Data Protection

Responsible for data processing is:

Data processing takes place due to legal requirements, to fulfil the treatment contract between you and your doctor and the associated obligations and to carry out the treatment.

For this purpose, we process your personal data, especially your personal health data. These include anamneses, diagnoses, therapy suggestions and findings which we, your private doctor or other doctors collect in connection with the treatment. For these purposes, other doctors or psychotherapists with whom you are in treatment can also provide us with data (e.g. medical letters).

The collection of health data is a prerequisite for your treatment. If the necessary information is not provided, careful treatment cannot be carried out.

The internal processing of the data by medical personnel takes place for the purpose of the treatment and billing of the services provided to you, for the clarification of medical questions and questions arising from your insurance relationship. Processing can also take place, for example, for the purpose of carrying out an interdisciplinary exchange of diagnostics and therapy, for the purpose of pre-treatment, co-treatment and further treatment, the administrative settlement (i.e. administration, billing, controlling, creation of findings reports, medical letters, etc.).

Legal basis of this data processing are Art. 6, Art. 9 GDPR, § 22 BDSG, §§ 630a et seq. BGB.

We only transmit your personal (health) data to third parties within the scope of the intended purpose if this is required by law or you have consented. We never transmit your data unsolicited to other doctors, health insurance companies, associations of statutory health insurance physicians, or other institutions.

Third parties are in particular:

• the doctor treating you
• Health Insurance
• General practitioners, further-treating, follow-up and co-treating doctors
• Other health care facilities and / or treatment
• Billing companies
• External data processor (so-called order processor)

We only keep your personal data for as long as this is necessary for performing the treatment.

Due to legal requirements, we are obliged to keep this data for at least ten years after the end of treatment. According to other regulations, longer retention periods may arise, for example 30 years for X-ray recordings in accordance with Section 28 Paragraph 3 of the X-ray Ordinance.

In principle, you have the rights of the data subject under Articles 15-18, 20-21 GDPR. You have the right to obtain information about the personal data concerning you. You can also request that incorrect data be corrected.

In addition, you have the right under certain conditions to the deletion of data, the right to restrict data processing and the right to data portability.

The processing of your data takes place on the basis of legal regulations. Only in exceptional cases do we need your consent. In those cases, you have the right to withdraw consent for future processing.

You also have the right to complain to the competent supervisory authority for data protection if you believe that the processing of your personal data is not lawful.

The address of the supervisory authority responsible for us is:

The legal basis for the processing of your data is Article 9 Paragraph 2 Letter h) GDPR in connection with Paragraph 22 Paragraph 1 No. 1 lit. b) Federal Data Protection Act.