Data protection information for patients

01.04.2021, Version: 002

Dear Patient,

Thank you for visiting our practice. In the following pages, we would like to provide you with information on the processing of your personal data.

Who is responsible for data processing?

The responsible party in terms of data protection law is:

MVZ Medizin Center Bonn GmbH
Managing Directors:
PD Dr. med. Manuel M. Weber, Arthur Vogt, Fabian Groß
Münsterstr. 20, 53111 Bonn
Germany
Tel.: 0228/9081-100
E-mail: info@mcbonn.de

Further information about our practice, details of the physicians authorized to represent us and additional contact options can be found in our website imprint: https://www.mcbonn.de/en/legal-notice/.

We have appointed an external data protection officer.

You can reach him as follows:

MVZ Medizin Center Bonn GmbH
– Data Protection Officer Mr. Limbach –
Münsterstr. 20, 53111 Bonn
Germany
E-Mail: dsb@mcbonn.de

Which of your data do we process? And for what purposes?
We process data needed in connection with your treatment.
For this purpose, we process your personal data, in particular your health data. This includes, for example, your medical history (anamnesis), diagnoses, therapy suggestions and findings that we or other doctors collect. Therefore, other doctors from whom you are receiving treatment may also provide us with data (e.g. in doctor’s letters, referrals). Data processing is carried out on the basis of legal requirements in order to fulfill the obligations associated with the treatment contract between you and your doctor.
The collection of health data is a prerequisite for your treatment. If the necessary information is not provided, thorough treatment cannot take place.

What is the legal basis for this?
The legal basis for processing your data is Article 9(2)(h) and Article 6(1)(b) DSGVO in conjunction with Section 22(1) No. 1(b) BDSG. If you have any questions about this, please feel free to contact our data protection officer.
(DSGVO = General Data Protection Regulation | BDSG = Federal Data Protection Act).

How long is the data stored?
We keep your personal data only for as long as is necessary to carry out the treatment. Due to legal requirements we are obligated to keep patient documentation data for at least 10 years after treatment is completed. Longer retention periods may also apply, for example 30 years for X-ray records in accordance with Section 28 (3) of the X-ray Ordinance.

To whom might my data be forwarded?
We only transfer your personal data if required by law or if you have given your consent. Recipients primarily include other physicians, panel doctors unions, health insurance companies, the Medical Service of Health Insurance, medical associations and private medical clearing offices. Data is mainly transmitted to clarify insurance and medical questions for billing purposes. In individual cases, data can be transmitted to other authorized recipients.

Where is the data processed?
The data is processed exclusively on dedicated IT systems in our server room. Apart from administrators, access to these IT systems is limited to select employees.

Your rights as a “data subject”
You have the right to information about the personal data we process about you. In the case of a request for information not made in writing, we ask for your understanding that we may require evidence proving your identity. Furthermore, you have a right to rectification, deletion or restriction of processing, insofar as you are legally entitled. You also have a right to object to data processing and portability within the scope of the law.

Right of complaint
You have the right to complain about our processing of personal data to a supervisory authority for data protection. The supervisory authority responsible for our facility is:
North Rhine-Westphalia State Commissioner for Data Protection and Freedom of Information. Website and contact details of the LDI NRW at: https://www.ldi.nrw.de/.

Thank you for your interest and attention – Your Practice Team