Our privacy policy

Personal data is any information relating to an identified or identifiable natural person. The decisive factor is therefore whether the data collected can be linked to a person. This includes information such as your name, address, telephone number and email address.
Information that is not directly associated with your real identity - such as favorite websites or the number of users of a site - is not personal data.
 

How do we collect personal data?

When you visit our websites, our web servers temporarily store the connection data of the requesting computer, the websites you visit, the date and duration of the visit, the identification data of the browser and operating system type used and the website from which you visit us as standard for the purpose of system security.
Additional personal data such as your name, address, telephone number or e-mail address will not be collected unless you provide this information voluntarily, e.g. as part of a registration, a survey, a competition, to execute a contract or a request for information.
 

How do we use your personal data?

If the opportunity for the input of personal or business data (e-mail addresses, names, addresses) is given, the input of these data takes place voluntarily. E-mails are sent via a contact form. If you send us such a message, your personal data will only be collected to the extent necessary for a reply.
The e-mail is transmitted on our website in encrypted form under a secure socket license (SSL). We use the personal data provided by you exclusively for the purpose of technical administration of the websites and to fulfill your wishes and requirements, i.e. usually to process the contract concluded with you or to answer your inquiry.
We also use this data for service-related or product-related surveys, marketing purposes and statistical purposes only if you have given us your prior consent or if you have not objected to this - insofar as this is provided for by law. Your personal data will not be passed on, sold or otherwise transferred to third parties unless this is necessary for the purpose of processing the contract or you have expressly consented to this.
You can revoke your consent at any time with effect for the future.
 

How long will your data be stored?

In principle, we store all information that you transmit to us until the respective, e.g. contractual, purpose has been fulfilled. E.g. in the case of inquiries until they have been dealt with, in the case of newsletters until you unsubscribe from the newsletter. If a longer storage period is provided for by law, the data will be stored within this framework.
If you no longer wish us to use your data, we will of course comply with this request immediately (please contact us at the address given under "Contact").
 

When will your data be deleted?

Stored personal data will be deleted if you withdraw your consent to storage, if knowledge of the data is no longer required to fulfill the purpose for which it was stored or if storage is not permitted for other legal reasons.
Data for billing and accounting purposes is not affected by a request for deletion.

When you visit our website, we use so-called cookies. These are small text files that are stored on your computer. Cookies help us to determine the frequency of use and the number of users of our website, as well as to make our services as convenient and efficient as possible for you. On the one hand, we use so-called "session cookies", which are only stored temporarily for the duration of your use of one of our Internet pages.

On the other hand, we use "permanent cookies" to store information about visitors who repeatedly access one of our Internet pages. The purpose of using these cookies is to be able to offer you an optimal user guidance as well as to "recognize" you and to be able to accommodate your search behavior in case of repeated use.

The content of a permanent cookie is limited to an identification number. Name, IP address etc. are not stored. An individual profile of your usage behavior is not created.

It is also possible to use our website without cookies. You can deactivate the storage of cookies in your browser, restrict it to certain websites or set your browser so that it notifies you as soon as a cookie is sent. Please note, however, that if you deactivate cookies, you will have to reckon with a limited display of the site and limited user guidance.

Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested (the best known such function is, for example, the "shopping cart function" known from web stores) are stored on the basis of Art. 6 para. 1 lit. f GDPR.

The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g. cookies to analyze your surfing behavior) are stored, these are treated separately in this privacy policy.

Our institution takes all necessary technical and organizational security measures to protect your personal data from loss and misuse. Your data is stored in a secure operating environment that is not accessible to the public.

This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL encryption is activated, the data you transmit to us cannot be read by third parties. If you wish to contact our clinic via a general e-mail address (e.g. 02.namb@med.uni-heidelberg.de or info@nier enzentrum-heidelberg.com), we would like to point out that the confidentiality of the information transmitted is not guaranteed. The content of e-mails can be viewed by third parties. We therefore recommend that you only send us confidential information by post.

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and possible recipients and the purpose of the data processing (Art. 15 GDPR) and, if applicable, a right to rectification of incorrect data Art.

16 GDPR), erasure of this data (Art. 17 GDPR), the right to restriction of processing in accordance with Art. 18 GDPR, the right to object (Art. 21 GDPR) and the right to data portability of data provided by you in accordance with Art. 20 GDPR).

The restrictions under Sections 34 and 35 BDSG apply to the right of access and the right to erasure. In addition, you have the right to lodge a complaint with the competent supervisory authority in the event of breaches of data protection law (Art. 77 GDPR in conjunction with Section 19 BDSG).

The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our institution is based (Baden-Württemberg).

A list of data protection officers and their contact details can be found at the following link: 
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Many data processing operations are only possible with your express consent. You can withdraw your consent at any time. All you need to do is send us an informal e-mail. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Data protection for applications

We collect and process the personal data of applicants for the purpose of handling the application process. Processing may also be carried out electronically. This is particularly the case if an applicant sends us the relevant application documents electronically, for example by e-mail.

If an employment contract is concluded with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If no employment contract is concluded with the applicant, the application documents will be automatically deleted six months after notification of the rejection decision, provided that deletion does not conflict with any other legitimate interests of the controller.

Other legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).
 

Newsletter

If you have expressly consented, we will use your email address and voluntary personal details to send you our newsletter on a regular basis. To receive our newsletter, it is sufficient to provide an e-mail address. The additional voluntary information about you is only used to personalize the newsletter. At the end of each newsletter you will find a link that you can use to unsubscribe from the newsletter at any time.

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data is collected, or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties. The data entered in the newsletter registration form is processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR).

You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time, for example via the "Unsubscribe" link in the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation. The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. e-mail addresses for the member area) remain unaffected by this.

This website works with the company CleverReach GmbH & Co KG, Mühlenstr. 43, 26180 Rastede, Germany, to send newsletters. 
CleverReach is a service that can be used to organize and analyse the sending of newsletters. The data you enter for the purpose of receiving the newsletter (e.g. e-mail address) is stored on CleverReach's servers in Germany or Ireland. Our newsletters sent with CleverReach enable us to analyze the behavior of newsletter recipients. Among other things, we can analyze how many recipients have opened the newsletter message and how often which link in the newsletter was clicked on. (With the help of conversion tracking, which is not used by the operator of this website, it is also possible to analyze whether a predefined action (e.g. purchase of a product on our website) has taken place after clicking on the link in the newsletter).

Further information on data analysis by CleverReach newsletters can be found at: www.cleverreach.com/de/funktionen/reporting-und-tracking/

Data processing takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation. If you do not want CleverReach to analyze your data, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message. You can also unsubscribe from the newsletter directly on the website. The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted from both our servers and CleverReach's servers after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. e-mail addresses for the member area) remain unaffected by this.

You can find more details in CleverReach's privacy policy at: www.cleverreach.com/de/datenschutz/

We have concluded an order data processing contract with CleverReach and fully implement the strict requirements of the German data protection authorities when using CleverReach.

Google Web Fonts (fonts)

This site uses so-called web fonts provided by Google for the uniform display of fonts. When you access a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to Google's servers. This informs Google that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers.

This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If your browser does not support web fonts, a standard font will be used by your computer. Further information on Google Web Fonts can be found at developers.google.com/fonts/faq and in Google's privacy policy:
www.google.com/policies/privacy/
 

Google Maps

This site uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there.

The provider of this site has no influence on this data transfer. The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website.

This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. You can find more information on the handling of user data in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/
 

Google search

We offer you the option of using our search function to search the content of the website. We use the Google service for this purpose. In principle, no data is transferred to the provider of the search service (Google) when official websites of our institution are called up in which the "Google user-defined search" is integrated. Data is only transferred to Google after the user has activated the search box, started a full-text search and called up the search results page.

By using the search function within the search results page, user data is also transmitted to Google at the same time. Google uses cookies such as the PREF, NID or SID cookie to customize ads in Google products such as Google Search. For example, Google uses cookies to record your most recent search queries, your previous interactions with other websites or other search results and your visits to other websites. In this way, you receive customized information as well as advertising on Google.

By using the full-text search and accessing the search results page, you consent to the use of the Google search service and therefore also to the transfer of data to the Google service. This includes, for example, the search terms you enter and the IP address of the computer you are using. Please note that different data protection standards apply to Google than to the Internet offering of our institution.

We expressly point out that the processing, in particular the storage, deletion and use of any personal data transmitted is the responsibility of the provider of the search service and that our company, as the operator of its website, has no influence on the type and scope of the data transmitted or on its further processing. If you are logged in to Google at the same time, the Google service is able to assign the information directly to your user profile. You should log out to avoid the collection of profile information about you. Further information from Google on the handling of user data (privacy policy) can be found at: www.google.com/intl/de/policies/privacy

YouTube components are integrated on this website. YouTube is an Internet video portal that enables video publishers to post video clips free of charge and other users to view, rate and comment on them free of charge.

YouTube allows the publication of all types of videos, which is why complete film and television programs as well as music videos, trailers or videos made by users themselves can be accessed via the Internet portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. 
Each time you access a page of our website on which a YouTube component (YouTube video) has been integrated, your Internet browser is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. 
Further information about YouTube can be found at https://www.youtube.com/yt/about/de/. During the course of this technical procedure, YouTube and Google gain knowledge of what specific sub-page of our website you are visiting. If you are logged in to YouTube at the same time, YouTube recognizes which specific subpage of our website the data subject is visiting when a subpage containing a YouTube video is accessed. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.

YouTube and Google always receive information via the YouTube component that the data subject has visited our website if you are logged in to YouTube at the same time as accessing our website. This takes place regardless of whether you click on a YouTube video or not.

If you do not want this information to be transmitted to YouTube and Google, you can prevent it by logging out of your YouTube account before accessing our website. 
The data protection provisions published by YouTube, which can be accessed at https://www.google.de/intl/de/policies/privacy/, provide information about the collection, processing and use of personal data by YouTube and Google.

At certain times, you have the option of registering on our controller's website by providing personal data. Which personal data is transmitted to the data controller is determined by the respective input mask used for registration. The personal data entered by the data subject is collected and stored exclusively for internal use by the controller and for the controller's own purposes.

The controller may arrange for the data to be passed on to one or more processors, such as a parcel service provider, who will also use the personal data exclusively for internal use attributable to the controller. By registering on the controller's website, the IP address assigned by the data subject's Internet service provider (ISP), the date and time of registration are also stored. This data is stored against the background that this is the only way to prevent the misuse of our services and, if necessary, to make it possible to investigate criminal offenses and copyright infringements.

In this respect, the storage of this data is necessary to safeguard the controller. This data will not be passed on to third parties unless there is a legal obligation to pass it on or it serves the purpose of criminal or legal prosecution.