Privacy

Lotsin is here to be read. You don't need an account, you don't have to enter anything, and we don't build a profile of you. No analytics, no tracking pixels, no ad networks. Whatever you type into the optional fields stays on your device and is never sent to us.

What does happen: for this page to reach you at all, our hosting provider processes your IP address. There is no way around that technically. So it is written down here.

Sorezki is the controller under the GDPR.

As a controller established outside the EU, a representative under Art. 27 GDPR may be required. We are clarifying this; once a representative is appointed, it will be named here.

• No accounts, no login, no user profiles.
• No Google Analytics and no other web analytics.
• No tracking pixels, no ad networks, no social media plugins.
• No third-party embeds.
• No automated decision-making, no profiling (Art. 22 GDPR).
• We don't sell data. We'd have nothing to sell.

This website sets no cookies.

We don't guess your language. German and English live at separate addresses - the language follows from which one you open.

Two features store something - locally in your browser, and only if you start them yourself:

• The appointment note - what you write down for your appointment.
• The optional questions on the decision pages - which answer you tapped.

Both stay on your device. They are not sent to us, not to anyone else, and we cannot see them. There are no health answers on our servers - there is no database and no endpoint for them.

You can delete it at any time: with the clear button inside the feature, or by clearing this site's data in your browser.

Why there is no consent banner: this storage is strictly necessary for the feature you explicitly asked for to work at all (§ 165(3) TKG 2021). A note that keeps nothing is not a note. You do not need a banner for that - but you should still know it happens. That is what this section is for.

The site runs on Railway Corp. (USA), our processor. To answer a page request, connection data arises there: IP address, date and time, the address requested, HTTP status, response time, and the browser identifier.

Purpose: delivering the site and keeping it stable and secure. Legal basis: Art. 6(1)(f) GDPR - our legitimate interest in a website that is reachable and not abused. Without this processing there is no website. We do not analyse these logs to recognise you, and we do not combine them with anything.

The hosting provider keeps these connection logs only for a limited period for security, then deletes them automatically. We keep no logs of our own.

The fonts sit on our server. Your browser loads them from us, not from Google. No request goes to Google, and Google does not learn your IP address this way.

The little locator maps on the practice listings are drawn on our server from OpenStreetMap data and served by us - your browser contacts no map service, and gives it no IP address. Only if you click "Open the full map" or a Medical Chamber profile is openstreetmap.org or praxisplan.at contacted, and their own privacy terms apply from then on. Nothing goes there before that.

We show 636 real practice locations held by 584 doctors: name, address, the phone number where there is one, and a link to the Medical Chamber profile.

This information does not come from the doctors themselves. It comes from the open data of the City of Vienna and Land Steiermark. It concerns their professional activity - but it is still personal data about that person, which is why this section exists.

Purpose: showing where gynaecological care exists. Legal basis: Art. 6(1)(f) GDPR. Source: City of Vienna (data.wien.gv.at) and Land Steiermark, both CC BY 4.0.

Anyone listed here who would rather not be, or who finds an entry wrong, can reach us via the contact form. We will correct or remove it.

Israel - Sorezki is based in Tel Aviv. The European Commission has an adequacy decision for Israel; no additional safeguards are needed for that.

USA - Railway processes mainly in the United States. The basis is the EU Standard Contractual Clauses. There are no other recipients.

Under the GDPR you have the right of access, rectification, erasure, restriction, data portability and objection (Art. 15 to 21).

And now the honest part: as an ordinary visitor, we cannot identify you. There is no account, no identifier and no readable cookie that would let us connect a log line to a person. If we do not know which data is yours, we cannot meaningfully answer a request for access - in that case Art. 15 to 20 do not apply, unless you give us information that makes the connection possible (Art. 11(2) GDPR). We are certainly not going to collect extra data just to make you identifiable.

What's on your device is yours. You delete it yourself, without asking us.

For doctors in the directory it works differently: there the people are identified, and their rights apply in full - including objection under Art. 21.

You can complain to the supervisory authority at any time (Art. 77 GDPR, § 24 DSG):