Data Protection Statement

Data protection

This is the data protection statement of the Dermatologist Clinic Munich Schwabing. Dr. med. Bernd Kessler, Dr. Med. Schubert & Colleagues, Leopoldstraße 18, 80802 Munich (hereinafter "Dermatologist Schwabing" or "we").

The protection of your data is our concern

We appreciate your interest in our company and services, and would like you to feel secure when visiting our website, also with regard to the protection of your personal data. We take the protection of your personal data very seriously. Therefore, we follow all relevant data protection regulations and constantly strive to optimize data protection.

We want you to know when we collect information, what kind of information we collect, what purpose it is collected for, and how we use it. We have taken technical and organizational measures to ensure that the rules for the protection of personal data are respected both by us and by our external service providers.

This data protection statement informs you about the processing of your personal data by the Dermatologist Schwabing externally and in connection with the website www.hautarzt-schwabing.de.

Responsible person

Responsibility for the processing of your personal data is held by the

Dermatologist Clinic München Schwabing Dr. med. Bernd Kessler, Dr. Med. Schubert & Colleagues
Leopoldstraße 18
80802 Munich
Tel.: +49 89 58808-700
Fax: +49 89 38367836
E-mail: info@hautarzt-schwabing.de

Contact details of the data protection officer
Bernhard Behr
Eponaweg 7
82008 Unterhaching
Tel.: +49 89 88900933
E-Mail: datenschutz@hautarzt-schwabing.de

Purpose and legal basis of the data processing

The collection, processing, and storage of your personal data serves the purpose of providing medical service and billing in accordance with statutory provisions.

As the legal basis for the data collection as well as the documentation and archiving obligations, the professional code of conduct for doctors (MBO), the provisions of the German Social Code (SGB), and for the provision of radiological services, the German X-ray Regulation (RöV).

Personal data

Personal data is information that relates to an identified or identifiable natural person, such as your name, e-mail address, telephone number, postal address, or IP address of your computer.

Operation of the website

We process personal data from you, firstly, in order to be able to provide you the best possible tailor-made offers and information on this website and, secondly, to make your visit to our website as enlightening and profitable as possible. Unless otherwise specified in the following provisions, the legal basis for the associated data processing in each case Art. 6 para 1 f) DSGVO (balancing of interests, based on our concern to offer you a very attractive website).

Processed data

Automatically collected data

In order to be able to display the information on the website that suits you, we process the following data:

The address of the page of our website you have visited
The address of the website you visited immediately before (the so-called "referrer")
Date and time of your visit l The characteristics of your device, in particular the operating system, the browser used, and the size of your browser window
The IP address of your device on the Internet
Identification numbers that we store on your device. With this identification number, we can recognize your device on the website. Technically, these identification numbers are stored in so-called cookies or eTags.
Device identifiers that consist of individual characteristics of your device. Using these device identifiers, we can also recognize your device on the website. Examples of such device identifiers are – The "Ad-ID" of the Apple iOS operating system – The "advertising ID" of the operating system Android

Purpose of data collection

Data collection

As part of our activity as a medical service provider, we are legally obliged to collect and store personal data.

The collection of the necessary data serves to provide our medical services for your health. Non-provisioning would mean that we would not be able to offer treatment.

According to Art. 13 EU-GDPR, we inform the person concerned at the time of collecting their data.

Contact via contact form and e-mail

If you provide us with a contact form or e-mail inquiries, we will process the information you have provided, including the contact details you provided to process the request. In the case of follow-up questions, this data is also stored with us. Legal basis for this is 6 Art. 1 b) GDPR (fulfillment of the contract - the processing of the user's data is required for the fulfillment of the agreement to answer the questions or concerns) or Art. 6 (1) (f) GDPR (balancing of interests - based on our interest in processing requests from users of our website).

Tracking-Tools zur Website-Analyse

We do not use tracking tools for website analysis.

Use of YouTube

Our website uses plugins from the Google-powered YouTube page. Site operator is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit any of our YouTube plug-in-enabled sites, you will be connected to the servers of YouTube. The Youtube server will know which of our pages you visited. If you're logged into your YouTube account, YouTube will allow you to associate your surfing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

For more information on how to handle user data, please refer to the YouTube Privacy Policy at www.google.de/intl/de/policies/privacy

Data security

We take the legally required, technical and organizational measures to protect personal data from loss, destruction, manipulation, and unauthorized access.

Use of external service providers

For the operation of our website and our IT systems, we commission external service providers with administration and data processing. If necessary, these service providers also process personal data. The service providers are committed to the secrecy of information and carefully selected and monitored by us. They process the data on the basis of job processing contracts and are subject to our instructions. They are also bound by this Privacy Policy.

Storage time

Personal data will only be stored by us for as long as it is necessary to achieve the purposes stated here, or as provided for by the statutory retention periods. Data provided by you within the meaning of Section 2 will therefore be deleted at the earliest after the expiration of the documentation periods of the Medical Act after 10 years, at the latest after 30 years. Automatically recorded data within the meaning of Section 5.1 will be deleted or anonymized at the latest after 14 months.

Information about your rights

Right to information: You have the right to receive information at any time to find out which data is stored.

Right to amendment: You have the right to have your data corrected at any time.

Right to delete: You have the right to have the data deleted at any time, unless this is contrary to other legal provisions for safekeeping.

Right to objection: You have the right to object to the processing, use, and data portability of your data at any time. However, as part of our medical service provision, we are legally obliged to document and store your personal data as well as data on the medical service performed on you!

Right to appeal: You have the right to appeal to the relevant data protection supervisory authority.

Right to data portability: You have the right to take your existing documentation kept by us with the exception of handwritten entries in other locations.

As of August 2019

Data protection statement