1. General information and mandatory disclosures

Introduction

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy. When you use this website, various personal data is collected. This privacy policy explains which data we collect, and how and for what purpose this is done.

Note on the data protection officer (Art. 13(1)(b) GDPR)

If you have any questions regarding data protection, please contact the controller named above.

SSL / TLS encryption

For security reasons and to protect the transmission of confidential content, such as prescription requests or contact enquiries, this site uses SSL / TLS encryption. You can recognise an encrypted connection by the fact that the address bar of the browser changes from “http://” to “https://” and by the lock symbol in your browser bar. When encryption is enabled, the data you transmit to us cannot be read by third parties.

2. Data collection on our website (purposes & legal bases)

Provision of the website and server log files

Scope: When you access our website, our host automatically collects information that your browser transmits to us. This includes: IP address, browser type and version, operating system used, referrer URL, and time of the server request.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a technically error-free and secure provision of the website).

Storage period: This data is collected to protect against attacks and is automatically deleted after 7 days at the latest.

Contact form

Scope: If you send us enquiries via the contact form, your details from the form (name, email address, phone number, subject and message) are stored by us for the purpose of processing the enquiry.

Legal basis: Processing is carried out on the basis of your consent (Art. 6(1)(a) GDPR) and to carry out pre-contractual measures (Art. 6(1)(b) GDPR). If you voluntarily provide information about your state of health in your message, this constitutes a special category of personal data. Its processing is carried out exclusively on the basis of your explicit consent given with the transmission (Art. 9(2)(a) GDPR) and for the purpose of medical care within the treatment contract (Art. 9(2)(h) GDPR).

Note: The contact form is not suitable for medical emergencies. In urgent cases, please contact our practice by phone, the medical on-call service (tel. 116117) or, in an emergency, the emergency services (tel. 112). We also ask that you transmit only the information necessary for your request via the contact form and avoid describing sensitive health data where possible.

Storage period: The data remains in our practice email inbox until you request its deletion, withdraw your consent to storage, or the purpose for storing the data no longer applies (e.g. after your enquiry has been fully processed).

Online prescription request

Scope: Via our form you can request repeat prescriptions. In doing so, name, date of birth, phone number, health insurance, type of insurance and your specific medical request are collected. This constitutes a special category of personal data (health data).

Legal basis: Processing is based on your explicit consent (Art. 9(2)(a) GDPR) and for the purpose of medical care and administration within the treatment contract (Art. 6(1)(b) GDPR in conjunction with Art. 9(2)(h) GDPR).

Storage period & deletion concept: To protect your sensitive data, we have established a strict security concept: after submission, the data is transmitted to our practice in encrypted form. Once received, the data is transferred to our internal, protected practice software. The data on the web server is automatically and irrevocably deleted after 14 days at the latest.

Cookies (language selection)

Scope: We use a technically necessary cookie (“lang”) that stores your selected language code in order to display the website to you in the correct language.

Legal basis: Section 25(2) no. 2 TDDDG. This cookie is technically strictly necessary for the function and provision of the language feature you have explicitly requested. A cookie banner is therefore not required.

Storage period: This cookie is removed after your browser session ends (session cookie) or by deleting your browser history.

3. External services and third-party providers

Online appointment booking (medatixx webtermin)

Scope: We integrate the “webtermin” tool for online appointment booking on our website. The provider is medatixx GmbH & Co. KG, Im Kappelhof 1, 65343 Eltville/Rhein. When you book an appointment, the data you enter is transmitted directly to medatixx.

Legal basis: Art. 6(1)(b) GDPR in conjunction with Art. 9(2)(h) GDPR (processing within the treatment contract and medical care).

Storage period: The storage period is governed by the data protection provisions of medatixx as well as the statutory medical retention periods.

Data processing agreement: We have concluded a data processing agreement (DPA) with medatixx GmbH & Co. KG in accordance with Art. 28 GDPR.

Hosting and technical operation

Our website is hosted externally. The technical operation and hosting are carried out by:

VOELKER MEDIA UG (haftungsbeschränkt), Pastor-Boekhoff-Weg 3, 26789 Leer.

To provide the server infrastructure, our processor in turn uses carefully selected subcontractors (sub-processors). These are regulated in the data processing agreement and contractually obligated in accordance with Art. 28 GDPR. All data is processed exclusively on servers in data centres within Germany.

Legal basis: Hosting is carried out on the basis of a data processing agreement (DPA) in accordance with Art. 28 GDPR.

OpenStreetMap (map embedding)

Scope: We embed map material from the “OpenStreetMap” service in order to show you directions to our practice. The provider is the OpenStreetMap Foundation (OSMF), St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. The map is not loaded automatically. When you open the subpage, you will initially see only a placeholder. Only when you actively click the “Load map” button is a connection established to the OSMF servers and your IP address as well as technically necessary browser data transmitted to the OSMF. As long as you do not click, no data is transmitted to OpenStreetMap.

Legal basis: Art. 6(1)(a) GDPR (consent). By clicking “Load map”, you consent to the transmission of your IP address to the OSMF. You can refuse this consent at any time with effect for the future by not loading the map.

Third-country transfer: The United Kingdom (UK) has an official adequacy decision from the EU Commission, which guarantees a level of data protection equivalent to EU standards. No tracking cookies are set by this service.

Provider's privacy policy: wiki.osmfoundation.org/wiki/Privacy_Policy

4. Your rights as a data subject

Within the framework of the applicable statutory provisions, you have the following rights at any time regarding your personal data:

• Right of access (Art. 15 GDPR): You can request information about the data we process about you.
• Right to rectification (Art. 16 GDPR): You can request the correction of inaccurate data.
• Right to erasure (Art. 17 GDPR): You can request the deletion of your data, provided no retention obligations prevent this.
• Right to restriction of processing (Art. 18 GDPR).
• Right to data portability (Art. 20 GDPR).
• Right to object (Art. 21 GDPR): If data is processed on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object to the processing.
• Withdrawal of consent (Art. 7(3) GDPR): Insofar as the processing of your data is based on your consent (e.g. for prescription requests, when loading the map, or when transmitting health data via the contact form), you can withdraw this at any time with effect for the future by email to info@gastropraxis-papenburg.de. The lawfulness of the processing carried out until the withdrawal remains unaffected.

5. Automated decision-making

No automated decision-making (Art. 13(2)(f) GDPR): We do not carry out any automated decision-making or profiling on our website.