Privacy policy

1. Controller

The controller responsible for data processing on this website is:

Dr. med. Frauke Bohlmann
Praxis im Alten Amtsgebäude
Ellerbeker Straße 20, 25474 Bönningstedt
Phone: 040 - 57 14 60 66
Email: pia-boenningstedt@gmx.de

2. General information on data processing

We process personal data only insofar as this is necessary to provide a functional website and our content and services. The legal bases are in particular Art. 6 (1) GDPR and – in the context of medical treatment – Art. 9 (2) (h) GDPR in conjunction with § 22 BDSG (Bundesdatenschutzgesetz, German Federal Data Protection Act).

3. Accessing the website and server log files

When you access the website, the hosting provider automatically collects information that your browser transmits (server log files). This usually includes:

• IP address of the requesting device
• Date and time of access
• Name and URL of the file retrieved
• Browser used and, where applicable, the operating system
• The website from which the access is made (referrer URL)

The processing serves to ensure a smooth connection setup and the security and stability of the system. The legal basis is our legitimate interest (Art. 6 (1) (f) GDPR). The log files are deleted after 7 days.

4. Hosting

This website is hosted on a server operated by us. The server infrastructure is provided to us by the following provider, which processes personal data on our behalf in doing so (in particular the server log files listed in section 3):

Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Deutschland

A data processing agreement pursuant to Art. 28 GDPR has been concluded with the provider. The servers are located in Germany; personal data is not transferred to third countries. The legal basis is our legitimate interest in providing this website securely and reliably (Art. 6 (1) (f) GDPR).

5. Fonts

This website uses only fonts stored locally on the server. No data is transferred to third parties (such as Google Fonts) for this purpose.

6. SSL/TLS encryption

For security reasons, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and a padlock symbol is displayed. When encryption is active, the data you transmit to us cannot be read by third parties.

7. Cookies

This website does not use tracking or marketing cookies. Cookies that are not technically necessary are not used. Should cookies requiring consent be used in future, we will obtain your consent in advance by means of a cookie notice.

8. Contacting us

If you contact us by email or by phone, the details you provide will be processed in order to handle your enquiry and in case of follow-up questions (Art. 6 (1) (b) or (f) GDPR). We do not pass on this data without your consent and delete it as soon as your enquiry has been dealt with, unless statutory retention obligations prevent this.

9. Appointment booking via Doctolib

For online appointment booking, we link to the service of Doctolib GmbH. When you click on the appointment link, you leave this website; Doctolib’s privacy provisions then apply. No Doctolib widget is embedded on this website, so no data is transferred to Doctolib when you merely visit our pages.

10. Processing in the context of treatment

In the context of medical treatment, we process health data on the basis of Art. 9 (2) (h) GDPR in conjunction with § 22 BDSG and in accordance with our professional and record-keeping obligations as doctors. You will receive more detailed information on the processing of your patient data separately at the practice.

11. Your rights

Under the GDPR, you have in particular the following rights:

• Access to the data stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent given, with effect for the future (Art. 7 (3) GDPR)

12. Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel (www.datenschutzzentrum.de).

Last updated: 1 July 2026