Privacy policy

Preamble

The Orthopaedic and Surgical Centre Illingen welcomes your visit to our website www.chirurgie-Illingen.de and your interest in our practice. We take the protection and security of the personal data entrusted to us very seriously and want you to feel safe and comfortable when visiting our website and using our services.

It is important to us that you know which personal data are collected when you use our services and how we subsequently use them.

Purposes of data processing

The Orthopaedic and Surgical Centre Illingen is a leading joint surgical and orthopaedic practice. Its diagnostic services include basic diagnostics (examination, laboratory tests, ultrasound and X-rays). Where the Orthopaedic and Surgical Centre Illingen processes personal data, this is done for the purposes specified in this privacy policy.

Processing of personal data

Personal data are collected for treatment and billing purposes. Apart from name, address, date and place of birth, previous medical conditions and the data stored on your health insurance card (first name, surname, insurance status, health insurance number, insured person number, street, house number, postcode, town and date of birth), which are required to bill for services provided, no further personal data are collected.

Personal data are also processed when you provide them voluntarily. The legal basis is Article 6(1)(b) GDPR. The data we process in this context include patient data, employee data and supplier data, to the extent necessary for the purposes described in this privacy policy.

Where we process your data for your treatment as described above, you are contractually required to provide these data. In particular, disclosure of data to the cancer registry is required by law. Without these data, we cannot provide the corresponding treatment.

If you have consented to the processing of personal data (see Article 6(1)(a) GDPR), you may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of that consent before its withdrawal.

Disclosure to third parties

Data are disclosed to processors on the basis of Article 28(1) GDPR. In particular, disclosure for laboratory analyses, X-ray, MRI or CT examinations, private billing and to other doctors or psychotherapists (for example in medical reports) is essential. You will be informed before data are disclosed to third parties.

We do not sell your data to third parties or otherwise market them.

Furthermore, your personal data may be disclosed to law enforcement authorities without your express consent if necessary to investigate unlawful use of our services or for legal proceedings. This only occurs when there are concrete indications of unlawful or abusive conduct. Disclosure may also occur to enforce terms of use or other agreements where the data subject has released us from professional confidentiality. We are also legally required to provide information to certain public bodies on request when the relevant conditions are met. These include law enforcement authorities.

Such disclosure is based on the legitimate interest in combating abuse, prosecuting offences and securing, asserting and enforcing claims, provided that your rights and interests in protecting your personal data do not override those interests, pursuant to Article 6(1)(f) GDPR.

Planned transfers to third countries

Transfers to third countries are not currently planned; if this changes, the relevant legal requirements will be established. In particular, you will be informed of the respective recipients or categories of recipients as required by law.

Security

The Orthopaedic and Surgical Centre Illingen uses technical and organisational security measures to protect the data you provide against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. This also applies when external services are used. We review the effectiveness of our security measures and continually improve them in line with technological developments. Personal data entered are always transmitted using strong encryption.

Cookies

Our website does not use cookies.

Integration of social network plug-ins

Our website uses buttons for the social network

facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA

The buttons display the logo of the respective social network. They are not conventional social plug-ins, but buttons containing links. You must activate each button separately by clicking it. No data are transmitted to social networks until you click these buttons. Only when you click a button, thereby consenting to communication with the social network’s servers, does the button become active and establish a connection.

After clicking, the button functions as a share plug-in. The social network receives information about the page visited, which you can share with your contacts. You must be logged in to share the information. If you are not logged in, you are taken to the login page of the selected social network and are no longer on the website of the Urologisches Zentrum am Boxberg. If you are logged in, information is transmitted that you wish to recommend the practice.

When you activate a button, the social network also receives information including whether and when you accessed the relevant page of our website, your IP address, browser details and language settings. Your click is transmitted to the social network and used in accordance with its data use policies.

Once a button is activated, we have no influence over the data collected or the processing carried out. We are not responsible for this processing and are not the controller for it within the meaning of the GDPR. We do not know the full extent of the collection, its legal basis, purposes or retention periods. The information provided here is therefore not necessarily complete.

Data are transmitted regardless of whether you have an account with the provider or are logged in. If you are logged in, the data are directly associated with your account. Providers may also place cookies on your computer to track you.

To our knowledge, the provider stores these data in user profiles used for advertising, market research and/or adapting its website to users’ needs. Such analysis is used in particular to display tailored advertising, including to users who are not logged in, and to inform other social network users about your activities on our website. You have the right to object to the creation of these user profiles. Please contact the respective provider to exercise this right.

For details of the purpose and extent of data collection, subsequent processing and use by the respective social network, and your rights and privacy settings, please consult:

    facebook: http://www.facebook.com/about/privacy

If you do not want the social network to receive data about you, do not click the button.

Standard periods for deleting data

Legislation imposes various retention periods and obligations. Once these periods expire, the corresponding data are routinely deleted. Where no such requirement applies, data are deleted or anonymised when the purposes described in this privacy policy no longer apply. Unless this policy specifies different retention provisions, we retain the data we collect for as long as needed for the purposes for which they were collected.

Other uses and deletion of data

Further processing or use of your personal data generally takes place only where permitted by law or where you have consented. If data are to be processed for purposes other than those for which they were originally collected, we will inform you of those purposes and provide the other relevant information before further processing.

Rights relating to the processing of personal data

Right of access

You have the right to request information at any time about the personal data concerning you that we process, within the scope of Article 15 GDPR. You may submit a request by post to the addresses below.

Right to rectification of inaccurate data

You have the right to request that inaccurate personal data concerning you be corrected without undue delay (Article 16 GDPR). Please use the contact details below.

Right to erasure

You have the right to the erasure of personal data concerning you without undue delay (the “right to be forgotten”) where the legal grounds under Article 17 GDPR apply. For example, these include where data are no longer needed for their original purposes, where you withdraw consent and no other legal basis for processing exists, or where you object to processing and there are no overriding grounds for it. Please use the contact details below to exercise this right.

Right to restriction of processing

You have the right to restrict processing under the conditions and provisions of Article 18 GDPR. In particular, restriction may be required where processing is unlawful and you oppose erasure, requesting restricted use instead, or where you have objected under Article 21(1) GDPR and verification of whether our legitimate grounds override yours is pending. Please use the contact details below to exercise this right.

Right to data portability

You have the right to data portability under Article 20 GDPR. You may receive the data concerning you that you provided to us in a commonly used, structured and machine-readable format and transmit them to another controller, such as another service provider. This requires processing to be based on consent or a contract and carried out by automated means. Please use the contact details below to exercise this right.

Right to object

You have the right to object at any time, on grounds relating to your particular situation, to processing of your personal data based, among other grounds, on Article 6(1)(e) or (f) GDPR, in accordance with Article 21 GDPR. We will stop processing unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or processing serves the establishment, exercise or defence of legal claims. Please use the contact details below to exercise this right.

Right to lodge a complaint with a supervisory authority

If you consider our processing of personal data concerning you unlawful, you have the right to lodge a complaint with our competent supervisory authority, which can be contacted as follows:

Unabhängiges Datenschutzzentrum Saarland

Fritz-Dobitsch-Straße 12

66111 Saarbrücken

Tel.: +49 (0) 681 947810

Fax: +49 (0) 681 94781-29

Email: poststelle@datenschutz.saarland.de

Data protection officer

If you have further questions about the processing of your personal data, you may contact our data protection officer directly. The officer is also available for requests for information, applications or complaints:

Data protection officer

Herbert Grundmann

DSB Grundmann

Mantes-La-Ville-Platz 6

66538 Neunkirchen

Tel.: +49 6821 74254-95

Fax: +49 6821 74254-96

e-mail: info@dsb-grundmann.saarland

homepage: www.info@dsb-grundmann.saarland

Controller’s contact details

Orthopaedic and Surgical Centre Illingen 

represented by:
Holger Ringling

Dr. med. Mohamed Gebril

Dr. med. Hossam Alkhalil

Rathausstraße 2

66557 Illingen

Tel. 06825 - 44402

Fax 06825 - 48957

Last updated: July 2019