DATA PROTECTION
We clarify
Ladies and Gentlemen
The protection of your personal data is important to us. According to the EU General Data Protection Regulation (GDPR), we are obligated to inform you about the purposes for which our practice collects, stores, or forwards data. This information also explains your data protection rights.
a) general data protection
1. RESPONSIBILITY FOR DATA PROCESSING
Responsible for data processing is:
Physio and Sports Therapy Center GmbH
Rodenbacher Chaussee 4
63457 Hanau
Phone: 06181-5049784
Fax: 06181-5049783
Mail: datenschutz@psz-ipw.de
2. PURPOSE OF DATA PROCESSING
Data processing is carried out in accordance with legal requirements in order to fulfill the treatment and training contract between you and the Physiotherapy and Sports Therapy Center and the associated obligations.
For this purpose, we process your personal data, in particular your health data. This includes all data listed on a doctor's prescription, as well as diagnoses, treatment suggestions and methods, and findings that we or doctors collect. Other doctors or therapists with whom you are undergoing treatment may also provide us with data for these purposes, e.g., in medical letters or therapy reports.
Collecting health data is a prerequisite for your treatment. We need this information to provide you with careful treatment.
3. RECIPIENTS OF YOUR DATA
We will only transfer your personal data to third parties if this is permitted by law or if you have given your consent.
Recipients of your personal data may primarily be other doctors/psychotherapists, associations of statutory health insurance physicians, health insurance funds, the medical service of the health insurance company, medical associations, private medical billing offices and the Hanau company medical service.
The transfer is primarily for the purpose of billing for the services provided to you and to clarify medical questions and questions arising from your insurance relationship. In individual cases, data may be transferred to other authorized recipients.
4. STORAGE OF YOUR DATA
We will only retain your personal data for as long as necessary to carry out the treatment.
Due to legal requirements, we are obligated to retain this data for at least 10 years after the completion of treatment. Other regulations may stipulate longer retention periods, for example, 30 years for X-ray records according to Section 28, Paragraph 3 of the X-ray Ordinance.
5. YOUR RIGHTS
You have the right to receive information about the personal data concerning you. You can also request the correction of inaccurate data.
In addition, under certain conditions, you have the right to erasure of data, the right to restriction of data processing and the right to data portability.
Your data is processed in accordance with legal regulations. We only require your consent in exceptional cases. In these cases, you have the right to revoke your consent for future processing.
You also have the right to complain to the competent data protection supervisory authority if you believe that the processing of your personal data is not lawful.
The address of the supervisory authority responsible for us is:
The Hessian Data Protection Commissioner
PO Box 3163
65021 Wiesbaden
Phone: 49 611 1408 - 0
Fax: 49 611 1408 - 611
The legal basis for the processing of your data is Article 9, paragraph 2, letter h) of the GDPR in conjunction with Section 22, paragraph 1, no. 1, letter b) of the Federal Data Protection Act. If you have any questions, please feel free to contact us.
Data protection information for online meetings, telephone conferences and webinars via “Zoom” of the Physio- u. Sporttherapie Zentrum GmbH
We would like to inform you below about the processing of personal data in connection with the use of “Zoom”.
Purpose of processing
We use the tool "Zoom" to conduct telephone conferences, online meetings, video conferences, and/or webinars (hereinafter: "online meetings"). "Zoom" is a service provided by Zoom Video Communications, Inc., which is based in the USA.
Person responsible
The controller for data processing directly related to the conduct of “online meetings” is
Physio- and Sports Therapy Center GmbH (PSZ GmbH for short)
Rodenbacher Chaussee 4
63457 Hanau
Note: If you access the Zoom website, the provider of Zoom is responsible for data processing. However, accessing the website is only necessary to download the software for using Zoom.
You can also use “Zoom” if you enter the respective meeting ID and, if necessary, other access data for the meeting directly in the “Zoom” app.
If you do not want or cannot use the Zoom app, the basic functions can also be used via a browser version, which you can also find on the Zoom website.
What data is processed?
When using Zoom, various types of data are processed. The extent of the data also depends on the information you provide before or during your participation in an online meeting.
The following personal data are subject to processing:
User information: First name, last name, telephone (optional), email address, password (if single sign-on is not used), profile picture (optional),
Department (optional)
Meeting metadata: Topic, description (optional), participant IP addresses, device/hardware information
recordings, M4A file of all audio recordings, text file of the online meeting chat.
When dialing in by phone: information about the incoming and outgoing phone number, country name, start and end time. Additional connection data, such as the device's IP address, may be saved.
Text, audio, and video data: You may have the option to use the chat, question, or survey functions in an online meeting. The text entries you make will be processed to display them in the online meeting and, if necessary, to log them. To enable the display of video and the playback of audio, the data from your device's microphone and any video camera on the device will be processed accordingly for the duration of the meeting. You can turn off or mute the camera or microphone yourself at any time via the Zoom applications.
To participate in an “online meeting” or to enter the “meeting room”, you must at least provide your name.
Scope of processing
We use Zoom to conduct online meetings. If we plan to record online meetings, we will transparently inform you in advance and, where necessary, ask for your consent. The fact that the meeting is being recorded will also be displayed in the Zoom app.
If necessary for the purposes of recording the results of an online meeting, we will log the chat content. However, this will generally not be the case.
In the case of webinars, we may also process questions asked by webinar participants for the purposes of recording and following up on webinars.
If you are registered as a user with Zoom, reports on online meetings (meeting metadata, telephone dial-in data, questions and answers in webinars, poll function in webinars) may be stored by Zoom for up to one month.
Automated decision-making within the meaning of Art. 22 GDPR is not used.
Legal basis for data processing
To the extent that personal data of PSZ GmbH employees is processed, Section 26 of the German Federal Data Protection Act (BDSG) serves as the legal basis for data processing. If personal data in connection with the use of "Zoom" is not required for the establishment, implementation, or termination of the employment relationship, but is nevertheless an essential component of the use of "Zoom," Art. 6 (1) (f) GDPR serves as the legal basis for data processing. In these cases, our interest lies in the effective conduct of "online meetings."
Furthermore, the legal basis for data processing when conducting “online meetings” is Art. 6 (1) (b) GDPR, insofar as the meetings are conducted within the framework of contractual relationships.
If no contractual relationship exists, the legal basis is Art. 6 (1) (f) GDPR. Here, too, our interest lies in the effective conduct of online meetings.
Recipient / transfer of data
Personal data processed in connection with participation in online meetings will generally not be shared with third parties unless specifically intended for sharing. Please note that content from online meetings, as with in-person meetings, is often used specifically to communicate information with customers, prospects, or third parties and is therefore intended for sharing.
Other recipients: The provider of “Zoom” necessarily receives knowledge of the above-mentioned data, insofar as this is provided for in our order processing agreement with “Zoom”.
Data processing outside the European Union
"Zoom" is a service provided by a provider from the USA. Personal data is therefore also processed in a third country. We have concluded a data processing agreement with the provider of "Zoom" that complies with the requirements of Art. 28 GDPR.
An appropriate level of data protection is guaranteed, on the one hand, by the conclusion of the so-called EU standard contractual clauses. As a supplementary protective measuren We have also configured our Zoom so that only data centers in the EU, the EEA or safe third countries such as Canada or Japan are used to conduct “online meetings”.
Data Protection Officer
We have not appointed a data protection officer.
You can reach it as follows:
Physio & Sports Therapy Center GmbH
Health Center at Wellcom
Rodenbacher Chaussee 4
63457 Hanau
Phone: 06186-5049784
Email: datenschutz@psz-ipw.com
Your rights as a data subject
You have the right to information about the personal data concerning you. You can contact us at any time to request this information.
If you do not request information in writing, we ask for your understanding that we may require you to provide evidence that you are the person you claim to be.
Furthermore, you have the right to rectification or erasure or to restriction of processing, to the extent that you are entitled to this by law.
Finally, you have the right to object to processing within the framework of the statutory provisions.
A right to data portability also exists within the framework of data protection regulations.
We generally delete personal data when there is no longer a need for its continued storage. This may be necessary, in particular, if the data is still needed to fulfill contractual services, to verify, grant, or defend warranty and, if applicable, guarantee claims. In the case of statutory retention periods, deletion will only be considered after the respective retention period has expired.
Right to lodge a complaint with a supervisory authority
You have the right to complain to a data protection supervisory authority about our processing of your personal data.
Changes to this privacy policy
We will revise this privacy policy if changes to data processing occur or for other reasons that make this necessary. The most current version can always be found on this website.
As of: 19.01.2021