Privacy Policy & User Generated Content Policy

Status: December 2022

1. Responsible

This data protection declaration applies to data processing by us as the controller pursuant to Article 4 (7) of the General Data Protection Regulation (GDPR): see imprint

2. Definitions

Insofar as this data protection declaration does not contain or imply a different definition, reference is made to the definitions in Article 4 GDPR with regard to the terms used. According to Art. 4 No. 1 GDPR, personal data is any information relating to an identified or identifiable natural person. These are, for example, first and last name, date of birth, private and business contact data, medical or nursing data, etc..

3. Voluntary provision of personal data

You are neither legally or contractually obligated, nor is it necessary for you to provide us with personal data in order to conclude a contract. However, in order to use the functions of the software, it is necessary to collect personal data in the software. If you do not wish to collect personal data, the use of the software does not make sense. In addition, non-deployment has no consequences for you.

4. Use of processors

The development and operation of software such as PflegeDigital is complex and can only be implemented using products and services from selected suppliers and service providers. This applies in particular to the use of cloud computing services. These service providers are carefully selected and comply with the requirements of Art. 28 GDPR. Of course, we regularly ensure the reliability and compliance with all data protection regulations by our processors.

5. Processing personal data

5.1. Download the app

When downloading the app, the necessary information is transferred to the Google Play Store (if used on an Android device) or the Apple App Store (if using an iOS device). In particular, user name in the respective store, e-mail address and customer number, as well as time of download and the individual device identification number as well as any other data are required. We have no influence on this data collection and processing and are not responsible for it. We process the data only to the extent necessary to download the app from your device. Further information can be found in the privacy statements of Google (https://policies.google.com/privacy?hl=de) or Apple (https://www.apple.com/de/privacy/privacy-policy/).

5.2. To connect to our servers

If your device (web browser or mobile app) connects to our servers or those of our processors, we process certain device and connection data that is necessary to establish a secure connection between your mobile device or web browser. These include:

User ID, encrypted password and one-time password
Device ID of your device
Version of your operating system
IP Address
Date and time of request
Time zone difference to Greenwich Mean Time (GMT)

The legal basis for this processing is Article 6 (1) sentence 1 lit. F DSGVO. Data processing takes place exclusively in data centers within the European Union. We take securing your personal data very seriously. In reality, unfortunately, it happens again and again that unauthorized third parties gain access to personal data. Detailed public information on the type of data storage, as well as information on the processors used, can provide these unauthorized third parties with clues that facilitate this unauthorized access. Therefore, in the interest of our customers and in our interest, we refrain from sharing this information publicly. We are happy to provide our customers or potential customers with information and further information about our processors, their data centers and data backup measures. Please contact us.

5.3. Company and employee data

In order to be able to use the PflegeDigital software, it is necessary to collect data of your company, your personal data and personal data of your employees:

Name
Address
Birth
Company data (in particular data for creating an invoice)
Working time information
Assignments
Messages and comments between those involved in the care

The collection of patient data with the help of PflegeDigital is carried out by you as the provider of nursing or care services. Thus, PflegeDigital is neither able nor responsible to obtain the appropriate informed consent from your patients. The consent to data processing must be given by you as the user of the software. The consent to data processing must be given by you as the user of the software. Processing is essential for the functioning of the software. The legal basis for this is Article 6 (1) sentence lit. (b) DSGVO. If you terminate the user contract with PflegeDigital, the personal data will be deleted, unless their storage is prohibited for commercial or tax reasons in accordance with Article 6(1)(f) GDPR. c GDPR is necessary. For security reasons, we store the time of creation of a user ID and the time of the last login. The legal basis for the recording is Article 6 (1) sentence 1 lit. F DSGVO. Data processing takes place exclusively in data centers within the European Union. We take securing your personal data very seriously. In reality, unfortunately, it happens again and again that unauthorized third parties gain access to personal data. Detailed public information on the type of data storage, as well as information on the processors used, can provide these unauthorized third parties with clues that facilitate this unauthorized access. Therefore, in the interest of our customers and in our interest, we refrain from sharing this information publicly. We are happy to provide our customers or potential customers with information and further information about our processors, their data centers and data backup measures. Please contact us.

5.4. Patient

With our software, you can better coordinate and manage the daily processes around care. For this purpose, we process personal data, in particular health and fitness data of your patients. These include in particular:

Name and address
Carried out and planned care appointments, with the respective care measures
The documentation of the care measures
Information on the degree of care and the state of health
Information on the housing situation
Billing-relevant information
Messages and comments between those involved in the care

5.5. Data of relatives and other caregivers

With our software, you can better coordinate and manage the daily processes around care. For this purpose, we also provide access to the system to relatives or other caregivers designated by the patient. For this purpose, it is necessary to collect and process personal data. These include in particular:

Name and address
Contact
Information about the relationship with the patient
Messages and comments between those involved in the care

The collection of the data of the relatives with the help of PflegeDigital is carried out by you as a provider of care or support services. Thus, PflegeDigital is neither able nor responsible to obtain the appropriate informed consent from your patients. The consent to data processing must be given by you as the user of the software. Processing is essential for the functioning of the software. The legal basis for this is Article 6 (1) sentence lit. (b) DSGVO. If you terminate the user contract with PflegeDigital, the personal data will be deleted, unless their storage is prohibited for commercial or tax reasons in accordance with Article 6(1)(f) GDPR. c GDPR is necessary. For security reasons, we store the time of creation of a user ID and the time of the last login. The legal basis for the recording is Article 6 (1) sentence 1 lit. F DSGVO. Data processing takes place exclusively in data centers within the European Union. We take securing your personal data very seriously. In reality, unfortunately, it happens again and again that unauthorized third parties gain access to personal data. Detailed public information on the type of data storage, as well as information on the processors used, can provide these unauthorized third parties with clues that facilitate this unauthorized access. Therefore, in the interest of our customers and in our interest, we refrain from sharing this information publicly. We are happy to provide our customers or potential customers with information and further information about our processors, their data centers and data backup measures. Please contact us.

6. Transfer to third countries

We only process personal data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) if it is necessary to fulfil our (pre)contractual obligations (pursuant to Article 6 (1) sentence 1 lit. b GDPR), on the basis of your consent (pursuant to Article 6 (1) sentence 1 lit. a GDPR), due to a legal obligation (pursuant to Article 6 (1) sentence 1 lit. c GDPR) or on the basis of our legitimate interests (pursuant to Article 6 (1) sentence 1 lit. f GDPR). The same applies if third parties process your data on our behalf in a third country. Furthermore, a transfer to a third country only takes place if this is permitted under Art. 44 et seq. GDPR. At the time of drawing up this data protection declaration, we are not aware of any case of data being transferred to third countries.

7. Deletion of data

The data processed by us will be deleted in accordance with Article 17 GDPR or their processing restricted in accordance with Article 18 GDPR. Unless otherwise stipulated in this data protection declaration, the data processed by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory storage obligations. We check the necessity every six months. If the data is not deleted because it is required for other legally permissible purposes, its processing will be restricted, i.e. the data will be blocked and not used. This applies, for example.B to data that must be retained for commercial or tax reasons. In accordance with legal requirements in Germany, the storage or storage, in particular of books, records, inventories, annual financial statements, management reports, the opening balance sheet as well as the work instructions and other organisational documents required for their understanding, the commercial or business letters received and sent, the accounting documents and other documents, insofar as they are important for taxation, takes place in accordance with § 147 Abs. 1 AO for ten Years. This also applies to any personal data of data subjects contained in the above-mentioned documents.

8. Automatic decision-making

In connection with your use of our app, there is no automated decision in individual cases or profiling within the meaning of Art. 22 GDPR.

9. Affected rights

You have the right:

in accordance with Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can obtain information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if not collected by us, and the existence of automated decision-making. request profiling and, where applicable, meaningful information on its details;
in accordance with Article 16 GDPR, to demand the correction of incorrect or completion of your personal data stored by us without undue delay;
require the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless processing is necessary for the exercise of the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
to demand the restriction of the processing of your personal data in accordance with Article 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Article 21 GDPR;
in accordance with Article 20 GDPR, to receive your personal data, which you have provided to us, in a structured, common and machine-readable format or to request its transmission to another controller;
to a regulatory authority in accordance with Article 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

10. Revocation of granted consent

If we process your personal data on the basis of your consent pursuant to Article 6 (1) (f) GDPR. a GDPR, you have the right to revoke any consent granted to us in accordance with Article 7 (3) GDPR with effect for the future. If you would like to exercise your right of withdrawal, you can inform info@pflegedigial.eu by e-mail. Alternatively, the contact details mentioned in the imprint of the website pflegedigital.eu are also available.

11. Objection to processing based on legitimate interest

If we process your personal data on the basis of our legitimate interests pursuant to Article 6 (1) sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR, provided that there are reasons for this arising from your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right to object, which is implemented by us without specifying a particular situation. If you would like to exercise your right of objection, you can inform us by e-mail to info@pflegedigital.eu. Alternatively, the contact details pflegedigital.eu mentioned in the imprint of the website are also available.

12. Security

We take organizational, contractual and technical security measures in accordance with the state of the art to ensure that the provisions of the data protection laws are complied with and thus to protect the data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. In addition, we naturally observe all requirements that § 22 Abs. 2 BDSG places on the processing of health data.

13. Changes to this Privacy Policy

We reserve the right to change our privacy policy if this is necessary due to new technologies, further developments of the PflegeDigital software or changes in our data processing processes or to adapt it to changes in the legal situation applicable to us. However, this only applies to this privacy policy. If we process your personal data on the basis of your consent or if components of the data protection declaration contain provisions of the contractual relationship with you, any changes will only be made with your consent. You can access the current version of our privacy policy at any time via our mobile apps, web application or website.

Privacy Policy for Users of PflegeDigital Web and Mobile Apps