Privacy Policy

Privacy Policy

Your personal data("Data") is processed by us, Bridgehead Health GmbH. This privacypolicy explains the data processing on our website in connection with visitingthe website, the use of cookies and similar technologies, communication, andinquiries. Please take some time to read this privacy policy and learn why wecollect your data and in what form we process it.

For any questions regarding the processing described in thisprivacy policy, please contact:

BridgeheadHealth GmbH,

Dampfschiffhaufen 1/Parz 33, 1220 Vienna, Austria,

Email: office@patientik.ai

We have not appointed a Data Protection Officer.

1. Visiting the Website

When visiting our website, technical information isprocessed, such as your IP address, the extent of data transfer (amount of datasent in bytes), the time and location from which you retrieve data from ourwebsite, as well as other connection data and sources. This also includes yourbrowser, browser language and timezone, screen resolution, installed fonts andMIME types, and the pages visited on our website, including entry and exitpages. This processing is necessary in order to be able to provide you with thewebsite.

Technical visitor data is retained for a maximum of 1 yearfrom the point of collection. This is done to protect our infrastructure and toensure the functionality of the website. The technical visitor data is onlyread out in cases of suspicion or cause. Both are for the purpose ofsafeguarding our legitimate interest in publicly distributing our websitecontent on demand, or to offer you the opportunity to be informed.

For the hosting of the website, we use the system of thefollowing provider:

Webflow, Inc., 398 11th Street, 2nd Floor, SanFrancisco, CA 94103, USA (hereinafter Webflow). For details, please refer toWebflow's privacy policy. A transfer of the aforementioned data categories tothe USA will take place. For this country, there is an adequacy decision of theEuropean Commission concerning companies that submit themselves to the EU-USData Privacy Framework. The service provider Webflow is certified for theapplication of the EU-US Data Privacy Framework.

2. Use of Cookies and Similar Technologies

2.1 Introduction

Cookies are text files that are stored on your computer ormobile device, regardless of whether they are personal or not. A cookie usuallycontains the name of the domain from which the cookie data was sent,information about the age of the cookie, and an alphanumeric identifier.Cookies enable our systems to recognize a device and make any presetpreferences immediately available.

The distinction here is whether the cookies are technicallynecessary. Technically necessary cookies do not require consent.

Use of technically necessary cookies and similar technologies

In order to enable interaction with us via our website, itis necessary to temporarily store certain information. Without thesetechnically necessary cookies or the use of similar technologies, operation ofthe entire website or parts thereof is not possible. Accordingly, thedetermination is based on § 165(3) TKG 2021.

 The following technically necessary cookies and similartechnologies are used on our website:

Name Recipient Purpose Recipient’s Location Retention Period
_cfuvid Cloudflare, Inc. Distinguishing individual users who use the same IP address, as well as rate limiting. San Francisco, California, USA End of Session
cookiehub CookieHub ehf. Obtaining and documenting consent for the use of cookies. Reykjanesbær, Iceland 1 year

3. Communication and Inquiries

3.1.        Email

You have the option of exchanging information with us viaemail. The processing of message contents and contact details is done for thepurpose of establishing contractual relationships. If your contact has adifferent reason, the processing is done to safeguard your or our legitimateinterest in freedom of communication. If you do not wish to provide or discloseany information, please do not contact us via email.

We store your contact details for a maximum of 12 monthsafter the last communication on the same matter.

For the sending and receiving of emails, we use GoogleWorkspace, a service of Google Ireland Limited, GordonHouse, Barrow Street,Dublin 4, Ireland. In doing so, personal data (such as name and email address)may be processed on Google's servers. Google Ireland Limited acts as aprocessor pursuant to Art. 28 GDPR.

4. Your Rights and Contact Options

Regarding the processing of your personal data, you haveextensive rights. We would like to inform you that you have the right to:

  • request information at any time about which data is beingprocessed by us about you. The right to information also includes the right toreceive a copy of the data, provided that this does not impair the rights andfreedoms of other persons (see in detail Art. 15 GDPR);
  • request the rectification or completion of incorrect orincomplete data concerning you (see in detail Art. 16 GDPR);
  • request the deletion of your data (see in detail Art. 17GDPR);
  • We point out that we may not comply with a deletion if theprocessing (storage) is necessary to fulfill a legal obligation (statutoryretention obligations) or if we are entitled to do so due to overridinginterests (e.g., assertion or defense of specific legal claims);
  • under certain conditions, request the restriction of theprocessing of your data (see in detail Art. 18 GDPR);
  • object to the processing of your data that is necessary tosafeguard our legitimate interests or those of a third party. In the event ofan objection, we will no longer process your data, unless the processing servesthe assertion, exercise, or defense of legal claims, or we demonstratecompelling legitimate grounds for the processing that override your interests.If you object to processing for direct marketing purposes, we will no longerprocess your personal data for these purposes (see in detail Art. 21 GDPR);
  • receive the transfer of the data you provided in astructured, common, and machine-readable format. However, the right to dataportability only exists if the processing is based on your consent or on acontract (see in detail Art. 20 GDPR).
  • f we process your data on the basis of your consent, youhave the right to withdraw this consent at any time. This does not affect thelawfulness of the data processing carried out up to that point (Art. 7(3)GDPR))

In addition, you have the right to lodge a complaint with asupervisory authority. If you have any questions, comments, or inquiriesregarding the collection, processing, and use of your personal data by us,please also contact us at the contact details provided.

Version of 08.05.2026