This data privacy statement provides information about the nature, scope and purpose of the processing of your personal data when using the website of the Martini-Klinik am UKE GmbH (Martini-Klinik) (https://www.martini-klinik.de/... including subpages).
1. Data processed, purpose and duration of processing
1.1 Processing of general information when you visit our website
When you access the website and its contents, your personal data is only processed to the extent technically necessary (in particular: IP address; name of the file accessed; date and time of your visit; browser type and version, your operating system; the webpage from which you came to our site). This information is technically necessary in order to correctly deliver the contents of our website requested by you. It is regularly saved when a webpage is visited. Your data will be processed for the following purposes in particular:
• Ensuring use of and connection to the website of the Martini-Klinik,
• Ensuring and evaluating system security and stability and
• For other administrative purposes.
The processing of your personal data is based on our legitimate interest resulting from the above-mentioned purposes for data collection (Art. 6, paragraph 1, lit. f) of the GDPR). This data will not be assigned to specific persons by us and will not be merged with other data sources. The Martini-Klinik and our order processors are the only recipients of the data.
The server logs are deleted after 7 days. This data will not be statistically evaluated, but can be used for an error analysis where required.
1.2 Registering on our website
You can register to use certain contents of the Martini-Klinik website. During the registration process you will be shown other data protection information that may include different provisions. This may concern in particular the purpose and the nature of processing as well as the duration and legal basis of processing. When registering, please also read such data protection information provided during the registration process.
1.3 Newsletter subscription
If you sign up on the Martini-Klinik website to receive a newsletter, the personal data entered by you will be processed (your e-mail address at least, and your name if necessary). This is required in order to regularly send you the subscribed newsletter by e-mail to the e-mail address provided by you.
To check that it really is the holder of an e-mail address signing up, the "double-opt-in" method is used. For this purpose, the subscription to the newsletter, the sending of the confirmation e-mail and the receipt of the answer requested in said email are logged. No other data will be collected. The data will be used solely for the purpose of sending newsletters and will not be passed on to third parties.
The newsletter and the consent to the storage of your personal data and its use for the sending of the newsletter can be revoked at any time. There is a corresponding link in every newsletter.
Your above-mentioned personal data will be processed for the duration of newsletter receipt. The data will be deleted immediately after you have unsubscribed.
1.4 Use of contact forms
The Martini-Klinik website also provides contact forms for different departments of the Martini-Klinik, intended to make contacting the desired institutes of the Martini-Klinik easier for you. The data to be entered by you on the contact forms (usually name, e-mail address, message) will be forwarded directly to the department to which your request is directed.
The data will be used by the respective department for the purpose of processing your request. Please note that the Martini-Klinik does not usually respond to requests relating to patients and study participants electronically, as an unencrypted e-mail does not have a sufficiently high degree of security for the special protection requirement of health data.
The data transmitted in each case is processed based on your consent to data processing when sending off the contact form. This consent may be revoked at any time.
The Martini-Klinik will process your personal data sent via a contact form for as long as required to deal with your request. Depending on your request, further documentation and retention periods may apply (e.g. 30 years in case of notifications regarding patient data that becomes part of a patient record).
The website of the Martini-Klinik uses (as do many other websites) so-called "cookies". Cookies are small text files transferred to your hard drive by a server. Data contained in these cookies is placed on your computer (etc.)
Cookies cannot be used to run programs or transfer viruses to a computer. The information contained in cookies serves to make navigating a website easier and enables webpages to be displayed correctly. Cookies are also used on the Martini-Klinik website in order to allow statistical analysis of visits (see section 1.6: Use of Google Analytics).
In no case will the data collected by us be passed on to third parties or a link to your personal data made without your consent.
1.6 Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will usually be transmitted to and stored by Google on servers in the United States. In case IP-anonymisation is activated on this website, your IP address will be truncated within the area of Member States of the European Union or other parties to the Agreement on the European Economic Area. In exceptional cases only, the whole IP address will be transferred to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing them other services relating to website activity and internet usage. Google will not associate your IP address with any other data held by Google.
Right to object:
2. . Use of privacy enhancing techniques
2.1 SSL encryption
In order to keep your data secure as it travels between your computer and the website of the Martini-Klinik, the company uses the latest encryption methods (e.g. SSL) using HTTPS.
2.2 Integrated third-party content
The Martini-Klinik is not responsible for the processing of the data collected by third-party providers and only very sparingly integrates contents of other providers.
Maps of the "OpenStreetMap" service (https://www.openstreetmap.de) are sometimes integrated, which are provided by the OpenStreetMap Foundation (OSMF) based on the Open Data Commons Open Database License (ODbL). Data privacy statement wiki.openstreetmap.org/wiki/Privacy_Policy.
To the Martini-Klinik’s knowledge, user data is only used by OpenStreetMap for purposes of displaying the map function and temporarily storing the chosen settings. This data may include, in particular, users’ IP addresses and location data, but this will not be collected without their consent (usually provided when making their mobile device settings). The data may be processed in the USA.
2.4 Social Plugins
You can share content and links to the Martini-Klinik website on Facebook, WhatsApp, Xing, Twitter and Google+. The Shariff extension is used for this purpose. This means that some initial data is transmitted to the respective provider when you access their site in a pop-up window by clicking on their logo. If you are not already logged onto their site, the provider’s login and registration pages will be shown.
Please note that we have no information and control over which data these providers collect and store since these services are not part of our website. If you do not wish for data to be transmitted to these providers, you should not use the "Share” buttons under our postings. You can find more information at www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html.
3. Data protection information for doctors/specialist audience
On the processing of personal data by the Martini-Klinik am UKE GmbH for the organisation of events, marketing campaigns and for the sending of invitations and specialist information. Not part of this information is the treatment of your data in the event that you sign up for an event.
3.1 Party responsible for data protection and data protection officer
Data processing is carried out by Martini-Klinik am UKE GmbH (Martini-Klinik), Martinistr. 52, 20246 Hamburg. Internally, corporate communications is responsible, who you can contact by e-mail: firstname.lastname@example.org.
3. 2 Legal basis, purpose and nature of the processed data
For event organisation including the invitation and the sending of specialist information, different data is processed, including in particular your name, contact details as well as data on your activity (specialist field, clinic/practice etc.). At no point will data from patients be used or comparisons made with it.
a. Sending of invitations to conferences and other specialist events as well as specialist information
We send invitations to congresses and other specialist events both by post and by email. We will only put you in the e-mail distribution list if you have voluntarily signed up for this and have consented to data processing in accordance with Art. 6 para. 1 lit. a) of the GDPR. Your consent can be revoked at any time by clicking on the link at the end of any e-mail or requesting revocation by e-mail to: email@example.com.
The processing of data to send invitations by post is based on our legitimate interest in the distribution of our offers in accordance with Art. 6, paragraph 1, lit. f) of the GDPR. However, you can also notify us by e-mail: firstname.lastname@example.org if you wish to be removed from the mailing list.
b. Revocation list
If you have told us that you no longer wish to receive invitations or specialist information from us, we will put your data in a revocation list in order to prevent you being sent these in the future. In this regard, processing is based on Art. 6, paragraph 1, lit. f) of the GDPR
3. 3 Recipients of your personal data
Your personal data is processed in the Martini-Klinik by the departments and employees responsible in each case. Furthermore, the IT department of the University Medical Center Hamburg-Eppendorf can obtain access to your data in the context of IT maintenance; it does not have the right to process it further however.
To send you newsletters by e-mail, we use the services of provider Newsletter2Go, which will receive the content of the message, your name and your e-mail address.
3. 4. Duration of storage
Your personal data will generally be processed for as long as is required for the purpose of processing. As far as the e-mail distribution list is concerned, this ultimately means that we will process your personal data until your consent has been revoked.
4. Your rights as a data subject
You are entitled to exercise rights as a data subject in particular cases. You can assert these rights against the Martini-Klinik.
You have the right to access the personal data stored about you in accordance with Art. 15 of the GDPR. If you determine that incorrect data about your person is being processed, you can demand rectification under certain conditions in accordance with Art. 16 of the GDPR. Incomplete data must be completed taking into account the purpose of the processing. Where the conditions of Art. 17 of the GDPR are fulfilled, and in particular, the data is no longer required for the original purpose and the retention periods have passed, you may request deletion of the data. In accordance with Art. 18 of the GDPR, you may be able to request from us that the Martini-Klinik restrict the further processing of the data. This means that, although your data will not be deleted, it will be flagged to block it for further processing. Where the processing of your patient data is based on a public or legitimate interest in the sense of Art. 6 paragraph 1 lit. e), f) of the GDPR, you can object to processing on grounds relating to your particular situation in accordance with Art. 21 of the GDPR.
5. How to complain
The Martini-Klinik makes every effort to process your personal data in accordance with the legal requirements. If, however, you are of the opinion that the processing of your personal data is inadmissible under data protection law, please do not hesitate to contact the data protection officer of the Martini-Klinik.
Tel. 040/7410 56890
You also have the option of submitting a complaint to the responsible supervisory authority. The supervisory authority responsible for you depends on the state in which you reside or the alleged data protection violation took place. A list of supervisory authorities with their addresses can be found at: www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html. Responsible for the UKE is the Hamburg Commissioner for Data Protection and Freedom of Information:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit