DATA PROTECTION
We clarify
Ladies and Gentlemen
The protection of your personal data is important to us. According to the EU General Data Protection Regulation (GDPR), we are obliged to inform you about the purposes for which our practice collects, stores or forwards data. The information also tells you what rights you have in terms of data protection.
a) general data protection
1. RESPONSIBILITY FOR DATA PROCESSING
Responsible for data processing is:
Physio and Sports Therapy Center GmbH
Rodenbacher Chaussee 4
63457 Hanau
Phone: 06181-5049784
Fax: 06181-5049783
Mail: datenschutz@psz-ipw.de
2. PURPOSE OF DATA PROCESSING
The data processing is carried out in accordance with legal requirements in order to fulfil the treatment and training contract between you and the Physiotherapy and Sports Therapy Centre and the associated obligations.
For this purpose, we process your personal data, in particular your health data. This includes all data listed on a doctor's prescription as well as diagnoses, therapy suggestions and methods and findings that we or doctors collect. For these purposes, other doctors or therapists with whom you are receiving treatment may also provide us with data, e.g. in doctor's letters or therapy reports.
The collection of health data is a prerequisite for your treatment. We need this necessary information in order to carry out careful treatment.
3. RECIPIENTS OF YOUR DATA
We will only transfer your personal data to third parties if this is permitted by law or if you have consented.
Recipients of your personal data may be other doctors/psychotherapists, associations of statutory health insurance physicians, health insurance companies, the medical service of the health insurance company, medical associations, private medical billing offices and the Hanau company medical service.
The data is primarily transmitted for the purpose of billing for the services provided to you and to clarify medical questions and questions arising from your insurance relationship. In individual cases, data may be transmitted to other authorized recipients.
4. STORAGE OF YOUR DATA
We will only retain your personal data for as long as is necessary to carry out the treatment.
Due to legal requirements, we are obliged to retain this data for at least 10 years after completion of treatment. Other regulations may require longer retention periods, for example 30 years for X-ray records according to Section 28 Paragraph 3 of the X-ray Ordinance.
5. YOUR RIGHTS
You have the right to receive information about the personal data concerning you. You can also request that incorrect data be corrected.
In addition, under certain conditions you have the right to erasure of data, the right to restriction of data processing and the right to data portability.
Your data is processed on the basis of legal regulations. We only require your consent in exceptional cases. In these cases, you have the right to revoke your consent for future processing.
You also have the right to complain to the competent data protection supervisory authority if you believe that the processing of your personal data is not lawful.
The address of the supervisory authority responsible for us is:
The Hessian Data Protection Commissioner
PO Box 3163
65021 Wiesbaden
Phone: 49 611 1408 - 0
Fax: 49 611 1408 - 611
The legal basis for the processing of your data is Article 9 paragraph 2 letter h) GDPR in conjunction with Section 22 paragraph 1 no. 1 letter b) Federal Data Protection Act. If you have any questions, please feel free to contact us.
Data protection information for online meetings, telephone conferences and webinars via “Zoom” of Physio- u. Sporttherapie Zentrum GmbH
We would like to inform you below about the processing of personal data in connection with the use of “Zoom”.
Purpose of processing
We use the tool “Zoom” to conduct telephone conferences, online meetings, video conferences and/or webinars (hereinafter: “online meetings”). “Zoom” is a service of Zoom Video Communications, Inc., which is based in the USA.
Responsible
The person responsible for data processing that is directly related to the conduct of “online meetings” is
Physio- and Sports Therapy Center GmbH (PSZ GmbH for short)
Rodenbacher Chaussee 4
63457 Hanau
Note: If you access the "Zoom" website, the provider of "Zoom" is responsible for data processing. However, accessing the website is only necessary for using "Zoom" in order to download the software for using "Zoom".
You can also use “Zoom” if you enter the respective meeting ID and, if necessary, other access data for the meeting directly in the “Zoom” app.
If you do not want to or cannot use the “Zoom” app, the basic functions can also be used via a browser version, which you can also find on the “Zoom” website.
What data is processed?
When using “Zoom”, various types of data are processed. The scope of the data also depends on what information you provide before or when participating in an “online meeting”.
The following personal data are subject to processing:
User information: First name, last name, telephone (optional), email address, password (if single sign-on is not used), profile picture (optional),
Department (optional)
Meeting metadata: topic, description (optional), participant IP addresses, device/hardware information
recordings, M4A file of all audio recordings, text file of the online meeting chat.
When dialing in with the telephone: information about the incoming and outgoing phone number, country name, start and end time. If necessary, other connection data such as the IP address of the device can be saved.
Text, audio and video data: You may have the option of using the chat, question or survey functions in an "online meeting". The text entries you make will be processed in order to display them in the "online meeting" and, if necessary, to log them. In order to enable the display of video and the playback of audio, the data from your device's microphone and any video camera on the device will be processed accordingly for the duration of the meeting. You can switch off or mute the camera or microphone yourself at any time using the "Zoom" applications.
To participate in an “online meeting” or enter the “meeting room”, you must at least provide your name.
Scope of processing
We use "Zoom" to conduct "online meetings". If we want to record "online meetings", we will inform you transparently in advance and - if necessary - ask for your consent. The fact that the meeting is being recorded will also be shown to you in the "Zoom" app.
If necessary for the purposes of recording the results of an online meeting, we will log the chat content. However, this will not usually be the case.
In the case of webinars, we may also process questions asked by webinar participants for the purposes of recording and following up on webinars.
If you are registered as a user with “Zoom”, then reports on “online meetings” (meeting metadata, telephone dial-in data, questions and answers in webinars, poll function in webinars) can be stored by “Zoom” for up to one month.
Automated decision-making within the meaning of Art. 22 GDPR is not used.
Legal basis for data processing
Insofar as personal data of employees of PSZ GmbH is processed, Section 26 of the Federal Data Protection Act is the legal basis for data processing. If personal data in connection with the use of "Zoom" is not required for the establishment, implementation or termination of the employment relationship, but is nevertheless an elementary component in the use of "Zoom", Art. 6 Para. 1 lit. f) GDPR is the legal basis for data processing. In these cases, our interest lies in the effective implementation of "online meetings".
Furthermore, the legal basis for data processing when conducting “online meetings” is Art. 6 (1) lit. b) GDPR, insofar as the meetings are conducted within the framework of contractual relationships.
If no contractual relationship exists, the legal basis is Art. 6 (1) (f) GDPR. Here, too, we are interested in the effective conduct of “online meetings”.
Recipient / transfer of data
Personal data processed in connection with participation in "online meetings" will generally not be passed on to third parties unless they are specifically intended to be passed on. Please note that content from "online meetings", as with personal meetings, is often used to communicate information with customers, interested parties or third parties and is therefore intended to be passed on.
Other recipients: The provider of “Zoom” necessarily receives knowledge of the above-mentioned data, insofar as this is provided for in our order processing agreement with “Zoom”.
Data processing outside the European Union
“Zoom” is a service provided by a provider from the USA. Personal data is therefore also processed in a third country. We have concluded a data processing agreement with the provider of “Zoom” that complies with the requirements of Art. 28 GDPR.
On the one hand, an appropriate level of data protection is guaranteed by the conclusion of the so-called EU standard contractual clauses. As a supplementary protective measure n We have also configured our Zoom so that only data centers in the EU, the EEA or safe third countries such as Canada or Japan are used to conduct “online meetings”.
We have not appointed a data protection officer.
You can reach it as follows:
Physio & Sports Therapy Center GmbH
Health Center at Wellcom
Rodenbacher Chaussee 4
63457 Hanau
Phone: 06186-5049784
Mail: datenschutz@psz-ipw.com
Your rights as a data subject
You have the right to information about the personal data concerning you. You can contact us at any time to request information.
If you do not request information in writing, please understand that we may require you to provide evidence that you are the person you claim to be.
Furthermore, you have the right to rectification or erasure or to restriction of processing, as far as you are entitled to this by law.
Finally, you have the right to object to the processing within the framework of the statutory requirements.
A right to data portability also exists within the framework of data protection regulations.
We generally delete personal data if there is no need for further storage. A requirement may exist in particular if the data is still needed to fulfill contractual services, to check and grant or defend warranty and, if applicable, guarantee claims. In the case of statutory retention periods, deletion will only be considered after the respective retention period has expired.
Right to lodge a complaint with a supervisory authority
You have the right to complain to a data protection supervisory authority about our processing of personal data.
Changes to this privacy policy
We revise this privacy policy if there are changes to data processing or if other reasons make this necessary. You can always find the latest version on this website.
Status: 19.01.2021