Privacy Policy
Introduction and general information
Thank you for your interest in our website. The protection of your personal data is very important to us. Here you will find information on how we handle your data that is collected through your use of our website. Your data will be processed in accordance with the legal regulations on data protection.
Person responsible within the meaning of the GDPR:
Charité Healthcare Services GmbH
Bundesallee 39-40a
10717 Berlin
Tel: +49(30)450-578217
Contact details of the data protection officer
Proliance GmbH / www.datenschutzexperte.de
Data Protection Officer
Leopoldstr. 21
80802 München
E-Mail an Datenschutzbeauftragten
When contacting the Data Protection Officer, please state the company to which your enquiry relates. Please refrain from enclosing sensitive information, such as a copy of an identity card, with your enquiry.
Definitions
Our privacy policy is intended to be simple and understandable for everyone. In this data protection declaration, the official terms of the General Data Protection Regulation (GDPR) are generally used. The official definitions are explained in Art. 4 GDPR.
Access to and storage of information in terminal equipment
By using our website, information (e.g. IP address) may be accessed or stored (e.g. cookies) in your terminal equipment. This access or storage may involve further processing of personal data within the meaning of the GDPR.
In cases where such access to information or such storage of information is absolutely necessary for the technically error-free provision of our services, this is done on the basis of Section 25 (1) sentence 1, (2) no. 2 TTDSG.
In cases where such a process serves other purposes (e.g. the needs-based design of our website), this will only be carried out on the basis of § 25 para. 1 TTDSG with your consent in accordance with Art. 6 para. 1 lit. a GDPR. The consent can be revoked at any time for the future. The provisions of the GDPR and the Federal Data Protection Act (BDSG) apply to the processing of your personal data.
Further information on the processing of your personal data and the relevant legal bases in this context can be found in the following sections on the specific processing activities on our website.
Web hosting
This website is hosted by an external service provider (hoster). The hosting of this website takes place in personal data collected on this website are stored on the hoster’s servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, website accesses and other data generated via a website.
We collect the listed data in order to be able to guarantee a smooth connection of the website and a technically error-free provision of our services. The processing of this data is absolutely necessary to provide you with the website. The legal basis for the processing of the data is our legitimate interest in the correct presentation and functionality of our website in accordance with Art. 6 (1) lit. f GDPR.
We have concluded an order processing agreement with the provider in accordance with the requirements of Art. 28 GDPR, in which we oblige the provider to protect our customers’ data and not to pass it on to third parties.
Server Logfiles
When you access our website, it is technically necessary for data to be transmitted to our web server via your internet browser. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:
• the browser types and versions used,
• the operating system used by the accessing system
• the website from which an accessing system arrives at our website (so-called referrer),
• the sub-websites which are accessed via an accessing system on our website,
• the date and time of an access to the website,
• the (complete) IP address of the requesting computer,
• the Internet service provider of the accessing system,
• other similar data and information that serve to avert danger in the event of attacks on our information technology systems.
We collect the listed data in order to be able to guarantee a smooth connection setup of the website and a technically error-free provision of our services. The processing of this data is absolutely necessary in order to provide you with the website. The log files are used to evaluate system security and stability as well as for administrative purposes. The legal basis for processing the data is our legitimate interest in the protection and functionality of our website in accordance with Art. 6 (1) lit. f GDPR.
For reasons of technical security, in particular to defend against attempted attacks on our web server, we store this data for a short period of time. After 30 days at the latest, the data is anonymised by shortening the IP address, so that it is no longer possible to establish a reference to the individual user.
Contact form and contact by e-mail
If you send us enquiries via the contact form or e-mail, the information you provide in the enquiry form or e-mail, including the personal data you voluntarily provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. The specification of an e-mail address is required for contacting us, the specification of your first and last name and your telephone number is voluntary. Under no circumstances will we pass on this data without your consent. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 Para. 1 lit. f GDPR and, if applicable, Art. 6 Para. 1 lit. b GDPR, if your request is aimed at concluding a contract. Your data will be deleted after your request has been processed, provided that there are no legal obligations to retain data. You can object to the processing of your personal data at any time in the case of Art. 6 para. 1 lit. f GDPR.
Newsletter
If you would like to receive the newsletter offered on the website with regular information on our offers and products, we require your e-mail as mandatory data.
Additional data may be provided in order to address you personally in the newsletter and/or to identify you if you wish to exercise your rights as a data subject.
We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you our newsletter by e-mail if you have expressly confirmed that you consent to the sending of newsletters. In the first step, you will receive an e-mail with a link that you can use to confirm that you, as the owner of the corresponding e-mail address, wish to receive future newsletters. By confirming, you give us your consent in accordance with Art. 6 Para. 1 lit. a GDPR that we may use your personal data for the purpose of sending the newsletter you requested.
When you register for the newsletter, we store, in addition to the e-mail address required for sending, the IP address via which you registered for the newsletter as well as the date and time of registration and confirmation, in order to be able to trace possible misuse at a later date. The legal basis for this is our legitimate interest according to Art. 6 Para. 1 lit. f GDPR.
You can unsubscribe from the newsletter at any time via the link included in each newsletter or by sending an email to the responsible person named above. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to the continued use of the collected data or the continued processing is otherwise legally permitted.
Cookies
Our website uses so-called “cookies”. Cookies are small text files that are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your terminal device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or until they are automatically deleted by your web browser.
Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or language settings). Other cookies are used to evaluate user behaviour or to display advertising.
The processing of data through the use of absolutely necessary cookies is based on a legitimate interest in accordance with Art. 6 (1) lit. f GDPR in the technically error-free provision of our services. For details on the processing purposes and legitimate interests, please refer to the explanations on the specific data processing.
The processing of personal data through the use of other cookies is based on consent in accordance with Art. 6 para. 1 lit. a GDPR. The consent can be revoked at any time for the future. Insofar as such cookies are used for analysis and optimisation purposes, we will inform you separately about this within the framework of this data protection declaration and obtain consent in accordance with Art. 6 para. 1 lit. a GDPR.
You can revoke or change your cookie settings at any time. To do so, call up the cookie settings again via our integrated thumbprint. You can find this at any time at the bottom left of the website.
or
You can revoke or change your cookie settings at any time. To do so, call up the cookie settings again via this link → change cookie settings.
Furthermore, you can set your browser in such a way that you will be able to:
• be informed about the setting of cookies,
• allow cookies only in individual cases
• exclude the acceptance of cookies for certain cases or in general,
• activate the automatic deletion of cookies when closing the browser.
The cookie settings can be managed under the following links for the respective browsers:
• Google Chrome
• Mozilla Firefox
• Edge (Microsoft)
• Safari
• Opera
You can also manage cookies of many companies and functions used for advertising individually. To do this, use the corresponding user tools, available at https://www.aboutads.info/choices/ or
http://www.youronlinechoices.com/uk/your-ad-choices.
Most browsers also offer a so-called “do-not-track function”. When this function is activated, the respective browser tells advertising networks, websites and applications that you do not want to be “tracked” for the purpose of behavioural advertising and the like.
For information and instructions on how to edit this feature, please see the links below, depending on your browser provider:
• Google Chrome
• Mozilla Firefox
• Edge (Microsoft)
• Safari
• Opera
In addition, you can prevent the loading of so-called scripts by default. “NoScript” allows JavaScripts, Java and other plug-ins to be executed only on trusted domains of your choice. Information and instructions on how to edit this function can be obtained from the provider of your browser (e.g. for Mozilla Firefox at: https://addons.mozilla.org/de/firefox/addon/noscript/).
Please note that if you disable cookies, the functionality of our website may be limited.
Vimeo
“For reasons of user-friendliness and for information purposes, our website contains links to other websites. External links are marked with a uniform symbol, e.g. “Link”. In addition to website links, videos are also made available to you via external links. If you click on the video link on our website, you will be redirected to the external website (e.g. Vimeo). You will only be shown the video on the external website and your personal data will be processed there.
Such websites are operated independently of us. Where we provide links to websites operated by other organisations, this privacy policy does not apply to the processing of personal data by those organisations. Linked sites have their own privacy policies or statements and we encourage you to review them carefully when you visit the linked sites. To the extent that linked sites you visit are not owned or controlled by us, we are not responsible for the content of such sites, nor are we responsible for any use or privacy practices of such sites.”
Use of Matomo
On this website, data is collected and stored using the web analytics software Matomo (www.matomo.org), a service provided by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, (“Matomo”) on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes pursuant to Art. 6 (1) lit. f GDPR. Pseudonymised user profiles can be created and evaluated from this data for the same purpose. Cookies may be used for this purpose. Among other things, the cookies enable the recognition of the internet browser. The data collected using Matomo technology (including your pseudonymised IP address) is processed on our servers.
The information generated by the cookie in the pseudonymous user profile is not used to personally identify the visitor to this website and is not merged with personal data about the bearer of the pseudonym.
If you do not agree to the storage and evaluation of this data from your visit, you can object to its storage and use at any time by clicking on it below. In this case, a so-called opt-out cookie will be stored in your browser, which means that Matomo will not collect any session data. Please note that if you delete your cookies completely, the opt-out cookie will also be deleted, and you may have to reactivate it.
External link
Social networks (LinkedIn) are only integrated on our website as a link to the corresponding services. After clicking on the embedded text/image link, you will be redirected to the page of the respective provider. User information is only transferred to the respective provider after the forwarding. For information on the handling of your personal data when using these websites, please refer to the respective data protection regulations of the providers you use.
Data transfer and recipients
Your personal data will not be passed on to third parties unless we have explicitly pointed this out in the description of the respective data processing, if you have given your express consent in accordance with Art. 6 Para. 1 lit. a GDPR, the disclosure is necessary for the assertion, exercise or defence of legal claims in accordance with Art. 6 Para. 1 lit. f GDPR and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data, in the event that a legal obligation exists for the disclosure in accordance with Art. 6 Para. 1 lit. c GDPR and insofar as this is necessary for the processing of contractual relationships with you in accordance with Art. 6 Para. 1 lit. b GDPR.
In addition, we use external service providers for the processing of our services, which we have carefully selected, commissioned in writing and with whom we have concluded order processing agreements in accordance with Art. 28 GDPR, if necessary. These are bound by our instructions and are regularly monitored by us. These are, among others, service providers for hosting, sending e-mails as well as maintenance and care of our IT systems, etc. The service providers will not pass this data on to third parties.
Data security
We take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk in accordance with Article 32 of the GDPR, taking into account the state of the art, the costs of implementation and the nature, scope, circumstances and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons. This website uses SSL encryption for security reasons and to protect the transmission of confidential content.
Duration of storage of personal data
The duration of the storage of personal data is determined by the relevant statutory retention periods (e.g. from commercial law and tax law). After expiry of the respective period, the corresponding data is routinely deleted. If data is required for the fulfilment or initiation of a contract or if we have a legitimate interest in continuing to store it, the data is deleted when it is no longer required for these purposes, or you have exercised your right of revocation or objection.
Your rights
In the following, you will find information on which data subject rights the applicable data protection law grants you vis-à-vis the controller with regard to the processing of your personal data:
The right to request information about your personal data processed by us in accordance with Article 15 of the GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.
The right to request the correction of incorrect or incomplete personal data stored by us without delay in accordance with Art. 16 GDPR.
The right to request the erasure of your personal data stored by us in accordance with Article 17 of the GDPR, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.
The right to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 GDPR.
The right, pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller.
The right to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state of our registered office stated above or, if applicable, that of your usual place of residence or workplace.
The right to revoke consent given in accordance with Art. 7 (3) GDPR: You have the right to revoke consent to the processing of data once given at any time with effect for the future. In the event of revocation, we will immediately delete the data concerned unless further processing can be based on a legal basis for processing without consent. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
Right to object
If your personal data is processed by us on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, insofar as this is done for reasons arising from your particular situation. Insofar as the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement to specify a particular situation.
If you wish to exercise your right of revocation or objection, simply send an e-mail to CEED@charite.de.
Legal objections
The provision of personal data for the decision on the conclusion of a contract, the performance of a contract or for the implementation of pre-contractual measures is voluntary. However, we can only make the decision in the context of contractual measures if you provide such personal data that is required for the conclusion of the contract, the performance of the contract or pre-contractual measures.
Automated decision-making
Automated decision-making or profiling in accordance with Art. 22 GDPR does not take place.
Reservation of the right to make changes
We reserve the right to adapt or update this data protection declaration, if necessary, in compliance with the applicable data protection regulations. In this way, we can adapt it to the current legal requirements and take into account changes to our services, e.g. when introducing new services. The current version applies to your visit.
Status of this privacy policy declaration: 17.08.2023