Privacy policy
Last updated: 3 October 2026
1. Practice responsible for data processing
HNO Grafenberg · Dr. med. Rainer Frerich
Grafenberger Allee 337c
40235 Düsseldorf
Telephone: 0211 65 19 61
Email: rf@hno-grafenberg.de
The practice’s data protection officer is Ms Anette Frerich. You can reach her using the contact details above, marked “Data protection officer”.
2. Provision of this website
This website is provided through OpenAI Sites on the chatgpt.site domain; Cloudflare infrastructure is used for technical delivery. When a page is accessed, technically necessary connection data is processed, particularly the IP address, time of access, requested address, and device and browser information transmitted by the browser. This enables delivery and secure operation of the website.
The legal basis for providing and securing our website is Article 6(1)(f) GDPR. Our legitimate interest is to provide a functional and secure practice website.
Information about data processing by the platform, recipients, retention periods and possible transfers outside the European Economic Area can be found in OpenAI’s European privacy policy and Cloudflare’s privacy policy. OpenAI describes adequacy decisions and standard contractual clauses in particular as safeguards for international transfers.
3. Cookies and website technology
Our website code does not include advertising pixels, analytics scripts or cookies for recognising returning visitors. Images and design elements are delivered with the website. Information about cookies and similar technologies used by the hosting platform is provided in OpenAI’s cookie policy.
4. Enquiry form and email
The enquiry form prepares a message in your own email application. Your entries are processed in your browser; the form does not send them to a website form database. Only when you send the message in your email application is it sent to the practice through your email provider.
We use the data you provide, particularly your name, contact details, enquiry and callback preferences, to respond to your enquiry and arrange appointments. For treatment enquiries, the legal basis is Article 6(1)(b) GDPR; for other enquiries, it is Article 6(1)(f) GDPR, based on our interest in responding to incoming messages. Medically necessary health data is processed as part of medical care under Article 9(2)(h) GDPR.
Please use ordinary email only for general enquiries, and do not send sensitive medical findings or medical photographs. For medical details, contact the practice in person or by telephone.
5. Telephone and WhatsApp
When you call, we use the information you provide to address your enquiry. The WhatsApp button is an external link. Only when you open it do you leave our website and use WhatsApp. WhatsApp then processes data under its own terms, potentially outside the European Economic Area.
WhatsApp is an optional contact method; you can also reach us by telephone or email. Please use WhatsApp only for general enquiries and appointment arrangements, and do not send medical findings or medical photographs. Further information: WhatsApp privacy policy.
6. Instagram, Google Maps and other links
Instagram and Google Maps are included as simple links. This website does not embed Instagram posts or Google maps. When you open such a link, the external website is accessed; its provider may process your IP address and browser information, among other data. The relevant provider’s privacy policy applies: Instagram and Google.
7. Recipients and retention of enquiries
Enquiries are intended for the staff responsible for handling them at the practice. Technical communication and IT service providers may access the data necessary for their tasks. Enquiries are retained for as long as required to process them or meet legal obligations, and are then deleted. If information becomes part of a patient record, the statutory retention requirements for treatment documentation apply, generally ten years after treatment has ended (Section 630f(3) of the German Civil Code).
8. Your rights
Under the GDPR, you have rights of access, rectification, erasure, restriction of processing and data portability. You may withdraw consent at any time with effect for the future. Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. Please contact the practice or its data protection officer.
You may lodge a complaint with a data protection supervisory authority, particularly the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia: PO Box 20 04 44, 40102 Düsseldorf; telephone 0211 38424-0; email poststelle@ldi.nrw.de; Contact and complaint options.