Privacy notice
How we handle personal data, and health data in particular, under the General Data Protection Regulation (GDPR) and the Bundesdatenschutzgesetz. Last updated: 1 January 2026.
The German version of this page is the legally binding one.
1. Controller
Motus Privatpraxis, Katrin Vollbrecht, Hoyerswerdaer Strasse 14, 01099 Dresden, telephone +49 351 8107460, email praxis@motus-privatpraxis.de. Because of our size we are not required to appoint a data protection officer; questions about data protection go to that address.
2. Hosting and server log files
This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA, on servers in the European Union (Frankfurt am Main). When you open a page, the hosting provider automatically processes your IP address, the time of the request, the page requested, the referring page, the browser and operating system, in log files. The legal basis is Article 6 (1) (f) GDPR, our legitimate interest in delivering and securing the website. The logs are deleted after 30 days. A data processing agreement under Article 28 GDPR and the EU standard contractual clauses are in place with Vercel.
3. Cookies and local storage
We set no analytics, tracking or advertising cookies. Only one entry is stored in your browser's local storage, to remember your decision about the consent banner and about loading the map. It contains no personal data and is set on the basis of section 25 (2) TDDDG (technically necessary) and, for the map, on your consent under Article 6 (1) (a) GDPR.
4. Appointment requests
When you request an appointment we process your name, email address, telephone number if given, the date and hour requested, the type of appointment, whether you have a prescription, and anything you write in the free-text field. We use these data solely to arrange, confirm or move the appointment. The legal basis is Article 6 (1) (b) GDPR, steps taken before entering into a contract. Where the free text contains information about your health, we process it additionally on the basis of Article 9 (2) (h) GDPR in conjunction with section 22 (1) no. 1 (b) BDSG, for the purposes of treatment by professionals bound by professional secrecy. Requests that do not lead to an appointment are deleted after six months.
5. Contact form, email and telephone
The data you send us through the contact form or by email are processed to answer your enquiry, on the basis of Article 6 (1) (b) or (f) GDPR. Email is not encrypted end to end between your provider and ours; please do not send detailed health information that way. Enquiries are deleted after six months unless they have become part of a treatment record.
6. Patient records
Once treatment begins we keep a patient record as required by section 630f of the German Civil Code (BGB): findings, treatments, the programme given, and the correspondence belonging to it. The legal basis is Article 9 (2) (h) GDPR together with section 630f BGB. Patient records are kept for ten years after the end of treatment and then destroyed, unless a longer period follows from other legislation. Records are kept on paper in a locked cabinet in the practice and, where digital, on encrypted storage within the European Union.
7. Video appointments
Video appointments are held over a service certified for telemedicine in Germany, with end-to-end encryption and servers in Germany. No recording is made. The processing is based on Article 9 (2) (h) GDPR; a processing agreement under Article 28 GDPR is in place with the provider.
8. Recipients
We do not sell data and we do not pass them to third parties for advertising. Data are disclosed only where necessary: to our hosting provider, to the telemedicine provider, to a tax adviser and to our accounting service under Article 28 GDPR, and — with your instruction — to the doctor who issued your prescription. Invoices are prepared by us and are not passed to a factoring company without your written consent.
9. Map
The map on the contact page is loaded from OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge CB4 0WS, United Kingdom, and only after you have clicked to load it. Loading it transmits your IP address to that service. The legal basis is your consent under Article 6 (1) (a) GDPR, which you may withdraw at any time by clearing this site's local storage.
10. Fonts
The typefaces used on this site are delivered from our own server. No connection to Google Fonts or any other font service is made when you open a page.
11. Your rights
You have the right of access (Article 15), to rectification (Article 16), to erasure (Article 17), to restriction of processing (Article 18), to data portability (Article 20) and to object (Article 21 GDPR). Where processing is based on consent you may withdraw it at any time with effect for the future. Note that the right to erasure is limited while the statutory retention period for patient records is running.
12. Right to complain
You may complain to a supervisory authority, for us: Sächsischer Datenschutzbeauftragter, Devrientstrasse 5, 01067 Dresden, telephone +49 351 85471 101.
13. Obligation to provide data
You are not obliged to give us any data. Without a name and a means of contact we cannot arrange an appointment, and without a history and a finding we cannot treat you lawfully.