Data Protection Policy
Patient Information on Data Protection

Dear patient,

The protection of your personal data is important to us. According to the EU General Data Protection Regulation (GDPR), we are obliged to inform you about the purpose of data collection, storage, and transmission in our practice. This information will also outline your rights regarding data protection.

1. RESPONSIBILITY FOR DATA PROCESSING

Responsible for data processing:
Private Medical Practice Dr. Univ. Tuzla Asir Kopic
Große-Falterstraße 3
70597 Stuttgart

Tel: 0711 500 989 80
Fax: 0711 500 989 89
E-Mail: info@dr-kopic.de

You can reach the data protection officer at:
Private Medical Practice Dr. Univ. Tuzla Asir Kopic
Große-Falterstraße 3
70597 Stuttgart

Tel: 0711 500 989 80
Fax: 0711 500 989 89
E-Mail: info@dr-kopic.de

2. PURPOSE OF DATA PROCESSING

Data processing is carried out based on legal requirements to fulfill the treatment contract between you and your doctor and the associated obligations.

For this purpose, we process your personal data, especially your health data. This includes medical history, diagnoses, treatment proposals, and medical findings collected by us or other doctors. Other doctors or psychotherapists treating you may also provide us with data (e.g. in medical reports) for these purposes.

The collection of health data is a prerequisite for your treatment. If the necessary information is not provided, careful treatment cannot be guaranteed.

3. RECIPIENTS OF YOUR DATA

We only transmit your personal data to third parties if this is legally permitted or if you have given your consent.

Recipients of your personal data may include other doctors/psychotherapists, statutory associations of physicians, health insurance companies, medical service of health insurance companies, hospitals, medical chambers, and private medical billing centers.

The transmission is primarily for the purpose of billing for the services provided to you, clarifying medical and insurance-related questions arising from your insurance relationship. In individual cases, data may be transmitted to other authorized recipients.

Analysis Tools and Third-Party Tools

When visiting this website, your surfing behavior may be statistically evaluated. This is mainly done using so-called analysis programs.

Detailed information about these analysis programs can be found in the following privacy policy.

4. Hosting and Content Delivery Networks (CDN)

External Hosting

This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses, and other data generated via a website.

The use of the host is for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 (1) lit. b GDPR) and in the interest of a secure, fast, and efficient provision of our online offer by a professional provider (Art. 6 (1) lit. f GDPR).

Our host will only process your data to the extent necessary to fulfill its performance obligations and to follow our instructions regarding this data.

We use the following host:

1&1 IONOS SE
Elgendorfer Str. 57
56410 Montabaur

Conclusion of a contract for order processing

To ensure data protection-compliant processing, we have concluded a contract for order processing with our host.

Notice regarding data transfer to the USA and other third countries

This website includes tools from companies based in the USA or other countries without sufficient data protection regulations. If these tools are active, your personal data may be transferred to and processed in these countries. We would like to point out that there may not be a level of data protection in these countries comparable to that in the EU. For example, US companies are required to provide personal data to security authorities without the possibility of legal recourse. Therefore, it cannot be ruled out that US authorities (e.g. intelligence agencies) may process, analyze, and store your data located on US servers for surveillance purposes. We have no influence on these processing activities.

SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this page uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

5. Data Collection on This Website

Cookies

Our website uses so-called “cookies.” Cookies are small text files that do not cause any damage to your device. They are either temporarily stored for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or automatic deletion by your web browser occurs.

In some cases, cookies from third-party companies may also be stored on your device when you visit our site (third-party cookies). These allow us or you to use certain services provided by the third-party company (e.g. cookies for processing payment services).

Cookies have various functions. Numerous cookies are technically necessary, as certain website functions would not work without them (e.g. shopping cart function or video display). Other cookies are used to analyze user behavior or display advertisements.

Cookies that are necessary for the electronic communication process (necessary cookies) or for the provision of certain functions requested by you (functional cookies, e.g. for the shopping cart function) or for the optimization of the website (e.g. cookies to measure web audiences) are stored based on Art. 6 (1) lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. If consent to the storage of cookies has been requested, the processing is carried out exclusively based on Art. 6 (1) lit. a GDPR; the consent can be revoked at any time.

You can configure your browser to inform you about the setting of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for specific cases, or in general, and to activate the automatic deletion of cookies when closing the browser. The functionality of this website may be limited when cookies are deactivated.

If cookies are used by third-party companies or for analysis purposes, we will inform you separately within the framework of this privacy policy and, if necessary, request your consent.

Cookie Consent with Cookiebot

Our website uses the Cookiebot cookie consent technology to obtain your consent for the storage of certain cookies on your device and to document them in a data protection-compliant manner. The provider of this technology is Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter “Cookiebot”).

When you enter our website, a connection is established with Cookiebot’s servers to obtain your consent and other declarations regarding cookie use. Subsequently, Cookiebot stores a cookie in your browser to be able to assign the granted consents and their revocations. The data collected in this way will be stored until you ask us to delete it, delete the Cookiebot cookie yourself, or the purpose for data storage no longer applies. Mandatory legal retention periods remain unaffected.

The use of Cookiebot is intended to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 (1) lit. c GDPR.

You can change or revoke your consent at any time in the cookie statement on our website.

You can prevent the collection and processing of your data by cookiebot.com by disabling the execution of script code in your browser or by installing a script blocker in your browser (you can find one, for example, at www.noscript.net or www.ghostery.com).

Data Processing Agreement

We have concluded a data processing agreement with Cookiebot. This is a legally required contract that ensures Cookiebot processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

Server Log Files

The provider of the pages automatically collects and stores information in server log files that your browser automatically transmits to us. These are:

• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

These data are not merged with other data sources.

The collection of this data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be recorded.

Contact Form

If you send us inquiries via the contact form, your data from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We will not share this data without your consent.

The processing of this data is based on Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if it has been obtained.

The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to store it, or the purpose for data storage no longer applies (e.g., after completing the processing of your inquiry). Mandatory statutory provisions – especially retention periods – remain unaffected.

Inquiries by Email, Phone, or Fax

If you contact us by email, phone, or fax, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of handling your request. We will not share this data without your consent.

The processing of this data is based on Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if it has been obtained.

The data you send to us via contact inquiries will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for data storage no longer applies (e.g., after completing the processing of your request). Mandatory statutory provisions – especially statutory retention periods – remain unaffected.

6. Storage of Your Data

We will retain your personal data only for as long as necessary for the purpose of the treatment.
Due to legal requirements, we are obliged to store this data for at least 10 years after the end of the treatment. Other regulations may result in longer retention periods, for example, 30 years for X-ray records according to §28(3) of the X-ray Ordinance.

7. Analysis Tools and Advertising

Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. Google Tag Manager does not create user profiles, store cookies, or conduct independent analyses. However, it may collect your IP address, which can also be transferred to Google’s parent company in the United States.

The use of Google Tag Manager is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the quick and easy integration and management of various tools on its website. If consent has been requested, processing will be carried out exclusively on the basis of Art. 6(1)(a) GDPR; consent can be revoked at any time.

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors. For this purpose, the website operator receives various usage data, such as page views, dwell time, operating systems used, and the origin of the user. This data may be consolidated into a profile assigned to the respective user or their device.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). The information collected by Google regarding the use of this website is usually transferred to a Google server in the USA and stored there.

The use of this analysis tool is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising. If consent has been requested (e.g., consent to the storage of cookies), processing will be carried out exclusively on the basis of Art. 6(1)(a) GDPR; consent can be revoked at any time.

The transfer of data to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

IP Anonymization

We have activated IP anonymization on this website. As a result, your IP address will be shortened by Google within member states of the European Union or other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide further services related to website and internet use to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser Plugin

You can prevent the collection and processing of your data by Google Analytics by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

For more information on how Google Analytics handles user data, please refer to

Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Data Processing Agreement

We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Storage Period

Data stored by Google at user and event level that is linked to cookies, user IDs (e.g., User ID), or advertising IDs (e.g., DoubleClick cookies, Android advertising ID) will be anonymized or deleted after 14 months. For details, please see the following link: https://support.google.com/analytics/answer/7667196?hl=de

IONOS WebAnalytics

This website uses the analysis services of IONOS WebAnalytics (hereinafter: IONOS). The provider is 1&1 IONOS SE, Elgendorfer Straße 57, D – 56410 Montabaur. As part of the analyses with IONOS, among other things, visitor numbers and behavior (e.g., number of page views, duration of a website visit, bounce rates), visitor sources (i.e., from which page the visitor comes), visitor locations, and technical data (browser and operating system versions) are analyzed. For this purpose, IONOS stores the following data in particular:

• Referrer (previously visited website)
• Requested website or file
• Browser type and browser version
• Operating system used
• Device type used
• Time of access
• IP address in anonymized form (only used to determine the location of access)

Data processing is carried out based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the statistical analysis of user behavior to optimize both its website and its advertising. If consent has been requested, processing will be carried out exclusively based on Art. 6(1)(a) GDPR; consent can be revoked at any time.

For more information about data processing and IONOS WebAnalytics, please refer to IONOS’s privacy policy at the following link: https://www.ionos.de/terms-gtc/index.php?id=6

Data Processing Agreement

We have concluded a data processing agreement with IONOS. This agreement ensures that IONOS handles your personal data in a privacy-compliant manner.

8. Plugins and Tools

Google Web Fonts (local hosting)

This page uses so-called web fonts provided by Google for the uniform display of fonts. The Google Fonts are installed locally. There is no connection to Google’s servers in this regard.

For more information about Google Web Fonts, please visit https://developers.google.com/fonts/faq and Google’s privacy policy: https://policies.google.com/privacy?hl=de.

Google Maps

This page uses the Google Maps map service. The provider is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission. If Google Maps is activated, Google may use Google Web Fonts for the purpose of a uniform font display. When you access Google Maps, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.

The use of Google Maps is in the interest of an appealing presentation of our online offers and easy findability of the places we indicate on the website. This represents a legitimate interest within the meaning of Art. 6(1)(f) GDPR. If consent has been requested, processing will be carried out exclusively based on Art. 6(1)(a) GDPR; consent can be revoked at any time.

The data transfer to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

For more information about how Google handles user data, please refer to Google’s privacy policy: https://policies.google.com/privacy?hl=de.

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA is intended to check whether data entry on this website (e.g., in a contact form) is done by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g., IP address, time spent by the website visitor on the website, or mouse movements made by the user). The data collected during the analysis will be forwarded to Google.

The reCAPTCHA analyses run entirely in the background. Website visitors are not informed that an analysis is taking place.

Data processing is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and from spam. If consent has been requested, processing will be carried out exclusively based on Art. 6(1)(a) GDPR; consent can be revoked at any time.

For more information about Google reCAPTCHA, please see Google’s privacy policy and terms of use at the following links: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.

9. YOUR RIGHTS

You have the right to obtain information about your personal data. You may also request the correction of inaccurate data.
Furthermore, under certain conditions, you have the right to have your data deleted, the right to restrict data processing, and the right to data portability.
The processing of your data is based on legal regulations. Only in exceptional cases do we need your consent. In these cases, you have the right to revoke your consent for future processing.
Furthermore,

you have the right to lodge a complaint with the competent supervisory authority for data protection if you believe that the processing of your personal data is not lawful.

10. LEGAL BASIS

The legal basis for processing your data is Article 9(2)(h) GDPR in conjunction with § 22(1) no. 1 lit. b) Federal Data Protection Act. If you have any questions, please feel free to contact us.