Privacy Policy

1) Contact Details of the Responsible Party

1.1 We inform you about how we handle your personal data when using our website. Personal data includes all data that can be used to personally identify you.

1.2 The responsible party for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

2) Data Collection When Visiting Our Website

2.1 Server Log Files

When you use our website purely for information purposes, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to the page server (so-called “server log files”). When you access our website, we collect the following data that is technically necessary to display the website:

• Our visited website
• Date and time at the time of access
• Amount of data sent in bytes
• Source/reference from which you arrived at the page
• Browser used
• Operating system used
• IP address used (possibly in anonymized form)

Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. Data is not passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

2.2 SSL or TLS Encryption

For security reasons and to protect the transmission of personal data and other confidential content (e.g. inquiries to the responsible party), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser line.

3) Hosting & Content Delivery Network

We host our website with the service provider Netlify, Inc., 510 Townsend Street, San Francisco, CA 94103, USA (hereinafter “Netlify”).

When you access our website, your personal data (e.g. IP address, date and time of access, browser information) is transferred to Netlify's servers and processed there in so-called server log files. This is technically necessary to provide you with our website securely and quickly. Processing is based on our legitimate interest in the stability and security of our website in accordance with Art. 6 para. 1 lit. f GDPR.

Netlify distributes the content via a worldwide Content Delivery Network (CDN) to ensure short loading times. Data may also be processed on servers in the USA. We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.

4) No Cookies

We do not use cookies on our website. No files are stored on your device that evaluate your user behavior or store technical information beyond the session. Therefore, no cookie consent tool (consent banner) is required.

5) Contact & Appointment Booking

5.1 Clickdoc

For the provision of an online appointment booking function, we use the services of the following provider: Clickdoc, CompuGroup Medical Deutschland AG, Maria Trost 21, 56070 Koblenz.

For the purpose of appointment allocation, first and last names as well as email addresses (and possibly telephone numbers, if a telephone appointment is desired) are collected in accordance with Art. 6 para. 1 lit. b GDPR and transmitted to the provider in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in effective customer management and efficient appointment management and stored there for appointment organization.

After the appointment has been held or after the agreed appointment period has expired, your data will be deleted by the provider. We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties. The privacy policy can be accessed at https://clickdoc.de and in the respective apps.

5.2 Contact via Email

When contacting us (e.g. via email), personal data is collected. This data is stored and used exclusively for the purpose of responding to your request or for contact and the associated technical administration.

The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract (or a treatment request), the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after your request has been processed. This is the case when it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations.

6) Rights of the Data Subject

6.1 The applicable data protection law grants you the following data subject rights (rights of access and intervention) vis-à-vis the responsible party with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective exercise requirements:

• Right of access in accordance with Art. 15 GDPR;
• Right to rectification in accordance with Art. 16 GDPR;
• Right to erasure in accordance with Art. 17 GDPR;
• Right to restriction of processing in accordance with Art. 18 GDPR;
• Right to notification in accordance with Art. 19 GDPR;
• Right to data portability in accordance with Art. 20 GDPR;
• Right to withdraw consent in accordance with Art. 7 para. 3 GDPR;
• Right to lodge a complaint in accordance with Art. 77 GDPR.

7) Duration of Storage of Personal Data

The duration of storage of personal data is measured by the respective legal basis, the processing purpose and – if applicable – additionally by the respective statutory retention period (e.g. commercial and tax retention periods).

When processing personal data on the basis of express consent in accordance with Art. 6 para. 1 lit. a GDPR, the data concerned is stored until you withdraw your consent.

If there are statutory retention periods for data that is processed in the context of legal or quasi-legal obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for contract fulfillment or contract initiation and/or we have no legitimate interest in continued storage.

When processing personal data on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until you exercise your right to object in accordance with Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.

Unless otherwise specified in the other information in this declaration regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.