Data Protection

 

The following privacy policy is structured as follows:

1. General
2. Information about the processing of personal data
3. Disclosure to third parties
4. Cookies
5. Google Analytics
6. Google Adwords
7. Deletion of data
8. Rights concerning the processing of personal data
9. Right to object
10. Changes to this Privacy Policy / Responsible1. Allgemeines

 

 1. GENERAL

Medizinkanzlei Mohr is pleased about your visit to our website http://www.medizinkanzleimohr.de and your interest in our law firm. We take the security and protection of your personal data entrusted to us very seriously and want you to feel safe and comfortable when visiting our website and using our offers. It is important to us that you know which personal data is collected when using our offers and services and how we use them afterwards.

Our law firm is active in the area of medical law advice. Insofar as our company processes personal data, this is done for the purposes stated in this privacy policy.

In addition, numerous technical and organizational measures have been implemented in order to ensure the most complete possible protection of personal data processed via this website. Nevertheless, there is always a residual risk (eg security gaps in data transmissions), so that absolute protection can not be guaranteed. For this reason, you are free to submit personal data to us in other ways.

 

 2. INFORMATION ABOUT THE PROCESSING OF PERSONAL DATA

Request of our website

The website of our company collects a series of general data and information each time the website is accessed by a person or an automated system. This general data and information is stored in the log files of the server. We receive:

– IP address
– Date and time of the request
– Time zone difference to Greenwich Mean Time (GMT)
– Content of the requirement (concrete page)
– Access status / HTTP status code
– each transmitted amount of data
– Website from which the request comes
– Browser
– Operating system and its interface
– Language and version of the browser software.

If these aforementioned data are used by our house, no conclusions on the data subject are admitted. Rather, this information is needed

  • to deliver the contents of our website correctly,
  • to optimize the content of our website as well as the advertising for it,
  • to ensure the permanent functionality of our information technology systems and the

technology of our website, as well as

  • providing law enforcement with the information needed to prosecute a cyberattack.

The legal basis for the temporary storage of the aforementioned data is Article 6 (1) lit. f) GDPR. This anonymously collected data and information are evaluated by our house on the one hand statistically and further with the aim to increase the privacy and data security in our house, to ultimately ensure an optimal level of protection for the personal data processed by us. The anonymous data of the server log files are stored separately from all personal data provided by an affected person.

The data controller will provide you with information about your personal data about any time upon request. Furthermore, the data controller corrects or deletes personal data at your request or reference, as far as no legal storage requirements are in conflict. A data protection officer named by name in this privacy policy is available to the data subject as a contact person in this context.

Other purposes

Personal data will also be processed when you provide them to us, for example, in the context of the online lawyer contact form, a request or an appointment booking or the ordering of information material. The legal basis is Art. 6 para. 1 lit. b GDPR. To this extent, the data processed by us include client data, employee data as well as data from suppliers, insofar as these are necessary for the purposes named in the context of this data protection declaration.

As far as we process your data for the purposes of receiving and processing your respective mandate request or online lawyer booking, as described above, you are contractually obliged to provide us with such data. Without this data we will not be able to carry out a corresponding processing. The controller takes appropriate technical and organizational measures to ensure that by default only personal data, which is required for the particular application purpose, is processed.

If you have consented to the processing of personal data, see Art. 6 para. 1 lit. a GDPR, you can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent to revocation. The text of Art. 6 GDPR can be found here:

http://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32016R0679&qid=1474615617790

 

3. DISCLOSURE TO THIRD PARTIES

The personal data you enter will be collected and stored solely for internal use by the controller and for your own purposes. The controller may initiate the transfer to one or more processors who also use the personal data only for internal use attributable to the controller. The transfer of data to processors takes place on the basis of Art. 28 para. 1 GDPR.

A sale of your data to third parties and / or distribution of the data for the purpose of marketing is hereby excluded.

Your personal information may be forwarded to law enforcement agencies and, where appropriate, to third parties without your explicit consent, if it is necessary to investigate the unlawful use of our services or to prosecute you. However, this only happens if there are concrete indications of unlawful or abusive behavior. Disclosure may occur even if it serves to enforce Terms of Use or other arrangements. We are also required by law to provide information to certain public authorities upon request. These are law enforcement agencies, authorities prosecuting fines and the tax authorities.

The disclosure of this data is based on our legitimate interest in the fight against abuse, the prosecution of criminal offenses and the protection, assertion and enforcement of claims unless your rights and interests in the protection of your personal data predominate, Art. 6 para. 1 lit. f GDPR.

A transfer to third countries does not take place.

 

4. COOKIES

In order to make our website user-friendly and to optimally match your needs, we use a few cookies. A cookie is a small file that is stored locally on your computer as soon as you visit a website. If you visit the website again with the same device, the cookie shows, e.g. that it is a repeated visit. In addition, cookies enable us to analyze the use of our website. The cookie does not contain any personal information; it is not suitable for identifying you on the websites of third parties, including the websites of the analytics providers.

We use the following types of cookies:

  • Basic / Necessary Cookies.

These cookies are fundamental to the functioning of our website. This is, for example, the assignment of anonymous session IDs for bundling multiple queries to a web server or the error-free functioning of logins.

  • Functionality Cookies

These cookies help us to save settings you have selected, or support other features as you navigate our website. That way, we can remember your favorite settings for your next visit or save your login details for certain sections of our website.

  • Performance / statistics cookies

These cookies collect information about how you use our website (for example, Internet browsers used, number of visits, pages viewed or time spent on the website).

These cookies do not store any information that allows a personal identification of the visitor.

The information collected using these cookies is aggregated and therefore anonymous.

The legal basis for the processing of personal data using cookies is Article 6 (1) sentence 1 lit. f) GDPR. Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

The consent or rejection of cookies – also for web tracking – you can explain the settings of your web browser. You can configure your browser to refuse to accept cookies in principle or to notify you in advance when a cookie is stored. In this case, however, the functionality of the website may be impaired (for example, in the case of orders). Your browser also offers a feature to delete cookies (for example, delete via browser data). Further information can be found in the operating instructions or, as a rule, under Settings in your Internet browser.

 

5. GOOGLE ANALYTICS

In order to better adapt this website to the needs of our clients, we analyze the visits to our website. We use your IP address, which we previously anonymize (and possibly similar numbers exchanged between computers during normal Internet use) with the intention of being able to analyze data, including the websites visited, your browser and your computer. Cookies are also set for this purpose. Our cookie only contains a unique number to recognize you on our web sites, but not on third-party websites. The stored data is evaluated exclusively for statistical purposes, in particular, the IP address is not associated with a specific person. A disclosure to third parties does not occur.

This website uses Google Universal Analytics, a web analytics service provided by Google Inc. (“Google”). The operating company of the Google Analytics component is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

The legal basis for the processing of personal data using Google Analytics is Art. 6 para. 1 p. 1 lit. f) GDPR.

Google Universal Analytics uses so-called “cookies”, text files that are stored on your computer and that allow an analysis of the use of the web site by you. The information generated by the cookie about your use of this web site (including your IP address) is usually transmitted to and stored by Google on servers in the United States.

 

IP anonymisation has been activated on this website, so that the IP address of the users of Google within Member States of the European Union or other parties to the Agreement on the European Economic Area is shortened beforehand. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide us with other services related to the website and internet usage to provide. The IP address sent by your browser as part of Google Universal Analytics will not be merged with other Google data. You can prevent the storage of cookies by a corresponding setting of your browser software; However, please be aware that if you do this you may not be able to use all the features of this website in full. You may also prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by using the following link http: / /tools.google.com/dlpage/gaoptout?hl=en Download and install the available browser plugin.

For more information about Terms of Use and Privacy, please visit http://www.google.com/analytics/terms/en.html or visit http://www.google.com/privacy.html.

Please note that this website uses Google Universal Analytics with the code extension “anonymizeIp” to ensure the anonymous collection of IP addresses (so-called IP-Masking) and to exclude a direct personal reference.

 

6. GOOGLE ADWORDS

This website uses Google Adwords, a marketing service of Google Inc..
The operating company of the Google Adwords component is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.
Google Adwords is an online advertising program that uses conversion tracking. When you reach our website through a Google ad, Google Adwords places a cookie on your computer. Each Google Adwords customer will be assigned a different cookie.
The legal basis for the processing of personal data using Google Adwords is Article 6 (1) sentence 1 lit. f) GDPR.
Our company is only aware of the total number of users who responded to the ad. No information is passed on which allows you to identify yourself. The use is not for traceability.

 

7. DELETION OF DATA

The legislature has issued various retention periods and obligations. After expiration of these deadlines, the corresponding data will be routinely deleted. If data are not affected, they will be deleted or anonymised if the purposes set out in this Privacy Policy cease to apply. Unless otherwise provided in this Privacy Policy, the information we collect is stored by us for as long as necessary for the purposes for which it was collected.

Other data uses and data deletion

Further processing or use of your personal data generally takes place only if a legal provision allows this or you have consented to the processing or use of the data. In the event of further processing for purposes other than the one for which the data were originally collected, we will inform you of these other purposes prior to further processing and provide you with further relevant information.

Abuse detection and tracking

Information on misuse detection and tracking, especially your IP address, we hold up to 7 days. The legal basis in this respect is Art. 6 para. 1 lit. f GDPR, the text of Art. 6 GDPR can be found here:

http://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32016R0679&qid=1474615617790

Our legitimate interest in the data retention of 7 days is to ensure the proper functioning of our web site and the transactions conducted there, as well as cyber attacks and to be able to ward off. If necessary, we will use anonymous usage information to customize our website.

 

8. RIGHTS CONCERNING THE PROCESSING OF PERSONAL DATA

Right of Access

You have the right, at any time upon request, to obtain information from us about your personal data concerning you in the scope of Art. 15 GDPR. You can submit an application by post or e-mail to the addresses below. The text of Art. 15 GDPR can be found here:

http://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32016R0679&qid=1474615617790

 

Right to correct incorrect data

You have the right to request immediate correction of personal data concerning you if these are incorrect, Art. 16 GDPR. Please contact the contact addresses below. The text of Art. 16 GDPR can be found here:

http://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32016R0679&qid=1474615617790

 

Right to delete

You have a right to immediate deletion (“right to be forgotten”) of your personal data in the presence of the legal grounds under Art. 17 GDPR.

The text of Art. 17 GDPR can be found here:

http://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32016R0679&qid=1474615617790

There are legal reasons if the personal data are no longer necessary for the purposes for which they were originally processed or if you have revoked your consent and if there is no other legal basis for processing; the person concerned objects to the processing (and there are no overriding reasons for processing – this does not apply to objections to direct mail). To assert your right, please contact us at the contact details below.

 

Right to restriction of processing
You have the right to restrict processing if the conditions are met and in accordance with Art. 18 GDPR. The text of Art. 18 GDPR can be found here:

http://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32016R0679&qid=1474615617790

Accordingly, the restriction of processing may in particular be required if the processing is unlawful and the data subject refuses to delete the personal data and instead requests the restriction on the use of the personal data or the data subject objects to the processing in accordance with Article 21 (1) GDPR has filed, as long as it is not certain whether our legitimate reasons prevail over theirs. To assert your right, please contact us at the contact details below.

 

Right to data portability
You have a right of data transferability according to Art. 20 GDPR. The text of Art. 20 GDPR can be found here:

http://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32016R0679&qid=1474615617790

You have the right to receive the data that you have provided to us in a standard, structured and machine-readable format and to transfer this data to another person in charge, such as another service provider. The prerequisite for this is that the processing is based on a consent or on a contract and takes place by means of automated procedures. To assert your right, please contact us at the contact details below.

 

 

9. Right to object

You have the right to object at any time, for reasons arising from your particular situation, against the processing of personal data relating to you. Legal basis is Art. 6 para. 1 lit. e or f GDPR in combination with Art. 21 GDPR. We will cease the processing of your personal information, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims. To assert your right, please contact us at the contact details below.

The text of Art. 21 GDPR can be found here:

http://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32016R0679&qid=1474615617790

 

Recht zur Beschwerde bei einer Aufsichtsbehörde

If you believe that the processing of personal data concerning you by us is inadmissible, you have the right to complain to the supervisory authority responsible for us. You can call up the contact details of the state data protection authority responsible for you under:

https://www.datenschutz-wiki.de/Aufsichtsbehörden_und_Landesdatenschutzbeauftragte

 

10. Changes to this Privacy Policy / Responsible Person

The current version of this privacy policy is always available at https://www.medizinkanzleimohr.de.

The imprint can be found at https://www.medizinkanzleimohr.de/impressum

Responsible within the meaning of the GDPR:

Rechtsanwältin Rebecca Mohr
Kantstr. 30
10623 Berlin
mail@medizinkanzleimohr.de
Tel: 030 / 88 91 36 34

 

Version: December 2018