Data Privacy Policy
Overview
Scope of Application
This privacy policy informs users about the nature, scope, and purposes of the collection and use of personal data by the responsible provider Medaimun GmbH, Kennedyallee 97a, 60596 Frankfurt am Main, Phone: 069/69 59 58 90-0, Email: info@medaimun.de on this website (hereinafter referred to as „Offer“) as well as in clinical trial practice. The legal foundations of data protection can be found in the Federal Data Protection Act (BDSG), the Telemedia Act (TMG), and the General Data Protection Regulation (GDPR). The responsible entity within the meaning of the data protection laws, especially the EU General Data Protection Regulation (GDPR), is:
Medaimun GmbH
Kennedyallee 97a
60596 Frankfurt am Main
Phone: 069/69 59 58 90-0
Fax: 069/69 59 58 90-9
Email: info@medaimun.de
Managing Director: Karin Zielen
Further information such as the registration court or VAT ID number can be found in the imprint.
Contact details of the Data Protection Officer:
PROLIANCE GmbH
www.datenschutzexperte.de
Leopoldstr. 21
80802 Munich
datenschutzbeauftragter@datenschutzexperte.de
Rights of the Affected Individuals
Right to Information about Your Stored Data and Its Processing:
You have the right to request confirmation from us as to whether personal data concerning you is being processed by us. If such processing occurs, you can request information about the following:
The purposes for which the personal data is being processed.
The categories of personal data being processed.
The recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed.
The planned duration for storing your personal data, or if specific details are not available, the criteria for determining the storage duration.
The existence of the right to correction or deletion of your personal data, the right to restriction of processing by the controller, or the right to object to such processing.
The existence of a right to lodge a complaint with a supervisory authority.
All available information about the origin of the data, if the personal data was not collected from the affected individual.
The existence of automated decision-making, including profiling, according to Article 22(1) and (4) GDPR, and — at least in such cases — meaningful information about the logic involved, as well as the significance and the intended consequences of such processing for the affected individual.
You have the right to request information as to whether the personal data concerning you is being transferred to a third country or to an international organization. In this regard, you may request to be informed about the appropriate safeguards according to Article 46 GDPR in connection with the transfer.
Upon written request, we will inform you about the personal data stored about you. All inquiries should be directed to our data protection coordinator.
Correction of Incorrect Personal Data:
You have the right to request the correction and/or completion of personal data concerning you if the processed personal data is incorrect or incomplete. We must make the correction without delay.
Deletion of Your Stored Data:
a) Obligation to Delete Data
You can request the immediate deletion of personal data concerning you, and we are obliged to delete this data without delay if one of the following reasons applies:
The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
You withdraw your consent on which the processing is based according to Article 6(1)(a) or Article 9(2)(a) GDPR, and there is no other legal basis for the processing.
You object to the processing according to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing according to Article 21(2) GDPR.
The personal data concerning you has been processed unlawfully.
The deletion of the personal data concerning you is required to fulfill a legal obligation under Union or Member State law to which we are subject.
The personal data concerning you was collected in relation to the services of the information society offered according to Article 8(1) GDPR.
Information to Third Parties
If we have made the personal data concerning you public and we are required to delete it according to Article 17(1) GDPR, we will take appropriate measures, including technical measures, to inform those responsible for processing the personal data that you have requested the deletion of all links to, or copies or replications of, these personal data.
Exceptions
The right to deletion does not exist if the processing is necessary:
For the exercise of the right to freedom of expression and information.
For the fulfillment of a legal obligation requiring processing under Union or Member State law to which we are subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
For reasons of public interest in the area of public health according to Article 9(2)(h) and (i) and Article 9(3) GDPR.
For archiving purposes in the public interest, scientific or historical research, or statistical purposes according to Article 89(1) GDPR, insofar as the right mentioned under section (a) is likely to make the achievement of the objectives of that processing impossible or seriously impaired.
For the establishment, exercise, or defense of legal claims.
Restriction of Data Processing
Under the following conditions, you may request the restriction of the processing of personal data concerning you:
If you contest the accuracy of the personal data for a period that allows us to verify the accuracy of the data.
If the processing is unlawful and you oppose the deletion of the personal data and instead request the restriction of the use of the personal data.
If we no longer need the personal data for processing purposes, but you require them for the establishment, exercise, or defense of legal claims.
If you have objected to the processing according to Article 21(1) GDPR and it is not yet determined whether the legitimate grounds of the controller override your reasons.
If the processing of personal data concerning you has been restricted, such data — apart from being stored — may only be processed with your consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.
If the restriction of processing is lifted under the conditions described above, you will be informed by us beforehand.
Objection to Data Processing
You have the right to object at any time to the processing of personal data concerning you, which is based on Article 6(1)(e) or (f) GDPR, for reasons arising from your particular situation; this also applies to profiling based on these provisions.
We will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
If personal data concerning you is being processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing.
If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
You also have the option of exercising your right to object using automated procedures, including the use of technical specifications, in connection with the use of services of the information society.
Data Portability, if You Have Consented to Data Processing
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us, provided that:
The processing is based on consent according to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, or on a contract according to Article 6(1)(b) GDPR, and
The processing is carried out by automated means.
In exercising this right, you also have the right to request that the personal data concerning you be transmitted directly from one controller to another, where technically feasible. The rights and freedoms of others must not be impaired by this.
The right to data portability does not apply to processing personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Right to Notification
If you have requested correction, deletion, or restriction of processing, we are obliged to notify all recipients to whom the personal data concerning you has been disclosed about the correction or deletion of the data or the restriction of processing, unless this proves impossible or involves disproportionate effort.
You have the right to be informed about these recipients.
Right to Withdraw Consent
If you have given us consent, you may withdraw it at any time with effect for the future.
Right to Lodge a Complaint with a Supervisory Authority
The supervisory authority where the complaint was lodged must inform the complainant about the status and outcomes of the complaint, including the possibility of a judicial remedy according to Article 78 GDPR.
Purposes of Data Processing by the Responsible Entity and Third Parties
We process your personal data only for the purposes mentioned in this privacy policy. There will be no transfer of your personal data to third parties for purposes other than those mentioned. We will only share your personal data with third parties if:
You have explicitly consented to it,
Processing is necessary for the performance of a contract with you,
Processing is required to fulfill a legal obligation,
Processing is necessary for the protection of legitimate interests and there is no reason to believe that you have an overriding legitimate interest in not sharing your data.
Legal Basis for the Processing of Personal Data
If we obtain consent for processing personal data, Article 6(1)(a) GDPR is the legal basis.
If the processing of personal data is required for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR is the legal basis. This also applies to processing operations necessary to take steps prior to entering into a contract.
If the processing of personal data is required to fulfill a legal obligation to which our company is subject, Article 6(1)(c) GDPR is the legal basis.
In cases where vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) GDPR is the legal basis.
If processing is necessary for the protection of legitimate interests pursued by our company or a third party, and the interests, fundamental rights, and freedoms of the data subject do not outweigh these interests, Article 6(1)(f) GDPR is the legal basis for processing.
Data Collection on Our Website
The use of our website is generally possible without providing personal data. If personal data (e.g., name, address, email address) is collected on our site, it is done, as far as possible, always on a voluntary basis (see § 13 TMG). This data will not be passed on to third parties without your explicit consent.
Personal data will only be collected, processed, and used by us as far as this is necessary for the provision of the services offered, or to contact you as requested or to provide you with requested services or information. If, as part of order data processing, data is passed on to service providers, these are bound by the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), other legal regulations, and this privacy policy. The collection or transmission of personal data to state institutions and authorities only takes place in the context of mandatory legal provisions.
Cookies and Analytics Tools
Like many other websites, we also use so-called „cookies.“ Cookies are small text files that are transferred from a website server to your hard drive. This allows us to automatically collect certain data, such as IP address, browser used, operating system, and your computer’s connection to the internet.
Cookies cannot be used to run programs or transfer viruses to a computer. The information contained in cookies helps us facilitate navigation and ensure the proper display of our web pages.
In no case will the data we collect be passed on to third parties or linked to personal data without your consent.
Of course, you can generally view our website without cookies. Internet browsers are usually set to accept cookies. You can disable the use of cookies at any time through your browser settings. Please use your browser’s help functions to find out how to change these settings. Please note that some features of our website may not function if you disable cookies.
Use of Google Analytics
This website uses the service „Google Analytics,“ which is offered by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) to analyze website usage by users. The service uses the aforementioned „cookies“ – text files that are stored on your device. The information collected by the cookies is usually sent to a Google server in the USA and stored there.
On this website, IP anonymization is applied. The IP address of users is shortened within the member states of the EU and the European Economic Area. This shortening eliminates the personal reference of your IP address. In the context of the order data processing agreement, which the website operators have concluded with Google Inc., Google uses the collected information to create an evaluation of website usage and activity and provides related internet services.
You have the option to prevent the storage of cookies on your device by making the appropriate settings in your browser. It is not guaranteed that you will be able to access all functions of this website without restrictions if your browser does not accept cookies.
Alternatively, we recommend users who access our website via a mobile device to deactivate Google Analytics through the following link: [google_analytics_optout]Deactivate Google Analytics[/google_analytics_optout]
Furthermore, you can prevent the information collected by cookies from being sent to Google Inc. and used by Google Inc. by installing a browser plugin. The following link leads to the corresponding plugin: https://tools.google.com/dlpage/gaoptout?hl=en
Here you can find more information about the use of data by Google Inc.: https://support.google.com/analytics/answer/6004245?hl=en
Google AdWords and Google Conversion Tracking
This website uses Google AdWords. AdWords is an online advertising program offered by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).
As part of Google AdWords, we use so-called conversion tracking. When you click on an ad served by Google, a cookie for conversion tracking is set. Cookies are small text files that the internet browser stores on the user’s computer. These cookies expire after 30 days and do not serve to personally identify the users. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.
Each Google AdWords customer receives a different cookie. The cookies cannot be tracked across AdWords customers‘ websites. The information collected using the conversion cookie is used to create conversion statistics for AdWords customers who have chosen conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page containing a conversion tracking tag. However, they do not receive any information that would allow them to personally identify the users. If you do not wish to participate in tracking, you can object to this use by disabling the Google Conversion Tracking cookie in your internet browser settings. You will then not be included in the conversion tracking statistics.
The storage of „conversion cookies“ is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its web offering and its advertising.
More information about Google AdWords and Google Conversion Tracking can be found in Google’s privacy policy: https://www.google.de/policies/privacy/.
You can configure your browser to inform you about the setting of cookies, allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or generally, and activate the automatic deletion of cookies when closing the browser. If you disable cookies, the functionality of this website may be limited.
Meta Pixel (formerly Facebook Pixel)
This website uses the visitor action pixel of Facebook/Meta for conversion measurement. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, the collected data is also transferred to the USA and other third countries.
This allows tracking of the behavior of site visitors after they have been redirected to the provider’s website by clicking on a Facebook ad. This helps evaluate the effectiveness of Facebook ads for statistical and market research purposes and optimize future advertising measures.
The collected data is anonymous for us as the operator of this website; we cannot draw conclusions about the identity of users. However, the data is stored and processed by Facebook, so a connection to the respective user profile is possible, and Facebook can use the data for its own advertising purposes in accordance with Facebook’s Data Use Policy (https://de-de.facebook.com/about/privacy/). This enables Facebook to serve ads on Facebook and outside of Facebook. This use of data is beyond our control as the website operator.
The use of this service is based on your consent according to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. The consent can be withdrawn at any time.
We use the advanced matching feature within the Meta Pixel.
Advanced matching allows us to send various types of data (e.g., location, state, postal code, hashed email addresses, names, gender, birthdate, or phone number) of our customers and prospects that we collect through our website to Meta (Facebook). This enables us to tailor our ad campaigns on Facebook more precisely to people who are interested in our offerings. Additionally, advanced matching improves the attribution of website conversions and expands Custom Audiences.
As far as personal data is collected on our website and transmitted to Facebook using this tool, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). Joint responsibility applies exclusively to the collection of data and its transmission to Facebook. The subsequent processing by Facebook is not part of joint responsibility. Our joint obligations have been set out in an agreement on joint processing. You can find the text of the agreement at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing privacy information when using the Facebook tool and for implementing the tool on our website in a privacy-compliant manner. Facebook is responsible for the data security of Facebook products. Data subject rights (e.g., access requests) regarding the data processed by Facebook can be asserted directly with Facebook. If you assert your data subject rights with us, we are obliged to forward them to Facebook.
Data transmission to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
In Facebook’s privacy policy, you will find further information on protecting your privacy: https://de-de.facebook.com/about/privacy/.
You can also disable the „Custom Audiences“ remarketing function in the ad settings at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged into Facebook.
If you do not have a Facebook account, you can disable interest-based advertising from Facebook on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.
The company is certified under the „EU-US Data Privacy Framework“ (DPF). The DPF is an agreement between the European Union and the USA, which aims to ensure compliance with European data protection standards in data processing in the USA. Any company certified under the DPF undertakes to comply with these data protection standards. You can find more information on this from the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active.
Contact Form / Phone / Email
If you contact us via email, phone, or contact form, the information you provide will only be stored for the purpose of processing the request and for any follow-up questions.
Deletion or Retention of Data
We adhere to the principles of data minimization and data economy. Therefore, we only store your personal data as long as necessary to achieve the purposes mentioned here or as required by the various retention periods prescribed by law. Once the respective purpose has been fulfilled or the retention periods have expired, the corresponding data will be routinely blocked or deleted in accordance with legal provisions.
Plugins and Tools
Doctena
An online appointment booking plugin is integrated into our websites, a service provided by Doctena Germany GmbH, Urbanstr.116, 10967 Berlin, Germany. The legal basis for the processing is Art. 6 para. 1 lit. a, f GDPR due to your voluntary provision of data for booking an appointment in the practice. You can recognize the use of the Doctena plugin on our websites by the „Book Appointment“ button and the internal link „To Online Appointment Booking.“
Further information about Doctena Germany GmbH and its services can be found at http://www.doctena.com.
By using the online appointment booking, your data will be processed by Doctena Germany GmbH and stored on Doctena Germany GmbH’s systems. The collection, processing, and use of the relevant data are subject to the terms of use and privacy policy of Doctena Germany GmbH. More information can be found in Doctena Germany GmbH’s privacy policy at http://www.doctena.com/doctena-de-privacy-policy/.
Google Tag Manager
Google Tag Manager is a solution that allows us to manage website tags through an interface (and thus integrate Google Analytics and other Google marketing services into our online offering). The Tag Manager itself (which implements the tags) does not process any personal data of users. Regarding the processing of personal data of users, the following details about Google services are referred to. Usage policies: https://www.google.com/intl/de/tagmanager/use-policy.html.
Use of Google Maps
This website uses the Google Maps API to visually display geographical information. When using Google Maps, Google also collects, processes, and uses data about the use of the map features by visitors. More information about data processing by Google can be found in Google’s privacy policy. There, you can also change your personal privacy settings in the privacy center.
Server Log Files
The provider of the website automatically collects and stores information in so-called server log files that your browser transmits to us automatically. These include:
Browser type and browser version
Operating system used
Referrer URL
Hostname of the accessing computer
Time of the server request
IP address
These data are not merged with other data sources.
The collection of this data is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free display and optimization of its website – for this, server log files need to be collected.
Privacy Policy for Applicants
Dear applicant,
We are pleased about your interest in our company. In accordance with the provisions of Articles 13, 14, and 21 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of personal data you submit as part of the application process and any data we may collect from you, as well as your rights in this regard. To ensure that you are fully informed about the processing of your personal data during the application process, please read the following information carefully.
RESPONSIBLE BODY UNDER DATA PROTECTION LAW:
Medaimun GmbH
Kennedyallee 97a
60596 Frankfurt
069 695958900
bewerbung@medaimun.de
CONTACT DATA OF OUR DATA PROTECTION OFFICER:
PROLIANCE GmbH
Dominik Fünkner
Leopoldstr. 21
80802 Munich
datenschutzbeauftragter@datenschutzexperte.de
PURPOSES AND LEGAL BASIS OF PROCESSING:
We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG), to the extent necessary for the decision regarding the establishment of an employment relationship with us. The legal basis for this is Art. 88 GDPR in conjunction with § 26 BDSG for employment-related purposes when this is necessary for the decision regarding the establishment of an employment relationship.
Furthermore, we may process personal data from you if this is necessary to fulfill legal obligations (Art. 6 Para. 1 lit. c GDPR) or to defend or assert legal claims. The legal basis for this is Art. 6 Para. 1 lit. f GDPR. A legitimate interest could be, for example, the obligation to provide evidence in a case under the General Equal Treatment Act (AGG).
If you give us explicit consent to process personal data for specific purposes, the legality of this processing is based on your consent under Art. 6 Para. 1 lit. a GDPR, § 26 Para. 2 BDSG. Any consent you provide may be withdrawn at any time with effect for the future (see section 9 of this privacy policy).
If an employment relationship is established between you and us, we may continue to process the personal data you have already provided in accordance with Art. 88 GDPR in conjunction with § 26 BDSG for purposes related to the employment relationship, to the extent necessary for the implementation or termination of the employment relationship or for the exercise or fulfillment of rights and obligations arising from a law or collective agreement.
CATEGORIES OF PERSONAL DATA:
We only process data related to your application. This may include general personal data (such as name, address, contact information, etc.), information about your professional qualifications and educational background, details of professional development, and any other data you submit as part of your application.
SOURCES OF THE DATA:
We process personal data that we receive from you through postal mail or email during the contact or application process.
RECIPIENTS OF THE DATA:
We only share your personal data within our company with the departments and individuals who require this data to fulfill contractual and legal obligations or to implement our legitimate interests.
We will share your personal data with third parties only when permitted by law or if you have consented to it.
TRANSFER TO A THIRD COUNTRY:
A transfer to a third country is not intended.
STORAGE PERIOD OF YOUR DATA:
We store your personal data as long as it is necessary for the decision regarding your application. Your personal data or application documents will be deleted no later than six months after the end of the application process (e.g., after the rejection decision), unless longer storage is required or permissible by law. We will store your personal data further only if required by law or in the specific case to assert, exercise, or defend legal claims during the duration of a legal dispute.
If you have agreed to a longer storage of your personal data, we will store it in accordance with your consent.
If an employment, training, or internship relationship is established after the application process, your data will be stored as required and permitted, initially continuing to be stored and then transferred to the personnel file.
YOUR RIGHTS:
Every data subject has the right to request information under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restrict processing under Art. 18 GDPR, the right to notification under Art. 19 GDPR, and the right to data portability under Art. 20 GDPR.
Furthermore, you have the right to file a complaint with a data protection authority under Art. 77 GDPR if you believe that the processing of your personal data is not lawful. The right to complain exists irrespective of other administrative or judicial remedies.
If the processing of your data is based on your consent, you have the right under Art. 7 GDPR to withdraw your consent to the use of your personal data at any time. Please note that the withdrawal will only apply to the future. Processing that occurred before the withdrawal is not affected. Please also note that we may need to retain certain data to fulfill legal obligations for a certain period (see section 8 of this privacy policy).
Right to Object:
If the processing of your personal data is based on Art. 6 Para. 1 lit. f GDPR to protect legitimate interests, you have the right under Art. 21 GDPR to object at any time, for reasons related to your particular situation, to the processing of this data. We will no longer process this personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or the processing is necessary for the assertion, exercise, or defense of legal claims.
You can exercise your rights by contacting us using the contact details provided in section 1.
NECESSITY OF PROVIDING PERSONAL DATA:
Providing your personal data as part of the application process is voluntary. However, we can only make a decision regarding the establishment of an employment relationship or enter into an employment relationship with you if you provide the necessary personal data required for the application.
AUTOMATED DECISION MAKING:
The decision regarding your application is not solely based on automated processing. Therefore, no automated decision-making takes place in the sense of Art. 22 GDPR.
Privacy Policy for Patients
The protection of your personal data is important to us. According to the EU General Data Protection Regulation (GDPR), we are required to inform you about the purposes for which our practice collects, stores, or transfers data. This information also includes your rights regarding data protection.
RESPONSIBLE PARTY FOR DATA PROCESSING:
The entity responsible for data processing is:
Medaimun GmbH
Kennedyallee 97a
60596 Frankfurt am Main
Phone: 069/69 59 58 90-0
Fax: 069/69 59 58 90-9
Email: info@medaimun.de
You can reach the responsible data protection coordinator, Mr. Zielen, at:
PURPOSE OF DATA PROCESSING:
The data processing is carried out due to legal requirements to fulfill the treatment contract between you and your doctor and the associated obligations.
For this purpose, we process your personal data, particularly your health data. This includes anamneses, diagnoses, therapy suggestions, and findings that we or other doctors collect. Other doctors or psychotherapists with whom you are being treated may also provide us with data (e.g., in medical letters).
The collection of health data is a prerequisite for your treatment. If the necessary information is not provided, proper treatment cannot be performed.
RECIPIENTS OF YOUR DATA:
We will only transmit your personal data to third parties if this is permitted by law or if you have given your consent.
Recipients of your personal data can primarily be other doctors/psychotherapists, medical chambers, and other institutions.
Transmission is mainly for the purpose of billing services provided to you, clarifying medical issues, and addressing questions related to your insurance relationship. In individual cases, data may be transmitted to other authorized recipients.
STORAGE OF YOUR DATA:
We store your personal data only as long as it is necessary for the treatment.
Due to legal requirements, we are obligated to retain these data for at least 10 years after the treatment is completed. Other regulations may require longer retention periods, such as 30 years for X-ray records under § 28 Para. 3 of the X-ray Ordinance.
YOUR RIGHTS:
You have the right to obtain information about your personal data. You can also request the correction of incorrect data.
Additionally, under certain circumstances, you have the right to erasure of data, the right to restrict processing, and the right to data portability.
The processing of your data is based on legal regulations. In exceptional cases, we need your consent. In these cases, you have the right to withdraw your consent for future processing.
You also have the right to lodge a complaint with the competent supervisory authority if you believe that the processing of your personal data is unlawful.
The address of the relevant supervisory authority is:
The Hessian Commissioner for Data Protection and Freedom of Information
Postfach 3163
65021 Wiesbaden
LEGAL BASIS:
The legal basis for processing your data is Article 9 Para. 2 lit. h) GDPR in conjunction with § 22 Para. 1 No. 1 lit. b) Federal Data Protection Act. If you have any questions, feel free to contact us.
Medaimun Team
Final Provisions
Changes to Our Privacy Policy
We reserve the right to adjust this privacy statement occasionally to ensure it complies with current legal requirements or to implement changes in our services within the privacy statement, such as the introduction of new services. The new privacy statement will apply to your next visit.
For questions about data protection, please contact our data protection coordinator, Mr. Zielen, at l.zielen(@)medaimun.de.
