DATA PROTECTION
We will explain
Ladies and Gentlemen
The protection of your personal data is important to us. According to the EU General Data Protection Regulation (GDPR), we are obligated to inform you about the purpose for which our practice collects, stores, or transmits data. This information also explains your data protection rights.
a) general data protection
1. RESPONSIBILITY FOR DATA PROCESSING
The entity responsible for data processing is:
Physio and Sports Therapy Center GmbH
Rodenbacher Chaussee 4
63457 Hanau
Tel: 06181-5049784
Fax: 06181-5049783
Email: datenschutz@psz-ipw.de
2. PURPOSE OF DATA PROCESSING
Data processing is carried out on the basis of legal requirements in order to fulfill the treatment and training contract between you and the physiotherapy and sports therapy center and the associated obligations.
For this purpose, we process your personal data, in particular your health data. This includes all data listed on a doctor's prescription, as well as diagnoses, treatment proposals and methods, and findings that we or other doctors collect. Other doctors or therapists treating you may also provide us with data for these purposes, for example, in medical reports or therapy summaries.
The collection of your health data is a prerequisite for your treatment. We need this necessary information to provide you with thorough treatment.
3. RECIPIENTS OF YOUR DATA
We will only transfer your personal data to third parties if this is legally permitted or if you have given your consent.
Recipients of your personal data may include, in particular, other doctors / psychotherapists, statutory health insurance associations, health insurance companies, the Medical Service of the Health Insurance Funds, medical associations, private medical billing centers and the company medical service in Hanau.
The transfer of your data is primarily for the purpose of billing for services rendered to you and for clarifying medical questions and issues arising from your insurance relationship. In individual cases, data may be transferred to other authorized recipients.
4. STORAGE OF YOUR DATA
We only retain your personal data for as long as is necessary to carry out the treatment.
Due to legal requirements, we are obligated to retain this data for at least 10 years after the conclusion of treatment. Other regulations may stipulate longer retention periods, for example, 30 years for X-ray records according to Section 28, Paragraph 3 of the X-ray Ordinance.
5. YOUR RIGHTS
You have the right to obtain information about your personal data. You can also request the correction of inaccurate data.
Furthermore, under certain conditions you have the right to erasure of data, the right to restriction of data processing and the right to data portability.
Your data is processed based on legal regulations. We only require your consent in exceptional cases. In these cases, you have the right to withdraw your consent for future processing.
You also have the right to lodge a complaint with the competent data protection supervisory authority if you believe that the processing of your personal data is unlawful.
The address of the supervisory authority responsible for us is:
The Hessian Data Protection Commissioner
PO Box 3163
65021 Wiesbaden
Telephone: 49 611 1408 - 0
Fax: 49 611 1408 - 611
The legal basis for processing your data is Article 9 paragraph 2 lit. h) GDPR in conjunction with Section 22 paragraph 1 no. 1 lit. b) of the German Federal Data Protection Act. If you have any questions, please feel free to contact us.
Data protection information for online meetings, telephone conferences and webinars via "Zoom" of Physio- u. Sporttherapie Zentrum GmbH
We would like to inform you below about the processing of personal data in connection with the use of “Zoom”.
Purpose of processing
We use the tool "Zoom" to conduct telephone conferences, online meetings, video conferences and/or webinars (hereinafter: "online meetings"). "Zoom" is a service of Zoom Video Communications, Inc., which is based in the USA.
Responsible
The controller responsible for data processing directly related to the execution of "online meetings" is the
Physio- and Sports Therapy Center GmbH (PSZ GmbH for short)
Rodenbacher Chaussee 4
63457 Hanau
Note: When you access the Zoom website, Zoom is responsible for data processing. However, accessing the website is only necessary to download the Zoom software.
You can also use "Zoom" by entering the respective meeting ID and, if necessary, other access data for the meeting directly into the "Zoom" app.
If you do not want to or cannot use the “Zoom” app, the basic functions can also be used via a browser version, which you can also find on the “Zoom” website.
What data is processed?
When using Zoom, various types of data are processed. The scope of the data also depends on what information you provide before or during participation in an online meeting.
The following personal data are processed:
User information: First name, last name, telephone number (optional), email address, password (if "Single Sign-On" is not used), profile picture (optional),
Department (optional)
Meeting metadata: Topic, description (optional), participant IP addresses, device/hardware information
Recordings, M4A file of all audio recordings, text file of the online meeting chat.
When dialing in by telephone: Information about the incoming and outgoing phone number, country name, start and end time. Additional connection data, such as the device's IP address, may also be stored.
Text, audio, and video data: You may have the option to use the chat, question, or survey functions in an online meeting. In this case, the text you enter will be processed to display it in the online meeting and, if necessary, to record it. To enable video display and audio playback, data from your device's microphone and any webcam will be processed for the duration of the meeting. You can disable or mute your camera or microphone at any time using the Zoom application.
To participate in an “online meeting” or to enter the “meeting room”, you must at least provide information about your name.
Scope of processing
We use Zoom to conduct online meetings. If we intend to record an online meeting, we will inform you transparently beforehand and, if necessary, request your consent. The fact that a recording is taking place will also be displayed in the Zoom app.
If it is necessary for the purpose of documenting the results of an online meeting, we will log the chat content. However, this will not usually be the case.
In the case of webinars, we may also process questions asked by webinar participants for the purposes of recording and follow-up of webinars.
If you are registered as a user with "Zoom", reports on "online meetings" (meeting metadata, dial-in data, questions and answers in webinars, survey function in webinars) can be stored by "Zoom" for up to one month.
Automated decision-making as defined in Article 22 GDPR is not used.
Legal basis for data processing
Insofar as personal data of employees of PSZ GmbH is processed, Section 26 of the German Federal Data Protection Act (BDSG) is the legal basis for the data processing. If, in connection with the use of "Zoom," personal data is not required for the establishment, execution, or termination of the employment relationship, but is nevertheless an essential component of using "Zoom," then Article 6 Paragraph 1 Letter f) of the GDPR is the legal basis for the data processing. In these cases, our legitimate interest lies in the effective conduct of online meetings.
Furthermore, the legal basis for data processing when conducting “online meetings” is Art. 6 para. 1 lit. b) GDPR, insofar as the meetings are conducted within the framework of contractual relationships.
If no contractual relationship exists, the legal basis is Article 6(1)(f) GDPR. Here too, our interest lies in the effective conduct of online meetings.
Recipients / Disclosure of data
Personal data processed in connection with participation in online meetings will generally not be disclosed to third parties unless specifically intended for disclosure. Please note that, as with in-person meetings, the content of online meetings is often intended to communicate information to customers, prospects, or other third parties and is therefore intended for disclosure.
Other recipients: The provider of “Zoom” necessarily receives knowledge of the above data, insofar as this is provided for in our data processing agreement with “Zoom”.
Data processing outside the European Union
Zoom is a service provided by a US-based company. This means that personal data is also processed in a third country. We have concluded a data processing agreement with Zoom that complies with the requirements of Article 28 of the GDPR.
An adequate level of data protection is guaranteed, firstly, by the conclusion of the so-called EU standard contractual clauses. As a supplementary protective measuren Furthermore, we have configured our Zoom settings so that only data centers in the EU, the EEA or secure third countries such as Canada or Japan are used for conducting "online meetings".
Data Protection Officer
We have not appointed a data protection officer.
You can reach it as follows:
Physio & Sports Therapy Center GmbH
Health Center at Wellcom
Rodenbacher Chaussee 4
63457 Hanau
Tel.: 06186-5049784
Email: datenschutz@psz-ipw.com
Your rights as a data subject
You have the right to information about your personal data. You can contact us at any time to request this information.
For information requests that are not made in writing, we ask for your understanding that we may require proof from you that you are the person you claim to be.
Furthermore, you have the right to rectification or erasure or to restriction of processing, insofar as you are legally entitled to this.
Finally, you have the right to object to the processing within the framework of the legal requirements.
A right to data portability also exists within the framework of data protection regulations.
We generally delete personal data when there is no longer a need for its storage. A need may exist, in particular, if the data is still required to fulfill contractual obligations, to examine and grant or defend against warranty and, if applicable, guarantee claims. In the case of statutory retention obligations, deletion is only considered after the respective retention period has expired.
Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.
Changes to this privacy policy
We revise this privacy policy when there are changes to data processing or other circumstances that make it necessary. The most current version can always be found on this website.
As of January 19, 2021