The name and contact details of the processing supervisor and the company data protection officer
The privacy information applies data processing by:
Head of data processing:
physiotherapy by orthós* GmbH, Ansbacher Str. 17-19 , 10787 Berlin , 030/780 99 88 63, email@example.com
Thecompany data protection consultant can be reached at the above address or at the following contact details:firstname.lastname@example.org
When you access our Internet page, personal data is also processed. In order for pages to be displayed in your browser, the IP-address of the terminal device you use must be processed. Additional information about the browser of your terminal device is also processed. We are obliged by date protection law to also guarantee the confidentiality and integrity of the personal data processed with our IT systems. The following data is logged for this purpose:
• Information about the browser type and the version used
• The user’s operation system
• The internet service provider of the user
• The IP-address of the user (for a maximum of 7 days)
• Date and time of access
• Websites from which the user’s systems assesses our website
• Websites that are called up by the user’s system via our website
TheIP-address will be deleted or made anonymous after 7 days at the latest from all systems used in connection with the operation of these internet pages. We can then no longer establish a personal reference from the remaining data. The data is also being used to correct errors on the website.
The legal basis for this data processing is Art.6 Abs. 1 lit. f) DSGVO. Our interest within the meaning of Art 6 Abs. 1 lit. f) DSGVO is the operation of this website and the implementation of the protection goals of confidentiality, integrity, and availability of the data.
SSI or TI’S encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site usesSSI or TI’S encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to https:// and by the lock symbol in your browser line. If the SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.
Cookies are used on our Internet pages. Cookies are small pieces of text information that are stored in your personal device via your browser. The cookies are necessary to enable certain functions of our internet pages. On the one hand, we use session cookies, which are automatically deleted by your browser immediately after you have finished visiting our website. In the area of web analysis, however, we also use persistent cookies. You have the option of preventing the setting of cookies by making the appropriate adjustments in your browsers. However, we would like to point out that the use of our Internet pages may then only be possible to a limited extent. No programs or other applications are installed or started on your computer by cookies. Legal basis for this data processing Art. 6 Abs. 1 lit. f) DSGVO in correlation with § 15TMG. Our interest in the meaning of Art.6 Abs. 1 lit. f) is the operation of this website.
Contact by form, E-mail contact
We offer contact forms on our website, which you can use to contact us with concerns regarding our services, such as appointment request. The personal data will be used and stored for the purpose of processing your request and in case follow-up questions arise. Alternatively, it is possible to contact us via e-mail, which is linked to various buttons. In this case, the user’s personal data transmitted with the e-mail will be stored for the purpose of processing the message and in the event that follow-up questions arise. Inquiries and messages received via the contact forms on our website or through our e-mail address are usually stored in our CRM-system. CRM System is regularly checked to see whether data can be deleted. If data is no longer required in the context of a quest or prospective customers relationship or if a conflicting interest of the guest or prospective customers prevails, we will delete the data concerned, provided that this does not conflict with any legal retention obligations. The legal basis for this data processing is Art. 6 para. 1 letter f) DSGVO. Our "interest" within the meaning of Art. 6 para. 1 lit. f)is communication with patients and interested parties.
We also offer the possibility of an appointment booking/request for our customers.The data to be provided in this instance are marked as mandatory fields in the relevant form. Without providing the data in the required fields, online booking is not possible. The legal basis Art.6 Abs. 1 lit. b) DSGVO. In the case of other information provided voluntarily by you, we assume in the case of personal reference that the processing is in your interest (Art. 6 Abs. 1 lit. b) DSGVO to provide our services in accordance with the contract.
If you provide data to us voluntarily, for example in forms, and this data is not required for the fulfillment of our contractual obligations, we process this data on the basis that we assume that the processing and use of this data is in your interest.
Data that you provide to us will not be passed on to third parties. Your data will not be passed on to third parties for their advertising purposes. However, we may use service partners for the operation of this website, our newsletter, online bookings via our website or for other products of ours- here it can happen that a service provider gets knowledge of personal data. We select our service partners carefully- particularly regarding data protection and data security and take all measures required by data protection law for permissible data processing.
Minors may not transmit any personal data to us without the consent of their legal guardians. We do not process any personal data of minors knowingly obtained within the website.
Integration of services and content from third-party providers
Third party contents are integrated within the Internet presence. For the use of such content, it is technically necessary to transfer the IP address of the user to the respective third-party provider. This is because without the IP address, the third-party providers would not be able to send the context integrated into the website to the browser of the particular user. We have no influence on whether a third-party provider stores or otherwise uses the IP address, for example for statistical purposes.
We use „Google reCAPTCHA” (in the following „reCAPTCHA”) on our website. Provider is GoogleInc., 1600 Amphi theatre Parkway, Mountain View, CA 94043, USA („Google “).
The purpose of reCAPTCHA is to check whether the data input on our website (e.g. in a contact form) is done by a human being or by an automated program. For this purpose, reCAPTCHA analyses behavior of the website users based on various characteristics. The analysis starts automatically as soon as the web visitors enters the website. For analysis purpose reCAPTCHA analyses various Information(e.g., IP-address, time spent on the website, mouse movement) The collected data is transmitted to Google. The reCAPTCHA analyses runs completely in the background. Users are not informed that an analysis is taking place. Data processing is carried out based on Art.6.para.1.lit.f DSVGO. The website operator has a legitimate interest in protecting his web offers from abusive automated spying and from spam.
For more information about Google reCAPTCHA andGoogles private policy, please see the following link: https://www.google.com/intl/de/policies/privacy/and https://www.google.com/recaptcha/intro/android.html.
The use of Google Maps is in the interest of easy find ability. This constitutes a legitimate interest within the meaning of Art. 6. para.1 letter f) DSVGO. When Google Maps is called up, servers in the USA or at least outside the EU are called up. An adequate level of data protection is demonstration by the fact that Google LLC is listed in the Privacy Shield.
Use of Google Fonts
External fonts, Google Fonts, are used on these Internet pages. Google Font is a service of Google Inc. (“Google”). The integration of these Web Fonts is done by a server call, usually a Google server in the USA. This transfer to the server which of our Internet pages you have visited. The IP address of the browser of the end device of the visitor to these Internet pages is also stored by Google.You will find more detailed information in the Google data protection information, which you can download here: www.google.com/fonts#AboutPlace:aboutwww.google.com/policies/privacy/
Your rights as a data subject
Insofar as your personal data is processed during your visit to our website, you are entitled to the following rights as a “data subject” within the meaning of theDSVGO:
You can request information from us as to whether personal data of yours is being processed by us. There is no entitlement to information if the providing of the requested information would violate the obligation of secrecy according to § 57StBG or if the information must be kept secret for other reasons, in particular because of an overriding legitimate interest of a third party. However, there may be an obligation to provide the information if, considering impending damages, your interests outweigh the interest in secrecy. The right to information is also excluded if the data is only stored because it may not be deleted due to legal or statutory retention periods or if it is used exclusively for purposes of data protection or data security control if the provision of information would require a disproportionately high effort and if processing for other purposes is excluded by appropriate technical and organizational measures. If in your case the right to information is not excluded and your personal data is processed by us, you can request information from us about the following information:
• the purposes of the processing,
• Categories of personal data processed by you,
• Recipients or categories of recipients to whom your personal data is disclosed, in particular the case of recipients in third countries,
• if possible, the planned duration for which your personal data will be stored or, if this is not possible, the criteria for determining the storage period,
• the existence of a right of rectification or erasure or limitation of the processing of personal data concerning you or a right to object to such processing,
• the existence of a right of appeal to a data protection supervisory authority,
• if the personal data have not been collected from you as a data subject, the available information on the origin of the data,
• the existence of automated decision making, including profiling and meaningful information on the logic involved and the scope and intended impact of automated decision making
• in the case of transfers to recipients in third countries, in the absence of a decision by the EU Commission on the adequacy of the level of protection pursuant to Art. 45 para. 3 DPA, information on what appropriate safeguards pursuant to Art. 46 para. 2 DPA are provided for the protection of personal data
Correction and completion
If you discover that we have incorrect personal data about you, you can demand that we correct this incorrect data without delay. If the personal data concerning you is incomplete, you may request that it be completed
You have the right of deletion ("right to be forgotten"), unless the processing is necessary for the exercise of the right to freedom of expression, the right to information or to comply with a legal obligation or for the performance of a task carried out in the public interest and provided that one of the following reasons applies:
• the personal data are no longer necessary for the purposes for which they were processed
• The justification for the processing was solely your consent, which you have revoked.
• You have objected to the processing of your personal data, which we have made public.
• You have lodged an objection to the processing of personal data not made public by us and there are no overriding legitimate reasons for the processing.
• Your personal data have been processed unlawfully.
• The deletion of personal data is necessary to fulfil a legal obligation to which we are subject.
There is no right to deletion if, in the case of lawful non-automated data processing, deletion is not possible or only possible with disproportionately high effort due to the special type of storage and your interest in deletion is low. In this case, the restriction of processing takes the place of deletion.
Restriction of processing
You may request us to restrict processing your data if one of the following reasons applies:
• You dispute the accuracy of the personal data. In this case, the restriction may be requested for the time necessary to allow us to verify the accuracy of the data.
• The processing is unlawful, and you request the restriction of the use of your personal data instead of deletion.
• Your personal data will no longer be required by us for the purposes of the processing, but which you need in order to assert, exercise or defend legal claims.
• You have filed an objection in accordance withArt. 21 para. 1 DSGVO. The restriction of processing can be demanded if it is not yet clear whether our justified reasons outweigh your reasons.
Restriction of processing means that the personal data will only be processed with your consent or for the purpose of asserting, exercising, or defending legal claims or protecting the rights of another natural or legal person or for reasons of an important public interest. Before we lift the restriction, we have the obligation to inform you of this.
You have a right to data transfer if the processing is based on your consent (Art.6 para. 1 sentence 1 letter a) or Art. 9 para. 2 letter a) DPA) or on a contract to which you are party, and the processing is carried out by means of automated procedures. In this case, the right to transfer data includes the following rights, provided that this does not affect the rights and freedoms of other persons: You may ask us to obtain the personal data you have provided us with in a structured, common and machine-readable format. You have the right to transfer this data to another responsible person without hindrance on our part.As far as technically feasible, you can demand that we transfer your personal data directly to another responsible party.
If the processing is based on Article 6 paragraph 1 sentence 1 letter e) DPA(performance of a task carried out in the public interest or in the exercise of official authority) or on Article 6 paragraph 1 sentence 1 letter f) DPA (legitimate interest of the controller or of a third party), you have the right to object to the processing of personal data relating to you at any time for reasons arising from your particular situation. This also applies to profiling based on Article 6 paragraph 1 sentence 1 letter e) or letter f) DSGVO. Once the right to object has been exercised, we will no longer process your personal data unless we can demonstrate compelling legitimate reasons for processing which outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.
You may object at any time to the processing of personal data relating to you for the purposes of direct marketing. This also applies to profiling connected with such direct marketing. After exercising this right of opposition, we will no longer use the personal data concerned for direct marketing purposes. You have the possibility of informally notifying us of your objection by telephone, by e-mail, by fax, or by writing to our postal address listed at the beginning of this data protection declaration.
Withdrawal of consent
You have the right to revoke your consent at any time with effect for the future.The revocation of the consent can be communicated informally by telephone, e-mail, if necessary, by fax or to our postal address. The revocation does not affect the lawfulness of the data processing that has taken place based on the consent until the date of entry of the revocation. After receiving the withdrawal, the data processing, which was exclusively based on your consent, will be stopped.
If you consider that the processing of your personal data is unlawful, you may submit a complaint to a data protection supervisory authority competent for the place where you are staying or working, or for the place where the alleged violation occurred.