ENDOC Logo Practice for Endocrinology and Andrology
DE / EN

Privacy Policy (Datenschutz)

Patient Information on Data Protection

Dear Patient,
The protection of your personal data is important to us. According to the EU General Data Protection Regulation (GDPR / DSGVO), we are obligated to inform you about the purpose for which our practice collects, stores, or forwards data. This information also explains what rights you have regarding data protection.

1. Responsibility for Data Processing

Responsible for data processing is:
ENDOC Practice for Endocrinology and Andrology
Erik-Blumenfeld-Platz 27a, 22587 Hamburg
Email: praxis@endoc-med.de
Phone: 040 - 401 86612

You can reach the responsible Data Protection Officer at:
Prof. Dr. Stephan Petersenn
Erik-Blumenfeld-Platz 27a, 22587 Hamburg
Email: praxis@endoc-med.de
Phone: 040 - 401 86612

2. Purpose of Data Processing

Data processing is carried out on the basis of legal requirements in order to fulfill the treatment contract between you and your doctor and the associated obligations.

For this purpose, we process your personal data, in particular your health data. This includes medical histories, diagnoses, therapy proposals, and findings that we or other doctors collect. For these purposes, other doctors or psychotherapists where you are undergoing treatment may also provide us with data (e.g., in medical reports).

The collection of health data is a prerequisite for your treatment. If the necessary information is not provided, careful treatment cannot take place.

3. Recipients of Your Data

We only transmit your personal data to third parties if this is legally permitted or if you have given your consent.

Recipients of your personal data may primarily include other doctors / psychotherapists, Associations of Statutory Health Insurance Physicians, health insurance companies, the Medical Service of the Health Insurance Funds, Medical Associations, and private medical billing centers.

The transmission takes place predominantly for the purpose of billing the services provided to you, and for clarifying medical questions arising from your insurance relationship. In individual cases, data is transmitted to other authorized recipients.

4. Storage of Your Data

We only keep your personal data for as long as is necessary to carry out the treatment.

Due to legal requirements, we are obliged to keep this data for at least 10 years after the completion of treatment. According to other regulations, longer retention periods may apply, for example, 30 years for X-ray records according to Section 28 Paragraph 3 of the X-ray Ordinance (Röntgenverordnung).

5. Your Rights

You have the right to receive information about the personal data concerning you. You can also request the correction of incorrect data.

In addition, under certain conditions, you have the right to deletion of data, the right to restriction of data processing, and the right to data portability.

The processing of your data takes place on the basis of legal regulations. Only in exceptional cases do we need your consent. In these cases, you have the right to revoke your consent for future processing.

You also have the right to complain to the competent supervisory authority for data protection if you believe that the processing of your personal data is not lawful.

The address of the supervisory authority responsible for us is:
Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Str. 22, 7th Floor
20459 Hamburg
Phone: 040 - 428 54 4040
Fax: 040 - 428 54 4000

6. Legal Basis

The legal basis for processing your data is Article 9 Paragraph 2 lit. h) GDPR in conjunction with Section 22 Paragraph 1 No. 1 lit. b) of the Federal Data Protection Act (BDSG). Should you have any questions, please feel free to contact us.

Your Practice Team

Privacy Policy for this Website

The protection of your personal data during collection, processing, and use in connection with your visit to our homepage is of great importance to us.

Your data is protected within the framework of legal regulations. We strictly adhere to the rules of data protection laws. Below you will find information on what data is collected during your visit to the homepage and how it is used:

I. Collection and Processing of Data

Every access to our homepage and every retrieval of a file stored on the homepage is logged in a so-called log file. The storage serves internal system-related and statistical purposes.

The following data is recorded:

  • Name of the retrieved files as well as date and time of the server request
  • Amount of data transferred
  • Message about successful retrieval
  • Browser type and version, web browser, and requesting domain
  • Operating system used
  • Logging of the IP address (hostname of the accessing computer)
  • Referrer URL (the previously visited page)

This data cannot be assigned to specific persons by us and will be deleted after a statistical evaluation. A merge of this data with other data sources is not carried out.
Further personal data is only recorded if you provide this information voluntarily, for example in the context of a contact request, inquiry, or registration initiated personally by you.

II. Use and Disclosure of Personal Data

1. In the event that you have provided us with personal data, we use it exclusively for the purpose of answering your inquiries, processing contractual relationships with you, and for technical administration.
2. Your personal data will only be passed on to third parties if this serves the purpose of contract processing with you, such as for billing purposes, or if you have given your prior consent.
3. You can revoke your consent at any time with effect for the future.
4. In the event of revocation of your consent to the storage of your personal data, it will be deleted, provided that the storage is no longer necessary to fulfill the intended purpose or if data storage is illegal.

III. Right to Information, Deletion, Blocking

You have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of the data processing, as well as a right to correction, blocking, or deletion of this data. For this purpose, as well as for further questions on the subject of personal data, you can contact our Data Protection Officer at any time:

Prof. Dr. Stephan Petersenn
Erik-Blumenfeld-Platz 27a, 22587 Hamburg
Email: praxis@endoc-med.de
Phone: 040 - 401 86612

IV. Deletion Periods

We generally only store your personal data for as long as it is required for the stated purpose.

V. Security Notice

Your personal data is stored utilizing all technical and organizational means possible so that it is inaccessible to third parties. However, since we cannot guarantee complete data security when communicating by email, we recommend sending confidential information by regular mail.

VI. Contact Form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We will not share this data without your consent.

VII. Competent Supervisory Authority

The competent authority for our practice is the:

Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Str. 22, 7th Floor
20459 Hamburg
Phone: 040 - 428 54 4040
Fax: 040 - 428 54 4000

VIII. Components of the Website

External Links
For your optimal information, you will find links on our pages that refer to third-party pages. Unless it is obvious, we point out that it is an external link. We have no influence on the content and design of these pages from other providers. The guarantees of this privacy policy therefore naturally do not apply there.

Disclaimer
We expressly declare that we have no influence on the design and content of the linked pages. Therefore, we hereby expressly distance ourselves from all content of all linked pages on our site and do not adopt their content as our own. This declaration applies to all displayed links and to all content of the pages to which the links placed on our site lead.

Cookies
Some of our web pages use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies". They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. Deactivating cookies may limit the functionality of this website.

Server Log Files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request

This data cannot be assigned to specific persons. A merge of this data with other data sources is not carried out. We reserve the right to retrospectively check this data if we become aware of specific indications of illegal use.