Protecting your personal data is important to us. The following information explains which personal data are processed when you visit this website and which rights you have. This information relates to the practice website; additional information about the processing of patient data in connection with medical care may be provided at the practice.
1. Controller
Dr. Hasso Stötzer
Avinguda de La Marina 3
03720 Benissa, Alicante
Spain
Telephone: +34 639 138 886
Email: info@drstoetzer.com
2. General information and legal bases
Personal data are processed only to the extent necessary for the technical operation of this website, communication with you or the provision of the services offered. In particular, the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD) apply.
Depending on the processing activity, the legal bases are in particular Art. 6(1)(b) GDPR (pre-contractual measures or performance of a contractual relationship), Art. 6(1)(f) GDPR (legitimate interests, especially the secure and user-friendly operation of the website) or, where required, Art. 6(1)(a) GDPR (consent).
3. Web hosting and server logs
This website is hosted by Host Europe GmbH, c/o Spaces, Gertrudenstraße 30–36, 50667 Cologne, Germany. When you access the website, the server processes technically necessary information. This may include the IP address, date and time of access, the page or file requested, the amount of data transferred, the referrer URL and information about the browser and operating system.
The purpose of this processing is to provide the website securely and reliably and to detect technical errors and abusive access. According to the hosting provider, access logs for the WebHosting product used are normally retained for 14 days and error logs for 7 days. The legal basis is Art. 6(1)(f) GDPR.
4. Contact
If you contact us by telephone, email or contact form, the data you provide will be processed in order to deal with your enquiry. This may include your name, email address, telephone number, subject and message. The contact form integrated into the theme does not store the message as a record in WordPress; it sends it by email to a separate practice mailbox hosted by WEB.DE.
To receive messages sent through the contact form, we use WEB.DE, a service of 1&1 Mail & Media GmbH, Karlsruhe branch, Brauerstr. 48, 76135 Karlsruhe, Germany. In connection with email transmission and provision of the mailbox, the provider processes the personal data technically required for these services. Further information is available in the WEB.DE privacy information.
Technical checks are used to protect the form against automated spam, including an invisible honeypot field, a minimum completion time and temporary rate limiting. For rate limiting, only a temporary technical key is stored; no profiling takes place and it is not used for advertising purposes.
Where your enquiry relates to arranging or managing a consultation, appointment or treatment, processing is based on Art. 6(1)(b) GDPR. Other enquiries are processed on the basis of our legitimate interest in responding appropriately to your message under Art. 6(1)(f) GDPR.
Health data are a special category of personal data. Please do not send diagnoses, laboratory results, medical reports or other confidential medical information using the general form. For such information, please contact the practice directly.
Data will be deleted when they are no longer required to deal with your enquiry, unless statutory retention obligations or legitimate reasons require them to be kept for longer.
5. Open User Map and OpenStreetMap
On the “How to find my practice” page we use the WordPress plugin Open User Map to display the practice location. Open User Map is based on Leaflet and OpenStreetMap.
The selected map style is “OpenStreetMap – Hosted in Germany”. Map tiles are therefore loaded via an OpenStreetMap service hosted in Germany. When the map is loaded, the device IP address together with technically necessary connection data must be transmitted to the map server so that the map images can be displayed.
The map is integrated to provide a clear and user-friendly view of the practice location and directions. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to provide useful and comprehensible directions.
OpenStreetMap map data are subject to the applicable licence and terms of use. The map is embedded on the website; Google Maps is not loaded automatically.
6. External Google Maps route link
The directions page also provides a link for route planning with Google Maps. Google Maps is opened only when you actively click the link. At that point you leave our website and the privacy provisions of the respective provider apply. Google Maps is not embedded or loaded automatically on this website.
7. Cookies and similar technologies
The theme itself does not use analytics or marketing cookies. WordPress and the plugins used may employ cookies or comparable storage technologies that are technically necessary for basic website functions.
If analytics, marketing or other services requiring consent are introduced in the future, they will only be activated after the required consent has been obtained. This privacy policy will then be updated and, where necessary, a suitable consent-management solution will be used.
8. Recipients of personal data
Personal data are disclosed or processed by service providers only where this is necessary for the relevant purpose, where there is a legal obligation or where another legal basis applies. The technical operation of the website uses, in particular, services provided by the hosting provider and, when the map is displayed, the map-tile service. WEB.DE (1&1 Mail & Media GmbH) is also used as the email service for receiving messages from the contact form.
9. Retention period
Personal data are stored only for as long as required for the relevant purpose. They may be retained for longer where statutory retention obligations apply or where the data are required for the establishment, exercise or defence of legal claims.
10. Your rights
Within the limits of applicable law, you have in particular the right of access to your personal data, rectification of inaccurate data, erasure, restriction of processing, objection to certain processing and data portability. You may withdraw consent at any time with effect for the future.
To exercise your rights, please contact us using the details above, preferably by email at info@drstoetzer.com.
11. Right to lodge a complaint
If you believe that the processing of your personal data infringes data-protection law, you have the right to lodge a complaint with a supervisory authority. For this practice, the relevant Spanish authority is in particular:
Agencia Española de Protección de Datos (AEPD)
Edificio Cuzco IV
Paseo de la Castellana, 141, planta 9
28046 Madrid, Spain
12. Data Protection Officer
Provided that Dr Hasso Stötzer operates the practice individually as a private healthcare professional, Art. 34(1)(l) LOPDGDD generally provides an exception from the obligation to appoint a Data Protection Officer for this activity. If the organisational form of the practice changes or an appointment becomes necessary for another reason, this section will be updated accordingly.
13. Updates to this privacy policy
We will update this privacy policy if the services used, the technical configuration of the website or legal requirements change.
Last updated: September 2026