Source: https://en.rhoen-klinikum-ag.com/de/metanavigation/data-protection.html
Timestamp: 2020-02-28 20:24:54
Document Index: 795080171

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 15', 'Art. 16', 'Art. 17', 'Art. 18', 'Art. 21', 'Art. 20', 'Art. 7', 'Art. 6', 'Art. 21']

RHÖN-KLINIKUM Aktiengesellschaft (hereinafter also referred to as „RHÖN-KLINIKUM AG“)
Telephone: +49 9771 65-0
Facsimile: +49 9771 97467
2. Name and Contact Information for the Data Protection Officer
Group Data Protection Officer at RHÖN-KLINIKUM AG
Ms. Marina Wefer
Telephone: +49 641 985-40155
3. Processing Personal Data, Type and Purpose of its Use
This also applies to processing which is necessary to take steps prior to entering into a contract, e. g. in the preparation of contracts, such as for medical treatment or hiring staff. Art. 6, Subsection (1), Lit c), GDPR, serves as the legal basis for processing personal data which is necessary for compliance with a legal obligation to which RHÖN-KLINIKUM AG is subject. Art. 6, Subsection (1), Lit d), GDPR, serves as the legal basis for the case where processing personal data is necessary in order to protect your vital interests or those of another natural person. Art. 6, Subsection (1), Lit f), GDPR, serves as the legal basis for processing personal data which is necessary for the purposes of a legitimate interest pursued by RHÖN-KLINIKUM AG or by a third party and if your interests, fundamental rights and freedoms do not override the former interest.
Your personal data are erased or blocked as soon as the purpose for storing the data no longer exists. The data can be stored for a longer period if this was envisaged by European or national legislation in European Union regulations, laws or other regulations to which RHÖN‑KLINIKUM AG is subject (e. g. retention periods for patient records or diagnoses). Data are also blocked or erased if a storage period which is prescribed by the above norms expires unless it is necessary to retain the data in order to enter into or perform a contract.
e) Data Processing in Connection with the Contact Form and E-Mail
If a user chooses to contact us electronically via a contact form on our webpage, the data entered in the contact form are transmitted to us and stored.
The order service (Investor Relations) collects the following data:
First Name, Last Name, Company Name, Road, Postcode, Town, Telephone No., Facsimile No., Country, E-Mail Address
It is also possible to contact us in a non-encrypted manner via the e-mail addresses provided on the webpage. Your personal data which are transmitted with the e-mail are stored in this case. You will receive the information that non-encrypted communication via e-mail does not generally provide a secure method for transmitting data via the internet. Please do not send sensitive data, such as medical data, to RHÖN-KLINIKUM AG via e-mail and/or the contact form. We strongly advise you to use the postal service or the telephone for this.
The data are processed for the purpose of communication and/or contact pursuant to Art. 6, Subsection (1), Sentence 1, Lit. a) GDPR based on your voluntary consent. Personal data are therefore only collected when and to the extent that you provide the data voluntarily. The data are only passed on to third parties without your consent if RHÖN-KLINIKUM AG is obliged to do so by law (Art. 6, Subsection (1), Lit. c), GDPR). Another legal basis for processing data transmitted via e‑mail is Art. 6, Subsection (1), Lit. f), GDPR. If the e-mail contact is geared towards entering into a contract, another legal basis for processing the data is Art. 6, Subsection (1), Lit. b), GDPR.
The data are erased as soon as they are no longer required for achieving the purpose of their collection. This is the case for the personal data in the contact form and the data transmitted via e-mail when the respective conversation with the user is finished. The conversation is finished when it can be derived from the circumstances that the subject matter concerned is completely clarified.
For a consistent appearance our webpage uses certain fonts, so-called web fonts, which come from Adobe fonts. Adobe fonts are made available by Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe).
When you visit our webpage, your browser loads the required fonts directly from Adobe in order to be able to display them correctly on your end device. Your browser connects to Adobe’s servers in the USA for this purpose. Adobe is thus made aware of the fact that your IP address is visiting our webpage. Adobe states that no cookies are stored when making the fonts available.
Adobe is certified pursuant to the EU-US Privacy Shield. The Privacy Shield is an agreement between the United States of America and the European Union, the purpose of which is to guarantee that European data protection standards are complied with. You will find more information under:
https://www.adobe.com/ie/privacy/eudatatransfers.html
Adobe fonts are required to guarantee a consistent appearance on our webpage. This constitutes a legitimate interest in the sense of Art. 6, Subsection 1, Lit. f, General Data Protection Regulation (GDPR).
You will find more information about Adobe fonts under:
https://www.adobe.com/ie/privacy/policies/adobe-fonts.html
You will find Adobe’s declaration on data protection (privacy policy) under:
https://www.adobe.com/ie/privacy/policy.html
a) Pursuant to Art. 15, GDPR, to obtain access to your personal data which RHÖN‑KLINIKUM AG has processed. You can request access, in particular, to the purposes for processing the data, the category of the personal data, the categories of recipients to whom your data were or will be disclosed, the envisaged storage period, the existence of a right to request rectification, erasure and/or restriction of the data processing or objection thereto, the existence of a right to lodge a complaint, the source of your data if not collected from RHÖN-KLINIKUM AG as well as the existence of automated decision-making, including profiling, and as necessary meaningful information to their details;
b) Pursuant to Art. 16, GDPR, to obtain without undue delay rectification or completion of your personal data stored at RHÖN-KLINIKUM AG;
c) Pursuant to Art. 17, GDPR, to obtain the erasure of your personal data stored at RHÖN‑KLINIKUM AG unless the data processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
d) Pursuant to Art. 18, GDPR, to obtain the restriction of processing your personal data if you contest the accuracy of the data, the processing is unlawful and you oppose the erasure of the data, RHÖN-KLINIKUM AG no longer needs the data but you require the data for the establishment, exercise or defence of legal claims or you have objected to the data being processed pursuant to Art. 21, GDPR;
e) Pursuant to Art. 20, GDPR, to receive your personal data which you provided to RHÖN‑KLINIKUM AG in a structured, commonly used and machine-readable format or to transmit said data to another party responsible for processing data;
f) Pursuant to Art. 7, Subsection (3), GDPR, to withdraw at any time your consent once given to RHÖN-KLINIKUM AG. This results in the fact that RHÖN-KLINIKUM AG is no longer permitted in the future to continue to process the data which were the basis for the consent; and
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA - Bavarian Data Protection Authority), Promenade 27, 91522 Ansbach, Germany.
Should you wish to make use of any of your rights as an affected person as stated in a) to f), it is sufficient to send a letter or e‑mail addressed to the Data Protection Officer in cipher 2 of this data protection declaration.
If your personal data are processed based on legitimate interests pursuant to Art. 6, Subsection (1), Sentence 1, Lit. (f), GDPR, you have the right pursuant to Art. 21, GDPR, to object to the processing of your personal data on grounds relating to your particular situation or if the objection is directed against direct marketing. In the latter case you have a general right to object, which right shall be granted by RHÖN-KLINIKUM AG without the need for details of a particular situation.
Should you wish to make use of your right of withdrawal or your right to object, it is sufficient to send a letter or e‑mail addressed to the Data Protection Officer in cipher 2 of this data protection declaration.
10. Existence of Automated Decision-Making / Profiling
11. Validity und Modification of this Data Protection Declaration
This data protection declaration is currently valid as of 25th June 2019. It may become necessary to modify this data protection declaration when the webpage is updated or if statutory stipulations are changed. You can view and print the current data protection declaration under www.rhoen-klinikum-ag.com/datenschutzerklaerung.