Source: https://alohana.de/en/data-protection-statement/
Timestamp: 2019-04-20 12:17:21+00:00

Document:
We take appropriate technical measures in accordance with Art. 32 GDPR, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the different likelihood and severity of the risk to the rights and freedoms of natural persons and organizational measures to ensure a level of protection appropriate to the risk. Measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as their access, input, disclosure, availability and separation. In addition, we have established procedures that ensure the enjoyment of data subject rights, data erasure and data vulnerability. Furthermore, we consider the protection of personal data already in the development, or selection of hardware, software and procedures, according to the principle of data protection by technology design and by privacy-friendly default settings taken into account (Article 25 GDPR).
We process the data of our patients and prospective clients and other clients or contractual partners (uniformly referred to as “patients”) in accordance with Art. 6 para. 1 lit. b) GDPR in order to provide them with our contractual or pre-contractual services. The data processed, the nature, scope and purpose and necessity of their processing are determined by the underlying contractual relationship. The processed data includes in principle inventory and master data of the patient (eg, name, address, etc.), as well as the contact data (eg, e-mail address, telephone, etc.), the contract data (eg, services used, purchased products, costs, names of contact persons) and payment details (eg, bank details, payment history, etc.).
If necessary for the fulfillment of the contract or required by law, we disclose or transmit the data of patients in the context of communication with health care professionals, necessary or typically involved third parties such as laboratories, clearing houses or similar service providers, provided that the provision of our services acc. Art. 6 para. 1 lit b. DSGVO serves, legally gem. Art. 6 para. 1 lit c. DSGVO is prescribed to our interests or those of patients in an efficient and cost-effective health care as a legitimate interest. Art. 6 para. 1 lit. F. DSGVO serves or gem. Art. 6 (1) lit. d. DSGVO is necessary. to protect vital interests of patients or another natural person, or in the context of consent in accordance with. Art. 6 para. 1 lit. a., Art. 7 GDPR.
If required for the fulfillment of the contract or required by law, we disclose or transmit the data of the clients in the context of communication with other professionals, necessary or typically involved third parties, such as clearing houses or comparable service providers, as far as the provision of our services in accordance with. Art. 6 para. 1 lit b. DSGVO serves, legally gem. Art. 6 para. 1 lit c. DSGVO is prescribed to our interests or those of clients in an efficient and cost-effective health care as legitimate interest gem. Art. 6 para. 1 lit. F. DSGVO serves or gem. Art. 6 (1) lit. d. DSGVO is necessary. to protect the vital interests of clients or any other natural person, or in the context of consent in accordance with. Art. 6 para. 1 lit. a., Art. 7 GDPR.
No warning without contact: In the case of the assertion of claims of any kind for copyright, competition law, as well as trademark and data law matters, we ask to avoid unnecessary litigation, warnings and costs, to contact us immediately. If claims of the above-mentioned type are made, we hereby declare a remedy before a final legally binding clarification by which a possible risk of repetition is bindingly excluded. A still attending cost note of an attorney’s warning without prior contact would then be rejected for failure to comply with a loss mitigation obligation.
The unnecessary or unjustified warnings and follow-up measures in this sense would be answered with a negative declaratory action. This also applies to warnings that fall under § 8 (4) UWG.
If the content or the presentation of these pages infringe third-party rights or statutory provisions, we ask for a message without cost note. The elimination of an infringement of intellectual property rights by these owners may not take place without our consent.
Legal validity of this declaration: If sections or individual terms of this statement are not legal or correct, the content or validity of the other parts remain uninfluenced by this fact.

References: Art. 32
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 7
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 7
 § 8