I. The party responsible for data processing and whom you can contact
1. The party responsible pursuant to Art. 4 para. 7 of the General Data Protection Regulation (GDPR) is
MD Medicus Holding GmbH (see our imprint)
Industriestrasse 2a, D-67063 Ludwigshafen, Germany
Phone: +49 (0)621 5490 - 144
Fax: +49 (0)621 5490 - 266
When you contact us by e-mail, the data you provide us with (your e-mail address, possibly your name and telephone number) will be stored by us in order to answer your enquiries. We will delete all data that arises in this context after it is no longer required to be stored, or restrict processing if there are legal storage obligations.
2. Our data privacy officer is
Ms Christina Grewe, attorney at law
Industriestrasse 2a, 67063 Ludwigshafen am Rhein, Germany
Phone: +49 (0)621 5490 144
Fax: +49 (0)621 5490 265
Website : www.lexnovis.de
II. General information on data processing
In principle, we collect and use personal user data only to the extent necessary to provide a functioning website and our content and services. We regularly process users' personal data only after their consent, unless obtaining consent is not possible for genuine reasons and the processing of the data is permitted by law.
1. Information on the collection and extent of the processing of personal data
(a) Visiting our website
If you only use our website for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. Each time you visit our website, our system automatically collects and processes data and information from the computer system of the calling computer that is technically necessary for us to display our website to you and to ensure stability and security. If you wish to view our website, we collect the following data:
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Contents of the request (concrete page)
- Access status/HTTP status code
- Amount of data transferred in each case
- Website from which the request originates
- Operating system and its interface
- Language and version of the browser software.
(b) Visiting and contacting via the application portal
In addition to the technical data mentioned in a) above, we also collect various types of information via our applicant portal. This includes in particular your personal data with contact information as well as a description of your education, work experience and skills. In detail this may include:
- First name
- Postal address (street, house number, postcode, city)
- Contact data (telephone number, fax number, e-mail address)
- Information on your school and vocational training and your career path
- Information on special abilities (e.g. language skills)
- Other text messages
In addition, you have the option of providing us with electronically stored documents such as certificates or cover letters. However, we do not require any information from you that is not usable under the German General Equality Treatment Act (race, ethnic origin, gender, religion or belief, disability, age or sexual identity). We also do not ask you to provide information on illness, pregnancy, ethnic origin, political opinions, philosophical or religious convictions, membership of a trade union, physical or mental health or sex life. The same applies to content that is likely to infringe the rights of third parties (e.g. copyrights, press law or general rights of third parties).
We do not obtain the data and information mentioned automatically, but only with your knowledge and consent when you send this data and information to us.
With your application you assure us that the information you provide is true and correct. We would like to point out that any false statement or deliberate omission may constitute a reason for rejection or later dismissal.
2. Purpose of the data processing
(a) Visiting our website
The temporary storage of the aforementioned data, in particular the IP address, by our system for the duration of your visit to our website is necessary to enable our website to be delivered to the user's computer, to display our website and to guarantee its stability and security. It will not be passed on to third parties. The processing of the data takes place exclusively in Germany.
(b) Visiting and application via the application portal
Personal data will only be collected, stored, processed and used for purposes related to your interest in a current or future employment with us and the processing of your application. It will not be passed on to third parties. This data is used to contact you about your application. If your application is successful, the data provided may be used for administrative purposes within the scope of employment.
Your online application will only be processed and acknowledged by the relevant contact persons at our company. All employees entrusted with data processing are obliged to maintain the confidentiality of your data. Under no circumstances will third parties be made aware of your data. The processing of the data takes place exclusively in Germany.
3. Legal basis of data processing
The legal basis for the temporary storage of data on the occasion of a visit to our website is Art. 6 para. 1 lit. a, b GDPR. The legal basis for the processing of data and information sent to us via the applicant portal is Art. 6 para. 1 lit. a, b, f GDPR and for the processing of data in the event of an employment relationship Art. 6 para. 1 lit. a, b, c GDPR.
4. Duration of storage, retention
As the data controller, we generally delete the data processed by us as soon as this information is no longer required for the purpose for which it was collected and there are no storage obligations or periods under Union law and/or the law of the Federal Republic of Germany.
If you visit our website, this is the case as soon as the respective session has ended. The data stored in the log file then can no longer be attributed to you as the person concerned.
If we are unable to offer you employment, we will keep the data and information transmitted via the applicant portal for up to six months for the purpose of answering questions in connection with your application and rejection.
For certain business transactions and the data and information processed in this context, various laws, ordinances and guidelines may entail conflicting or varying retention obligations and periods. Such storage obligations and periods result from, among other things, § 257 HGB (6 years), § 147 AO (10 years), § 10 of the professional code of conduct of doctors (10 years) and various special legal regulations.
Cookies are small text files that are stored on your hard drive and assigned to the browser you are using and through which certain information flows to the location that sets the cookie (here by us). Cookies cannot execute programs or transmit viruses to your computer. These cookies contain distinctive sets of characters that allow the browser to be uniquely identified when you return to our website. They serve to make the Internet offer more user-friendly and effective.
2. Types of cookies
This website uses the following types of cookies, the scope and functionality of which are explained below:
- Transient cookies (see b)
- Persistent cookies (see c).
(a) Transient cookies are automatically deleted when you close your browser. These include in particular session cookies. They store a so-called session ID, which can be used to assign various requests from your browser to the shared session. This enables your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close your browser.
(b) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in the security settings of your browser.
You can configure your browser settings according to your wishes and, for example, refuse the acceptance of third-party cookies or all cookies. We would like to point out that in this case you may not be able to use all the functions of this website.
The legal basis is Art. 6 Para. 1 S. 1 lit. f GDPR.
IV. Your rights as data subject
1. If personal data are collected and processed, users are affected as data subjects within the meaning of the GDPR. You as the data subject have the following rights towards us as the controller of the personal data concerning you:
- Right of access,
- Right to rectification,
- Right to restrict the processing,
- Right to erasure,
- Right of information,
- Right to data transferability,
- Right to object to the processing.
(a) Right of access
Those affected can request information from us as the data controller as to whether personal data relating to them will be processed by us. If we have processed your personal data, you can request the following information within the scope of this disclosure:
- the purposes for which your personal data are processed,
- the types of personal data processed,
- the recipients or category of recipients to whom the personal data have been or will be disclosed,
- the planned duration of storage of the personal data concerning you or, if no specific information can be provided, the criteria for determining the duration of storage,
- the existence of a right to rectify or erase personal data relating to the data subject, a right to limit the processing carried out by the controller or a right to object to such processing,
- the existence of a right of appeal to a supervisory authority,
- all available information on the origin of the data if the personal data have not been collected from the data subject,
- the existence of automated decision-making including profiling in accordance with Article 22(1), (4) GDPR and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing on the data subject.
(b) Right to rectification
As a data subject, you have the right to have us, as the data controller, correct and/or complete your personal data if it is incorrect or incomplete. We, as the data controller, must then carry out the correction without delay. The right to rectification may be limited in case it is likely to make it impossible or seriously impair the realisation of the research or statistical purposes and the limitation is necessary for the fulfilment of the research or statistical purposes.
(c) Right to restrict the processing
Under certain circumstances, as a data subject you may request that the processing of your personal data be restricted. These conditions are:
- if you, as the data subject, dispute the accuracy of the personal data concerning you for a period of time which enables us, as the data controller, to verify the accuracy of the personal data;
- the processing is unlawful and you as the data subject refuse the deletion of the personal data and instead demand the restriction of the use of the personal data;
- we, as the data controller, no longer need the personal data for the purposes of processing, but you, as the data subject, need it for the assertion, exercise or defence of legal claims, or
- if you as the data subject have lodged an objection against the processing pursuant to Article 21(1) GDPR and it has not yet been established whether the legitimate reasons of the data controller outweigh your reasons.
If the processing of personal data concerning you as data subject has been restricted, such data may be processed only with your consent or for the purpose of asserting, exercising or defending legal rights or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State, with the exception of their storage.
If the processing restriction has been restricted in accordance with the above conditions, we, as the data controller, will inform you as the data subject before the restriction is lifted.
The right of the data subject to restrict the processing may in turn be limited in case it is likely to make it impossible or seriously impair the attainment of the research or statistical purposes and that the restriction is necessary for the attainment of the research or statistical purposes.
(d) Right to erasure
(aa) Duty to delete
You as the data subject may request us, the data controller, to delete the personal data concerning you immediately, and we, the data controller, are obliged to delete this data immediately if one of the following reasons applies:
- Personal data concerning you as a data subject is no longer needed for the purposes for which it was collected or otherwise processed.
- You as data subject revoke your consent on which the processing was based pursuant to Article 6 paragraph 1 letter a or Article 9 paragraph 2 letter a GDPR and there is no other legal basis for the processing.
- You as data subject object to the processing under Article 21(1) GDPR and there are no overriding legitimate reasons for the processing or you object to the processing under Article 21(2) GDPR.
- Personal data concerning you as a data subject have been processed unlawfully.
- The deletion of personal data concerning you as a data subject is necessary to fulfil a legal obligation under Union law or the law of the Member States to which we are subject as the data controller.
- The personal data concerning you as a data subject have been collected in relation to services offered by the information company pursuant to Article 8(1) of the GDPR.
(bb) Information to third parties
If we as the data controller have made public the personal data concerning you as the data subject and if we are obliged to delete such data pursuant to Article 17 paragraph 1 GDPR, we shall take appropriate measures, also of a technical nature, to inform those responsible for data processing who process your personal data that you as the data subject have requested them to delete all links to said personal data or copies or replications of said personal data, taking into account the available technology and the implementation costs.
The right to deletion does not exist if the processing is necessary.
- on the exercise of freedom of expression and information;
- to fulfil a legal obligation which processing is subject to under the law of the Union or of the Member States to which the data controller is subject or to perform a task carried out in the public interest or in the exercise of official authority vested in the data controller;
- for reasons of public interest in the field of public health in accordance with Article 9 paragraph 2 letters h and i and Article 9 paragraph 3 GDPR
- for archival, scientific or historical research purposes in the public interest or for statistical purposes in accordance with Article 89 paragraph 1 GDPR to the extent that the law referred to in paragraph (a) is likely to render impossible or seriously impede the achievement of the objectives of such processing, or
- to assert, exercise or defend legal claims.
(e) Right of information
If you as the data subject have asserted the right to rectification, deletion or limitation of the processing to us as the data controller, we are obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or deletion of the data or limitation of the processing, unless this proves to be impossible or involves a disproportionate effort.
You, as the data subject, have the right to be informed about these recipients.
(f) Right to data transferability
You as the data subject have the right to receive the personal data concerning you which you have provided to us as the data controller in a structured, common and machine-readable format. In addition, you, as the data subject, have the right to transfer this data to another data controller, without being hindered by us as the data controller to whom the personal data were provided, insofar as
- the processing is based on a consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR, and
- processing is carried out using automated procedures.
In exercising this right, you as the data subject also have the right to obtain that the personal data relating to you be transmitted directly by us as the data controller to another data controller as far as this is technically feasible. Freedoms and rights of other persons must not be affected by this.
The right to data transferability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority assigned to us as the data controller.
(g) Right to object
As data subject, you have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you and which is carried out pursuant to Article 6(1)(e) GDPR.
This also applies to profiling based on these provisions. As the data controller, we will no longer process the personal data concerning you as the data subject unless we can provide evidence of compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
In connection with the use of services provided by the information company - notwithstanding Directive 2002/58/EC - you as the data subject have the possibility of exercising your right of objection by means of automated procedures using technical specifications. As data subject, you also have the right to object to the processing of personal data concerning you for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) GDPR for reasons arising from your particular situation.
Your right to object may be limited to the extent that it is likely to make it impossible or seriously impair the realisation of the research or statistical purposes and that the limitation is necessary for the fulfilment of the research or statistical purposes.
(h) Right to revoke the declaration of consent under data protection law
As the data subject, you have the right to revoke your declaration of consent under data protection law at any time. However, the revocation of your consent does not affect the legality of the processing having been carried out on the basis of your consent prior to the revocation of your consent.
Please send your revocation stating your full name and e-mail address: Medicus@MD-Medicus.net
(i) Automated case-by-case decision, including profiling
As a data subject, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects on you or significantly affects you in a similar way.
This shall not apply if the decision
- is necessary for the conclusion or performance of a contract between you as the data subject and us as the data controller,
- is permitted by the laws of the Union or of the Member States to which we are subject as the data controller, and those laws contain adequate measures to safeguard the rights and freedoms of those concerned and their legitimate interests, or
- with the express consent of you as the data subject.
However, these decisions may not be based on special categories of personal data under Article 9(1) GDPR, unless Article 9(2)(a) or (g) GDPR applies and appropriate measures have been taken to protect the rights and freedoms and legitimate interests of you as the data subject. With regard to the cases referred to in the indents, we as the data controller shall take appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person on the part of the data controller, to state our own position and to contest the decision.
(j) Right to file complaints to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you as a data subject have the right to complain to a supervisory authority, in particular in the Member State where you reside, at your place of work or at the place where the alleged infringement is alleged, if you believe that the processing of your personal data is in breach of the GDPR.
The supervisory authority with which the complaint was lodged will inform you, as the complainant, of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.
2. You as the data subject also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.
V. Settlement of disputes
With the Verbraucherstreitbeilegungsgesetz (VBSG; Consumer Dispute Resolution Act), the legislator has created an alternate possibility to settle a consumer dispute, i.e. a dispute in which you as the consumer and we as entrepreneurs are involved, outside of ordinary court proceedings in a dispute resolution procedure before an arbitration body.
MD Medicus Holding GmbH is neither legally obliged nor in principle willing to participate in a dispute resolution procedure before the consumer arbitration board.
Regardless of this, MD Medicus Holding GmbH is obliged pursuant to § 37 VSBG to inform you after a dispute has arisen which conciliation body would be competent if we were to participate in the dispute resolution procedure. We will comply with this obligation in advance. The responsible consumer arbitration body is:
Allgemeine Verbraucherschlichtungsstelle des Zentrums für Schlichtung e.V.
Straßburger Str. 8, 77694 Kehl
With the following information, we will inform you in accordance with Art. 13 GDPR about the processing of your personal data and the rights granted to you under the EU General Data Protection Regulation.
In order to be able to process your requests, MD Medicus, as a processor and service provider, collects and stores some personal data on your behalf. MD Medicus processes your personal data in compliance with the EU General Data Protection Regulation, the Federal Data Protection Act, the data protection regulations of the Federal Social Assistance Act and all other applicable laws.
The processor is the company MD Medicus based in Industriestr. 2a, in 67063 Ludwigshafen am Rhein.
Managing Directors of the company are Mr. Frank Ratzlaff and Mr. Jochen Mueller.
If you want to get in direct contact with MD Medicus, you can reach us by phone at 0049 621/5490-144
You can write us at the aforementioned address in Ludwigshafen as well as by fax form under the fax number 0049 621/5490-265 or by e-mail under the e-mail address firstname.lastname@example.org.
The data protection officer of MD Medicus is Mrs. Christina Grewe. To write her directly,her address is, Industriestr. 2a, 67063 Ludwigshafen am Rhein with the note - Data Protection Officer -
or contact her by e-mail at email@example.com
Why do we collect and store personal data about you?
If you contact MD Medicus, we will provide you with a service. In order for us to provide you with this service properly and identify you as beneficiary, we collect the following information:
- Title, first name, last name,
- Your Address
- Your insured or membership number
- Your request
- if applicable, your telephone number (landline and / or mobile)
- Information that is necessary for the proper handling of your request and the protection of your interests, such as medical history and diagnoses.
All your information is voluntary but necessary
- to process your request properly
- to identify you as beneficiary;
- to fulfill our contractual obligations
- if desired by you for recalls or for correspondence with you;
- to fulfill legal obligations, such as the commercial and fiscal retention obligations;
- as well as for billing with our customer;
Without this information we can not process your request.
The data processing takes place on the basis of your request and is in accordance with Art. 6 para. 1 p. 1 lit. a and lit. b DSGVO for the stated purposes for the proper processing of the order and for the fulfillment of obligations under this contract. The legal basis for the processing of health-related data, which is permissible only on the basis of your consent granted by telephone, is Article 9 (2) (a) of the General Data Protection Regulation of the EU (GDPR).
Duration of data storage
We will delete your personal information as soon as it is no longer necessary for the above purposes and there are no retention requirements. Incidentally, as soon as any retention periods have expired. Corresponding storage obligations arise mainly from the Commercial Code and the Tax Code, but also from other laws. The retention period under commercial law is 6 years, according to tax law 10 years.
Transfer of data to third parties
If necessary for the performance of an order placed with us, your personal data may also be disclosed to third parties, for example:
- Cost Containment Partners "
Such a third party may also be located in countries outside the EU / EEA (third countries) .For a few third countries, the European Union has determined that there may be a sufficient level of data protection , but your personal data may be used to provide the service you request to a third country that has a lower level of data protection than the EU / EEA Member States, and transfers to such third countries pose a certain risk because your personal data are not subject to the level of protection provided by European law.
The transferred data may be used by the third party exclusively for the stated purposes. Any further disclosure of your personal data to third parties for purposes other than those for the performance of the order placed with us will not take place.
There are currently adequacy decisions of the EU Commission for the transfer of personal data to the following third countries:
- Faroe Islands
- Isle of Man
- New Zealand
- United States of America (EU-US Privacy Shield)
Adequacy decisions can be found on the website of the European Commission at https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en.
If data are transmitted to a third party in a country for which there is no adequacy decision, we and the respective third party have created suitable contractual guarantees through the application of EU standard contractual clauses (Article 46 (2) (c) DS-BER)) agreed between us and the recipient of the personal data in the third country or the international organization. The standard contract clauses are available at https://www.datenschutz.rlp.de/de/themenfelder-themen/standarddatenschutzklauseln-der-kommission-oder-einu-aufsichtsbehoerde/
We now inform you about your rights as an affected person
You have the right:
• according to Art. 7 para. 3 DSGVO, to revoke your once given consent to us at any time. As a result, we are no longer allowed to continue the data processing based on this consent for the future. However, your revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation has been made;
• in accordance with Art. 15 DSGVO, to request information about your personal data processed by us. In particular, you may provide information on the processing purposes, the category of personal data, the categories of recipients to whom your data was or will be disclosed, the planned retention period, the right of rectification, erasure, restriction of processing or opposition Existence of a right of complaint, the origin of their data, insofar as these were not collected at or by us, as well as the existence of an automated decision-making process including profiling and, if necessary, meaningful information on their details;
• in accordance with Art. 16 DSGVO, immediately demand the correction of incorrect or the completion of your personal data stored by us;
• in accordance with Art. 17 DSGVO, to require the deletion of your personal data stored by us, unless the processing for exercising the right to free expression and information, to fulfill a legal obligation, for reasons of public interest or in the exercise of official authority or public interest in public health or archival public interest, scientific or historical research purposes or for statistical purposes or for the purposes of enforcing, pursuing or defending legal claims;
• to demand the restriction of the processing of your personal data in accordance with Art. 18 GDPR, as long as the correctness of your data is checked, if you refuse to delete your data due to inadmissible data processing and instead demand the restriction of the processing of your data, if Although we no longer need your data for processing purposes, you need your data to assert, exercise or defend legal claims if you have filed an objection against processing in accordance with Art. 21 GDPR and it is not yet certain whether the legitimate reasons are the Outweigh those responsible for your reasons.
If the processing of your personal data has been restricted, your data may be stored only with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or important public interest of the Union or a Member State.
If you have restricted the processing, you will also be notified by the person responsible before the restriction is lifted.
• in accordance with Art. 20 DSGVO, to receive your personal data provided to us in a structured, common and machine-readable format or to relinquish the transmission to another person in charge and
• to complain to a supervisory authority pursuant to Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or the place of the alleged infringement or our registered office.
If your personal data are based on legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO are processed, you have the right to file an objection against the processing of your personal data in accordance with Art. 21 DSGVO, provided there are reasons for this arising from your particular situation.
If you would like to exercise your right of objection, please send an e-mail to firstname.lastname@example.org
Right of appeal
In addition, you have the right to lodge a complaint with our privacy advocate or our data protection authority. Responsible Data Protection Authority is the State Commissioner for Data Protection and Freedom of Information Rhineland Palatinate, Hintere Bleiche 34, 55116 Mainz.