Privacy policy
We take the protection of your personal data very seriously and adhere strictly to the statutory and official data protection regulations. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
Controller
The controller within the meaning of the General Data Protection Regulation (GDPR), other national data protection laws of the member states and other data protection provisions is:
Kinderwunsch und Hormon Zentrum an der Oper
Lacher Puchta Pauer Michna PartG
Maximilianstraße 2a
80539 Munich, Germany
Phone: +49 (8293) 950 80 38
Fax: +49 (8293) 950 80 29
E-mail: info@hormonzentrum.de
Data protection officer
We have appointed a data protection officer for our practice. You can reach him at:
Mario Krauß
kraussfirmengruppe GmbH & Co. KG
Haldenloh E 10
86465 Welden, Germany
Phone: +49 (8293) 950 80 38
E-mail: info@kraussfirmengruppe.de
Legal basis for processing
Art. 6 para. 1 sentence 1 lit. a GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, with processing operations necessary for the supply of goods or the provision of any other service or consideration, the processing is based on Art. 6 para. 1 sentence 1 lit. b GDPR. The same applies to processing operations that are necessary to carry out pre-contractual measures, for example in the case of enquiries about our products or services. If our company is subject to a legal obligation that requires the processing of personal data, such as the fulfilment of tax obligations, the processing is based on Art. 6 para. 1 sentence 1 lit. c GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person (Art. 6 para. 1 sentence 1 lit. d GDPR). Finally, processing operations may also be based on Art. 6 para. 1 sentence 1 lit. f GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on this provision if the processing is necessary to safeguard a legitimate interest of our company or of a third party, provided that the interests, fundamental rights and fundamental freedoms of the data subject do not override them.
Disclosure of data
Your personal data will not be transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties if:
- you have given your express consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
- the disclosure is necessary in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in your data not being disclosed,
- there is a legal obligation for the disclosure in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR, and
- this is legally permissible and necessary in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR for the performance of contractual relationships with you.
Rights of data subjects
You have the right:
- in accordance with Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, where applicable, meaningful information about its details;
- in accordance with Art. 16 GDPR, to request without undue delay the rectification of inaccurate personal data or the completion of your personal data stored by us;
- in accordance with Art. 17 GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
- in accordance with Art. 18 GDPR, to request the restriction of the processing of your personal data if you contest the accuracy of the data, if the processing is unlawful but you oppose its erasure, if we no longer need the data but you require it for the establishment, exercise or defence of legal claims, or if you have objected to the processing in accordance with Art. 21 GDPR;
- in accordance with Art. 20 GDPR, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller;
- in accordance with Art. 22 GDPR, not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you;
- in accordance with Art. 7 para. 3 GDPR, to withdraw your consent at any time. As a result, we may no longer continue the data processing based on this consent in the future; and
- in accordance with Art. 77 GDPR, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your habitual place of residence, your place of work or the place of the alleged infringement if you consider that the processing of personal data relating to you infringes the EU General Data Protection Regulation (GDPR).
The locally competent supervisory authority:
Landesamt für Datenschutzaufsicht (Bavarian Data Protection Authority)
Postfach 1349, 91504 Ansbach, Germany
Promenade 18, 91522 Ansbach, Germany
Phone: +49 981 180093-0
Fax: +49 981 180093-800
E-mail: poststelle@lda.bayern.de
Cookies
Our website uses cookies. A cookie is a data record that is created when you visit a website and is temporarily stored on the website user's system. When the user accesses the server of our website again, the user's browser sends the previously received cookie back to the server. The server can evaluate the information obtained in this way. Cookies can be used, for example, to control advertisements or to make it easier to navigate a website. Some cookies are necessary to ensure the functionality of our website (the legal basis is Art. 6 para. 1 lit. f GDPR, the legitimate interests of the operator of this website – we only use cookies in accordance with Art. 5 para. 1 lit. a GDPR, i.e. in line with the principles of "lawfulness, fairness and transparency"). If you wish to prevent the use of cookies altogether, you can do so via the local settings of your web browser (e.g. Mozilla Firefox, Google Chrome, Opera or Safari). For cookies that are not technically necessary, you will find further information on the cookies used by tools and plugins in this privacy policy.
Server log files (general collection of data)
Each time this website is accessed, data and information are collected by an automated system. These are stored in the server log files for a period of 7 days. The following data may be collected:
- Browser type and browser version
- Operating system used
- Internet service provider
- IP address
- Date and time of the server request
- Websites from which your system reaches our website
- Websites accessed by your system via our website
The data is processed in order to deliver the content of our website, to ensure the functionality of our IT systems and to optimise our website. The log file data is always stored separately from other personal data of users.
We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.
External hosting (DomainFactory GmbH)
This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster's servers. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access data and other data generated via a website. The hoster is used for the purpose of fulfilling contracts with our potential and existing patients (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online services by a professional provider (Art. 6 para. 1 lit. f GDPR). Our hoster will only process your data to the extent necessary to fulfil its service obligations and will follow our instructions regarding this data. To ensure processing in compliance with data protection law, we have concluded a data processing agreement with our hoster.
Online appointment booking
If you send us an online appointment booking via the form integrated on this website, your personal data will be processed for the purpose of handling the appointment request, stored in our practice account and made available to our staff. Personal data is only collected to the extent necessary in the context of this online appointment booking. Any data entered by the user is provided voluntarily; where mandatory information is requested, it is essential for the use of the service. The data collected will not be passed on and will only be used for the stated purpose.
The processing and storage of the data entered in the form is therefore based on your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw this consent at any time. An informal e-mail to us is sufficient. The lawfulness of the data processing carried out before the withdrawal remains unaffected by the withdrawal. To ensure processing in compliance with data protection law, we have concluded a data processing agreement with our hoster.
The user can withdraw their consent to the collection and use of their personal data at any time with effect for the future. The data you enter will remain stored in our account and in our IT system until you ask us to delete it, withdraw your consent to its storage or the purpose for storing the data no longer applies (e.g. once your appointment request has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
Links to other websites
From time to time, our website may contain links to third-party websites or to other websites of our own. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we accept no responsibility or liability for these policies. Please check these privacy policies before you submit any personal data to these websites.
Contact forms
If you send us enquiries via a contact form, the information you provide in the enquiry form, including the contact details you enter there, will be stored and processed by us for the purpose of handling the enquiry and in case of follow-up questions. Your data will be used exclusively for the purpose of answering and processing your enquiry. The data is processed in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily given consent. You can object to this at any time (right of withdrawal).
References to third-party websites
This website offers references to third-party websites in the form of so-called links. Data is only transferred to the link target once you click on such a link. This is technically necessary. The data transferred includes, in particular: your IP address, the time at which you clicked on the link, the page on which you clicked on the link, and information about your web browser. If you do not want this data to be transferred to the link target, please do not click on the link.
Objection to advertising e-mails
We hereby object to the use of contact data published in the context of our legal notice obligation for the purpose of sending unsolicited advertising and information material. We expressly reserve the right to take legal action in the event of unsolicited advertising, for example via spam e-mails.
Enquiries by e-mail, phone or fax
If you contact us by e-mail, phone or fax, your enquiry, including all resulting personal data (name, enquiry), will be stored and processed by us for the purpose of handling your request. We will not pass on this data without your consent.
Handling of applicant data
We offer you the opportunity to apply to us (e.g. by e-mail, by post or via an online application form). Below, we inform you about the scope, purpose and use of the personal data collected during the application process. We assure you that your data will be collected, processed and used in accordance with applicable data protection law and all other statutory provisions and that your data will be treated in strict confidence.
Scope and purpose of data collection
If you send us an application, we process the associated personal data (e.g. contact and communication data, application documents, notes taken during job interviews, etc.) insofar as this is necessary to decide on the establishment of an employment relationship. The legal basis for this is Section 26 of the German Federal Data Protection Act (BDSG) (initiation of an employment relationship), Art. 6 para. 1 lit. b GDPR (general initiation of a contract) and – if you have given your consent – Art. 6 para. 1 lit. a GDPR. Consent can be withdrawn at any time. Within our company, your personal data will only be passed on to persons involved in processing your application. If your application is successful, the data you submitted will be stored in our data processing systems on the basis of Section 26 BDSG and Art. 6 para. 1 lit. b GDPR for the purpose of carrying out the employment relationship.
Data retention period
If we are unable to offer you a position, if you decline a job offer or withdraw your application, we reserve the right to retain the data you submitted on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR) for up to 6 months from the end of the application process (rejection or withdrawal of the application). The data will then be deleted and any physical application documents destroyed. The retention serves in particular as evidence in the event of a legal dispute. If it is apparent that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), it will only be deleted once the purpose of further retention no longer applies. Longer retention may also take place if you have given your consent to this (Art. 6 para. 1 lit. a GDPR) or if statutory retention obligations prevent deletion.
Inclusion in the applicant pool
If we do not offer you a position, we may be able to include you in our applicant pool. In this case, all documents and information from your application will be transferred to the applicant pool so that we can contact you if suitable vacancies arise.
Inclusion in the applicant pool is based exclusively on your express consent (Art. 6 para. 1 lit. a GDPR). Giving consent is voluntary and has no bearing on the current application process. The data subject can withdraw their consent at any time. In this case, the data will be irrevocably deleted from the applicant pool, provided there are no statutory reasons for retention. The data in the applicant pool will be irrevocably deleted no later than two years after consent was given.
Google Analytics
This website uses functions of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
Google Analytics cookies are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.
IP anonymisation
We have activated the IP anonymisation function on this website. As a result, your IP address will be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services relating to website and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Browser plugin
You can prevent cookies from being stored by adjusting the settings of your browser software accordingly; however, please note that in this case you may not be able to use all functions of this website to their full extent. In addition, you can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Objection to data collection
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set that prevents your data from being collected on future visits to this website: Disable Google Analytics.
For more information on how Google Analytics handles user data, please see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.
Data processing agreement
We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Google AdWords and Google Conversion Tracking
This website uses Google AdWords. AdWords is an online advertising programme of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google").
As part of Google AdWords, we use so-called conversion tracking. When you click on an ad placed by Google, a cookie for conversion tracking is set. Cookies are small text files that the web browser stores on the user's computer. These cookies expire after 30 days and are not used to identify users personally. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the ad and was redirected to this page.
Each Google AdWords customer receives a different cookie. The cookies cannot be tracked across the websites of AdWords customers. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can object to this use by simply deactivating the Google Conversion Tracking cookie in the user settings of your web browser. You will then not be included in the conversion tracking statistics.
"Conversion cookies" are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.
For more information about Google AdWords and Google Conversion Tracking, please see Google's privacy policy: https://policies.google.com/privacy.
You can configure your browser so that you are informed when cookies are set and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and enable the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.
Google DoubleClick
DoubleClick by Google is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). DoubleClick by Google uses cookies to show you ads that are relevant to you. A pseudonymous identification number (ID) is assigned to your browser in order to check which ads have been displayed in your browser and which ads have been viewed. The cookies do not contain any personal information. The use of DoubleClick cookies only enables Google and its partner websites to serve ads based on previous visits to our website or other websites on the internet. The information generated by the cookies is transmitted by Google to a server in the USA for evaluation and stored there. Google only transfers data to third parties on the basis of statutory provisions or in the context of commissioned data processing. Under no circumstances will Google combine your data with other data collected by Google.
By using our websites, you consent to the processing of the data collected about you by Google in the manner described above and for the stated purpose. You can prevent cookies from being stored by adjusting the settings of your browser software accordingly. In addition, you can prevent Google from collecting the data generated by the cookies and relating to your use of the websites and from processing this data by downloading and installing the browser plugin available at the following link under "DoubleClick deactivation extension". Further information on data protection at DoubleClick by Google can be found here: https://policies.google.com/privacy/update?hl=en
Vimeo
Our website uses plugins of the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
When you visit one of our pages equipped with a Vimeo plugin, a connection to the Vimeo servers is established. The Vimeo server is informed which of our pages you have visited. Vimeo also obtains your IP address. This also applies if you are not logged in to Vimeo or do not have a Vimeo account. The information collected by Vimeo is transmitted to the Vimeo server in the USA.
If you are logged in to your Vimeo account, you enable Vimeo to assign your browsing behaviour directly to your personal profile. You can prevent this by logging out of your Vimeo account.
Further information on the handling of user data can be found in Vimeo's privacy policy at: https://vimeo.com/privacy.
Elfsight
Elfsight is used to embed Google reviews. Our website uses functions of the Google Reviews service. These functions are provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The Elfsight Google Review plugin loads the images directly from Google. All other data is collected and cached on the server side. When you, as a visitor to our website, load the content, it is loaded for the Google Review widget from the Elfsight cache. No personal data is collected during this request. If you are logged in to your Google account, information may be transmitted to the provider Elfsight. Further information can be found in Google's privacy policy: https://policies.google.com/privacy. Further information on data protection at Elfsight can be found at: https://elfsight.com/privacy-policy/.
SSL encryption
This website uses SSL encryption (Secure Socket Layer) to transmit data from your browser to our server and to servers that provide files we embed on our website. With SSL, data is transmitted in encrypted form. The data cannot be altered and the sender can be identified. You can recognise SSL encryption by the prefix "https" in front of the address of the website you are visiting in your browser.
Security notice
We protect our website and other IT systems against loss, destruction, unauthorised access, unauthorised modification or unauthorised dissemination of your data by means of appropriate technical and organisational measures. Despite all due care, however, complete protection against all risks is not possible in every case. As we cannot guarantee complete data security for communication by e-mail, we recommend sending confidential information by post.
Changes to this privacy policy
We reserve the right to amend this privacy policy if the legal situation, this online service or the way in which data is collected changes. However, this only applies to statements on data processing. If the user's consent is required or if parts of the privacy policy regulate the contractual relationship with users, the privacy policy will only be amended with the user's consent.
Patient information on data protection
Download our patient information on data protection here (PDF, in German).