Skip to content

Privacy policy

Last updated: October 31, 2026

1. Controller

The controller for data processing on this website is WaveVision GmbH, Gassergasse 29/12, 1050 Wien, Austria. Email: office@wavevision.at, phone: +43 720 349603.

You can reach us at these details with any question about data protection.

This policy applies to the Shockwave Experts directory: the search, the public profiles and the portal for professionals. The other pages of shockwaveexperts.com have their own privacy policy.

2. Visiting the website

You do not need to register to search the directory. On each request our server processes technical data: IP address, time, requested address and browser identifier. We need this to deliver the website, and we also use the IP address briefly to limit abuse.

We use no analytics or advertising services. Fonts and images load from our own server, so loading a page sends no data to third parties.

3. Professional accounts and profiles

If you register as a professional, we process the following data:

  • Account data: email address, name, password (stored only as a hash), language, time of last login, and login events with IP address. Sign-in runs on our self-hosted Keycloak instance.
  • Profile data: what you enter, such as name, title, profession, photo, biography, technologies, indications, certifications and societies.
  • Practice data: address, phone, email, website and opening hours.
  • Review data: the status of your profile, timestamps, the responsible administrator and any reason for rejection.
  • Emails: confirmation of your address, password resets and notifications about the review of your profile.

4. Publication

Your profile becomes public only after an administrator has reviewed and approved it. From then on, the public profile and practice data, including any email address given for a practice, can be accessed worldwide on the internet and may be indexed by search engines. Your account email address is not published.

Reviews are carried out by people; there is no automated decision-making. Please do not enter patient data in your profile.

5. Legal bases

Providing your data is voluntary, but we cannot publish your profile without the required details.

  • Art. 6(1)(b) GDPR: providing your account and publishing your profile, which is the service you request by registering.
  • Art. 6(1)(f) GDPR: operating and securing the website, preventing abuse and reviewing profiles. Our legitimate interest is a safe and reliable directory.
  • Art. 6(1)(c) GDPR: where the law requires us to retain or disclose data.

6. Recipients

We pass personal data only to processors we need to run the website, or where the law requires us to:

  • Hosting: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.
  • Email delivery: a transactional email provider in the EU, which receives the email address and message content in order to deliver it.

7. Retention

  • Server logs: rotated by size (up to 30 MB per service) and overwritten in the process. There is no fixed period; it depends on traffic.
  • Login events: 30 days.
  • Login sessions: 30 days at most.
  • Account and profile data: until your account is deleted, unless the law requires us to keep it.
  • Backups: 14 days. Deleted data can remain in backups until then.

8. Cookies

We use only technically necessary cookies, so we do not ask for consent (§ 165(3) TKG 2021):

  • __Host-sw_session: keeps you signed in, for at most 30 days.
  • __Host-sw_oidc: protects the sign-in process, for 10 minutes.
  • NEXT_LOCALE: remembers your language.
  • Keycloak cookies on our sign-in pages: for login and session handling.

9. Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on Art. 6(1)(f) GDPR. To exercise them, write to office@wavevision.at. Account deletion and data export are currently handled on request by email.

You can edit your profile in the portal at any time.

10. Right to complain

You may lodge a complaint with a supervisory authority. In Austria this is the Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, email: dsb@dsb.gv.at, www.dsb.gv.at.

11. Changes

We update this policy when the website or the law changes. The version published here applies.