3. Collecting general data and information

The website of the practice Dr.med.Rahimi recorded with each call of the website by an affected Person or an automated system a set of general data and information. This general data and information is stored in the log files of the server. Detected the (1) used browser types and versions, (2) can be used by the accessing system Operating system, (3) the website from which an accessing system accesses our website (so-called referrers), (4) the sub-web pages, which have an accessing system on our (5) the date and time of access to the website, (6) an internet protocol address (IP address); (7) the accessing Internet service provider Systems and (8) other similar data and information, the security in the event of attacks to serve our information technology systems.
When using this general data and information, the practice Dr. med.Rahimi draws no conclusions the affected person. Rather, this information is required to (1) the contents of our To deliver the website correctly, (2) the contents of our website as well as the advertisement for these (3) the long-term viability of our information technology systems and to ensure the technology of our website as well as (4) to law enforcement agencies in case a cyberattack to provide the information necessary for law enforcement. This anonymous collected data and information are therefore statistically and by the practice Dr.med.Rahimi on the one hand evaluated with the aim to increase privacy and data security in our company, to ultimately ensure an optimal level of protection of the personal data we process. The anonymous data of the server log files are separated from all specified by an affected person personal data stored.

4. Contact via the website

The Dr.med.Rahimi practice website contains information required by law the fast electronic contact to our company as well as an immediate Communication with us, which is also a general address of the so-called electronic Post (e-mail address) includes. If an affected person by e-mail or through a contact form the contact with the controller is made by the data subject transmitted personal data automatically stored. Such on a voluntary basis of one the person concerned to the data controller provided to the controller are stored for purposes of processing or contacting the data subject. There is no disclosure of this personal data to third parties.

5. Routine deletion and blocking of personal data

The controller processes and stores personal data of the data subject Person only for the period required to achieve the purpose of storage or if so provided by the European legislator or other legislator in laws or regulations, provided for by the controller.
If the purpose of the storage is omitted or if it is being used by the European directive and regulatory authority or a storage period prescribed by other relevant legislators, the personal data becomes routine and blocked or deleted in accordance with legal regulations.

6. Rights of the data subject

a) Right to confirmation

Each data subject has the right accorded by the European Di- to ask the controller for confirmation of their concern personal data is processed. Would like an affected person this confirmation right in At any time, they can contact an employee of the controller for assistance.

b) Right to information

Any person affected by the processing of personal data shall comply with the requirements of the European Directive and The legislature, at any time free of charge by the controller To receive information about the personal data stored about him and to receive a copy of this information. In addition, the European legislator and regulator has provided the data subject with the following information:

the processing purposes

the categories of personal data being processed

the recipients or categories of recipients to whom the personal data have been disclosed or yet to be disclosed, in particular to beneficiaries in third countries or international organizations

if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for setting this duration

the existence of a right to rectification or erasure of personal data concerning them or Restriction of processing by the controller or a right to object to this processing

the existence of a right of appeal to a supervisory authority

if the personal data are not collected from the data subject: All available information about the origin of the data

the existence of automated decision-making, including profiling, in accordance with Article 22 (1) and (4) DS-GVO and - at least in these cases - meaningful information about the logic involved and the The scope and intended impact of such processing on the data subject

Furthermore, the data subject has a right of access to personal data Third country or to an international organization. If this is the case, the person concerned is, moreover, entitled to provide information on the appropriate guarantees in Related to the transmission.

If an affected person wishes to avail himself of this right to information, she can do so at any time to an employee of the controller.

c) Right to rectification

Any person affected by the processing of personal data has to comply with the requirements of the European and the legislature grant the right to correct the incorrect personal To request data. Furthermore, the data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data, including by means of a supplementary statement. If an affected person wishes to exercise this right of rectification, they can do so at any time contact an employee of the controller.

d) Right to cancellation (right to be forgotten)

Any person affected by the processing of personal data has the same rights as the European Union Granting the right to the controller to demand that the Personal data concerning you are deleted immediately if any of the following: Reasons and if the processing is not required: The personal data were collected or otherwise processed for such purposes for which they are no longer necessary.
The data subject revokes their consent to the processing referred to in Article 6 (1) (a) a DS-GVO or Article 9 (2) (a) of the GDPR and there is no other legal basis for processing. The data subject appeals against processing according to Art. 21 para. 1 DS-GVO, and there are no high-level legitimate grounds for the processing or the data subject lays down objection to the processing pursuant to Art. 21 (2) DS-GVO.
The personal data was processed unlawfully.
The deletion of personal data is required to fulfill a legal obligation under EU law or the law of the Member States to which the controller is subject.
The personal data were collected in relation to information society services offered pursuant to Art. 8 para. 1 DS-GVO. If any of the above reasons are true and an affected person removes personal data, the If you wish to have Dr. med.Rahimi registered in practice, you can do so at any time to an employee the controller. The employee practice Dr.med.Rahimi will arrange that the extinguishing request will be fulfilled immediately.
Have the personal data been made public by the practice Dr.med.Rahimi and is our company as Responsible person according to Art. 17 Abs. 1 DS-GVO obligated to delete the personal data Practice Dr.med.Rahimi taking into account the technology available and the implementation costs appropriate Measures, including technical ones, to other data controllers who publish process personal information, informing the person concerned of these others responsible for the data processing the deletion of all links to these personal data or of copies or replicas of this personal data has requested, as far as the processing is not is required. The employee of the practice Dr.med.Rahimi will cause the necessary in individual cases.

e) Right to restriction of processing

Any person affected by the processing of personal data has the right granted by the European Di- to require the controller to restrict processing if any of the following conditions apply:
The accuracy of the personal data is contested by the data subject for a period of time enables the person responsible to check the accuracy of the personal data.
The processing is unlawful, the data subject refuses to delete the personal data and instead demands the restriction of the use of personal data.
The controller no longer needs the personal data for processing purposes, however, the data subject requires them to assert, exercise or defend legal claims.
The person concerned has objection to the processing acc. Art. 21 para. 1 DS-GVO and it is not yet determines whether the legitimate reasons of the controller outweigh those of the data subject.
If one of the above conditions is met and an affected person has the restriction of personal data that are stored in the practice Dr.med.Rahimi, they can ask for this at any time to an employee of the controller. The employee of Practice Dr.med.Rahimi will cause the restriction of processing.

f) Data transferability

Any person affected by the processing of personal data has to comply with the requirements of the European and the legislature, the personal data concerning them, which is covered by the Person in charge of a responsible person, in a structured, common and machine-readable Format to receive. She also has the right to transfer this data to another person without hindrance to provide the person responsible for providing the personal data, if the processing on the basis of the consent pursuant to Article 6 (1) (a) of the GDPR or Article 9 (2) (a) of the GDPR or on a Article 6 (1) (b) of the GDPR and that the processing is carried out by automated means, unless the processing is necessary for the performance of a task of public interest or in the exercise of public authority, which has been delegated to the controller. Furthermore, the data subject has exercised his right to data portability under Article 20 (1) DS-GMO the right to obtain the personal data directly from a person responsible be transmitted to another person responsible, as far as this is technically feasible and if so does not affect the rights and freedoms of others.
To assert the right to data portability, the data subject may at any time contact a member of the Dr.med.Rahimi practice.

g) Right to object

Any person affected by the processing of personal data is subject to the provisions of the European directive and regulatory authority granted, for reasons arising from its particular situation, at any time against the processing personal data, which takes place on the basis of Article 6 (1) (e) or (f) of the GDPR, to lodge an objection. this is also valid for a profiling based on these provisions.
The practice Dr. med.Rahimi does not process the personal data in case of opposition, unless we can demonstrate compelling legitimate grounds for processing, those of interests, rights and freedoms the data subject, or the processing serves to assert, exercise or defend legal claims. Does the practice of Dr.med.Rahimi process personal information in order to operate direct mail, Thus, the data subject has the right at any time to object to the processing of personal information Insert data for the purpose of such advertising. This also applies to profiling, as far as such Direct mail is related. Does the data subject contradict the practice Dr.med.Rahimi the Processing for direct marketing purposes, Dr.med.Rahimi's practice will no longer process the personal data for these purposes.
In addition, the person concerned has the right, for reasons that arise from their particular situation, against them concerning the processing of personal data used in the practice of Dr.med.Rahimi to scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 DS-GVO, contradiction unless such processing is necessary to fulfill a public interest task.
In order to exercise the right of opposition, the data subject may directly contact any employee of the Practice Dr.med.Rahimi or another employee. The person concerned is also free to in connection with the use of information society services, notwithstanding Directive 2002/58 / EC, exercise their right of appeal by means of automated procedures using technical specifications.

h) Automated decisions in individual cases including profiling

Any person affected by the processing of personal data has the right granted by the European Di- not subject to a decision based solely on automated processing - including profiling - which has a legal effect on it or which, in a similar way, seriously impairs it, provided that the decision (1) is not required for the conclusion or performance of a contract between the data subject and the controller, or (2) is permitted by Union or Member State legislation to which the controller is subject and that such legislation shall take appropriate measures to safeguard the rights and freedoms and legitimate interests of or (3) with the express consent of the data subject.
Is the decision (1) for the conclusion or performance of a contract between the person concerned and the Responsible or (2) it is done with the express consent of the data subject the practice Dr.med.Rahimi appropriate measures to protect the rights and freedoms as well as the legitimate interests of the affected Person, including at least the right to obtain the intervention of a person by the person responsible, listening to its own position and contesting the decision.
If the data subject wishes to assert rights with respect to automated decisions, she can At any time, contact an employee of the controller.

i) Right to revoke a data protection consent

Any person affected by the processing of personal data has the same rights as the European Union Granting of the right to consent to the processing of personal data Revoke data at any time. Would like the person concerned their right to revoke a consent For this purpose, they may at any time contact an employee of the controller.

7. Legal basis of processing

Art. 6 I lit. a DS-GMO serves our company as the legal basis for processing operations, where we obtain consent for a particular processing purpose. Is the processing personal data for the performance of a contract to which the data subject is a party, required, as is the case, for example, with processing operations for a delivery goods or the provision of any other service or consideration, the Processing on Art. 6 I lit. b DS-GMO. The same applies to such processing operations as to Implementation of pre-contractual measures, such as in cases of ours Products or services. Is our company subject to a legal obligation by which processing of personal data is required, such as fulfillment tax obligations, the processing is based on Art. 6 I lit. c DS-GMO. In rare cases The processing of personal data might be necessary to vital interests the affected person or another natural person. This would be the example Case, if a visitor were injured in our factory and then his name, his age, his health insurance or other vital information to a doctor, hospital or other third parties would have to be passed on. Then the processing would be based on Art. 6 I lit. d DS GMOs are based. Ultimately, processing operations could be based on Art. 6 I lit. f DS GMOs are based. On this legal basis Processing operations which are not covered by any of the abovementioned legal bases, if the Processing is necessary to safeguard the legitimate interests of our company or a third party, provided the interests, fundamental rights and fundamental freedoms of the person concerned do not predominate. Such processing operations We are particularly allowed because they have been specifically mentioned by the European legislator. In that regard, it considered that a legitimate interest could be accepted if the party concerned Person is a customer of the person responsible (Recital 47, sentence 2 DS-GVO).

8. Qualifying interests in the processing that are being pursued by the controller or a third party

Is the processing of personal data based on Article 6 I lit. f DS-GMO is our legitimate interest in the implementation our business for the benefit of all of our employees and our shareholders.

9. Duration for which the personal data is stored

The criterion for the duration of the storage of personal data is the respective statutory Retention period. After the deadline, the corresponding data will be routinely deleted, if they are no longer required for contract fulfillment or contract initiation.

10. Legal or contractual provisions for the provision of personal data

Necessity for the conclusion of the contract; Obligation of the data subject who provide personal information; possible consequences of non-provision.
We clarify that the provision of personal information is partly legal mandatory (for example, tax regulations) or even under contractual arrangements (eg information about the contracting party). Sometimes it can lead to a contract be necessary for a data subject to provide us with personal data, which must be processed by us in the sequence. The affected person is for example obliges us to provide personal information when our company with her Contracts. Failure to provide personal data would result in that the contract with the person concerned could not be closed. Before a deployment Personal data by the person concerned must be the person affected to one of our employees turn. Our coworker clarifies the concerning on a case-by-case basis whether the supply the personal data required by law or contract or for the conclusion of the contract it is necessary to establish whether there is an obligation to provide the personal data, and the consequences of non-provision of personal data.

11. Existence of automated decision-making

As a responsible company, we refrain from automatic decision-making or profiling. This Privacy Policy has been provided by the Privacy Policy Generator of DGD Deutsche Gesellschaft für Datenschutz GmbH, which acts as External Data Protection Officer Ingolstadt, Created in cooperation with the IT and data protection lawyer Christian Solmecke.