DATA PROTECTION
We clarify
Ladies and Gentlemen
The protection of your personal data is important to us. According to the EU General Data Protection Regulation (GDPR), we are obliged to inform you about the purpose for which our practice collects, stores or forwards data. You can also find out from the information what rights you have with regard to data protection.
a) general data protection
1. RESPONSIBILITY FOR DATA PROCESSING
Responsible for data processing is:
Physio and Sports Therapy Center GmbH
Rodenbacher Chaussee 4
63457 Hanau
Tel: 06181-5049784
Fax: 06181-5049783
Email: datenschutz@psz-ipw.de
2. PURPOSE OF DATA PROCESSING
Data processing is carried out based on legal requirements in order to fulfill the treatment and training contract between you and the physio and sports therapy center and the associated obligations.
For this purpose, we process your personal data, in particular your health data. This includes all data listed on a medical prescription as well as diagnoses, therapy suggestions and methods and findings that we or doctors collect. For these purposes, other doctors or therapists with whom you are being treated may also provide us with data, for example in doctor's letters or therapy reports.
The collection of health data is a prerequisite for your treatment. We need this necessary information to carry out careful treatment.
3. RECIPIENTS OF YOUR DATA
We only transfer your personal data to third parties if this is permitted by law or if you have consented to this.
Recipients of your personal data can primarily be other doctors/psychotherapists, associations of statutory health insurance physicians, health insurance companies, the medical service of the health insurance company, medical associations, private medical clearinghouses and the Hanau company medical service.
The transmission is mainly carried out for the purpose of billing the services provided to you and to clarify medical questions and questions arising from your insurance relationship. In individual cases, data may be transmitted to other authorized recipients.
4. STORAGE OF YOUR DATA
We only keep your personal data for as long as necessary to carry out the treatment.
Due to legal requirements, we are obliged to store this data for at least 10 years after the treatment has been completed. Other regulations may require longer retention periods, for example 30 years for X-ray recordings in accordance with Section 28 Paragraph 3 of the X-ray Ordinance.
5. YOUR RIGHTS
You have the right to receive information about your personal data. You can also request that incorrect data be corrected.
In addition, under certain conditions, you have the right to delete data, the right to restrict data processing and the right to data portability.
Your data is processed on the basis of legal regulations. We only need your consent in exceptional cases. In these cases, you have the right to withdraw consent for future processing.
You also have the right to complain to the responsible data protection supervisory authority if you believe that the processing of your personal data is not taking place lawfully.
The address of the supervisory authority responsible for us is:
The Hessian data protection officer
PO Box 3163
65021 Wiesbaden
Telephone: 49 611 1408 - 0
Fax: 49 611 1408 - 611
The legal basis for the processing of your data is Article 9 Paragraph 2 Letter h) GDPR in conjunction with Section 22 Paragraph 1 Number 1 Letter b) Federal Data Protection Act. If you have any questions, please feel free to contact us.
Data protection information for online meetings, telephone conferences and webinars via “Zoom” from Physio- u. Sporttherapie Zentrum GmbH
We would like to inform you below about the processing of personal data in connection with the use of “Zoom”.
Purpose of processing
We use the “Zoom” tool to conduct telephone conferences, online meetings, video conferences and/or webinars (hereinafter: “online meetings”). “Zoom” is a service of Zoom Video Communications, Inc., which is based in the USA.
Responsible person
The person responsible for data processing that is directly related to the implementation of “online meetings” is
Physio- and Sports Therapy Center GmbH (PSZ GmbH for short)
Rodenbacher Chaussee 4
63457 Hanau
Note: If you access the “Zoom” website, the “Zoom” provider is responsible for data processing. However, to use “Zoom”, you only need to visit the website to download the software for using “Zoom”.
You can also use “Zoom” if you enter the respective meeting ID and, if necessary, other access data for the meeting directly in the “Zoom” app.
If you do not want to or cannot use the “Zoom” app, the basic functions can also be used via a browser version, which you can also find on the “Zoom” website.
Which data is processed?
When using “Zoom” different types of data are processed. The extent of the data also depends on what data information you provide before or when participating in an “online meeting”.
The following personal data are the subject of processing:
User information: First name, last name, telephone (optional), email address, password (if “single sign-on” is not used), profile picture (optional),
Department (optional)
Meeting metadata: topic, description (optional), participant IP addresses, device/hardware information
recordings, M4A file of all audio recordings, text file of online meeting chat.
When dialing in with the telephone: information about the incoming and outgoing phone number, country name, start and end time. If necessary, additional connection data such as the IP address of the device can be saved.
Text, audio and video data: You may have the opportunity to use the chat, question or survey functions in an “online meeting”. In this respect, the text entries you make will be processed in order to display them in the “online meeting” and, if necessary, to record them. In order to enable the display of video and the playback of audio, the data from the microphone of your device and any video camera on the device are processed for the duration of the meeting. You can switch off or mute the camera or microphone at any time using the “Zoom” applications.
In order to take part in an “online meeting” or enter the “meeting room”, you must at least provide information about your name.
Scope of processing
We use “Zoom” to conduct “online meetings”. If we want to record “online meetings”, we will inform you transparently in advance and – if necessary – ask for your consent. The fact of the recording will also be displayed to you in the “Zoom” app.
If necessary for the purposes of logging the results of an online meeting, we will log the chat content. However, this will usually not be the case.
In the case of webinars, we can also process the questions asked by webinar participants for the purposes of recording and following up on webinars.
If you are registered as a user with “Zoom”, then reports about “online meetings” (meeting metadata, telephone dial-in data, questions and answers in webinars, poll function in webinars) can be stored with “Zoom” for up to one month.
Automated decision-making within the meaning of Art. 22 GDPR is not used.
Legal basis for data processing
As far as personal data of employees of PSZ GmbH is processed, Section 26 BDSG is the legal basis for data processing. If, in connection with the use of “Zoom”, personal data is not necessary for the establishment, implementation or termination of the employment relationship, but is nevertheless an elementary part of the use of “Zoom”, then Art. 6 Para. 1 lit. f) GDPR the legal basis for data processing. In these cases, our interest is in the effective implementation of “online meetings”.
Furthermore, the legal basis for data processing when conducting “online meetings” is Article 6 Paragraph 1 Letter b) GDPR, insofar as the meetings are carried out within the framework of contractual relationships.
If there is no contractual relationship, the legal basis is Article 6 Paragraph 1 Letter f) GDPR. Here, too, we are interested in the effective implementation of “online meetings”.
Recipient/transfer of data
Personal data processed in connection with participation in “online meetings” will generally not be passed on to third parties unless they are specifically intended to be passed on. Please note that content from “online meetings” as well as personal meetings are often used to communicate information with customers, interested parties or third parties and are therefore intended to be passed on.
Other recipients: The provider of “Zoom” necessarily receives knowledge of the above-mentioned data, insofar as this is provided for within the scope of our order processing agreement with “Zoom”.
Data processing outside the European Union
“Zoom” is a service provided by a provider from the USA. Processing of personal data also takes place in a third country. We have concluded an order processing agreement with the provider of “Zoom” that meets the requirements of Art. 28 GDPR.
An adequate level of data protection is guaranteed, on the one hand, by concluding the so-called EU standard contractual clauses. As a supplementary protective measure n We have also configured our Zoom configuration so that only data centers in the EU, the EEA or safe third countries such as Canada or Japan are used to hold “online meetings”.
We have not appointed a data protection officer.
You can reach this as follows:
Physio & Sports Therapy Center GmbH
Health center in Wellcom
Rodenbacher Chaussee 4
63457 Hanau
Telephone: 06186-5049784
Email: datenschutz@psz-ipw.com
Your rights as a data subject
You have the right to information about the personal data concerning you. You can contact us at any time for information.
If you request information that is not made in writing, please understand that we may require you to provide evidence that you are who you say you are.
You also have the right to correction or deletion or to restriction of processing, to the extent that you are entitled to this by law.
Finally, you have the right to object to processing within the framework of the legal requirements.
There is also a right to data portability within the framework of data protection regulations.
We generally delete personal data if there is no need for further storage. A requirement may exist in particular if the data is still needed to fulfill contractual services, to check and grant or ward off warranty and, if applicable, guarantee claims. In the case of statutory retention obligations, deletion will only be considered after the respective retention obligation has expired.
Right to lodge a complaint with a supervisory authority
You have the right to complain to a data protection supervisory authority about our processing of personal data.
Changes to this data protection notice
We will revise this data protection notice if there are changes to data processing or other occasions that make this necessary. You can always find the current version on this website.
As of: January 19, 2021