Data protection
Information according to Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR)
This data protection declaration explains the type, scope and purpose of the processing of personal data within our online offer and the websites, functions and content associated with this offer (hereinafter jointly referred to as "online offer" or "website"). The data protection declaration applies regardless of the domains, systems and devices used (e.g. desktop or mobile).
Personal data is all data that can be related to you personally, e.g. B. name, address, e-mail addresses, user behavior. The personal data of users processed in the context of our online offer includes in particular inventory data (e.g. name and date of birth of customers) and content data (e.g. information in the contact form).
Which data is processed in detail and how it is used depends largely on the services used.
1. Who is responsible for data processing and who can I contact?
Responsible body is:
dr Farhad H. Nouri
Schlossstrasse 18
66953 Pirmasens, Germany
Phone: +49 6331 226644
Fax: +49 6331 226645
If you have any questions about data protection, please send us an email or contact our data protection officer directly at praxis@psychiatrie-nouri.info.
2. What sources and data do we use?
We process personal data that we receive from you as part of our business relationship.
In addition, we process - insofar as this is necessary for the provision of our service - personal data that we legitimately receive from partner companies, companies in the group of companies or other third parties (e.g. Arzttermine.de or other platforms for making appointments) (e.g. for making appointments or based on your consent).
Relevant personal data are contact details (e.g. name, telephone number, email address and date of birth), insurance status and concerns (e.g. reason for treatment).
3. What do we process your data for (purpose of processing) and on what legal basis?
We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG): As part of the balancing of interests, Art. 6 Para. 1f GDPR
If necessary, we process your data beyond the actual fulfillment of the contract to protect our legitimate interests or those of third parties. Examples:
Response to your contact / appointment request;
Assertion of legal claims and defense in legal disputes;
Ensuring IT security and IT operations;
Measures for business management and further development of services and products.
4. Who gets my data?
Within the company, those departments that need your data to fulfill our contractual and legal obligations will have access to it.
Processors used by us (Art. 28 DS-GVO) can also receive data for these purposes. These are companies in the categories of IT services and marketing. If we use contract processors to provide our services, we take appropriate legal precautions and appropriate technical and organizational measures to ensure the protection of personal data in accordance with the relevant statutory provisions.
5. How long will my data be stored?
If necessary, we process and store your personal data for the duration of our business relationship, which also includes, for example, the initiation and execution of a contract.
In addition, we are subject to various storage and documentation obligations, which result from the German Commercial Code (HGB) and the Fiscal Code (AO), among other things. The storage and documentation periods specified there are two to ten years.
Finally, the storage period is also assessed according to the statutory limitation periods, which, for example, according to §§ 195 et seq. of the German Civil Code (Bürgerliches Gesetzbuch, BGB), can usually be 3 years, but in certain cases can also be up to thirty years, with the regular limitation period being three years.
6. Is data transferred to a third country or to an international organization?
A data transfer to third countries (countries outside the European Union - EU) does not take place.
7. What data protection rights do I have?
Each affected person has
the right to information according to Art. 15 DS-GVO,
the right to correction according to Art. 16 DS-GVO,
the right to erasure according to Art. 17 GDPR,
the right to restriction of processing according to Art. 18 DS-GVO and
the right to data transferability from Art. 20 DS-GVO.
Furthermore, you can revoke your consent, in principle with effect for the future.
In addition, there is a right of appeal to a data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG).
In addition, we would like to point out your right of objection according to Art. 21 GDPR:
Information about your right of objection according to Art. 21 DS-GVO
You have the right, for reasons that arise from your particular situation, at any time against the processing of personal data concerning you, which is based on Article 6 Paragraph 1 Letter e GDPR (data processing in the public interest) and Article 6 Paragraph 1 Letter f of data protection -Basic Regulation (data processing on the basis of a balance of interests) takes place to lodge an objection; this also applies to profiling based on this provision within the meaning of Article 4 No. 4 DS-GVO, which we use for questionnaire evaluation or for advertising purposes.
If you file an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
The objection can be made informally and there are no costs other than the transmission costs according to the basic tariffs. If possible, the objection should be sent to:
dr Farhad H. Nouri
Schlossstrasse 18
66953 Pirmasens, Germany
Phone: +49 6331 226644
Fax: +49 6331 226645
8. To what extent is there automated decision-making in individual cases?
In principle, we do not use fully automated automatic decision-making in accordance with Article 22 GDPR to establish and implement the business relationship. If we use these procedures in individual cases, we will inform you separately if this is required by law.
9. Am I obligated to provide data?
The provision of personal data is not required by law for our services. You can decide for yourself at any time which data you want to provide to us. However, some mandatory information is necessary to protect us from spam or to contact you. If you do not want to provide this information, you are free to contact us by telephone during office hours.
10. Contact
When you contact us (by e-mail), your details will be processed to process the contact request and its processing in accordance with Article 6 (1b) GDPR.
Your details will be saved in our email inbox.
11. Access data and log files
On the basis of our legitimate interests within the meaning of Art. 6 Para. 1f GDPR, we collect data about every access to the server on which our online offer is located (so-called server log files). The access data includes the name of the accessed website, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the operating system you are using, referrer URL (previously visited page), IP address and the requesting provider .
Log file information is stored for a maximum of seven days for security reasons (e.g. to investigate misuse or fraud) and then deleted. Data whose further storage is required for evidence purposes are excluded from deletion until the respective incident has been finally clarified.
12. Cookies & Audience Measurement
Some of the websites use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser. This gives us certain data, e.g. B. IP address, browser used and operating system.
Most of the cookies we use are so-called “session cookies”. They are automatically deleted after your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be restricted.
You can opt out of the use of cookies, which are used to measure reach and for advertising purposes, via the deactivation page of the network advertising initiative (http://optout.networkadvertising.org/) and also the US website (http://www.aboutads.info/choices ) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).
13.Google Analytics
On the basis of our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 Para. 1f DSGVO) we use Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google uses cookies. The information generated by the cookie about the use of the online offer by the user is usually transmitted to a Google server in the USA and stored there.
Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with other services related to the use of this online offer and internet usage. Pseudonymous user profiles can be created from the processed data.
We use Google Analytics to display the ads placed within the advertising services of Google and its partners only to those users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products that are based on the visited website). websites are determined), which we transmit to Google (so-called “remarketing” or “Google Analytics audiences”). With the help of remarketing audiences, we also want to ensure that our ads correspond to the potential interests of users and are not annoying.[AE7]
We only use Google Analytics with activated IP anonymization. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there.
The IP address transmitted by the user's browser is not merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly; In addition, users can prevent the data generated by the cookie and related to their use of the online offer from being collected and processed by Google by downloading and installing the browser plug-in available under the following link: http://tools .google.com/dlpage/gaoptout?hl=en.
Further information on data use by Google, setting and objection options can be found on the Google website: https://www.google.com/intl/de/policies/privacy/partners (“Data use by Google when using websites or apps our partners”), http://www.google.com/policies/technologies/ads (“Use of data for advertising purposes”), http://www.google.de/settings/ads (“Manage information that Google uses, to show you advertising”).
14. Google Re/Marketing Services
We use Google's marketing and remarketing services ("Google Marketing Services" for short) on the basis of our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 Para. 1f DSGVO). Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google").
Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
The Google marketing services allow us to display advertisements for and on our website in a more targeted manner in order to only present users with advertisements that potentially match their interests. If, for example, a user is shown ads for products that he was interested in on other websites, this is referred to as "remarketing". For these purposes, when our and other websites on which Google marketing services are active are accessed, Google executes a code directly and so-called (re)marketing tags (invisible graphics or code, also known as "web referred to as “beacons”) integrated into the website. With their help, an individual cookie, ie a small file, is stored on the user's device (comparable technologies can also be used instead of cookies). The cookies can be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. This file notes which websites the user visits, what content he is interested in and which offers he clicked on, as well as technical information on the browser and operating system, referring websites, visiting times and other information on the use of the online offer. The IP address of the user is also recorded, whereby we inform Google Analytics that the IP address is shortened within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and only in exceptional cases completely to a transferred to the Google server in the USA and shortened there. The IP address is not merged with the user's data within other Google offers. The above information can also be combined by Google with such information from other sources. If the user then visits other websites, the ads tailored to his interests can be displayed to him. The user data is processed pseudonymously as part of Google Marketing Services. This means that Google does not store and process, for example, the name or e-mail address of the user, but processes the relevant data in relation to cookies within pseudonymous user profiles. This means that from Google's point of view, the ads are not managed and displayed for a specifically identified person, but for the cookie owner, regardless of who this cookie owner is. This does not apply if a user has expressly allowed Google to process the data without this pseudonymization. The information collected by Google Marketing Services about users is transmitted to Google and stored on Google's servers in the USA.
The Google marketing services we use include the online advertising program "Google AdWords". In the case of Google AdWords, each AdWords customer receives a different "conversion cookie". This means that cookies cannot be tracked via the websites of AdWords customers. The information obtained with the help of the cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified.
We can also use the “Google Tag Manager” to integrate and manage Google analysis and marketing services on our website.[AE8]
For more information on how Google uses data for marketing purposes, see the overview page: https://www.google.com/policies/technologies/ads, Google's privacy policy is at https://www.google.com/policies/privacy available.
If you wish to object to interest-based advertising by Google Marketing Services, you can use the setting and opt-out options provided by Google: http://www.google.com/ads/preferences.
15. Integration of Third-Party Services and Content
We use content or service offers from third-party providers within our online offer on the basis of our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 Para Integrate videos or fonts (hereinafter uniformly referred to as “content”). This always presupposes that the third-party providers of this content perceive the IP address of the user, since without the IP address they could not send the content to their browser. The IP address is therefore required for the display of this content. We endeavor to only use content whose respective providers only use the IP address to deliver the content. Third-party providers can also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information can also be stored in cookies on the user's device and can contain, among other things, technical information about the browser and operating system, referring websites, visiting times and other information on the use of our online offer, and can also be linked to such information from other sources.
The following presentation offers an overview of third-party providers and their content, along with links to their data protection declarations, which contain further information on the processing of data and, in some cases already mentioned here, possibilities to object (so-called opt-out):
External fonts from Google, Inc., https://www.google.com/fonts ("Google Fonts"). The Google Fonts are integrated by calling up a server at Google (usually in the USA). Data protection declaration: https://www.google.com/policies/privacy/, opt-out: https://www.google.com/settings/ads/.
Maps provided by the third-party provider Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Data protection declaration: https://www.google.com/policies/privacy/, opt-out: https://www.google.com/settings/ads/.
External code of the JavaScript framework “jQuery”, provided by the third-party jQuery Foundation, https://jquery.org.