PATIENT INFORMATION ON DATA PROTECTION

 
Dear Patient,
The protection of your personal data is important to us. In accordance with the EU General Data Protection Regulation (GDPR), we are obliged to inform you about the purpose for which our practice collects, stores, or forwards data. This information also explains your rights regarding data protection.


1. Responsibility for data processing

Responsible for data processing is:
Dr. med. Marwa Basalama,
Schirmerstraße 6, 40211 Düsseldorf


2. Purpose of data processing

Data processing is carried out due to legal requirements to fulfill the treatment contract between you and your doctor and the associated obligations.
For this purpose, we process your personal data, particularly your health data. This includes medical histories, diagnoses, treatment suggestions, and findings that we or other doctors collect. For these purposes, other doctors or psychotherapists who are treating you may also provide us with data (e.g., in medical letters).
The collection of health data is a prerequisite for your treatment. If the necessary information is not provided, careful treatment cannot be carried out.


3. Recipients of your data

We will only disclose your personal data to third parties if this is legally permitted and you have given your consent. Recipients of your personal data may primarily include other doctors/psychotherapists, associations of statutory health insurance physicians, health insurance companies, the medical service of health insurance, medical associations, and private medical billing centers. The transmission is mostly for the purpose of billing the services provided to you, clarifying medical and insurance-related issues. In individual cases, data may be transmitted to other authorized recipients.


4. Storage of your data

We store your personal data only as long as necessary for the execution of the treatment. Due to legal requirements, we are obliged to keep this data for at least 10 years after the end of the treatment. Other regulations may result in longer retention periods, e.g., 30 years for X-ray records according to Paragraph 28 Section 3 of the X-ray Ordinance.


5. Your rights

You have the right to obtain information about your personal data. You can also request the correction of incorrect data.
In addition, under certain conditions, you have the right to delete data, restrict data processing, and the right to data portability.
Data processing is based on legal regulations. Only in exceptional cases do we require your consent. In these cases, you have the right to revoke your consent for future processing.
You also have the right to complain to the responsible data protection supervisory authority if you believe that the processing of your personal data is not lawful.

The address of the supervisory authority responsible for us is:
XXX
Please note that if you object to the processing of your personal data, treatment by the doctor may not be possible in some cases.


6. Legal basis

The legal basis for processing your data is Article 9(2)(h) GDPR in conjunction with Paragraph 22(1)(1)(b) Federal Data Protection Act. If you have any questions, please feel free to contact us.


7. 321 Med

This website uses the online reception service 321 MED for digital, online-based communication and interaction between patients and healthcare facilities and/or medical practices. The service provider is 321 MED GmbH, Wernerwerkstraße 4, 93049 Regensburg.
 
321 MED enables us to provide immediate online support to our patients and to communicate with them quickly and easily.  If you enter data, such as your contact details, on our website via our online reception for the purpose of communicating with us, this data will be stored on the servers of 321 MED in Germany. Depending on your individual configuration and input, personal data and/or health data may be collected when you use our online reception service.
 
We use 321 MED to make our online offerings look good and to provide a direct and fast service. This constitutes a legitimate interest, the legal basis being Art. 6 (1) lit. f GDPR. Data processing by 321 MED is carried out using the data you have provided/entered on the basis of your consent, Art. 6 (1) lit. a GDPR. If you provide optional data such as gender or health data, data processing is carried out on the basis of your consent in accordance with Art. 9 (2) (a) GDPR.
 
If you do not want your data to be transferred to 321 MED, you can revoke your consent to the processing of your personal data or health data at any time by sending us a message. If you revoke your consent, your data will be deleted by us or by 321 MED. Please note that in this case, you may not be able to use all the functions of our online reception service (any longer). Data stored by us or 321 MED for other purposes remains unaffected. The legality of data processing operations that have already taken place remains unaffected by the revocation.
We have concluded a contract with the provider 321 MED for order processing (AVV) as required by data protection law. This is a contract that ensures that the respective provider processes the personal data of users of our website only in accordance with our instructions and in compliance with the GDPR.
 
Further information on the data processed via 321 MED, as well as which cookies we use and how you can manage your cookie settings, can be found in the 321 MED privacy policy at https://321med.com/de/dataprotection.
 
In conclusion, this document provides a translation of the German text, ensuring that the meaning is preserved as accurately as possible. Please note that while the translation aims to maintain the intended meaning, some minor differences may still exist due to language nuances.