This declaration explains what happens to personal data when you visit cdots.com.au. It covers the information duties of Articles 13 and 14 of the EU General Data Protection Regulation (GDPR) and the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).
Last updated: July 2026
No Data Protection Officer has been appointed, as the criteria in Art. 37 GDPR are not met. Privacy enquiries should be sent to the email address above.
This policy applies to the website cdots.com.au only. Clinical records created during consultation or treatment are handled separately under Australian health-records law and the practice's clinical privacy procedures — ask at the rooms for that document.
This is a static information website. It has no contact form, no newsletter, no login, no payment processing and no advertising or analytics tracking. Specifically:
If you write to admin@cdots.com.au or call the rooms, we process the details you give us (name, contact details, and whatever you choose to tell us about your condition) solely to handle your enquiry. Please do not send sensitive health information by unencrypted email. Correspondence relating to clinical care is retained in line with Australian health-records retention requirements — generally at least 7 years from the last entry, or until age 25 for patients treated as children. Non-clinical enquiries are deleted once they are no longer needed.
We do not sell personal data and we do not disclose it to third parties for marketing purposes.
Because the practice is based in Australia and the site uses a global content-delivery network, personal data may be processed outside the European Economic Area, including in Australia and the United States. Where data leaves the EEA, transfers are based on the European Commission's Standard Contractual Clauses or an applicable adequacy decision. Australian visitors: your information may likewise be handled by overseas providers, and we take reasonable steps under APP 8 before disclosing it.
Server log data is retained by the hosting and CDN providers for a short period for security and diagnostic purposes and then deleted or aggregated. The language preference stays in your browser until you clear your browser data. Email correspondence is retained as described in section 5.
Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and the right to object to processing based on legitimate interests (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future.
You may lodge a complaint with a supervisory authority — in Austria, the Datenschutzbehörde (dsb.gv.at), Barichgasse 40–42, 1030 Vienna.
Under the Australian Privacy Principles you may request access to, and correction of, the personal information we hold about you (APPs 12 and 13). If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
To exercise any of these rights, email admin@cdots.com.au. We respond within one month (GDPR) or 30 days (APPs).
The website is served exclusively over encrypted HTTPS/TLS connections. No user accounts, patient data or payment data are stored on this website. Note that no method of transmission over the internet, including ordinary email, is completely secure.
This website is not directed at children and does not knowingly collect personal data from them.
We may update this declaration when the website or the applicable law changes. The current version always applies and is dated above.
This page is maintained by the practice and describes its own practices; it is not an independent certification or legal advice. It should be reviewed by an Australian and, if you target EU patients, an EU/Austrian legal adviser before it is relied upon.
