Gynecologist — Mannheim
Privacy policy
This is a translation for your convenience. Only the German version is legally binding.
Below we inform you about how we process your personal data when you use our website.
Controller
The name and contact details of the controller can be found in the legal notice.
Contact person
If you have questions about data protection, please use the contact details given in the legal notice.
Storage period
As a rule, we delete your personal data when they are no longer needed for the purposes for which they were collected or otherwise processed.
If we asked for your consent and you gave it, we delete your personal data when you withdraw your consent and there is no other legal basis for the processing.
We delete your personal data if you object to the processing and there are no overriding legitimate grounds for it, or if you object to processing for direct marketing or for profiling related to it.
If deletion is not possible because the processing is still needed to comply with a legal obligation we are subject to (statutory retention periods etc.) or to establish, exercise or defend legal claims, we restrict the processing of your personal data.
You will find further information on storage periods in the sections below.
Your rights
You have the following rights towards us regarding your personal data:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to object to processing
- Right to data portability
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data that is based on Article 6(1)(e) or (f) GDPR; this also applies to profiling based on those provisions. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
If we process your personal data for direct marketing, you have the right to object at any time to the processing of your personal data for such marketing; this also applies to profiling insofar as it is related to such direct marketing. We will then no longer process your personal data for these purposes.
You have the right to withdraw your consent to the processing of your personal data at any time, if you have given us such consent. Withdrawing consent does not affect the lawfulness of the processing carried out on the basis of the consent before it was withdrawn.
You have the right to lodge a complaint with a supervisory authority about our processing of your personal data.
Providing your personal data
As a rule, providing your personal data is neither required by law or by contract nor necessary to conclude a contract. You are generally not obliged to provide your personal data. Should this be different in a particular case, we will point it out separately when collecting your personal data (for example by marking the mandatory fields of a form).
If you do not provide your personal data, we will normally not process them for any of the purposes described below, and you will not be able to use an offer connected with that processing (example: without your email address you will not receive our newsletter).
Web hosting
We use external services to host our website. These services may have access to personal data that are processed when our website is used.
Web server log files
We process your personal data in order to show you our website and to ensure its stability and security. In doing so, information (for example the requested element, the URL accessed, the operating system, date and time of the request, browser type and version, IP address, protocol used, amount of data transferred, user agent, referrer URL, time difference from Greenwich Mean Time (GMT) and/or HTTP status code) is stored in so-called log files (access log, error log etc.).
If we asked for your consent and you gave it, the legal basis for the processing is Art. 6(1)(a) GDPR. If we did not ask for your consent, the legal basis for the processing is Art. 6(1)(f) GDPR. Our legitimate interest here is the proper display of our website and ensuring its stability and security.
Security
For security reasons and to protect the transmission of your personal data and other confidential content, we use encryption on our domain. You can recognize this by the characters “https://” and the lock symbol in your browser's address bar.
Contacting us
If you contact us, we process your personal data in order to handle your inquiry.
If we asked for your consent and you gave it, the legal basis for the processing is Art. 6(1)(a) GDPR. If we did not ask for your consent, the legal basis for the processing is Art. 6(1)(f) GDPR. Our legitimate interest here is handling your inquiry. If the processing is necessary to perform a contract with you or to take pre-contractual steps at your request, the legal basis is additionally Art. 6(1)(b) GDPR. If you share health data with us, the legal basis is additionally Art. 9(2)(h) GDPR in conjunction with Section 22(1) no. 1 lit. b of the German Federal Data Protection Act (BDSG).
We use external services to provide and maintain our email inboxes. These services may have access to personal data that are processed when you contact us.
Maps
We use maps from external services to show you our location and to let you use the further functions of these services in connection with the maps.
If we asked for your consent and you gave it, the legal basis for the processing is Art. 6(1)(a) GDPR. If we did not ask for your consent, the legal basis for the processing is Art. 6(1)(f) GDPR. Our legitimate interest here is the simplified use of maps.
When the external services are used, profiling (for advertising, personalized information etc.) may also take place. Profiling may also be carried out across services and devices. Further information on the services used, on the scope of the data processing, on the technologies and procedures involved, on whether profiling takes place and, where applicable, on the logic involved and the significance and intended effects of such processing for you can be found in the further information on the services we use at the end of this section and under the links given there.
Google Maps
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://www.google.de/maps
Further information & privacy: https://policies.google.com/?hl=en and https://business.safety.google/privacy/
Personal data are transferred to third countries depending on the Google service concerned and under the various EU standard contractual clauses, where Google offers them. Further information on this and on Google's responsibility can be found at the following link: https://business.safety.google/gdpr/. A copy of the EU standard contractual clauses can be viewed there. The provider has joined the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov), which ensures an adequate level of data protection on the basis of a decision of the European Commission.
Review platforms
We use review platforms and process your personal data in doing so, in order to have our services rated and thereby improve our website and our marketing. For this purpose we also embed so-called widgets of the review platforms, for example to show that we use a review platform and how our services are rated.
If we asked for your consent and you gave it, the legal basis for the processing is Art. 6(1)(a) GDPR. If we did not ask for your consent, the legal basis for the processing is Art. 6(1)(f) GDPR. Our legitimate interest here is the improvement of our website and of our marketing.
If we or the review platforms we use asked for your consent and you gave it, we or these platforms process your personal data to remind you to submit a review. The legal basis for the processing is Art. 6(1)(a) GDPR.
Further information on the review platforms we use, on the scope of the data processing and on the technologies and procedures involved can be found in the further information at the end of this section and under the links given there.
Google Customer Reviews
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/merchants/answer/7124326?hl=en
Further information & privacy: https://policies.google.com/?hl=en and https://business.safety.google/privacy/
Personal data are transferred to third countries depending on the Google service concerned and under the various EU standard contractual clauses, where Google offers them. Further information on this and on Google's responsibility can be found at the following link: https://business.safety.google/gdpr/. A copy of the EU standard contractual clauses can be viewed there. The provider has joined the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov), which ensures an adequate level of data protection on the basis of a decision of the European Commission.
jameda
Provider: jameda GmbH, Germany.
Website: https://www.jameda.de
Further information & privacy: https://www.jameda.de/datenschutz
Job applications
If you apply for a job with us, we process your personal data to carry out the application procedure and to decide whether to establish an employment relationship. After the application procedure has ended, we restrict the processing of your personal data and delete or destroy them no later than 6 months after you have received the rejection, or return the application documents to you and delete or destroy any copies, unless you have consented to our continued use of your personal data.
If we asked for your consent and you gave it, the legal basis for the processing is Art. 6(1)(a) GDPR. If we did not ask for your consent, the legal basis for the processing is Art. 6(1)(f) GDPR. Our legitimate interest here is the proper conduct of the application procedure and, where applicable, the defense against claims arising from the rejection of an application. If the processing is necessary to decide whether to establish an employment relationship, the legal basis is additionally Section 26(1) sentence 1 BDSG.