Data security

1. General information

The fol­low­ing notes pro­vide a sim­ple overview of what hap­pens to your per­son­al data when you vis­it our web­site. Per­son­al data is any data with which you can be per­son­al­ly iden­ti­fied. For detailed infor­ma­tion on data pro­tec­tion, please refer to our pri­va­cy pol­i­cy list­ed below this text. Data col­lec­tion on our web­site Who is respon­si­ble for data col­lec­tion on this web­site? Data pro­cess­ing on this web­site is car­ried out by the web­site oper­a­tor. You can find his con­tact details in the imprint of this web­site. How do we col­lect your data? On the one hand, your data is col­lect­ed by you pro­vid­ing it to us. This can be, for exam­ple, data that you enter in a con­tact form. Oth­er data is col­lect­ed auto­mat­i­cal­ly by our IT sys­tems when you vis­it the web­site. This is main­ly tech­ni­cal data (e.g. Inter­net brows­er, oper­at­ing sys­tem or time of page view). This data is col­lect­ed auto­mat­i­cal­ly as soon as you enter our web­site. What do we use your data for? Some of the data is col­lect­ed to ensure error-free pro­vi­sion of the web­site. Oth­er data may be used to ana­lyze your user behav­ior. What rights do you have regard­ing your data? You have the right to receive infor­ma­tion about the ori­gin, recip­i­ent and pur­pose of your stored per­son­al data free of charge at any time. You also have a right to demand the cor­rec­tion, block­ing or dele­tion of this data. For this pur­pose, as well as for fur­ther ques­tions on the sub­ject of data pro­tec­tion, you can con­tact us at any time at the address giv­en in the imprint. Fur­ther­more, you have the right to lodge a com­plaint with the com­pe­tent super­vi­so­ry author­i­ty. Analy­sis tools and third-par­ty tools When vis­it­ing our web­site, your surf­ing behav­ior may be sta­tis­ti­cal­ly eval­u­at­ed. This is done pri­mar­i­ly with cook­ies and with so-called analy­sis pro­grams. The analy­sis of your surf­ing behav­ior is usu­al­ly anony­mous; the surf­ing behav­ior can­not be traced back to you. You can object to this analy­sis or pre­vent it by not using cer­tain tools. You can find detailed infor­ma­tion on this in the fol­low­ing pri­va­cy pol­i­cy. You can object to this analy­sis. We will inform you about the objec­tion options in this pri­va­cy policy.

2. GENERAL NOTES AND OBLIGATORY INFORMATION

Datenschutz

The oper­a­tors of these pages take the pro­tec­tion of your per­son­al data very seri­ous­ly. We treat your per­son­al data con­fi­den­tial­ly and in accor­dance with the statu­to­ry data pro­tec­tion reg­u­la­tions and this pri­va­cy pol­i­cy. When you use this web­site, var­i­ous per­son­al data are col­lect­ed. Per­son­al data is data with which you can be per­son­al­ly iden­ti­fied. This pri­va­cy pol­i­cy explains what data we col­lect and what we use it for. It also explains how and for what pur­pose this is done. We would like to point out that data trans­mis­sion on the Inter­net (e.g. when com­mu­ni­cat­ing by e‑mail) can have secu­ri­ty gaps. Com­plete pro­tec­tion of data against access by third par­ties is not possible.

RESPONSIBLE FOR THE PROCESSING

Uni­ver­sität­sklinikum Hei­del­berg
Im Neuen­heimer Feld 672
69120 Hei­del­berg

Insti­tu­tion under pub­lic law rep­re­sent­ed by the Board of Man­age­ment of the Uni­ver­si­ty Hospital

Phone: 06221 56–0
Fax: 06221 56–5999
E‑Mail: klinikumsvorstand@med.uni-heidelberg.de

DATA PROTECTION OFFICER OF THE COMPANY

Uni­ver­sität­sklinikum Hei­del­berg
Daten­schutzbeauf­tragte
Im Neuen­heimer Feld 672
69120 Hei­del­berg
06221 56 7036
datenschutz@med.uni-heidelberg.de

Revocation of your consent to data processing

Many data pro­cess­ing oper­a­tions are only pos­si­ble with your express con­sent. You can revoke an already giv­en con­sent at any time. For this pur­pose, an infor­mal com­mu­ni­ca­tion by e‑mail to us is suf­fi­cient. The legal­i­ty of the data pro­cess­ing car­ried out until the revo­ca­tion remains unaf­fect­ed by the revocation.

Right of appeal to the competent supervisory authority

In the event of vio­la­tions of data pro­tec­tion law, the per­son con­cerned has the right to lodge a com­plaint with the com­pe­tent super­vi­so­ry author­i­ty. The com­pe­tent super­vi­so­ry author­i­ty for data pro­tec­tion issues is the state data pro­tec­tion com­mis­sion­er of the fed­er­al state in which our com­pa­ny is based. A list of the data pro­tec­tion offi­cers and their con­tact details can be found in the fol­low­ing link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to data portability

You have the right to have data that we process auto­mat­i­cal­ly on the basis of your con­sent or in ful­fill­ment of a con­tract hand­ed over to you or to a third par­ty in a com­mon, machine-read­able for­mat. If you request the direct trans­fer of the data to anoth­er con­troller, this will only be done inso­far as it is tech­ni­cal­ly feasible.

SSL or TLS encryption

This site uses SSL or TLS encryp­tion for secu­ri­ty rea­sons and to pro­tect the trans­mis­sion of con­fi­den­tial con­tent, such as orders or requests that you send to us as the site oper­a­tor. You can rec­og­nize an encrypt­ed con­nec­tion by the fact that the address line of the brows­er changes from “http://” to “https://” and by the lock sym­bol in your brows­er line. If SSL or TLS encryp­tion is acti­vat­ed, the data you trans­mit to us can­not be read by third parties.

Disclosure, blocking, deletion

With­in the frame­work of the applic­a­ble legal pro­vi­sions, you have the right at any time to free infor­ma­tion about your stored per­son­al data, its ori­gin and recip­i­ent and the pur­pose of data pro­cess­ing and, if nec­es­sary, a right to cor­rec­tion, block­ing or dele­tion of this data. For this pur­pose, as well as for fur­ther ques­tions on the sub­ject of per­son­al data, you can con­tact us at any time at the address giv­en in the imprint.

Objection to advertising e‑mails

The use of con­tact data pub­lished with­in the frame­work of the imprint oblig­a­tion to send adver­tis­ing and infor­ma­tion mate­ri­als not express­ly request­ed is here­by pro­hib­it­ed. The oper­a­tors of the pages express­ly reserve the right to take legal action in the event of the unso­licit­ed send­ing of adver­tis­ing infor­ma­tion, such as spam e‑mails.

3. DATA COLLECTION ON OUR WEBSITE

Cookies

The Inter­net pages part­ly use so-called cook­ies. Cook­ies do not cause any dam­age to your com­put­er and do not con­tain virus­es. Cook­ies serve to make our offer more user-friend­ly, more effec­tive and safer. Cook­ies are small text files that are stored on your com­put­er and saved by your brows­er. Most of the cook­ies we use are so-called “ses­sion cook­ies”. They are auto­mat­i­cal­ly delet­ed after the end of your vis­it. Oth­er cook­ies remain stored on your ter­mi­nal device until you delete them. These cook­ies allow us to rec­og­nize your brows­er on your next vis­it. You can set your brows­er so that you are informed about the set­ting of cook­ies and only allow cook­ies in indi­vid­ual cas­es, exclude the accep­tance of cook­ies for cer­tain cas­es or in gen­er­al and acti­vate the auto­mat­ic dele­tion of cook­ies when clos­ing the brows­er. If cook­ies are deac­ti­vat­ed, the func­tion­al­i­ty of this web­site may be lim­it­ed. Cook­ies that are required to car­ry out the elec­tron­ic com­mu­ni­ca­tion process or to pro­vide cer­tain func­tions you have request­ed (e.g. shop­ping cart func­tion) are stored on the basis of Art. 6 (1) lit. f DSGVO. The web­site oper­a­tor has a legit­i­mate inter­est in stor­ing cook­ies for the tech­ni­cal­ly error-free and opti­mized pro­vi­sion of its ser­vices. Inso­far as oth­er cook­ies (e.g. cook­ies for the analy­sis of your surf­ing behav­ior) are stored, these are treat­ed sep­a­rate­ly in this pri­va­cy policy.

Server log files

The provider of the pages auto­mat­i­cal­ly col­lects and stores infor­ma­tion in so-called serv­er log files, which your brows­er auto­mat­i­cal­ly trans­mits to us. These are: Brows­er type and brows­er ver­sion Oper­at­ing sys­tem used Refer­rer URL Host name of the access­ing com­put­er Time of serv­er request IP address This data is not merged with oth­er data sources. The basis for data pro­cess­ing is Art. 6 (1) lit. f DSGVO, which per­mits the pro­cess­ing of data for the ful­fill­ment of a con­tract or pre-con­trac­tu­al measures.

Contact form & paperform.co

If you send us inquiries via the con­tact form, your data from the inquiry form includ­ing the con­tact data you pro­vid­ed there will be stored by us for the pur­pose of pro­cess­ing the inquiry and in case of fol­low-up ques­tions. We do not pass on this data with­out your con­sent. The pro­cess­ing of the data entered in the con­tact form is there­fore based exclu­sive­ly on your con­sent (Art. 6 para. 1 lit. a DSGVO). You can revoke this con­sent at any time. For this pur­pose, an infor­mal com­mu­ni­ca­tion by e‑mail to us is suf­fi­cient. The legal­i­ty of the data pro­cess­ing oper­a­tions car­ried out until the revo­ca­tion remains unaf­fect­ed by the revo­ca­tion. The data you entered in the con­tact form will remain with us until you request us to delete it, revoke your con­sent to store it, or the pur­pose for stor­ing the data no longer applies (e.g. after we have com­plet­ed pro­cess­ing your request). Manda­to­ry legal pro­vi­sions — in par­tic­u­lar reten­tion peri­ods — remain unaf­fect­ed. The con­tact form paperform.co used for our busi­ness analy­ses is DSGVO Com­pli­ant. You can find more infor­ma­tion here: https://help.paperform.co/about-paperform/security/paperform-and-gdpr

Registration on this website

You can reg­is­ter on our web­site to use addi­tion­al func­tions on the site. We use the data entered for this pur­pose only for the pur­pose of using the respec­tive offer or ser­vice for which you have reg­is­tered. The manda­to­ry infor­ma­tion request­ed dur­ing reg­is­tra­tion must be pro­vid­ed in full. Oth­er­wise we will reject the reg­is­tra­tion. For impor­tant changes, for exam­ple in the scope of the offer or for tech­ni­cal­ly nec­es­sary changes, we use the e‑mail address pro­vid­ed dur­ing reg­is­tra­tion to inform you in this way. The pro­cess­ing of the data entered dur­ing reg­is­tra­tion is based on your con­sent (Art. 6 para. 1 lit. a DSGVO). You can revoke any con­sent you have giv­en at any time. For this pur­pose, an infor­mal com­mu­ni­ca­tion by e‑mail to us is suf­fi­cient. The legal­i­ty of the data pro­cess­ing already car­ried out remains unaf­fect­ed by the revo­ca­tion. The data col­lect­ed dur­ing reg­is­tra­tion will be stored by us as long as you are reg­is­tered on our web­site and will then be delet­ed. Legal reten­tion peri­ods remain unaffected.

Processing of data (customer and contract data)

We col­lect, process and use per­son­al data only to the extent that they are nec­es­sary for the estab­lish­ment, con­tent or mod­i­fi­ca­tion of the legal rela­tion­ship (inven­to­ry data). This is done on the basis of Art. 6 para. 1 lit. b DSGVO, which per­mits the pro­cess­ing of data for the ful­fill­ment of a con­tract or pre-con­trac­tu­al mea­sures. We col­lect, process and use per­son­al data about the use of our Inter­net pages (usage data) only inso­far as this is nec­es­sary to enable the user to use the ser­vice or to bill the user. The col­lect­ed cus­tomer data will be delet­ed after com­ple­tion of the order or ter­mi­na­tion of the busi­ness rela­tion­ship. Statu­to­ry reten­tion peri­ods remain unaffected.

4. ANALYSIS TOOLS AND ADVERTISING

Google Analytics

This web­site uses func­tions of the web analy­sis ser­vice Google Ana­lyt­ics. The provider is Google Inc, 1600 Amphithe­atre Park­way, Moun­tain View, CA 94043, USA. Google Ana­lyt­ics uses so-called “cook­ies”. These are text files that are stored on your com­put­er and enable an analy­sis of your use of the web­site. The infor­ma­tion gen­er­at­ed by the cook­ie about your use of this web­site is usu­al­ly trans­mit­ted to a Google serv­er in the USA and stored there. The stor­age of Google Ana­lyt­ics cook­ies is based on Art. 6 (1) lit. f DSGVO. The web­site oper­a­tor has a legit­i­mate inter­est in ana­lyz­ing user behav­ior in order to opti­mize both its web offer­ing and its adver­tis­ing. IP anonymiza­tion We have acti­vat­ed the IP anonymiza­tion func­tion on this web­site. This means that your IP address will be short­ened by Google with­in mem­ber states of the Euro­pean Union or in oth­er states par­ty to the Agree­ment on the Euro­pean Eco­nom­ic Area before being trans­mit­ted to the USA. Only in excep­tion­al cas­es will the full IP address be trans­mit­ted to a Google serv­er in the USA and short­ened there. On behalf of the oper­a­tor of this web­site, Google will use this infor­ma­tion for the pur­pose of eval­u­at­ing your use of the web­site, com­pil­ing reports on web­site activ­i­ty and pro­vid­ing oth­er ser­vices relat­ing to web­site activ­i­ty and inter­net usage to the web­site oper­a­tor. The IP address trans­mit­ted by your brows­er as part of Google Ana­lyt­ics will not be merged with oth­er data from Google. Brows­er Plu­g­in You may refuse the use of cook­ies by select­ing the appro­pri­ate set­tings on your brows­er, how­ev­er please note that if you do this you may not be able to use the full func­tion­al­i­ty of this web­site. You can also pre­vent the col­lec­tion of data gen­er­at­ed by the cook­ie and relat­ed to your use of the web­site (includ­ing your IP address) to Google and the pro­cess­ing of this data by Google by down­load­ing and installing the brows­er plu­g­in avail­able at the fol­low­ing link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection

You can pre­vent the col­lec­tion of your data by Google Ana­lyt­ics by click­ing on the fol­low­ing link. An opt-out cook­ie will be set, which will pre­vent the col­lec­tion of your data dur­ing future vis­its to this web­site: Google Ana­lyt­ics opt-out. For more infor­ma­tion on how Google Ana­lyt­ics han­dles user data, please see Google’s pri­va­cy pol­i­cy: https://support.google.com/analytics/answer/6004245?hl=de.

Commissioned data processing

We have con­clud­ed an order data pro­cess­ing agree­ment with Google and ful­ly imple­ment the strict require­ments of the Ger­man data pro­tec­tion author­i­ties when using Google Ana­lyt­ics. Demo­graph­ic char­ac­ter­is­tics with Google Ana­lyt­ics This web­site uses the “demo­graph­ic char­ac­ter­is­tics” func­tion of Google Ana­lyt­ics. This allows reports to be gen­er­at­ed that con­tain state­ments about the age, gen­der and inter­ests of site vis­i­tors. This data comes from inter­est-based adver­tis­ing from Google as well as vis­i­tor data from third-par­ty providers. This data can­not be assigned to a spe­cif­ic per­son. You can deac­ti­vate this func­tion at any time via the ad set­tings in your Google account or gen­er­al­ly pro­hib­it the col­lec­tion of your data by Google Ana­lyt­ics as shown in the item “Objec­tion to data collection”.

Google Web Fonts

This page uses so-called web fonts pro­vid­ed by Google for the uni­form dis­play of fonts. When you call up a page, your brows­er loads the required web fonts into its brows­er cache in order to dis­play texts and fonts cor­rect­ly. For this pur­pose, the brows­er you are using must con­nect to Google’s servers. This enables Google to know that our web­site has been accessed via your IP address. Google Web Fonts are used in the inter­est of a uni­form and appeal­ing pre­sen­ta­tion of our online offers. This rep­re­sents a legit­i­mate inter­est with­in the mean­ing of Art. 6 (1) lit. f DSGVO. If your brows­er does not sup­port web fonts, a stan­dard font will be used by your com­put­er. You can find more infor­ma­tion about Google Web Fonts at https://developers.google.com/fonts/faq and in Google’s pri­va­cy pol­i­cy: https://www.google.com/policies/privacy/.

Google maps

This site uses the map ser­vice Google Maps via an API. The provider is Google Inc, 1600 Amphithe­atre Park­way, Moun­tain View, CA 94043, USA. To use the func­tions of Google Maps, it is nec­es­sary to store your IP address. This infor­ma­tion is usu­al­ly trans­ferred to a Google serv­er in the USA and stored there. The provider of this site has no influ­ence on this data trans­mis­sion. The use of Google Maps is in the inter­est of an appeal­ing pre­sen­ta­tion of our online offers and an easy loca­tion of the places indi­cat­ed by us on the web­site. This rep­re­sents a legit­i­mate inter­est with­in the mean­ing of Art. 6 para. 1 lit. f DSGVO. More infor­ma­tion on the han­dling of user data can be found in Google’s pri­va­cy pol­i­cy: https://www.google.de/intl/de/policies/privacy/.

5. Social media

Twitter

Func­tions of the Twit­ter ser­vice are inte­grat­ed on our pages. These func­tions are offered by Twit­ter Inc., 795 Fol­som St., Suite 600, San Fran­cis­co, CA 94107, USA. By using Twit­ter and the “Re-Tweet” func­tion, the web­sites you vis­it are linked to your Twit­ter account and made known to oth­er users. In the process, data is also trans­ferred to Twit­ter.
We would like to point out that we, as the provider of the pages, have no knowl­edge of the con­tent of the trans­mit­ted data or its use by Twit­ter. For more infor­ma­tion, please refer to the pri­va­cy pol­i­cy of Twit­ter.
You can change your pri­va­cy set­tings on Twit­ter in the account settings.

Facebook

Our web­site con­tains ref­er­ences (links) to the exter­nal social net­work Face­book. This web­site is oper­at­ed exclu­sive­ly by Face­book Inc., 1601 S. Cal­i­for­nia Ave, Palo Alto, CA 94304, USA (Face­book). The links are iden­ti­fied with­in the frame­work of our Inter­net pres­ence by the Face­book logo or the addi­tion “Like” (no Face­book plu­g­ins are used).
When vis­it­ing our web­site, func­tions and data trans­fers to Face­book are not auto­mat­i­cal­ly active. Only by click­ing on the links, the Face­book plu­g­ins are acti­vat­ed, your brows­er estab­lish­es a direct con­nec­tion with Face­book servers. If you fol­low the links and are logged in to Face­book with your user account there at the same time, the infor­ma­tion that you have vis­it­ed our web­site will be for­ward­ed to Face­book. Face­book can assign your vis­it to the web­site to your account. This infor­ma­tion is trans­mit­ted to Face­book and stored there. To pre­vent this, you must log out of your Face­book account before click­ing on the link.
The pur­pose and scope of data col­lec­tion by Face­book, as well as the fur­ther pro­cess­ing and use of your data there, as well as your rights in this regard and set­tings options for pro­tect­ing your pri­va­cy, can be found in Face­book’s pri­va­cy pol­i­cy (http://de-de.facebook.com/privacy/explanation.php).

Youtube

YouTube com­po­nents are inte­grat­ed on this web­site. YouTube is an Inter­net video por­tal that allows video pub­lish­ers to post video clips free of charge and oth­er users to view, rate and com­ment on them, also free of charge. YouTube allows the pub­li­ca­tion of all types of videos, which is why com­plete film and TV shows, but also music videos, trail­ers or videos made by users them­selves can be accessed via the Inter­net portal.

The oper­at­ing com­pa­ny of YouTube is YouTube, LLC, 901 Cher­ry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a sub­sidiary of Google Inc, 1600 Amphithe­atre Pkwy, Moun­tain View, CA 94043–1351, USA.

Each time you call up a page of our web­site on which a YouTube com­po­nent (YouTube video) has been inte­grat­ed, your Inter­net brows­er is auto­mat­i­cal­ly prompt­ed by the respec­tive YouTube com­po­nent to down­load a rep­re­sen­ta­tion of the cor­re­spond­ing YouTube com­po­nent from YouTube. Fur­ther infor­ma­tion on YouTube can be found at www.youtube.com/yt/about/de/. With­in the scope of this tech­ni­cal pro­ce­dure, YouTube and Google receive knowl­edge of which spe­cif­ic sub-page of our web­site is vis­it­ed by you.

If you are logged in to YouTube at the same time, YouTube rec­og­nizes which spe­cif­ic sub-page of our web­site the per­son con­cerned is vis­it­ing when you call up a sub-page that con­tains a YouTube video. This infor­ma­tion is col­lect­ed by YouTube and Google and assigned to the respec­tive YouTube account of the data subject.

YouTube and Google always receive infor­ma­tion via the YouTube com­po­nent that the data sub­ject has vis­it­ed our web­site if you are logged into YouTube at the same time as call­ing up our web­site. This takes place regard­less of whether you click on a YouTube video or not. If you do not want this infor­ma­tion to be trans­mit­ted to YouTube and Google, you can pre­vent this by log­ging out of your YouTube account before access­ing our website.

The pri­va­cy pol­i­cy pub­lished by YouTube, which is avail­able at www.google.de/intl/de/policies/privacy/, pro­vides infor­ma­tion about the col­lec­tion, pro­cess­ing and use of per­son­al data by YouTube and Google.