LEGAL
Privacy policy
Last updated: March 2026
This translation is provided for information only. The German version is legally binding.
1. Controller
The controller within the meaning of the General Data Protection Regulation
(GDPR) and the Austrian Data Protection Act (DSG) is:
Dr. med. Bc. Antonia Tardue-Breiter
Specialist in Ear, Nose and Throat Medicine
Additional Specialty: Phoniatrics
Albert-Schweitzer-Gasse 6/109, 1140 Vienna, Austria
+43 1 212 01 71
2. Principles of data processing
Protecting your personal data matters to me. I process personal data only where this is permitted by law or where you have given your explicit consent.
I process data in accordance with the following principles:
– Lawfulness, fairness and transparency
– Purpose limitation – data is collected only for specified, explicit purposes
– Data minimization – only the data actually required is collected
– Accuracy – stored data is kept accurate and up to date
– Storage limitation – data is stored only for as long as necessary
– Integrity and confidentiality through appropriate security measures
3. Use of this website
ACCESS DATA / SERVER LOGS
When you visit this website, the hosting provider automatically records technical access data, including your IP address, the date and time of access, the page accessed, and your browser type and operating system. This data is used exclusively to provide the website and keep it secure, and it is not combined with any other data.
HOSTING
This website is hosted by Squarespace (Squarespace Ireland Limited, Le Pole House, Ship Street Great, Dublin 8, Ireland). Squarespace processes technical access data in accordance with its privacy policy. The processing is based on Art. 6(1)(f) GDPR (legitimate interest in operating the website securely).
GOOGLE FONTS
This website loads fonts via Google Fonts (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). In the process, your IP address is transmitted to Google. The legal basis is Art. 6(1)(f) GDPR. Information on data protection at Google is available at policies.google.com/privacy.
4. Contact form & email
If you write to me via the contact form or by email, the information you provide (name, email address, message) is stored in order to process your inquiry. I do not pass this data on to third parties without your consent.
The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). The data is deleted once your inquiry has been fully processed, provided there is no statutory retention obligation.
5. Patient data & medical confidentiality
Data collected in the course of medical treatment (medical history, findings, diagnoses, treatment measures) is subject to medical confidentiality under Section 54 of the Austrian Medical Practitioners Act 1998 (Ärztegesetz 1998) and to professional secrecy under Art. 9 GDPR.
Patient data is processed exclusively for the purpose of medical treatment and — where required by law — retained for the periods prescribed by the Austrian Hospitals Act (KAKuG).
Your treatment data is disclosed to third parties only with your explicit consent or where this is necessary to comply with legal obligations (e.g., reporting obligations).
6. Legal bases
Personal data is processed on the basis of the following legal grounds:
– Art. 6(1)(a) GDPR – consent of the data subject
– Art. 6(1)(b) GDPR – performance of a contract or pre-contractual measures
– Art. 6(1)(c) GDPR – compliance with a legal obligation
– Art. 6(1)(f) GDPR – legitimate interests
– Art. 9(2)(h) GDPR – processing of special categories of data (health data) for medical purposes
7. Retention period
Personal data is stored only for as long as necessary for the respective purpose of processing or as required by statutory retention obligations. Medical records are subject to the retention periods under Austrian law (generally 10 years after the last treatment).
8. Disclosure of data
Your personal data is generally not transferred to third parties, except where:
– you have given your explicit consent
– the transfer is necessary for the performance of a contract (e.g., referring physicians, laboratories)
– there is a legal obligation
– the recipients are processors whom I have contractually obligated to comply with the GDPR
Data is transferred to third countries outside the EU only if an adequate level of data protection is ensured.
9. Your rights
You have the following rights regarding your personal data, which you can exercise against me as the controller:
– Right of access (Art. 15 GDPR)
– Right to rectification (Art. 16 GDPR)
– Right to erasure (Art. 17 GDPR), unless a statutory retention obligation applies
– Right to restriction of processing (Art. 18 GDPR)
– Right to data portability (Art. 20 GDPR)
– Right to object (Art. 21 GDPR)
– Right to withdraw your consent at any time with effect for the future
To exercise your rights, please contact: info@drtardue.com
RIGHT TO LODGE A COMPLAINT
You have the right to lodge a complaint with the Austrian Data Protection Authority:
Datenschutzbehörde (Austrian Data Protection Authority)
Barichgasse 40–42, 1030 Vienna, Austria
10. Cookies
This website uses only technically necessary cookies that are required to operate the website. No tracking or analytics cookies are set. Under Section 165 of the Austrian Telecommunications Act 2021 (TKG 2021), consent is not required for technically necessary cookies.
You can disable cookies in your browser at any time. Please note that this may affect the functionality of the website.
11. Changes to this privacy policy
I reserve the right to amend this privacy policy as necessary to keep it in line with current legal requirements. The current version is always available on this page. In the event of material changes, I will inform you separately where possible.