Privacy policy

• EBL Media Production OG
• 29 Andreas-Hofer-Straße, 6020 Innsbruck, Austria
• Commercial Register Number: FN 455679 t (Innsbruck Regional Court)
• VAT ID: ATU71290346
• Email: praktiker@meine-tcm.com

Data Protection Officer: not appointed; in our assessment, the conditions set forth in Article 37 of the GDPR for an obligation to appoint a data protection officer are not currently met (small business, no extensive processing of special categories of data within the meaning of the GDPR on its own behalf).

For your Praktiker account We process:

• Name, Email, Password, Phone Number
  Purpose: Login, Communication
  Legal basis: Art. 6(1)(b) of the GDPR (Contract)
• Practice Information—Contact Information, Hours of Operation, Biography, Photo, Qualifications, Specialties
  Purpose: Public Directory
  Legal basis: Art. 6(1)(b) of the GDPR
• Invoice Settings (IBAN, Account Holder, VAT ID, Small Business Status)
  Purpose: Invoicing, Payments
  Legal basis: Art. 6(1)(b) of the GDPR, § 132 of the BAO
• Credentials / Certificates
  Purpose: Manual review for profile activation
  Legal basis: Art. 6(1)(b) of the GDPR
• Payout Account (separate from the billing IBAN)
  Purpose: SEPA payment of affiliate commissions
  Legal basis: Art. 6(1)(b) of the GDPR

The patient data, The information you enter into the portal (master data, appointments, diagnoses, treatment notes, invoices) is used by us exclusively on your behalf processed. You remain the controller within the meaning of the GDPR.

Legal Basis Article 28 of the GDPR (Data Processing by a Processor) applies to this processing. We will provide a Data Processing Agreement (DPA) upon request.

We give We do not disclose patient data to third parties or use it for our own purposes. Technical service providers (hosting, database backup) are, in turn, data processors; see Section 7.

Depending on Depending on the selected investment model, we also process:

If you When we send a product recommendation via email to your patients, we store the following:

• Your practice ID, the patient ID
• Recipient's email address (+ a server-side hash of the address for later association with an order in the store)
• Selected products, shipping date, tracking token

Purpose: Assign a store order to your referral so that the commission can be calculated correctly.

Legal basis:

• Art. 6(1)(b) of the GDPR (Performance of the partnership agreement with you)
• Art. 6(1)(f) of the GDPR (legitimate interest in accurate commission settlement)

Retention period: 30 days for tracking; after that, hashes are aggregated. Commission-related data is retained for 7 years in accordance with commercial and tax regulations.

For each For each qualified order, we store the store order number, the gross amount, the commission amount, and the order status. We display this information anonymously in your portal (the buyer’s email address is masked, e.g., j***@g***.com). The buyer’s full email address is stored exclusively in our admin portal and is disclosed only for dispute resolution or upon official request.

Ordered For your retail business in the online store, we synchronize order data (product, quantity, prices, delivery status) between the store and the portal so that you can manage incoming goods and inventory in the portal. The corresponding VAT ID number for your retail company is validated by the European Commission’s VIES service when you enter or update it.

When logging in and every time the portal is used, technical data is collected (IP address, user agent, timestamp, resources accessed). We process this data for the following purposes:

• Protection against unauthorized access
• Fault Analysis and Operational Safety

Legal basis: Art. 6(1)(f) of the GDPR (legitimate interest in secure operations).

Retention period: IP-related logs are deleted or anonymized after 30 days.

The Portal uses only Technically Necessary Cookies for the login session. No tracking, no advertising cookies, and no cookie banner required.

Note: If you go to the store (www.meine-tcm.com) via the „Shop Products“ link, the cookie and tracking policies in the store’s privacy policy apply there.

We use uses the following service providers for its operations (all with data processing agreements pursuant to Article 28 of the GDPR; servers located in the EU):

• Hosting Practitioners Portal (including the database, backups, and the sending of transactional emails from the portal directly from the server, e.g., registration confirmations, commission statements, and model change confirmations): Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany
• Hosting for the public online store www.meine-tcm.com: prohost networks GmbH (brand „w3w“), Wilhelm–Külz–Str. 69, 14532 Stahnsdorf, Germany
• Emails sent by the www.meine-tcm.com online store and the Praktiker newsletter: Brevo (Sendinblue SAS, France). Brevo processes recipients’ email addresses and shipping information. This applies to you if you (a) subscribe to the Praktiker newsletter (double opt-in) or (b) shop as a partner in the store and receive order confirmations or shipping notifications there.
• Payment Transactions (SEPA payments of affiliate commissions): EBL Media Production OG's primary bank
• VAT ID Check (EU VIES): European Commission

A data transfer Exports to third countries outside the EU do not take place.

• Login / Account Master Data: for the duration of use + 30 days after termination
• Invoicing and Tax Information (Invoices, credit memos, commission statements): 7 years (§ 132 BAO AT / § 147 AO DE)
• Patient data: According to your instructions; we will delete the data upon completion of the order or at the end of the contract, provided there are no legal retention requirements to the contrary
• Technical logs containing IP addresses: 30 days

You have the right, at any time, to:

• Information (Art. 15 of the GDPR)
• Correction (Art. 16)
• Deletion (Art. 17)
• Restriction of Processing (Art. 18)
• Data Portability (Art. 20)
• Objection Objection to processing based on legitimate interests (Art. 21)
• Withdrawal Consents granted with future effect (Art. 7, para. 3)

The Exercise may be submitted in any format to praktiker@meine-tcm.com possible.

You can file a complaint with the relevant regulatory authority. In Austria, that is the Data Protection Authority (dsb.gv.at), in Germany, the state data protection authority with jurisdiction over you.

We do not use any automated individual decision-making or profiling as defined in Article 22 of the GDPR.

We're a good fit We will update this statement if there are changes to data processing or legal requirements. The most current version is available at the URL listed above. We will also notify you of any significant changes via the portal and by email.