The protection of your personal data is important to us. In collecting, processing and using data, we strictly adhere to the regulations and legal bases of the Federal Data Protection Act ( refer also to https://www.gesetze-im-internet.de/bdsg_1990/ ) and to the Telemedia Act ( refer also to https://www.gesetze-im-internet.de/tmg/). By using our website you permit us to collect particular data about you. Below is some information about the type of data which is collected when you visit our homepage and how this data is used.
As a user of the website www.dysgnathie.de you can, in principle, see the full contents of the webpage without entering any personal data. Provided that you as a user, (hereinafter called "person concerned") would like to take advantage of certain services (e.g. appointment or contact forms) via our website, it may, however, become necessary to process personal data (see also Section 4. Collection of data and information).
When processing personal data (e.g. name, date of birth, address, email address or phone number) of a person concerned, we always adhere to the General Data Protection Regulation (see also https://dsgvo-gesetz.de) , as well as the professional code applicable to us and the country-specific data protection regulations. Our intention in issuing this data policy is to inform persons concerned about the type, scope and purpose of the personal data collected and processed by us. Furthermore, we inform all users of our website about their rights in connection with the data processing carried out by our clinic.
In addition, we as the entity responsible for data processing consider it our obligation, with the assistance of several technical and organisational measures, to ensure that the user of the website www.dysgnathie.de is guaranteed protection which is as complete as possible with regard to the personal data processed through this website. In principle, internet-based data transmissions can have security gaps any time, and this means that we cannot guarantee absolute protection. For this reason it is up to each user concerned to transmit personal data to us via alternative means also, for example by telephone.
We intend to make our data policy easy to read and to understand, both for the public and for our Patients. To ensure this, and to explain to you in advance the terminology used below, we refer you at this point to the original wordings of the law and definitions of the General Data Protection Regulation available at https://dsgvo-gesetz.de/art-4-dsgvo/ and https://dsgvo-gesetz.de/bdsg-neu/46-bdsg-neu/.
The person responsible according to the General Data Protection Regulation is:
Dr. Dr. Wolfgang Kater & Kollegen MVZ GmbH
represented by Mr. Dr. med. Dr. med. dent. Wolfgang Kater
Phone(06172) - 98 19 347
Telefax(06172) - 17 10 666
E-Mail info@dysgnathie.de
Internet www.dysgnathie.de
Handling of personal data
Personal data is information that can be used to identify a person, i.e. information that can be traced back to a person. This includes name, email address or telephone number. We only collect, use and pass on personal data if this is legally permissible or if the person concerned consents to having their data collected. In principle, you can visit our website without leaving behind any personal data. In some cases, however, we need data from you, and precisely in the following situations:
On no account shall the collected data be sold or passed on to third parties for other reasons.
Collection and processing of non-personal data (access data/ server log files)
Every time a person concerned accesses our website, that is to say, every time a file is accessed or an attempt is made to access a file on this server, data is saved about this process in a log file (server log file) with the Webspace provider. This data is not personal and we cannot know, which user retrieved which data.
Specifically, the following record is kept about every access to the website:
Purpose of data processing
All the data mentioned is evaluated only for statistical analysis, for business and security purposes and for the optimisation of services offered by us and by service providers contracted by us. The anonymous data in the server log files is stored separately from all personal data. Additional personal data is only collected if you are providing this information voluntarily, e.g. in connection with an enquiry. We use this data to constantly improve our website and services to you. However, the provider reserves the right to check the protocol data afterwards if, based on concrete evidence, there is justifiable reason to believe that illegal access took place.
Data processing is performed in accordance with legal requirements and regulations in order to fulfill the treatment contract between you and us and the associated obligations. For this we process your personal data, in particular your health insurance and health data. These include u.a. Anamnesis, biographical data, diagnoses, therapies and therapy suggestions as well as findings that we or other doctors collect. For this purpose, other physicians, psychotherapists, hospitals, rehab clinics, or review centers that you are treating may also provide us with data (for example, in findings reports, medical reports). The collection of health data is a prerequisite and basis for your treatment. If the necessary information is not provided, careful and dutiful treatment can not be provided - if necessary, emergency care.
Recipient of your data
We only transfer your personal data to third parties if this is permitted by law, is necessary in emergency situations or is made possible by your consent (for example, declaration of secrecy, implied action). Recipients of your personal data may be pharmacists, other physicians, psychotherapists, statutory health insurance associations, health insurance, pension insurance (eg rehabilitation, retirement), MDK, offices (eg provision office, employment office, social office, health department), courts (eg Supervision Court, Social Court), medical associations (eg arbitration boards), insurance companies (eg accident insurance, life insurance), schools and employers (eg AU certificates), carers and authorized representatives, etc. The transmission takes place predominantly for the purpose of the account of the achievements accomplished with you, for the clarification of medical and from your insurance relationship resulting questions. In individual cases, the transmission of data to other authorized recipients takes place.
The website of the Praxisklinik Dr. Dr. Kater & Partner contains buttons which enable you to quickly contact our clinic electronically, which among other things requires you to indicate an email address. The personal data transmitted by persons concerned on a voluntary basis via a contact form or by email are stored automatically by us exclusively for purposes of processing or contacting the person concerned. All personal data collected will on no account be passed on to third parties.
Application documents and personal data transmitted electronically (e.g. by email or through an integrated application form) shall be processed further exclusively for purposes of completing the application procedure. If in the end an employment contract comes into being between the person responsible for the processing and the applicant, the transmitted data will be stored under full consideration of the legal regulations. If no employment contract comes into being, all transmitted data will be deleted by the person responsible for its processing after announcement of the decision to reject the application, provided that there are no other legitimate interests of the person responsible for processing that run contrary to the deletion. Another legitimate interest in this sense is for example the burden of proof in court proceedings according to the General Equal Treatment Act (AGG).
The website of the Praxisklinik Dr. Dr. Kater & Partner uses cookies. Cookies are small text files which are filed through an internet browser and stored on a computer system. Cookies enable the Praxisklinik Dr. Dr. Kater & Partner to recognise the user of a website when he visits the website again. The purpose of this recognition is to make it easy for the user to use the website and to avail him with more user-friendly services, which would not be possible without cookie placement.
Our cookies do not store any personal data. Most browsers are configured in such a way that they accept cookies automatically. You can deactivate the option of storing cookies, though, or you can configure your browser in such a way that you get informed every time cookies are sent. Besides, cookies already stored on your computer can be deleted any time through the internet browser or any other software programme. This is possible with all the common internet browsers. Please note that for certain functions of our website cookies are required to enable smooth running of the website and/or for correct display of contents.
Our clinic stores personal data of the person concerned only for as long as it is required for the attainment of the storage purpose, or for as long as provided for by European statutory provisions, the competent supervisory authority or other applicable German laws.
If the storage purpose ceases to exist or the authorised deadline expires, the personal data will be deleted as a matter of routine and in accordance with legal regulations.
a) Right to confirmation
The person concerned has the right pursuant to Article 15(1) of the General Data Protection Regulation, to get a confirmation from us as to whether personal data is processed in our clinic. If a person concerned wants to exercise this right to confirmation, he can get in touch with us in our clinic any time.
b) Right to information
The right to information is subdivided into two steps. Firstly, the person concerned can demand a confirmation from the person responsible as to whether he processes personal data at all (see Section 9a - Right to confirmation). If no personal data of the person concerned is processed, the person making the inquiry has to be informed about it. If personal data of the person concerned is processed, the said person has a right to information about the data free of charge. In addition, the person responsible also has to provide the following information to the person concerned pursuant to Article 15(1) of the General Data Protection Regulation :
Furthermore, if personal data is transmitted to third countries or to an international organisation, persons concerned have the right, according to Article 15(2) of the General Data Protection Regulation, to be informed about the appropriate guarantees put in place in connection with the data transfer, as per Article 46 of the General Data Protection Regulation (e.g. standard data protection clauses agreed on or enforceable internal data protection regulations).
If a person concerned wants to exercise this right to information, he can get in touch with us in our clinic any time.
c) Right to correction of data
Die betroffene Person hat nach
If a person concerned wants to exercise this right to correction of data, he can get in touch with us in our clinic any time.
d) Right to deletion (“Right to be forgotten”)
The person concerned has the right in accordance with with Article 17 of the General Data Protection Regulation to demand of the person responsible that the relevant personal data be immediately deleted, provided that one of the following reasons is correct and as long as the data processing is no longer necessary:
Provided that one of the reasons mentioned above is correct and a person concerned would like to initiate the deletion of personal data which is stored at the Praxisklinik Dr. Dr. Kater & Partner he can get in touch with us in our clinic any time. The contacted employee will see to it that the request for deletion is immediately complied with.
e) Right to limitation of data processing
The person concerned has the right in accordance with Article 18 of the General Data Protection Regulation to demand of the person responsible that the processing of his personal data be limited if one of the following conditions exists:
Provided that one of the reasons mentioned above is correct and a person concerned would like to demand the limitation of personal data which is stored at the Praxisklinik Dr. Dr. Kater & Partner he can get in touch with us in our clinic any time. The contacted employee will see to it that the limitation of data processing is immediately complied with.
f) Right to data transferability
The person concerned has the right pursuant to Article 20 of the General Data Protection Regulation to receive personal data concerning him, which he provided to a person responsible for processing, in a standard, structured and machine-readable format.
Besides, she has the right to transmit this data to another person responsible for data processing without hindrance by the current person responsible to whom the personal data had been sent, provided that the processing is based on consent as per Article 6(1) a of the General Data Protection Regulation or Article 9(2) a of the General Data Protection Regulation, or on a contract as per Article 6(1) b of the General Data Protection Regulation, and the processing is done with the help of automated methods, and as long as the processing is not required for the performance of a task which is of public interest or is carried out in exercise of official authority which was transferred to the person responsible.
Furthermore, the person concerned has the right, according to Article 20(2) of the General Data Protection Regulation, when exercising his right to data transferability as per Article 20(1) of the General Data Protection Regulation, to authorise that his personal data be transmitted directly from one person responsible to another, as long as this is technically feasible and provided that the rights and liberties of other persons are not affected by this (Article 20(4) of the General Data Protection Regulation).
In a move to assert the right to data transferability, the person concerned can get in touch with the data protection officer appointed by the Praxisklinik Dr. Dr. Kater & Partner or any other employee of our clinic any time.
g) Right to object to data processing
The person concerned has the right, pursuant to Article 21 of the General Data Protection Regulation, for reasons arising from his particular situation, to raise objection any time against the processing of his personal data, which is being carried out on the basis of Article 6(1) e or f of the General Data Protection Regulation. This also applies to any kind of profiling based on these regulations.
In the case of the objection, the Praxisklinik Dr. Dr. Kater & Partner will henceforth stop processing the personal data, unless we can prove that there are compelling and legitimate reasons for the processing, which outweigh the interests, rights and liberties of the person concerned, or unless the processing serves the purpose of asserting, exercising or defending legal claims.
If the Praxisklinik Dr. Dr. Kater & Partner processes personal data so as to conduct direct advertising, the person concerned has the right, according to Article 21(2) of the General Data Protection Regulation, to raise objection any time against the processing of personal data for such advertising purposes. This also applies to any kind of profiling, as long as it is connected with such direct advertising. If the person concerned raises objection against the Praxisklinik Dr. Dr. Kater & Partner because of processing data for direct advertising purposes the Praxisklinik Dr. Dr. Kater & Partner will henceforth stop processing personal data for such purposes (Article 21(3) of the General Data Protection Regulation).
Furthermore, the person concerned has the right, pursuant to Article 21(6) of the General Data Protection Regulation, for reasons arising from his particular situation, to raise objection any time against the processing of his personal data, which is being carried at the Praxisklinik Dr. Dr. Kater & Partner for scientific or historical research purposes, or for statistical purposes as per Article 89(1) of the General Data Protection Regulation, unless such processing is required for the fulfilment of a task which is of public interest.
To assert the right to objection, the person concerned can get in touch with the data protection officer at the Praxisklinik Dr. Dr. Kater & Partner or any other employee. Furthermore, the person concerned is at liberty to exercise his right to objection through automated methods - for which technical specifications are used - in connection with the use of services of the information society, Directive 2002/58/EG, notwithstanding.
The data subject also has the right to complain to the competent data protection supervisory authority if she considers that the processing of her personal data is unlawful. The address of the supervisory authority responsible for us is:
Hessische Beauftragte für Datenschutz und Informationsfreiheit
Prof. Dr. Michael Ronellenfitsch
Gustav-Stresemann-Ring 1
Tel (0611) - 14 08 0
Fax (0611) - 14 08 - 900
E-Mail poststelle@datenschutz.hessen.de
h) Automated decisions on a case-by-case basis including profiling
Any person affected by the processing of personal data has the right, under Article 22 of the General Data Protection Regulation, not to be subjected to a decision based exclusively on automated processing - including profiling - which will have legal repercussions over him or adversely affect him in a similar way, provided that the decision (1) is not required for the conclusion or the fulfilment of a contract between the person concerned and the person responsible, or (2) is permissible, due to legal provisions of the European Union or of the member states, to which the person responsible is subject, and these legal provisions contain adequate measures for the preservation of the rights and liberties as well as the legitimate interests of the person concerned, or (3) is taken with the express consent of the person concerned.
If the decision (1) is required for the conclusion of a contract between the person concerned and the person responsible, or (2) is taken with the express consent of the person concerned, the Praxisklinik Dr. Dr. Kater & Partner will take appropriate measures to uphold the rights and liberties as well as the legitimate interests of the person concerned, which at least comprise the right to obtain powers of intervention by a person on the side of the person responsible, the right to express one’s own point of view and the right to contest a decision.
If a person concerned wants to assert his rights relating to automated decisions, he can get in touch with us in our clinic any time.
i) Right to revocation of declaration of consent
The person concerned has the right to revoke a declaration of consent to process personal data any time.
If a person concerned wants to assert his rights relating to revocation of declaration of consent, he can get in touch with us in our clinic any time.
a) Google Fonts
We use Google Fonts from Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on our website. Since the fonts are provided by our servers, there is no data transmission to Google.
b) Adobe Typekit
For the consistent & attractive presentation of fonts, this site uses so-called Web Fonts, provided by Adobe Typekit. If your browser does not support web fonts, a default font will be used by your computer. When you access this page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. Therefore, the browser you use must connect to the Adobe Typekit servers, which is why Adobe Typekit understands that your website has been accessed through your IP address. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. For more information, see the privacy policy of Adobe Typekit:
https://typekit.com/ & https://www.adobe.com/de/privacy/policies/typekit.html
In order to provide visitors to our website with more security in the transmission of personal data, we work with SSL encryption. This encryption will be used for inquiries you make to us through our website. Data encrypted via SSL can not be viewed by third parties. Please always make sure that SSL encryption is activated when you transfer personal data or otherwise confidential data from your side. The use of encryption is easy to recognize: The Internet address in your browser address line precedes a https: // instead of an http: //.
On our pages plugins of the social network Facebook are integrated. The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. Persons responsible for the processing of personal data, if an affected person lives outside the US or Canada, are Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland.
The Facebook plugins can be recognized by the Facebook logo or the "Like-Button" ("Like") on our site. An overview of the Facebook plugins can be found here: http://developers.facebook.com/docs/plugins/.
When you visit our pages, the plugin establishes a direct connection between your browser and the Facebook server. Facebook receives the information that you have visited our site with your IP address. If you click on the Facebook "Like-Button" while you are logged into your Facebook account, you can link the contents of our pages to your Facebook profile. As a result, Facebook can assign the visit to our pages to your user account. We point out that we as the provider of the pages are not aware of the content of the data transmitted and their use by Facebook. For more information, see the Facebook Privacy Policy at http://de-de.facebook.com/policy.php.
This website uses Google Analytics (with anonymization feature), a web analytics service provided by Google Inc. ("Google"). Web analysis refers to the generation, collection and evaluation of data about user behavior and the use of individual internet pages. This data usually consists, among other things, of the so-called Referrer URL, which is the address from where the person concerned came to access our website, as well as information about the use of individual sub-pages (e.g. an overview of the web pages visited, the frequency of the visits as well as the time spent on these sites). Web analysis is mainly used to optimise an internet page and for purposes of cost-benefit-analysis. The clinic that runs Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain view, CA 94043- 1351, USA.
The data generated is used by Google to compile online reports about the activities on our web pages and to render further services connected with the use of our internet pages, in addition to the evaluation of the traffic on our website.
Google Analytics uses so-called "cookies", which are text files that are stored on your digital terminal (e.g. computer or smartphone), and enable the analysis of your use of the website (refer also to Section 7. Use of cookies). The information about your use of this website generated through the cookie (including your IP address) will be transferred to a Google server in the USA and stored there. If you activate IP anonymization on this website, Google will, however, truncate your IP address prior to this within European Union member states or in other states that are party to the Agreement on the European Economic Area. The full IP address will only be transmitted to a Google server in the USA and truncated there in exceptional cases.
In addition, the internet browser on the digital device of the person concerned automatically transmits data to Google for purposes of online analysis, and this happens every time you access a sub-page on this web page which contains an integrated Google Analytics component. Through this technical process in the background of the visited web page, Google gains knowledge of some personal data, like the IP-address of the person concerned. Google uses this specific data to compile reports about the traffic on the website (e.g. the origin of the visitors and number of clicks) and to render other services connected with the use of the website and the Internet on behalf of the website operator. The IP address transmitted by your browser to Google Analytics will not be merged with other data by Google.
The storage of the cookies described above on the digital terminal of the person concerned, enables personal information like the access time, the place from which access was made and the frequency of the visits, as well as the IP-address of the Internet connection used by the person concerned, to be transmitted to Google in the United States of America and to be stored there, whenever a person visits our internet pages. Under some circumstances Google also passes this personal data collected through technical methods to third parties.
The person concerned can prevent the storage of cookies on his computer by our internet page any time by making an appropriate adjustment in the browser software used and in that way permanently reject the storage of cookies. However, we wish to point out at this moment that the person concerned may not be able to use all the functions of this website. Such an adjustment in the settings of the browser software used would also prevent Google from storing cookies on the digital device of the person concerned. In addition, a cookie already stored by Google Analytics can be deleted any time afterwards through the browser software or other software programmes.
You can also prevent the transmission of data (including your IP address) generated by the cookie and relating to your use of the website to Google and the processing of this data by Google by downloading and installing the browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout. The installation of the browser add-on is taken as objection by Google, thus allowing JavaScript to prevent the transmission of data and information concerning visits to Internet sites to Google Analytics. If, at a later stage, data on the digital terminal of the person concerned is deleted, the terminal formatted or programmes re-installed, the person concerned must install the browser add-on afresh so as to deactivate Google Analytics. As long as the browser add-on was uninstalled or deactivated by the person concerned or by another person with the same powers, there is always a possibility of re-installing or reactivating it any time.
Further information and the applicable data protection regulations from Google can be viewed at https://www.google.de/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html You can get a more detailed explanation regarding Google Analytics through the following link https://www.google.com/intl/de_de/analytics/
Persons concerned who have not yet exceeded 18 years of age should not transmit any personal data to us without the consent of the parents or guardians. Generally, we do not demand any personal data on our websites from children and adolescents, we do not collect any such data and do not pass it on to third parties.
In order to provide visitors to our website with more security when transferring personal data, we work with SSL encryption. This encryption is used for inquiries that you make to us via our website. Data encrypted via SSL cannot be viewed by third parties. Please always make sure that SSL encryption is activated on your part when transmitting personal data or other confidential data. The use of encryption is easy to see: the internet address in your browser address line is preceded by https: // instead of http: //.
The legal basis for the processing operations, for which we obtain consent for a particular processing purpose, is provided for in the case of our comapny by Article 6(1) a of the General Data Protection Regulation
If the processing of personal data is based on the fulfilment of a contract between the person responsible and the person concerned, as is the case, for example, with processing operations which are necessary for rendering of a service or return service, the processing shall be based on Article 6(1) b of the General Data Protection Regulation. The same applies to processing operations which are required for carrying out pre-contractual measures.
If the processing of personal data becomes necessary through a legal obligation by our practice (e.g. fulfilment of tax duties), then the processing shall be based on Article 6(1) c of the General Data Protection Regulation.
In addition, a situation could arise within our clinic which requires the processing of personal data to protect essential interests of the person concerned or another natural person. This would be the case, for example, if a visitor were to be injured in our clinic and consequently his name, age, health insurance clinic data or other essential personal information would of necessity be passed on to a doctor, a hospital or other third parties. In this case the processing would be based on Article 6(1) d of the General Data Protection Regulation.
Lastly, processing operations could be based on Article 6(1) f of the General Data Protection Regulation. Processing operations can be based on this legal foundation, if the processing is required for the preservation of the legitimate interests of our practice or a third party, provided that the interests, fundamental rights and basic liberties of the person concerned do not predominate, particularly when the person concerned is a child. To that end, the European legislator is here of the view that a legitimate interest could be accepted, if the person concerned is a customer of the person responsible (Recital 47, Clause 2 of the General Data Protection Regulation).
If the processing of personal data is based on Article 6(1) f of the General Data Protection Regulation, our legitimate interest is the execution of our commercial activity for the welfare of our employees and our shareholders.
The storage period for personal data is regulated by the respective legal retention period. If this deadline expires, the collected data is deleted as a matter of routine, provided that it is no longer required as a component in the fulfilment or initiation of a contract.
We will only store your personal information for as long as necessary to carry out the treatment. Due to legal requirements, we are obliged to keep this data for at least 10 years after completion of the treatment. Other regulations may lead to longer storage periods, for example 30 years for X-ray recordings according to Section 28 (3) of the X-ray Ordinance.
At this point we would like to inform you that the legislator partly dictates the provision of personal data (e.g. tax regulations) or that the provision of data can arise from contractual provisions (e.g. details of the contracting party). For example, if the person concerned concludes a contract with our clinic, he is obliged to provide us with personal data. If this data is not provided to us for the completion of a contract, the contract with our clinic would possibly not take place. The person concerned can get in touch with our datat protection officer any time before providing us with his personal data, and this specialist would gladly explain to him one-on-one whether the provision of the personal data is a legal or contractual requirement. In addition, we shall explain to the person concerned whether the provision of the personal data is binding in the individual case and what consequences the non-provision of the data would have.
As a responsible clinic we refrain from using an automatic decision maker or profiling
This privacy policy should be viewed as part of our Internet presence, from where reference was made to this page. Provided that parts or individual statements of this privacy policy should not, no longer or not completely correspond to the current legal position, the contents and validity of the other parts of the document shall remain unaffected. German law shall apply. This governing law only applies to consumers in as far as the protection granted by mandatory regulations of the law of the state where the consumer ordinarily stays is not withdrawn (Favourability Principle).
