Privacy Policy
This privacy statement informs users about the nature, scope and purpose of the collection and use of personal data by the responsible provider Oliver Weiss Clinic (see also imprint) on this website.
The legal basis for data protection can be found in the Federal Data Protection Act (BDSG) and the EU Data Protection Regulation (DSGVO).
1. Definition
Personal data in the sense of the EU Data Protection Regulation (DSGVO) and the Federal Data Protection Act (BDSG) are individual details worthy of protection about personal or factual circumstances of a specific or identifiable natural person, e.g. name, address, e-mail address, date of birth, etc., but according to current case law also including IP addresses and location data.
2. Collection of personal data on the internet site
Due to the way the Internet works, it is necessary that the IP addresses of visitors to my web server are collected, temporarily stored and processed. After termination of the connection, however, they are not stored any further.
For analysis and performance purposes, in addition to anonymised (and thus no longer personally identifiable) IP addresses, other technical information about the device used to access my web presence, such as the type and version of the browser used to access, your operating system, referrer (from which website you were redirected to me), and in some cases system configuration, date and time information is collected and stored.
An access logging does not take place. However, it can be switched on temporarily for the purpose of danger prevention until the time of danger elimination. In this case, IP addresses are also collected and stored.
Special feature: Comments and contributions
When users leave comments on the blog or other contributions, their IP addresses are stored. This is done for the security of the provider, in case someone writes illegal content in comments and posts (insults, prohibited political propaganda, etc.). In this case, the provider itself can be prosecuted for the comment or post and is therefore interested in the identity of the author.
Further personal data is only collected on this website if you provide it yourself, for example by sending us an e-mail via the contact form. Any communication of this information is expressly on a voluntary basis and with your consent.
This website uses cookies.
Cookies are small files that allow specific information related to the device to be stored on the user's access device (PC, smartphone or similar). On the one hand, they serve the user-friendliness of websites and thus the users (e.g. storage of login data). On the other hand, they serve to collect statistical data on website usage and to be able to analyze it for the purpose of improving the offer. Users can influence the use of cookies. Most browsers have an option to restrict or completely prevent the storage of cookies. However, it should be noted that the use and especially the comfort of use will be limited without cookies.
You can manage many online ad cookies from companies through the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/uk/your-ad-choices/.
This website uses Newsletter Sign-up Form.
With the newsletter we inform you about us and our offers. If you would like to receive the newsletter, we require a valid email address from you as well as information that allows us to verify that you are the owner of the specified email address or that the owner agrees to receive the newsletter. Further data will not be collected. This data is only used for sending the newsletter and will not be passed on to third parties. With the registration for the newsletter, we store your IP address and the date of registration. This storage serves solely as proof in the event that a third party misuses an email address and registers to receive the newsletter without the knowledge of the authorized person. You can revoke your consent to the storage of the data, the email address and their use for sending the newsletter at any time. The revocation can be done via a link in the newsletters themselves, in your profile area or by sending a message to the contact options above.
What does this mean?
Of course, every(!) website collects and processes personal data. For example, the screen resolution of your device tells our server in which size it should deliver the content to you. Some operating systems and browsers need special commands, displays and settings to display a homepage correctly. The browser can also signal if the user needs a different color representation, e.g. because of a (color) visual impairment, or needs a non-graphical representation for blind people.
Contact form
Type and purpose of the processing
The data you enter are used for individual communication with you. A valid e-mail address and your name are required for this communication, which serves to organize your inquiry and the respective subsequent reply. Providing additional information is optional.
Legal basis
The processing of the data entered in the contact form occurs on the basis of a legitimate interest (Art. 6 Para. 1 (f) GDPR).
By providing the contact form, our aim is to facilitate an uncomplicated means for you to contact us. The information you enter will be used to process the inquiry and saved for possible follow-up questions.
If you contact us for inquiry, the processing of the information provided in the contact form will occur in order to implement pre-contractual measures (Art. 6 Para. 1 (b) GDPR).
Recipients
Recipients of the data may be processors.
Retention period
The data will be deleted no later than 3 months after processing the inquiry.
Provided that we enter into a contract together, we will use the statutory retention periods in the German Commercial Code (Handelsgesetzbuch) and delete your data according to the respective stipulated deadlines.
Mandatory or required provision
The provision of your personal data is voluntary. However, we can only process your inquiry if you provide us with your name, e-mail address and the reason for your inquiry.
3. Use of Personal Data
The collection and processing of technical data is used exclusively to ensure a smooth connection setup and for technical optimization purposes (e.g. responsive web design). The processing takes place exclusively on the web server. An evaluation by or a transmission to third parties does not take place.
The data collected by the optional (in the event of an attack on IT system security or stability) access logging is used to identify attackers of my systems, to exclude them from further abusive use of my systems and, if necessary, to initiate legal action. In these cases, data may be passed on to government investigative agencies. The data collected in this way will be stored until the facts of the case have been legally clarified and in compliance with the relevant legal provisions, and then deleted.
If you voluntarily enter data on the homepage via the contact form, insofar as this involves information on communication channels, you agree by implied conduct that we may contact you via this communication channel in order to respond to your request. Any use beyond this without your consent will not take place. This data is not stored on the web server.
We store your data for as long as it is required to fulfil the purpose for which it was collected (e.g. in the context of correspondence) or if this is required by law or by the authorities. In the context of a contractual relationship, we store your data at least until the complete termination of the contract. Subsequently, the data will be stored for the duration of the statutory retention periods.
4. Legal basis of collection and processing
The collection and processing of technical personal data is based on Article 6 (1) b) DSGVO (contract performance), taking into account Article 5 (1) c) DSGVO (data minimization).
The optional temporary access logging for security purposes is carried out on the basis of Article 6 (1) f) DSGVO (Legitimate Interests) and Section 24 (1) BDSG (Security and Civil Claims), taking into account Article 13 (1) d) DSGVO (Naming of Legitimate Interests).
The collection of voluntarily entered personal data is based on Article 6 (1) a) DSGVO (consent). The storage of this data takes place on the basis of applicable archiving regulations, e.g. §257 HGB, for the period specified in corresponding regulations.
5. Data disclosure
We only pass on data if the customer has given his consent to the passing on, if it is absolutely necessary for the fulfilment of the order or if legal regulations or judicial titles require it. The passing on of data for the fulfilment of the order depends mainly on the type and scope of the order.
These are mainly the following recipients: parcel delivery companies and shipping companies, but also tax consultants (company accounting), tax offices (tax accounting) and, if necessary, other responsible offices.
If a third party is used for services in connection with the handling of processing operations, the statutory provisions shall be complied with. The data provided by the customer by way of the order will be processed exclusively for the purpose of contacting the customer within the scope of contract processing and only for the purpose for which the customer provided the data.
A transfer to third countries does not take place and is not planned.
6. Your Rights
Right of revocation according to Article 7 (3) DSGVO: You have the right to revoke at any time a consent given by you to the processing of personal data with effect for the future.
Right to information according to Article 15 (1) DSGVO: You have the right to request information about the data stored about you. The information is usually provided electronically. For information pursuant to Article 13 (1) a) DSGVO, please refer to our imprint.
Right to rectification (Article 16 DSGVO), deletion (Article 17 DSGVO) or blocking (Article 18 DSGVO): You have the right to request the rectification, deletion or blocking of personal data stored about you. If legal regulations do not permit deletion, your data will be blocked instead so that it is only accessible for the purposes of mandatory legal regulations. After expiry of the legally required retention periods, however, your data will be deleted in any case.
Right to lodge a complaint pursuant to Article 77 of the GDPR with the supervisory authority pursuant to Articles 51 and 57 of the GDPR: the competent complaints body is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate, https://www.datenschutz.rlp.de
What does that mean?
The Basic Data Protection Regulation and the Federal Data Protection Act oblige every entrepreneur to comply with the above-mentioned rights of citizens. To exercise your aforementioned rights of revocation, information, correction, deletion or blocking of your personal data, you can contact us at any time via the contact details listed at the very bottom.
We are required by law to retain certain records. They may not be deleted before the expiry of certain periods and must be available for inspection by the authorities (e.g. the tax authorities). During this period, the customer's request for deletion of his data may also not be complied with. A 10-year storage obligation applies, for example, to invoices sent by us and contracts concluded. Other correspondence, such as letters, emails and delivery bills, must be stored for 6 years. After expiration of all storage obligations, the data and documents are deleted or destroyed in accordance with legal requirements.
7. Security and Confidentiality
We have implemented extensive technical and operational safeguards to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technical progress. The web server as well as the backup servers are located in Germany.
8. Social media and marketing
These collect personal data, usually on the platforms themselves. We do not pass on any personal data to the social media.
9. Data protection provisions about the application and use of Google Web Fonts
This website uses so-called web fonts, which are provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.
For this purpose, the browser you use must establish a connection to Google’s servers. In the process, personal data may also be transmitted to the servers of Google LLC. in the USA. In this way, Google obtains knowledge that our website has been accessed via your IP address. The processing of personal data in the context of establishing a connection with the provider of the fonts only takes place if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time with future effect by deactivating this service in the “Cookie Consent Tool” provided on the website. If your browser does not support web fonts, a default font from your computer will be used.
You can find more information about Google Web Fonts at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/
10. Data protection provisions about the application and use of YouTube
On this website, the controller has integrated components of YouTube. YouTube is an Internet video portal that enables video publishers to set video clips and other users free of charge, which also provides free viewing, review and commenting on them. YouTube allows you to publish all kinds of videos, so you can access both full movies and TV broadcasts, as well as music videos, trailers, and videos made by users via the Internet portal.
The operating company of YouTube is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.
With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a YouTube component (YouTube video) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to download a display of the corresponding YouTube component. Further information about YouTube may be obtained under HTTPS://WWW.YOUTUBE.COM/YT/ABOUT/EN/. During the course of this technical procedure, YouTube and Google gain knowledge of what specific sub-page of our website was visited by the data subject.
If the data subject is logged in on YouTube, YouTube recognizes with each call-up to a sub-page that contains a YouTube video, which specific sub-page of our Internet site was visited by the data subject. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.
YouTube and Google will receive information through the YouTube component that the data subject has visited our website, if the data subject at the time of the call to our website is logged in on YouTube; this occurs regardless of whether the person clicks on a YouTube video or not. If such a transmission of this information to YouTube and Google is not desirable for the data subject, the delivery may be prevented if the data subject logs off from their own YouTube account before a call-up to our website is made.
YouTube’s data protection provisions, available at HTTPS://WWW.GOOGLE.COM/INTL/EN/POLICIES/PRIVACY/, provide information about the collection, processing and use of personal data by YouTube and Google.