sources.

Details of the hosting provider are given in section 3.

3. Hosting

This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. The provider makes the website available and operates the technical infrastructure required for this. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

Only technically necessary data is generated in the process. Section 2 describes which data this is, as well as the legal basis (Art. 6(1)(f) GDPR) and deletion.

4. Encryption

For security reasons, this website uses TLS encryption. You can recognise an encrypted connection by “https://” and the padlock symbol in your browser's address bar.

5. Cookies and local storage

Our website does not set cookies and does not use analytics, tracking or marketing services.

If you make a choice in the privacy settings or load a map, we store this decision only in your browser's local storage so that we do not need to ask you again. This information is not transmitted to us. The legal basis is Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG) in conjunction with Art. 6(1)(c) and (f) GDPR. You can delete it at any time in your browser settings.

6. Fonts

The fonts used (Newsreader, Figtree) are stored locally on our server. No connection is made to third-party servers (e.g. Google Fonts) when the page is loaded.

7. Google Maps (only with consent)

On the home page you can display a Google Maps map. The map is only loaded if you actively click to load it or give consent in the privacy settings. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When the map is loaded, your IP address and information about your browser, among other things, are transmitted to Google; Google may set cookies. A transfer to the USA is possible. Google LLC is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time with effect for the future via “Cookie settings”. More information: Google privacy policy.

Alternatively, you can use the “Open in Google Maps” link; in that case only Google's privacy terms apply.

8. Online appointment booking via Doctolib

For online booking, we link to the Doctolib platform. Only when you click the link are you forwarded to the website of Doctolib GmbH, Mehringdamm 51, 10961 Berlin, Germany. Doctolib processes the data entered there on behalf of our practice for appointment management. Doctolib's own privacy information also applies. No Doctolib widget is embedded on our website.

9. Contact by email or phone

If you contact us by email or phone, we process your details to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (initiation or performance of the treatment contract) or Art. 6(1)(f) GDPR; where health data is concerned, Art. 9(2)(h) GDPR.

Please note: unencrypted emails can be read by third parties in transit. Please do not send us health data, medical reports or insurance details by email; contact us by phone or in the practice instead.

Information on the processing of your data in the context of treatment is available in our practice.

10. External links

Our website contains links to external websites (e.g. medical association, Doctolib, Google Maps). Simply visiting our pages does not transmit any data to these providers. Only when you follow a link do the privacy terms of the respective provider apply.

11. Storage period

We store personal data only for as long as necessary for the respective purpose or as required by statutory retention periods (e.g. for medical records).

12. Your rights

Within the statutory framework, you have the right at any time to:

• access your stored data (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR), unless statutory retention obligations apply
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• withdraw consent with effect for the future (Art. 7(3) GDPR)

Right to object (Art. 21 GDPR): where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation.

To exercise your rights, simply contact us using the details above.

Right to lodge a complaint: you may lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.

13. No automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

14. Updates

We update this privacy policy when the website or legal requirements change.

Last updated: October 2026