Information Collection and Use
When visiting our Website, we may require you to provide us with certain personally identifiable information (PII), including but not limited to your name, email address, phone number, mailing address, or even your credit card information. However, you may visit our Website anonymously. We collect information from you when you register on our Website, subscribe to our emails or newsletter, or fill out a form.
We may use the information we collect to contact or identify you for several reasons, including but not limited to the following:
- To personalize your experience so we can better respond to your individual needs
- To improve our Website based on the information and feedback we receive from you
- To improve our Website so we can respond to your requests and needs more effectively
- To deliver to you the service you requested or product you purchased
- To send you information and respond to questions or requests
Whenever you visit our Website, we collect information that your browser sends to us, which is called Log Data. This Log Data may include information such as your computer’s Internet Protocol (IP) address, browser version, pages of our Website that you visit, the time and date of your visit, the time spent on those pages, and other statistics.
Cookies are small files that a website or service provider transfers to your computer’s hard drive through your web browser that enables the site or service provider to recognize your browser and capture and remember certain information. Our Website uses these “cookies” to collect information and to improve our Website, which helps us provide you with the best experience possible. You have the option to either accept or refuse these cookies and to know when a cookie is being sent to your computer. If you choose to refuse or disable our cookies, you may not be able to use some portions of our Website. You may contact us via phone or our contact form to request access to, deletion of, or amendments to the personal information we have collected.
We may employ third-party companies and individuals for the following reasons:
- To facilitate our Website
- To provide the Website services on our behalf
- To perform Website-related services
- To assist us in analyzing how our Website is used
These third parties have access to your personal information to perform the tasks assigned to them on our behalf. However, they are obligated to not disclose or use the information for any other purpose.
This Website uses Google Analytics to help analyze how visitors use this Website. Google Analytics tracks where you came from by your IP address location, which is anonymized. You may learn more about Google Analytics’ terms of service or how to opt-out of Google Analytics.
This website may use the “visitor action pixels” from Facebook Inc (1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”)) on our website (“Facebook Pixel”).
Facebook Pixel allows tracking of user behavior after being redirected to the provider’s website by clicking on a Facebook ad and enables us to measure the effectiveness of Facebook ads for statistical and market research purposes. Data collected in this way is anonymous to us, and we do not see the personal data of individual users. However, this data is stored and processed by Facebook, and Facebook may link this information to your Facebook account and also use it for its own promotional purposes in accordance with Facebook’s Data Usage Policy. You can allow Facebook and its partners to place ads on and off Facebook. A cookie may also be stored on your computer for these purposes.
The legal basis for the use of this service is Art. 6 paragraph 1 sentence 1 letter of the General Data Protection Regulation (GDPR). You can object to the collection of your data by Facebook pixel or to the use of your data for the purpose of displaying Facebook ads by updating your Facebook’s ad settings.
Facebook is certified under the Privacy Shield Framework agreement and thus guarantees compliance with European data protection legislation.
Our Website’s contact form submission data—IP address, user agent, name, email address, Website, and message—may be submitted to the Akismet service (also owned by Automattic) for the sole purpose of spam checking. The actual submission data is stored in the database of the site on which it was submitted, and it is emailed directly to the owner of the form (i.e., the site author who published the page on which the contact form resides). This email will include the submitter’s IP address, timestamp, name, email address, Website, and message. The data is collected on this Website’s database and stored indefinitely.
Privacy of Collected Information and Data
We implement a variety of security measures to maintain the safety of your personal information when you enter, submit, or access your personal information. We do not sell, trade, exchange, transfer, or otherwise give your PII to any other company for any reason without your consent other than for the express purpose of delivering the requested service or purchased product. However, this does not include trusted third parties who assist us in operating our Website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential.
We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect our or others’ rights, property, or safety. However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.
How We Protect Your Information and Data
We use the following information to check login activity and potentially block fraudulent attempts: attempting user’s IP address, attempting user’s email address/username (i.e., according to the value they were trying to use during the login process), and all IP-related HTTP headers attached to the attempting user. Our Website is scanned regularly for security holes and known vulnerabilities to make your visit to our Website as safe as possible. Your personal information is contained behind secured networks, and it is only accessible by a limited number of persons who have special access rights to such systems and who are required to keep the information confidential.
All patient images on this Website are owned by Grotting Plastic Surgery. We respect your privacy and understand that not all patients want their images on the Internet. We will not post images of you or your procedures without your prior written consent. If you ever want the images removed after giving consent, you can submit a written request to our office for removal.
This Website is in compliance with the requirements of the Children’s Online Privacy Protection Act (COPPA) and does not address anyone under the age of 13. This Website does not knowingly collect PII from children under 13 years of age. In the case we discover that a child under 13 has provided us with personal information, we immediately delete this from our servers. If you are a parent or guardian of a child under 13 years of age and are aware that your child has provided us with personal information, please contact us so that we can take the necessary actions.
HIPAA – Health Insurance Portability Accountability Act of 1996
Our Website follows the guidelines of the Health Insurance Portability and Accountability Act (HIPAA). You will not be entering any of your medical information on our Website. Any information obtained through the office may be used for the following reasons:
- We may need access to certain information to set up future appointments, refer you to a different physician or hospital, contact you about test results, and other “in-office” tasks regarding your medical treatment.
- We may need to give your information to other facilities, including but not limited to radiology, labs, medical specialists, and insurance companies to process claims.
We will never share your health information with other people without your permission. However, regarding our Website contact form, please keep in mind that communication via email over the internet is not secure. Although it is unlikely, there is a possibility that information you include in an email can be intercepted and read by other parties besides the person to whom it is addressed. Please do not include personal identifying information such as your birth date, or personal medical information in any emails you send to us. No one can diagnose your condition from email or other written communications, and communication via our Website cannot replace the relationship you have with a physician or another healthcare practitioner.
Understanding Your Health Record & Information
Each time you visit our office, a record of your visit is made. Typically, this record contains your symptoms, examination, test results, diagnoses, treatment, and a plan for future care or treatment. This information often is referred to as your health or medical record and serves as a basis for planning your care and medical treatment plan.
Information and Test Results
We may use your health information to send you information on the treatment and management of your medical condition that you may find to be of interest. We may also send you information describing other health-related goods and services that we believe may be of interest to you. If we are unable to give you test results in person or by phone, we may send the information to you using your mailing address on file or via electronic mail.
You have certain rights under the federal privacy standards, which include:
- To request restrictions on the use and disclosure of your protected health information.
- To receive confidential communications concerning your medical condition and treatment.
- To inspect and copy your protected health information.
- To receive an accounting of how and to whom your protected health information has been disclosed.
- To amend or submit corrections to your protected health information.
- To receive a printed copy of the notice.
For more information about your rights under HIPAA, visit https://www.hhs.gov/hipaa/for-individuals/index.html