Source: https://www.sophiahealth.de/index.php/data-protection/
Timestamp: 2019-04-22 10:14:47+00:00

Document:
Your personal data (e.g. title, name, address, e-mail address, telephone number, bank details, credit card number) will only be processed by us in accordance with the provisions of the German Data Protection Act and the Data Protection Act of the European Union (EU). The following regulations inform you not only about the processing purposes, recipients, legal bases, storage periods, but also about your rights and the persons responsible for your data processing. This data protection declaration only refers to our websites. If you are forwarded to other sites via links on our pages, please inform yourself there about the respective handling of your data.
Your personal data, which you make available to us to make an appointment, are necessary for concluding a contract with us. You are not obliged to provide your personal data. It is not possible to make binding commitments to you for a treatment appointment without notification of your name and a contact option. The processing of your data entered in the process of arranging an appointment is therefore carried out for the purpose of fulfilling the contract.
If you send us an enquiry by e-mail, via a contact form etc. before concluding the contract, we will process the data received in this way to carry out pre-contractual measures and answer, for example, your questions about our range of therapies.
The legal basis for this processing is Art. 6 para. 1 b) DSGVO.
Dispatch service provider, hosting provider, if necessary suppliers (Dropshipping).
We store the data required for the execution of the contract until the expiry of the statutory warranty and, if applicable, within the framework of our obligations under the Heilpraktikergesetz. We keep the data required by commercial and tax law for the legally specified periods, regularly ten years (see § 257 HGB, § 147 AO). The data processed for the implementation of pre-contractual measures shall be deleted as soon as the measures have been implemented and it is evident that no contract has been concluded.
Use of the email address to send a newsletter.
The legal basis for this processing is Art. 6 para. 1 a) DSGVO.
Technically necessary cookies are used on this website. These are small text files that are stored in or by your Internet browser on your computer system. These cookies make it possible, for example, to visit password-protected pages on the website.
The legal basis for this processing is Art. 6 para. 1 f) DSGVO.
Our legitimate interest is the functionality of our website. The user data collected by technically necessary cookies are not used to create user profiles. This will safeguard your interest in data protection.
You may request confirmation from us as to whether personal data relating to you will be processed by us.
(8) the existence of automated decision-making including profiling pursuant to Art. 22 (1) and (4) DSGVO and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such processing on the data subject.
(4) if you have objected to the processing pursuant to Art. 21 para. 1 DSGVO and it has not yet been determined whether the legitimate reasons to which we are entitled outweigh your reasons.
If the processing of personal data concerning you has been restricted, such data – apart from its storage – may only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State. If the processing restriction has been limited in accordance with the above conditions, you will be informed by us before the restriction is lifted.
(1) The personal data relating to you is no longer necessary for the purposes for which it was collected or otherwise processed.
(6) The personal data relating to you have been collected in relation to information society services offered pursuant to Art. 8 para. 1 DSGVO.
If we have made the personal data concerning you public and if we are obliged to delete them in accordance with Art. 17 (1) DSGVO, we shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform those responsible for data processing who process the personal data that you as the data subject have requested them to delete all links to this personal data or copies or replications of this personal data.
If you have exercised the right to correction, deletion or limitation of processing against us, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of this correction, deletion or limitation of processing, unless this proves impossible or involves disproportionate effort.
In exercising this right, you also have the right to request that the personal data relating to you be transferred directly by us to another responsible person, insofar as this is technically feasible. Freedoms and rights of other persons must not be affected by this.
The right to data transfer does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
If the personal data concerning you are processed for the purpose of direct advertising, you have the right at any time to object to the processing of the personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is connected with such direct advertising.
With regard to the cases mentioned in (1) and (3), we shall take appropriate measures to protect your rights and freedoms as well as your legitimate interests.

References: Art. 6
 § 257
 § 147
 Art. 6
 Art. 6
 Art. 22
 Art. 21
 Art. 8
 Art. 17