Privacy notice (duty to provide information under Article 13 GDPR)
1. Name and contact details of the controller
Medical Helpline Worldwide GmbH, Am Speicher XI 11, 28217 Bremen, Germany
You can reach us by post, by email at email@example.com or by telephone on +49 421 22227-0.
2. Name and contact details of the data protection officer
You can reach Mr Stefan Lutz by post, by email at firstname.lastname@example.org or by telephone on +49 421 40892660.
3. Categories of data and purposes of processing
We collect and store the following categories of personal data about you:
We store and process your personal data for the purpose of pre-contractual measures, fulfilling an existing contractual relationship with you or for compliance with the ensuing legal obligations.
4. Recipients or categories of recipients
We work together with external service providers on a regular basis. Where necessary, we have concluded the appropriate order processing contracts within the sense of Article 28 GDPR. If we disclose your personal data to third parties, you will be explicitly informed of this by way of a description of the respective data processing.
5. Storage period
Your data are stored for as long as they are absolutely necessary for achieving the respective purpose subject to the maximum period permitted by any statutory provisions. As soon as the reason for storage lapses or a prescribed storage period expires in accordance with the above provisions, the personal data shall be routinely blocked or erased.
6. Rights of the data subject
6.1. Right to information
You have the right to obtain information from us at any time as to whether we process personal data concerning you. In this case, you have the right to be informed of the information specified in the second half of Article 15 (1) GDPR. You also have the right to be informed whether personal data concerning you are transferred to a third country or to an international organisation. If this is the case, you can request to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.
6.2. Right to rectification
You also have the right under Article 16 GDPR to request the rectification of inaccurate personal data that we store regarding you or to have such data completed without undue delay
6.3. Right to erasure (‘right to be forgotten’)
You also have the right to request that we erase personal data concerning you without undue delay. We are obliged to comply with this request and to erase your personal data unless we are obliged or entitled to continue to process your data. Please refer to Article 17 GDPR for more details on this.
6.4. Right to restriction of processing
You have the right to request from us restriction of processing if the statutory prerequisites in accordance with Article 18 GDPR are met.
6.5. Right to be informed
If you have asserted your right under Article 19 GDPR to the rectification, erasure or restriction of processing of your personal data against us, we are obliged to communicate any rectification or erasure or restriction of processing of your personal data to each recipient to whom the personal data have been disclosed unless this proves impossible or involves disproportionate effort. You have the right to be informed by us about these recipients.
6.6. Right to Data Portability
In accordance with Article 20 GDPR, you have the right to receive your personal data which you have provided to us in a structured, commonly used and machine-readable format or to request transmission of such data to another controller.
6.7. Right to object
Right to object in individual cases: You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. We shall no longer process your personal data in this event unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
Right to object to the processing of data for direct marketing purposes: If we process your personal data for direct marketing purposes, you shall have the right to object at any time to such processing, which includes profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data concerning you shall no longer be processed for such purposes. In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
6.8. Right to withdraw the declaration of consent under data protection law
You have the right to withdraw your declaration of consent under data protection law at any time. If you withdraw consent, the lawfulness of the processing based on consent before its withdrawal shall not be affected.
6.9. Automated decision-making in individual cases including profiling
There shall be no automated decision-making, including profiling.
6.10. Right of complaint
Finally, you have the right to lodge a complaint with a data protection supervisory authority at any time.
Die Landesbeauftragte für Datenschutz und Informationsfreiheit
(State Commissioner for Data Protection and Freedom of Information)
7. Legal bases for processing
Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR) is the legal basis if we have obtained consent from the data subject for processing operations with personal data.
Article 6 (1) (b) GDPR is the legal basis when processing personal data is necessary for the performance of a contract to which the data subject is party. This also applies to processing operations that are necessary in order to take steps prior to entering into a contract.
Article 6 (1) (c) GDPR is the legal basis if the processing of personal data is necessary for compliance with a legal obligation to which our company is subject.
Article 6 (1) (d) GDPR is the legal basis if processing personal data is necessary due to the vital interests of the data subject or of another natural person.
Article 6 (1) (f) GDPR is the legal basis for processing if processing is necessary for the purposes of a legitimate interest pursued by our company or by a third party and such interests are not overridden by the interests, fundamental rights and freedoms of the data subject. Our company’s legitimate interest is carrying out our business operations.
8. Obligation to provide information
Providing personal data is essential for concluding the contract. If you do not provide us with these data, it will not be possible to conclude a contract.
Marco Röschmann (Medical Director)
Commercial register HRB 20515
Bremen direct court
Bank: Apotheker- und Ärztebank
IBAN: DE16 3006 0601 0105 3501 15
Creditor Identifier: DE84MHW00000088473
VAT IN: DE219056749
a trademark of Medical
Helpline Worldwide GmbH
Am Speicher XI 11
28217 Bremen • Germany
Tel.: +49 421 22227-10
Fax: +49 421 22227-17