Privacy notice

This is an English rendering of our German privacy notice. The German version is the binding one.

1. Controller

REGIO Physio Ruhr GmbH, Westerfilder Straße 24, 44357 Dortmund, Germany
Telephone 0231 96 24 810, email datenschutz@regio-physio-ruhr.de

2. What this website processes

2.1 Visiting the site

When you open a page, your browser sends technically necessary data to our hosting provider: IP address, date and time of the request, the address requested, the amount of data transferred, the status message and details of your browser and operating system. This is needed to deliver the page and is kept in server log files. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is the secure and stable operation of the site. Log files are deleted after seven days at the latest.

2.2 Storage on your device

We use no analytics, tracking or advertising cookies. We store two entries in your browser: the practice you selected in the header, and your decision about loading the map. Neither entry leaves your device and we do not read it. You can delete both at any time through your browser settings. The legal basis for this strictly necessary storage is § 25 (2) no. 2 TDDDG.

2.3 OpenStreetMap

On the locations page you can load a map. Only when you request the map, or allow maps generally, is a connection made to servers of the OpenStreetMap Foundation (St John’s Innovation Centre, Cowley Road, Cambridge CB4 0WS, United Kingdom). Your IP address and technical details of your browser are transmitted in the process. Without your consent no such connection is made. The legal basis is your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You can withdraw it at any time under “Cookie settings” at the bottom of any page.

2.4 The appointment request form

If you send the form on the booking page we process what you entered: name, email address, telephone number if given, the practice chosen, the treatment wanted, the answer about a prescription, possible times and your free-text message. We use this only to answer your request and arrange an appointment. The legal bases are your consent under Art. 6 (1) (a) GDPR and Art. 6 (1) (b) GDPR for steps prior to a treatment contract.

Please do not send detailed health information through the form. If you nevertheless enter health data in the free-text field, we process it only on the basis of your explicit consent under Art. 9 (2) (a) GDPR. A request that does not lead to an appointment is deleted after six months at the latest.

2.5 Email and telephone

If you call or write to us we process the details you give in order to deal with your enquiry. The legal basis is Art. 6 (1) (b) GDPR for contract-related enquiries, and otherwise Art. 6 (1) (f) GDPR.

2.6 Job applications

Application documents sent to bewerbung@regio-physio-ruhr.de are processed solely to run the recruitment procedure, on the basis of § 26 (1) BDSG together with Art. 6 (1) (b) GDPR. If no employment relationship results, we delete the documents six months after the procedure ends. We keep them longer for future vacancies only with your explicit consent.

3. Your patient file across the six practices

If we treat you, we keep a patient file containing your basic details, the medical prescription, our findings, the course of treatment and billing data. The legal basis is Art. 9 (2) (h) GDPR together with § 630f BGB and § 22 (1) no. 1 (b) BDSG. We keep the file for ten years after treatment ends, as § 630f (3) BGB requires, and delete it afterwards unless longer statutory periods apply.

Our six practices share one practice system. Whether your file may also be opened at the other five is your decision: we ask you in writing at the first appointment, consent is voluntary, and you can withdraw it at any time without any disadvantage for your treatment. Without your consent your file is accessible only at the practice treating you. Withdrawal takes effect for the future.

4. Recipients

We pass on your data only where this is necessary for treatment, for billing, or because the law requires it. Recipients may be:

• your statutory health fund, through a billing agency under § 302 SGB V
• a private billing company, where you have separately agreed to this
• the prescribing medical practice, as far as necessary for treatment
• our IT service provider and our hosting provider, as processors

Contracts under Art. 28 GDPR are in place with all processors. No transfer takes place to countries outside the European Union.

5. Hosting

This website runs with a provider inside the European Union that processes the data exclusively on our behalf and on our instructions, under a processing agreement in accordance with Art. 28 GDPR.

6. Your rights

Under the GDPR you have the right to

• request information about the data we hold about you (Art. 15),
• have it corrected (Art. 16),
• have it erased, where no retention obligation applies (Art. 17),
• have processing restricted (Art. 18),
• receive your data in a common format (Art. 20),
• object to processing based on legitimate interests (Art. 21),
• withdraw consent at any time with effect for the future.

Please write to datenschutz@regio-physio-ruhr.de. You may also complain to a supervisory authority; ours is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf.

7. Obligation to provide data

Certain details are required by law and by contract for treatment — name, date of birth, insurance details and the medical prescription. Without them we cannot treat you or bill for the treatment. All other details are voluntary.

8. No automated decision-making

There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR. The free appointments shown on this website come from a snapshot of our own appointment book and process no data about you.

9. Changes

We update this notice when our processing or the legal position changes. The version published here applies. Last updated: 4 September 2026.