I. The party responsible for data processing and whom you can contact
1. The party responsible pursuant to Art. 4 para. 7 of the General Data Protection Regulation (GDPR) is
MD Medicus Holding GmbH (see our imprint)
Industriestrasse 2a, D-67063 Ludwigshafen, Germany
Phone: +49 (0)621 5490 - 144
Fax: +49 (0)621 5490 - 266
When you contact us by e-mail, the data you provide us with (your e-mail address, possibly your name and telephone number) will be stored by us in order to answer your enquiries. We will delete all data that arises in this context after it is no longer required to be stored, or restrict processing if there are legal storage obligations.
2. Our data privacy officer is
Ms Christina Grewe, attorney at law
Schmale Seite 14, 69198 Schriesheim, Germany
Phone: +49 (0)6203 40 159 10
Fax: +49 (0)6203 40 159 11
Website : www.lexnovis.de
II. General information on data processing
In principle, we collect and use personal user data only to the extent necessary to provide a functioning website and our content and services. We regularly process users' personal data only after their consent, unless obtaining consent is not possible for genuine reasons and the processing of the data is permitted by law.
1. Information on the collection and extent of the processing of personal data
(a) Visiting our website
If you only use our website for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. Each time you visit our website, our system automatically collects and processes data and information from the computer system of the calling computer that is technically necessary for us to display our website to you and to ensure stability and security. If you wish to view our website, we collect the following data:
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Contents of the request (concrete page)
- Access status/HTTP status code
- Amount of data transferred in each case
- Website from which the request originates
- Operating system and its interface
- Language and version of the browser software.
(b) Visiting and contacting via the application portal
In addition to the technical data mentioned in a) above, we also collect various types of information via our applicant portal. This includes in particular your personal data with contact information as well as a description of your education, work experience and skills. In detail this may include:
- First name
- Postal address (street, house number, postcode, city)
- Contact data (telephone number, fax number, e-mail address)
- Information on your school and vocational training and your career path
- Information on special abilities (e.g. language skills)
- Other text messages
In addition, you have the option of providing us with electronically stored documents such as certificates or cover letters. However, we do not require any information from you that is not usable under the German General Equality Treatment Act (race, ethnic origin, gender, religion or belief, disability, age or sexual identity). We also do not ask you to provide information on illness, pregnancy, ethnic origin, political opinions, philosophical or religious convictions, membership of a trade union, physical or mental health or sex life. The same applies to content that is likely to infringe the rights of third parties (e.g. copyrights, press law or general rights of third parties).
We do not obtain the data and information mentioned automatically, but only with your knowledge and consent when you send this data and information to us.
With your application you assure us that the information you provide is true and correct. We would like to point out that any false statement or deliberate omission may constitute a reason for rejection or later dismissal.
2. Purpose of the data processing
(a) Visiting our website
The temporary storage of the aforementioned data, in particular the IP address, by our system for the duration of your visit to our website is necessary to enable our website to be delivered to the user's computer, to display our website and to guarantee its stability and security. It will not be passed on to third parties. The processing of the data takes place exclusively in Germany.
(b) Visiting and application via the application portal
Personal data will only be collected, stored, processed and used for purposes related to your interest in a current or future employment with us and the processing of your application. It will not be passed on to third parties. This data is used to contact you about your application. If your application is successful, the data provided may be used for administrative purposes within the scope of employment.
Your online application will only be processed and acknowledged by the relevant contact persons at our company. All employees entrusted with data processing are obliged to maintain the confidentiality of your data. Under no circumstances will third parties be made aware of your data. The processing of the data takes place exclusively in Germany.
3. Legal basis of data processing
The legal basis for the temporary storage of data on the occasion of a visit to our website is Art. 6 para. 1 lit. a, b GDPR. The legal basis for the processing of data and information sent to us via the applicant portal is Art. 6 para. 1 lit. a, b, f GDPR and for the processing of data in the event of an employment relationship Art. 6 para. 1 lit. a, b, c GDPR.
4. Duration of storage, retention
As the data controller, we generally delete the data processed by us as soon as this information is no longer required for the purpose for which it was collected and there are no storage obligations or periods under Union law and/or the law of the Federal Republic of Germany.
If you visit our website, this is the case as soon as the respective session has ended. The data stored in the log file then can no longer be attributed to you as the person concerned.
If we are unable to offer you employment, we will keep the data and information transmitted via the applicant portal for up to six months for the purpose of answering questions in connection with your application and rejection.
For certain business transactions and the data and information processed in this context, various laws, ordinances and guidelines may entail conflicting or varying retention obligations and periods. Such storage obligations and periods result from, among other things, § 257 HGB (6 years), § 147 AO (10 years), § 10 of the professional code of conduct of doctors (10 years) and various special legal regulations.
Cookies are small text files that are stored on your hard drive and assigned to the browser you are using and through which certain information flows to the location that sets the cookie (here by us). Cookies cannot execute programs or transmit viruses to your computer. These cookies contain distinctive sets of characters that allow the browser to be uniquely identified when you return to our website. They serve to make the Internet offer more user-friendly and effective.
2. Types of cookies
This website uses the following types of cookies, the scope and functionality of which are explained below:
- Transient cookies (see b)
- Persistent cookies (see c).
(a) Transient cookies are automatically deleted when you close your browser. These include in particular session cookies. They store a so-called session ID, which can be used to assign various requests from your browser to the shared session. This enables your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close your browser.
(b) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in the security settings of your browser.
You can configure your browser settings according to your wishes and, for example, refuse the acceptance of third-party cookies or all cookies. We would like to point out that in this case you may not be able to use all the functions of this website.
The legal basis is Art. 6 Para. 1 S. 1 lit. f GDPR.
IV. Your rights as data subject
1. If personal data are collected and processed, users are affected as data subjects within the meaning of the GDPR. You as the data subject have the following rights towards us as the controller of the personal data concerning you:
- Right of access,
- Right to rectification,
- Right to restrict the processing,
- Right to erasure,
- Right of information,
- Right to data transferability,
- Right to object to the processing.
(a) Right of access
Those affected can request information from us as the data controller as to whether personal data relating to them will be processed by us. If we have processed your personal data, you can request the following information within the scope of this disclosure:
- the purposes for which your personal data are processed,
- the types of personal data processed,
- the recipients or category of recipients to whom the personal data have been or will be disclosed,
- the planned duration of storage of the personal data concerning you or, if no specific information can be provided, the criteria for determining the duration of storage,
- the existence of a right to rectify or erase personal data relating to the data subject, a right to limit the processing carried out by the controller or a right to object to such processing,
- the existence of a right of appeal to a supervisory authority,
- all available information on the origin of the data if the personal data have not been collected from the data subject,
- the existence of automated decision-making including profiling in accordance with Article 22(1), (4) GDPR and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing on the data subject.
(b) Right to rectification
As a data subject, you have the right to have us, as the data controller, correct and/or complete your personal data if it is incorrect or incomplete. We, as the data controller, must then carry out the correction without delay. The right to rectification may be limited in case it is likely to make it impossible or seriously impair the realisation of the research or statistical purposes and the limitation is necessary for the fulfilment of the research or statistical purposes.
(c) Right to restrict the processing
Under certain circumstances, as a data subject you may request that the processing of your personal data be restricted. These conditions are:
- if you, as the data subject, dispute the accuracy of the personal data concerning you for a period of time which enables us, as the data controller, to verify the accuracy of the personal data;
- the processing is unlawful and you as the data subject refuse the deletion of the personal data and instead demand the restriction of the use of the personal data;
- we, as the data controller, no longer need the personal data for the purposes of processing, but you, as the data subject, need it for the assertion, exercise or defence of legal claims, or
- if you as the data subject have lodged an objection against the processing pursuant to Article 21(1) GDPR and it has not yet been established whether the legitimate reasons of the data controller outweigh your reasons.
If the processing of personal data concerning you as data subject has been restricted, such data may be processed only with your consent or for the purpose of asserting, exercising or defending legal rights or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State, with the exception of their storage.
If the processing restriction has been restricted in accordance with the above conditions, we, as the data controller, will inform you as the data subject before the restriction is lifted.
The right of the data subject to restrict the processing may in turn be limited in case it is likely to make it impossible or seriously impair the attainment of the research or statistical purposes and that the restriction is necessary for the attainment of the research or statistical purposes.
(d) Right to erasure
(aa) Duty to delete
You as the data subject may request us, the data controller, to delete the personal data concerning you immediately, and we, the data controller, are obliged to delete this data immediately if one of the following reasons applies:
- Personal data concerning you as a data subject is no longer needed for the purposes for which it was collected or otherwise processed.
- You as data subject revoke your consent on which the processing was based pursuant to Article 6 paragraph 1 letter a or Article 9 paragraph 2 letter a GDPR and there is no other legal basis for the processing.
- You as data subject object to the processing under Article 21(1) GDPR and there are no overriding legitimate reasons for the processing or you object to the processing under Article 21(2) GDPR.
- Personal data concerning you as a data subject have been processed unlawfully.
- The deletion of personal data concerning you as a data subject is necessary to fulfil a legal obligation under Union law or the law of the Member States to which we are subject as the data controller.
- The personal data concerning you as a data subject have been collected in relation to services offered by the information company pursuant to Article 8(1) of the GDPR.
(bb) Information to third parties
If we as the data controller have made public the personal data concerning you as the data subject and if we are obliged to delete such data pursuant to Article 17 paragraph 1 GDPR, we shall take appropriate measures, also of a technical nature, to inform those responsible for data processing who process your personal data that you as the data subject have requested them to delete all links to said personal data or copies or replications of said personal data, taking into account the available technology and the implementation costs.
The right to deletion does not exist if the processing is necessary.
- on the exercise of freedom of expression and information;
- to fulfil a legal obligation which processing is subject to under the law of the Union or of the Member States to which the data controller is subject or to perform a task carried out in the public interest or in the exercise of official authority vested in the data controller;
- for reasons of public interest in the field of public health in accordance with Article 9 paragraph 2 letters h and i and Article 9 paragraph 3 GDPR
- for archival, scientific or historical research purposes in the public interest or for statistical purposes in accordance with Article 89 paragraph 1 GDPR to the extent that the law referred to in paragraph (a) is likely to render impossible or seriously impede the achievement of the objectives of such processing, or
- to assert, exercise or defend legal claims.
(e) Right of information
If you as the data subject have asserted the right to rectification, deletion or limitation of the processing to us as the data controller, we are obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or deletion of the data or limitation of the processing, unless this proves to be impossible or involves a disproportionate effort.
You, as the data subject, have the right to be informed about these recipients.
(f) Right to data transferability
You as the data subject have the right to receive the personal data concerning you which you have provided to us as the data controller in a structured, common and machine-readable format. In addition, you, as the data subject, have the right to transfer this data to another data controller, without being hindered by us as the data controller to whom the personal data were provided, insofar as
- the processing is based on a consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR, and
- processing is carried out using automated procedures.
In exercising this right, you as the data subject also have the right to obtain that the personal data relating to you be transmitted directly by us as the data controller to another data controller as far as this is technically feasible. Freedoms and rights of other persons must not be affected by this.
The right to data transferability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority assigned to us as the data controller.
(g) Right to object
As data subject, you have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you and which is carried out pursuant to Article 6(1)(e) GDPR.
This also applies to profiling based on these provisions. As the data controller, we will no longer process the personal data concerning you as the data subject unless we can provide evidence of compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
In connection with the use of services provided by the information company - notwithstanding Directive 2002/58/EC - you as the data subject have the possibility of exercising your right of objection by means of automated procedures using technical specifications. As data subject, you also have the right to object to the processing of personal data concerning you for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) GDPR for reasons arising from your particular situation.
Your right to object may be limited to the extent that it is likely to make it impossible or seriously impair the realisation of the research or statistical purposes and that the limitation is necessary for the fulfilment of the research or statistical purposes.
(h) Right to revoke the declaration of consent under data protection law
As the data subject, you have the right to revoke your declaration of consent under data protection law at any time. However, the revocation of your consent does not affect the legality of the processing having been carried out on the basis of your consent prior to the revocation of your consent.
Please send your revocation stating your full name and e-mail address: Medicus@MD-Medicus.net
(i) Automated case-by-case decision, including profiling
As a data subject, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects on you or significantly affects you in a similar way.
This shall not apply if the decision
- is necessary for the conclusion or performance of a contract between you as the data subject and us as the data controller,
- is permitted by the laws of the Union or of the Member States to which we are subject as the data controller, and those laws contain adequate measures to safeguard the rights and freedoms of those concerned and their legitimate interests, or
- with the express consent of you as the data subject.
However, these decisions may not be based on special categories of personal data under Article 9(1) GDPR, unless Article 9(2)(a) or (g) GDPR applies and appropriate measures have been taken to protect the rights and freedoms and legitimate interests of you as the data subject. With regard to the cases referred to in the indents, we as the data controller shall take appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person on the part of the data controller, to state our own position and to contest the decision.
(j) Right to file complaints to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you as a data subject have the right to complain to a supervisory authority, in particular in the Member State where you reside, at your place of work or at the place where the alleged infringement is alleged, if you believe that the processing of your personal data is in breach of the GDPR.
The supervisory authority with which the complaint was lodged will inform you, as the complainant, of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.
2. You as the data subject also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.
V. Settlement of disputes
With the Verbraucherstreitbeilegungsgesetz (VBSG; Consumer Dispute Resolution Act), the legislator has created an alternate possibility to settle a consumer dispute, i.e. a dispute in which you as the consumer and we as entrepreneurs are involved, outside of ordinary court proceedings in a dispute resolution procedure before an arbitration body.
MD Medicus Holding GmbH is neither legally obliged nor in principle willing to participate in a dispute resolution procedure before the consumer arbitration board.
Regardless of this, MD Medicus Holding GmbH is obliged pursuant to § 37 VSBG to inform you after a dispute has arisen which conciliation body would be competent if we were to participate in the dispute resolution procedure. We will comply with this obligation in advance. The responsible consumer arbitration body is:
Allgemeine Verbraucherschlichtungsstelle des Zentrums für Schlichtung e.V.
Straßburger Str. 8, 77694 Kehl