Information on data protection

Information on data protection

1.    Data protection at a glance

General information

The following information provides a simple overview of what happens to your personal information when you visit this website. Personal information is any data with which you could be personally identified. Detailed information on the subject of data protection can be found in our data protection statement below.

Controller

The controller responsible for processing data on this website is: 

MP Medical Park Holding SE
Freiberger-Platz 1
83123 Amerang

Telephone: +49 8075 91311-0
E-mail: info@medicalpark.de

The controller is the natural person or legal entity that makes decisions, alone or with others, about the purposes and means of processing personal data (e.g. names, e-mail addresses etc.).

Data protection officer required by law

We have appointed a data protection officer for our company. 
You can contact our data protection officer by e-mail: datenschutzbeauftragter@medicalpark.de 

Our information about data protection applies to all locations, for our clinics - and also for our three outpatient therapy centres.

Data collection on this website

Who is responsible for data collection on this website?
The data collected on this website is processed by the website operator. You will find the operator's contact details in the legal notice on this website.

How do we collect your data?
Some of your data is collected when you provide it to us. This may, for example, be data you enter on a contact form.
Other data will be collected automatically or with your consent by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or the time when a page is accessed). This data will be collected automatically as soon as you enter this website.

What do we use your data for?
Some of the data is collected to ensure the proper functioning of the website. Other data may be used to analyse your user behaviour.

What rights do you have regarding your data?
You are entitled to receive information free of charge at any time about the origin, recipient and purpose of your stored personal data. You also have the right to demand correction or erasure of this data. If you have given your consent to data processing, you may revoke this consent at any time for the future. You also have the right, under certain circumstances, to demand that processing of your personal data be restricted. You also have the right to lodge a complaint with the relevant regulatory authority.
You may contact us at any time using the address given in the legal notice if you have further questions concerning data protection.

Analysis tools and third-party tools
Your surfing behaviour may be statistically evaluated when you visit this website. This is done mainly by analysis programs.
Detailed information about these analysis programs can be found in the following privacy policy.

2.    General points and mandatory information 

Data protection

The operators of these website pages take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations and this privacy policy.
When you use this website, various items of personal data will be collected. Personal information is any data with which you could be personally identified. This data protection statement explains which information we collect and what we use it for. It also explains how and for what purpose this happens.
We draw your attention to the fact that data transmission via the internet (e.g. when communicating by email) may involve security gaps. Seamless protection of data against access by third parties is not possible.

Note about duration of storage
Unless a specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for which it was collected ceases to apply. If you present a justified request for erasure or revoke your consent for data processing, your data will be erased unless we have other legally permissible reasons for storing your personal data (e.g. preservation periods required under tax law or commercial law); in the latter instance, the erasure will take place once these reasons cease to apply.

Note about data transfer to the USA
Our website uses tools from companies based in the USA amongst other things. When these tools are active, your personal data may be transferred to the servers of these companies in the USA. Please note that the USA is not a safe third country as defined by EU data protection law. US companies are required to disclose personal data to security authorities without you as the data subject having the option to instigate legal action against this. We cannot, therefore, exclude the possibility that US authorities (e.g. secret services) may process, analyse and store your data on US servers permanently for surveillance purposes. We have no influence on these processing activities.

Revocation of your consent for data processing
Many data processing actions are possible only with your express consent. You may revoke your consent at any time. The legality of data processing that has already taken place up to the time of revocation will remain unaffected by the revocation.


Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)
IF DATA PROCESSING TAKES PLACE ON THE BASIS OF ART. 6 (1) E OR F GDPR, YOU WILL HAVE THE RIGHT TO LODGE AN OBJECTION TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR SPECIFIC SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. YOU CAN DETERMINE THE LEGAL BASIS ON WHICH PROCESSING IS CARRIED OUT FROM THIS PRIVACY POLICY. IF YOU LODGE AN OBJECTION, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA TO WHICH IT RELATES UNLESS WE CAN PROVE COMPELLING GROUNDS FOR PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS, OR PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION IN ACCORDANCE WITH ART 21 (1) GDPR.

IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT AT ANY TIME TO LODGE AN OBJECTION AGAINST THE PROCESSING OF THE PERSONAL DATA RELATING TO YOU FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS DIRECTLY CONNECTED WITH SUCH DIRECT ADVERTISING. IF YOU LEDGE AN OBJECTION, YOUR PERSONAL DATA WILL THEN NO LONGER BE USED FOR THE PURPOSE OF DIRECT ADVERTISING (OBJECTION IN ACCORDANCE WITH ART. 21 (2) GDPR.

Right of appeal to the competent regulatory authority
In the case of infringements of the GDPR, data subjects have a right of appeal to a regulatory authority, in particular in the Member State of their habitual residence, place of work or place of the suspected infringement. This right of appeal exists without prejudice to other administrative or judicial remedies.

Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract provided to you or to a third party in a common, machine-readable format. If you request a direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.
 
SSL or TLS encryption
This page uses SSL or TLS encryption for security reasons and to protect the transfer of confidential content, for example orders or enquiries that you send to us website operator. You can recognize an encrypted connection because the browser's address line changes from 
"http://" to "https://" and because you see the lock symbol in your browser line.
When the SSL or TLS encryption is activated the data you transfer to us cannot be viewed by third parties.

Information, erasure and rectification
You have the right, within the framework of the applicable legal provisions, to obtain, at any time free of charge, information about your personal data stored by us, including the origin of the data, its recipients and the purpose of data processing and, if applicable, the right to rectification, erasure or blocking of this data. We invite you to contact us with further questions related to personal data at any time via the address provided in this legal notice.

Right to restriction of processing
You have the right to demand that the processing of your personal data be restricted. To do so, you can contact us at any time at the address given in the legal notice. The right to restrict processing exists in the following instances:

If you dispute the correctness of your personal data stored by us, we usually need time to check this. For the duration of the checking process, you have the right to demand that we restrict the processing of your personal data.
If the processing of your personal data was/is carried out unlawfully, you can request that the data processing be restricted instead of being erased.
If we no longer require your personal data, but you need it to exercise, defend or assert legal claims, you have the right to demand that we restrict the processing of your personal data instead of erasing it.
If you have lodged an objection in accordance with Art. 21 (1) GDPR, a consideration of the balance between your interests and ours is necessary. As long as it is not yet ascertained whose interests outweigh the others, you have the right to demand that the processing of your personal data be restricted.

If you have restricted the processing of your personal data, this data may – apart from storage – be processed only with your consent or for assertion, exercise or defence of legal claims or for the protection of rights of another natural person or legal entity or for reasons of an important public interest of the European Union or of a Member State.

3.    Hosting und Content Delivery Networks (CDN)

External hosting

This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster's servers. This may include IP addresses, contact enquires, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.
The use of the hoster is for the purpose of fulfilling the contract in relation to our potential and existing customers (Art. 6 (1) GDPR) and in the interest of a secure, fast and efficient provision of our online service by a professional provider (Art. 6 (1) f GDPR).
Our hoster will only process your data as far as necessary to fulfil their performance obligations and will comply with our instructions in respect of this data.

We use the following hoster:

DomainFactory GmbH
Oskar-Messter-Straße 33
85737 Ismaning
Germany

Conclusion of a contract for commissioned processing
In order to guarantee data-protection-compliant processing, we have concluded a contract with our host for commissioned processing.

4.    Data collection on this website

Cookies

Our website uses cookies. Cookies are small text files that do not cause any damage on your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your end device. Session cookies are erased automatically after the end of your visit. Permanent cookies remain on your end device until you erase them yourself or until they are automatically deleted by your web browser.

In some cases, cookies from third-party companies may also be stored on your end device when you go into our site (third-party cookies). They allow us or you to use certain services of the third party company (e.g. cookies for the processing of payment services).

Cookies have various functions. Numerous cookies are necessary on the technical level because certain website functions would not work without them (e.g. the shopping basket function or video display). Other cookies are used to analyse user behaviour or to display advertisements.

Cookies required to carry out the electronic communication process (necessary cookies) or to provide certain functions you have requested (functional cookies, e.g. for the shopping basket function) or to optimise the website (e.g. cookies to gauge the web audience) are stored on the basis of Art. 6 (1) f GDPR, unless another legal basis is stated. The website operator has a legitimate interest in the storage of cookies to ensure provision of an optimized service free of technical errors. If consent to the storage of cookies has been requested, the storage of the cookies in question will take place exclusively on the basis of this consent (Art. 6 (1) a GDPR); consent may be revoked at any time.

You can adjust the settings in your browser so that you are informed about the setting of cookies and you can allow cookies only in an individual case, exclude acceptance of cookies in particular cases or generally and activate the option for automatic erasure of cookies when the browser is closed. If you disable cookies, the functionality of this website may be restricted.

Insofar as cookies are used by third-party companies or for analytical purposes, we will inform you separately about this within the framework of this privacy policy and, if necessary, ask for your consent.


Cookie consent with CookieFirst and Cookiebot

This website uses CookieFirst's cookie consent technology to obtain your consent to the storage of certain cookies on your device or for the use of certain technologies, and to document such consent in accordance with the data protection regulations. The provider of this technology is CookieFirst by Digital Data Solutions B.V., Plantage Middenlaan 42a, 1018 DH Amsterdam
Chamber of Commerce number: 75762277, legal@CookieFirst.com, website: https://CookieFirst.com (herein after "CookieFirst").

When you go into our website, the following personal information will be transferred to CookieFirst:

  • Your consent or revocation of consent 
  • Your IP address
  • Information about your browser 
  • Information about your device 
  • Time of your visit to the website

Furthermore, CookieFirst stores a cookie in your browser to be able to assign to you the consent granted the revocation of it. The data collected in this way is stored until you ask us to erase it, erase the CookieFirst cookie itself or until the purpose for which the data is stored ceases to apply. Mandatory legal storage obligations remain unaffected.

CookieFirst is used to obtain the legally required consent for the use of certain technologies. The legal basis for this is Art. 6 (1) sentence 1 c of the GDPR.

Contract for commissioned processing
We have concluded a contract for commissioned processing with CookieFirst. This is a contract that is required by data protection law and ensures that CookieFirst only processes personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Our website (karriere.medicalpark.de) also uses cookie consent technology Cookiebot provided by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (company registration number: DK34624607); tel: + 45 50 333 777, e-mail: mail@cookiebot.com 

Our customers can send requests relating to data protection, privacy and security issues to CEO Daniel Johannsen, Cybot A/S, at dpo@cookiebot.com.

Cookiebot stores a cookie with the consent status. 

No personal information (in particular no IP address) of the visitor is transferred to Cookiebot. 
The use of Cookiebot takes place in order to obtain the legally required consent for use of cookies. The legal basis for this is Art. 6 (1) sentence 1 c of the GDPR.
 

Server log files

The website provider automatically collects and saves information in server log files, which your browser transfers to us automatically. These are:

  • browser type and browser version 
  • operating system used 
  • referrer URL
  • host name of the accessing computer 
  • time of the server enquiry
  • IP address

This data is not collated with other data sources.


This data is recorded on the basis of Art 6 (1) f of the GDPR. The website operator has a legitimate interest in fault-free presentation and optimization of their website – and the server log files need to be recorded for this purpose.


Contact form

If you send enquiries to us using the contact form, your information from the enquiry form including the contact data that you enter there will be stored in order to process the enquiry and in case there are follow-up questions.
We do not share this data without your permission.
This data is processed on the basis of Art. 6 (1) b GDPR if your request relates to the fulfilment of a contract or is required for implementation of pre-contractual measures.
In all other cases the processing is based on our legitimate interest in effective processing of enquiries addressed to us (Art. 6 (1) f GDPR) or on your consent (Art. 6 (1) a GDPR) insofar as this has been requested.

The data you have entered in the contact form will remain with us until you ask us to erase it, revoke your consent for storage or the purpose for which the data is stored no longer applies (e.g. after your enquiry has been processed).

Enquiry by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your enquiry including all personal data (name, enquiry) that it contains will be stored and processed by us in order to process your request. We do not share this data without your permission.
This data is processed on the basis of Art. 6 (1) b GDPR if your request relates to the fulfilment of a contract or is required for implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 (1) f GDPR) or on your consent (Art. 6 (1) a GDPR), provided that the enquiry was made.

The data you have provided to us in the contact form will remain with us until you ask us to erase it, revoke your consent for storage or the purpose for which the data is stored no longer applies (e.g. after your issue has been dealt with). Mandatory statutory provisions - in particular statutory preservation periods - remain unaffected.


5.    Analytical tools and advertising

Google Analytics

This website uses the functions of the Google Analytics web analysis service. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics allows the website operator to analyse the behaviour of website visitors. In this process, the website operator receives various usage data, such as page views, duration of a stay, operating systems used and the origin of the user. This data is combined by Google in a profile which is assigned to the respective user or the latter's device.
Google Analytics uses technologies that enable recognition of the user in order to analyse user behaviour (e.g. cookies or device fingerprinting). The information collected by Google relating to the use of this website is usually transferred to a Google server in the USA and stored there.

This analysis tool is used on the basis of Art 6 (1) f of the GDPR. The website operator has a legitimate interest in analysing user behaviour to optimize both its website and its advertising. If corresponding consent has been requested (e.g. consent to the storage of cookies), processing will be carried out exclusively on the basis of Art. 6 (1) a GDPR; the consent may be revoked at any time.


Data transmission to the US is based on the standard contractual clauses of the EU Commission. Details can be found at: https://privacy.google.com/businesses/controllerterms/mccs/.

IP anonymization
We have activated the IP anonymization feature on this website. In this way your IP address will be truncated by Google within the area of member states of the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases will the full IP address be sent to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your usage of the website, compile reports on website activities and provide the website operator with additional services relating to the usage of the website and the internet. The IP address sent from your browser in the context of Google Analytics will not be amalgamated with other data by Google.

Browser plugin
You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de 

You will find more information about the handling of user data by Google Analytics in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de

Commissioned processing
We have concluded a contract with Google for commissioned processing and fully implement the stringent requirements of the German data protection authorities in the use of Google Analytics.

Demographic features of Google Analytics
This website uses the "demographic features" function of Google Analytics to help website visitors find suitable advertisements within the Google advertising network. This allows reports to be generated containing statements about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google and third-party visitor data. This data cannot be attributed to any specific individual. You can disable this feature at any time by adjusting the ads settings in your Google account or you can prohibit the collection of your data by Google Analytics as explained in the section "Refusal of data collection".

Preservation period
User and event-level data stored at Google linked to cookies, user identification information (e.g. User ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is anonymised or erased after 14 months. Details can be found under the following link:
 https://support.google.com/analytics/answer/7667196?hl=de 


Matomo (formerly Piwik)

This website uses the open source web analysis service Matomo. Matomo uses technologies that enable the recognition of the user across different pages for the analysis of user behaviour (e.g. cookies or device fingerprinting). The information collected by Matomo relating to the use of this website is stored on our server. The IP address is made anonymous before being stored.

With the help of Matomo we are in a position to collect and analyse data about the use of our website by website visitors. This allows us to identify, among other things, when which page views were made and from which region they came. We also collect various log files (e.g. IP address, referrer, browser and operating system used) and can determine whether our website visitors carry out certain actions (e.g. clicks, purchases, etc.).

This analysis tool is used on the basis of Art 6 (1) f of the GDPR. The website operator has a legitimate interest in anonymous analysis of user behaviour to optimize both their website and their advertising. If corresponding consent has been requested (e.g. consent to the storage of cookies), processing will be carried out exclusively on the basis of Art. 6 (1) a GDPR; the consent may be revoked at any time.

Hosting
We host Matomo exclusively on our own servers so that all analysis data remains with us and is not forwarded.

Google Ads

The website operator uses Google Ads. Google Ads is an online advertising program of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads allows us to display advertisements in the Google search engine or on third party websites if a user enters certain search terms in Google (keyword targeting). Furthermore, targeted advertisements can be displayed on the basis of the user data available on Google (e.g. location data and interests) (target group orientation). As website operators we can evaluate this data quantitatively, for example by analysing which search terms led to the display of our advertisements and how many advertisements led to corresponding clicks.

The use of Google Ads is based on Art. 6 (1) f GDPR. The website operator has a legitimate interest in marketing their service and products as effectively as possible.
Data transmission to the US is based on the standard contractual clauses of the EU Commission. Details can be found at: https://privacy.google.com/businesses/controllerterms/mccs/ 

Google conversion tracking

This website uses Google conversion tracking. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google conversion tracking allows Google and us to discover whether a user has performed certain actions. For example, we can evaluate which buttons on our website were clicked how often and which products have been viewed or purchased very frequently. This information is used to create conversion statistics. We discover the total number of users who clicked on our ads and which actions they carried out. We do not receive any information that can be used to identify the user personally. Google itself uses cookies or comparable recognition technologies for the purpose of identification.

The use of Google conversion tracking is based on Art. 6 (1) f GDPR. The website operator has a legitimate interest in analysing user behaviour to optimize both its website and its advertising. If corresponding consent has been requested (e.g. consent to the storage of cookies), processing will be carried out exclusively on the basis of Art. 6 (1) a GDPR; the consent may be revoked at any time.

For more information on Google conversion tracking, please read the Google privacy policy: https://policies.google.com/privacy?hl=de 

Google DoubleClick

This website uses functions of Google DoubleClick. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "DoubleClick").

DoubleClick is used to show you interest-based ads across the Google advertising network. DoubleClick can be used to tailor ads to the interests of each viewer. For example, our ads may appear in Google search results or in banner advertising associated with DoubleClick.

In order to display advertisements to users based on their interests, DoubleClick has to be able to recognise the viewer and associate the visited web pages, clicks and other information about user behaviour with the viewer. DoubleClick uses cookies or comparable recognition technologies (e.g. Aevice fingerprinting) for this purpose. The information collected is combined to form a pseudonymous user profile to present the user with advertising based on interests.

Google DoubleClick is used for the purpose of targeted advertising. This constitutes a legitimate interest within the meaning of Art. 6 (1) f GDPR. If corresponding consent has been requested (e.g. consent to the storage of cookies), processing will be carried out exclusively on the basis of Art. 6 (1) a GDPR; the consent may be revoked at any time.

For more information on how to appeal against Google's ads, please see the following links: https://policies.google.com/technologies/ads and https://adssettings.google.com/authenticated 

Facebook pixel

This website uses Facebook pixel to measure conversions of visitor's actions. This service is provided by Meta Platforms Ireland Ltd., HARBOUR, 4, Grand Canal Quay, Grand Canal Bridge, Dublin, 2, Ireland. However, according to Facebook, the data collected is also transferred to the United States as well as other third countries.

This allows the behaviour of site visitors to be tracked after they have been forwarded to the provider's website as a result of a click on a Facebook ad. This allows the effectiveness of Facebook ads to be analysed for statistical and market research purposes and future advertising measures to be optimised.
The collected data is anonymous for us as the website operator, and we cannot draw any conclusions concerning the identity of users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook may use the data for their own advertising purposes in accordance with the Facebook Data Policy. This enables Facebook to enable the placement of advertisements on Facebook pages and also outside of Facebook. This use of the data cannot be influenced by us as a website operator.

The use of Facebook pixel is based on Art. 6 (1) f GDPR. The website operator has a legitimate interest in effective advertising measures including social media.
If corresponding consent has been requested (e.g. consent to the storage of cookies), processing will be carried out exclusively on the basis of Art. 6 (1) a GDPR; the consent may be revoked at any time.

Data transmission to the US is based on the standard contractual clauses of the EU Commission. Details can be found at: https://www.facebook.com/legal/EU_data_transfer_addendum und https://de-de.facebook.com/help/566994660333381 

You will find further information about the protection of your privacy in the Facebook Data Policy: de-de.facebook.com/about/privacy/ 

You can also disable the remarketing function "Custom Audiences" in the ad settings section at: www.facebook.com/ads/preferences/;
You must be logged in to Facebook to do this.

If you do not have a Facebook account, you can disable Facebook usage-based advertising on the European Interactive Digital Advertising Alliance website: www.youronlinechoices.com/de/praferenzmanagement 

6.    Plugins and tools

YouTube

This website includes videos from the YouTube website. The website operator is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit one of our websites in which YouTube is integrated, a connection to the YouTube servers is established. In this process the YouTube server is informed as to which of our pages you have visited.

Furthermore, YouTube may store various cookies on your end device or use comparable technologies for recognition (e.g. device fingerprinting). In this way, YouTube is able to obtain information about visitors to this website. This information is used, among other things, to record video statistics, improve user-friendliness and prevent fraud.

If you are logged on to your YouTube account you allow YouTube to assign your surfing behaviour direct to your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used to create an attractive presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 (1) f GDPR. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 (1) a GDPR; consent can be revoked at any time.
 
For further information about the handling of user data, please see YouTube's privacy policy at https://policies.google.com/privacy?hl=de 

Google Web Fonts (local hosting)

This site uses web fonts provided by Google for a uniform display of fonts. The Google fonts are installed locally. There is no connection to Google servers.

For more information about Google Web Fonts, please see developers.google.com/fonts/faq and Google's privacy policy: https://policies.google.com/privacy?hl=de 


Google reCAPTCHA

We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of reCAPTCHA is to check whether the data input on this website (for example in a contact form) is done by a person or by an automated program. For this purpose, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor goes into the website. For the analysis, reCAPTCHA evaluates various items of information (e.g. IP address, duration of the website visitor's time on the website or mouse actions made by the user). The data collected during the analysis is transferred to Google.

The reCAPTCHA analyses run fully in the background. Website visitors are not informed that an analysis is taking place.

The storage and analysis of the data is based on Art. 6 (1) f GDPR. The website operator has a legitimate interest in protecting his web services against abusive automated spying and SPAM. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 (1) a GDPR; consent can be revoked at any time.

For more information about Google reCAPTCHA, please see the Google Privacy Policy and Google Terms of Use at the following links:
https://policies.google.com/privacy?hl=de und https://policies.google.com/terms?hl=de 


AddThis (social sharing/social bookmarking provider)

This website includes components of the company AddThis. AddThis is a bookmarking provider which allows simplified bookmarking of websites via buttons.
The operating company for AddThis is AddThis, Inc. 1595 Spring Hill Road, Suite 300, Vienna, VA 22182, USA and belongs to Oracle Corporation, Willis Tower, 233 South Wacker Drive, 45th Floor, Chicago, IL 60606, USA.

Each time you call up an individual page of this website which is operated by us and on which an AddThis component has been integrated, the internet browser on your IT system is automatically prompted by the respective AddThis component to download data from the website www.addthis.com. 
Within the scope of this technical procedure AddThis receives information about the visit and which specific individual pages have been used by your IT system. Furthermore, AddThis obtains knowledge of the IP address of the IT system you are using, the browser type, browser language, the website called up prior to our website, the date and time of the visit to our website. AddThis uses this data to create anonymous user profiles. 
This data and information enables AddThis itself as well as the companies affiliated with AddThis or their corporate partners to address visitors to our website specifically with personalised and interest-based advertising.

AddThis displays personalised and interest-based advertising based on a cookie set by the company. This cookie analyses the individual your IT system's surfing behaviour. The cookie stores the visits to internet pages that originate from the computer system.

You can prevent the setting of cookies by AddThis and our website at any time by a corresponding setting in your internet browser. Furthermore, cookies that are already set may be erased at any time via the internet browser or other software programs.
You also have the option of to make an objection to the processing of personal data by AddThis on a permanent basis. 

If you have given your consent to this via our Cookie Consent within the meaning of Art. 6 (1) a GDPR, you can access the applicable privacy policy of AddThis at: https://www.addthis.com/privacy/privacy-policy


7.    Services for handling of applicant data

Your online application (via rexx Recruiting Portal)
You have the option of applying for jobs with us via our career site on the internet. For this purpose we ask for title, name, address and contact data, earliest possible employment start date, application documents (mandatory data) and general data as well as other attachments on a voluntary basis. You are free to decide whether to provide data and which data you provide. You also have the option of entering only some of the requested data. We will use the data you provide (hereinafter referred to as "application data") only for the application process.

When your data has been entered and sent, it will be transferred directly via an encrypted connection to our external service provider's server, rexx systems GmbH, Süderstrasse 75-79, 20097 Hamburg (hereinafter "rexx"). The application data sent by you will be conveyed via encrypted connections and stored and processed for us on our service provider's systems. 

rexx operates as our processor and is subject to our instructions in accordance with Art. 28 GDPR.

Alternatively, you may send us the data for your application to the rexx system directly from your LinkedIn profile or Xing profile. All information about our data protection guidelines in social media can be found under the heading: Data protection guidelines on our social media channels  
(See below)

Preservation period
Your application data will be stored only as long as it is absolutely essential for the application process or on the basis of a possible employment contract concluded with you. In this process, we shall of course also take into account all other statutory regulations, such as those of the Allgemeinen Gleichbehandlungsgesetz General Equal Treatment Act or the Arbeitsgerichtsgesetz (Labour Court Act).

Insofar as we use your application data to comply with legal obligations, the legal basis will be Art. 6 (1) c GDPR

Revocation of your consent for collection, processing and use of your data 
Insofar as you have given your consent for collection, processing and use of your personal data for individual functions on our website, you have the option of revoking your consent at any time with effect for the future. A statement of revocation must be sent to bewerbung(at)gesundheitswelt.de. Please note that if you revoke your consent, you may no longer be able to use the functions affected by this.

Right to information, rectification, portability, restriction of processing and deletion
As a user of our website, you are entitled to receive information free of charge about the personal data stored that relates to you. Upon request, we will inform you in writing in accordance with applicable law about whether and which personal data relating to you is stored by us. In addition, users of our website have a right to rectification, portability, blocking and erasure of their personal data in accordance with the statutory provisions. Please contact us to make such a request by e-mail to: bewerbung(at)gesundheitswelt.de.

Admission to the applicant pool
If we do not offer you a job, there may be the possibility of including you in our applicant pool. If you are accepted, all documents and details from your application will be transferred to the applicant pool so that we can contact you concerning suitable vacancies.
Admission to the applicant pool is based exclusively on your express consent (Art. 6 (1) a GDPR). The provision of consent is voluntary and has no relationship with the ongoing application procedure. The data subject may revoke his/her consent at any time. In this case, the data will be erased irrevocably from the applicant applicants, unless there are legal reasons for retention it.
The data from the applicant pool will be erased no later than two years after consent has been given.


8.    Data protection guidelines on our social media channels

Data processing via social networks

We maintain publicly accessible profiles in social networks. You can find the social networks we use in detail below.

Social networks such as Facebook, Twitter etc. are usually able to analyse your user behaviour comprehensively when you visit their website or a website with integrated social media content (e.g. buttons or advertising banners). A visit to our social media sites triggers numerous data processing procedures to which the issue of data protection applies. Specifically:

If you are logged in to your social media account and visit our social media page, the operator of the social media portal may assign this visit to your user account. However, under certain circumstances your personal data may also be collected even if you are not logged in or do not have an account with the relevant social media portal. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP address.

With the help of the data collected in this way, operators of social media portals are able to create user profiles where your preferences and interests are stored. In this way, interest-related advertising can be displayed to you both within and outside the relevant social media presence. If you have an account with the relevant social network, interest-based advertising may be displayed on all devices on which you are or have been logged on.

Please also note that we are not able to trace all processing on the social media portals. Depending on the provider, further processing may therefore be carried out by the social media portal operators. For details, please refer to the terms of use and data protection regulations of the respective social media portals.

Legal basis
Our social media appearances are designed to ensure the greatest possible presence on the internet. This is a legitimate interest within the meaning of Art. 6 (1) f GDPR. The analytical processes initiated by the social networks may have different legal bases, which must be specified by the social networks operators (e.g. consent within the meaning of Art. 6 (1) a GDPR).

Controller and assertion of rights
If you visit one of our social media pages (e.g. Facebook), we will be jointly responsible with the operator of the social media platform for data processing operations triggered during this visit. You can assert your rights (information, rectification, erasure, restriction of processing, data portability and complaints) both against us and against the operator of the respective social media portal (e.g. against Facebook).

Please note that despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing procedures of social media portals. Our possibilities depend largely on the respective provider's corporate policy.

Preservation period
The data we collect directly via the social media presence will be erased from our systems as soon as the purpose for storing it no longer applies, you request us to erase it, revoke your consent for storage or the purpose for storing the data no longer applies. Stored cookies will remain on your device until you erase them. Mandatory legal provisions - in particular preservation periods - remain unaffected.

We have no influence on the storage period of your data stored by the operators of social networks for their own purposes. For details, please contact the social network operators directly (e.g. in their privacy policy, see below).


Facebook

We have a profile on Facebook. This service is provided by Meta Platforms Ireland Ltd., HARBOUR, 4, Grand Canal Quay, Grand Canal Bridge, Dublin, 2, Ireland.
 
However, according to Facebook, the data collected is also transferred to the United States and to other third countries.

We have entered into a joint processing agreement (controller addendum) with Facebook. This agreement defines which data processing operations we or Facebook are responsible for whenever you visit our Facebook page. You can view this agreement under the following link:
https://www.facebook.com/legal/terms/page_controller_addendum 

You can adjust your advertising settings independently in your user account. To do this, click on the following link and log in: www.facebook.com/settings;

Data transmission to the US is based on the standard contractual clauses of the EU Commission. Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum und https://de-de.facebook.com/help/566994660333381 

Details can be found in the Facebook privacy policy: www.facebook.com/about/privacy 


Twitter

We use the Twitter short news service. The provider is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland

You can adjust your Twitter privacy settings independently in your user account. To do this, click on the following link and log in: twitter.com/personalization 

Data transmission to the US is based on the standard contractual clauses of the EU Commission. Details can be found here:
https://gdpr.twitter.com/en/controller-to-controller-transfers.html 

Details can be found in the Twitter privacy policy: twitter.com/de/privacy 


Instagram

We have a profile with Instagram. The supplier is Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA.

Data transmission to the US is based on the standard contractual clauses of the EU Commission. Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875
https://de-de.facebook.com/help/566994660333381 

Details of how they handle your personal information can be found in Instagram's Privacy Policy: help.instagram.com/519522125107875 


XING

We have a profile on XING. The provider is New Work SE, Dammtorstrasse 30, 20354 Hamburg, Germany. Details on how they handle your personal data can be found in the XING Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung 


LinkedIn

We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.

If you want to disable LinkedIn advertising cookies, please use the following link:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out 

Data transmission to the US is based on the standard contractual clauses of the EU Commission. Details can be found here:
https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs 

Details about how they handle your personal information can be found in LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy 

YouTube

We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details about how they handle your personal information can be found in YouTube's Privacy Policy: https://policies.google.com/privacy?hl=de