Privacy Policy

The following privacy policy provides you with transparent and comprehensive information about the data processing of this website and your rights as a data subject.

I. Person responsible

MAIN MEDIC∙ALL
DR. JENIFER BLYTHE
ZIMMERWEG 6
60325 FRANKFURT AM MAIN
T 069 75 666 9990
F 069 75 666 9991
INFO@MAINMEDICALL.DE

II. Data processing
The practice MAIN MEDIC∙ALL ∙ ZIMMERWEG 6∙ 60325 FRANKFURT AM MAIN collects user data when visiting the website (mainmedicall.de) and is also responsible for this data and the corresponding processing in accordance with data protection law. 

1. Accessing the website
When you access our website, our web servers temporarily store the following data (log files):

— The IP address of the accessing computer
— The location of the accessing computer
— Date and time of the call (in the server’s system time)
— The HTTP status codes
— Browser and operating system including version
— The page of the website accessed by the user

This data is required to display the website and to enable and use navigation and other functions and services of the site, as well as to resolve technical problems.
The legal basis for processing is Art. 6 (1) lit. f GDPR.

2. Hosting
We are hosting the content of our website at the following provider:
RAID BOXES
The provider is RAIDBOXES GmbH, Hafenstr. 32, 48151 Münster (hereinafter RAIDBOXES) When you visit our website, RAIDBOXES records various log files including your IP addresses.

For details, please refer to RAIDBOXES' privacy policy: https://raidboxes.io/legal/privacy/.

The use of RAIDBOXES is based on Art. 6 Para. 1 lit. f GDPR. We have a legitimate interest in ensuring that our website is presented as reliably as possible. If appropriate consent has been requested, processing is carried out exclusively on the basis of Art. 6 Para. 1 lit . B. for device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

3. Cookies
Consent with Borlabs Cookie
Our website uses Borlabs Cookie consent technology to obtain your consent to the storage of certain cookies in your browser or to the use of certain technologies and to document this in compliance with data protection regulations. The provider of this technology is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg (hereinafter referred to as Borlabs).

When you enter our website, a Borlabs cookie is stored in your browser, in which the consent you have given or the revocation of this consent is stored. This data will not be passed on to the Borlabs Cookie provider.

The collected data will be stored until you request its deletion, delete the Borlabs cookie yourself, or the purpose for data storage no longer applies. Mandatory legal retention periods remain unaffected. Details on data processing by Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.

Borlabs cookie consent technology is used to obtain the legally required consent for the use of cookies. The legal basis for this is Article 6 (1) c GDPR.

4. Contact via email address
You have the option of contacting us via our email address. We collect, store and process the following data:
— Your email address
— as well as other personal data that you provide to us as part of your message.
This data is collected and processed exclusively for correspondence with you and for processing your request. The legal basis is Art. 6 Paragraph 1 Clause 1 Letter f of GDPR. If data processing is no longer required for this purpose, your personal data will be deleted, provided that there is no statutory retention period to the contrary. This data will not be passed on to third parties without your express consent.

5. Google Maps
This website uses the map service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon 9 / 12 House, Barrow Street, Dublin 4, Ireland.

In order to use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. If Google Maps is activated, Google can use Google Fonts for the purpose of uniform display of fonts. When you call up Google Maps, your browser loads the required web fonts into your browser cache in order to display text and fonts correctly.

Google Maps is used in the interest of an attractive presentation of our online offers and to make the locations we specify on the website easy to find. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR and Section 25 Para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

Data transfers to the USA are based on the EU Commission's Standard Contractual Clauses. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

For more information on how user data is handled, please see Google's privacy policy: https://policies.google.com/privacy?hl=de.

6. Jameda seal and widgets
Our website includes seals or widgets from jameda GmbH, Balanstr. 71a, 81541 Munich. A widget is a small window that displays changing information. Our seal works in a similar way, i.e. it does not always look the same, but the display changes regularly. The corresponding content is shown on our website, but it is retrieved from the jameda servers at that moment. This is the only way to always show the latest content, especially the latest rating. For this to happen, a data connection must be established from this website to jameda and jameda receives certain technical data (date and time of the visit; the page from which the query is made; Internet Protocol address (IP address) used, browser type and version, device type, operating system and similar technical information) that are necessary for the content to be delivered. However, this data is only used to provide the content and is not stored or used in any other way.

With this integration, we pursue the purpose and legitimate interest of presenting current and correct content on our homepage. The legal basis is Art. 6 Para. 1 f GDPR. We do not store the data mentioned due to this integration. Further information on data processing by jameda can be found in the data protection declaration on the website https://www.jameda.de/jameda/datenschutz.php.

7. Social Media
The content on our pages can be shared on social networks such as Facebook, Instagram or Google company profiles. Our pages do not contain any plug-ins provided by the social networks Facebook, Instagram or Google. There is no automatic transfer of user data to the operators of these platforms on our pages.

Our social buttons only establish direct contact between the networks and users when the user actively clicks on one of these buttons. If the user is logged in to one of the social networks, an information window appears when using the social buttons from Facebook, Instagram, or Google company profiles, in which the user can edit the text before sending it.

As a user, you can post the contents of this website on social networks without the network operators creating complete surfing profiles.

The following social media services are integrated on this site:

Instagram

8. Online appointment calendar, appointment booking, video consultation
An online appointment calendar is integrated into our website for booking appointments. Video consultations can also be arranged and carried out using the service. The provider of the service is zollsoft GmbH, Ernst-Haeckel-Platz 5/6, 07745 Jena (“Zollsoft”).

When you visit our website to book appointments, the online calendar is automatically loaded from Zollsoft's servers. When you request data to load the online calendar, the following information is disclosed to the provider: (dynamic) IP address, browser type and version, operating system and version, domain accessed, previously visited website and date and time of access. The online calendar is an additional way for you to book an appointment with us. We have a legitimate interest in integrating the online calendar (Art. 6 Para. 1 Clause 1 Letter f of GDPR).

An appointment can be booked without prior registration. If certain input fields are marked as "mandatory information", we use these fields to collect the data required for booking the appointment. Of course, you can provide us with further data if you wish. Your data will be temporarily stored on Zollsoft's servers for the proper use of the online appointment calendar and then transmitted to our practice information system. The data entered will be automatically deleted from Zollsoft's servers at the end of each calendar quarter at the latest and will then only be stored in our practice information system as appointment information. The legal basis for data processing is your consent (Art. 6 Para. 1 Clause 1 Letter a of GDPR or Art. 9 Para. 2 Letter a of GDPR). To the extent that biometric data, health data, genetic data or data relating to your sex life or sexual orientation are processed for the purposes of healthcare, diagnosis, care and treatment, the legal basis is Art. 9 (2) (h) GDPR in conjunction with Section 22 (1) No. 1 (b) BDSG.

Video consultations can also be booked and carried out via the service. The video consultation is based on WebRTC, a so-called peer-to-peer process for transmitting audio and video data. With the peer-to-peer process, a direct connection is established after a connection has been made between the participants' end devices. Neither the provider nor any third party has technical access to this connection. The video call is therefore confidential. In order to carry out this connection, it is necessary to determine the IP address of both participants and to transmit it to the other participant's browser in order to establish the connection. The IP address is stored briefly for the purpose of transmission, but is completely deleted at the end of the video consultation at the latest. The transmission and exchange of IP addresses takes place in encrypted form. The same applies to camera encoding and resolution, audio codec and sample rate.

Before, during and after the video consultation, all data (audio and video, chat messages, exchanged files) are exchanged immediately and encrypted between doctor and patient.

The data processing described is absolutely necessary to ensure that the video consultation you have booked is carried out securely. The legal basis for data processing is Article 6 (1) (b) GDPR.

The legal basis for the processing of the personal data you provide during the video consultation is your consent (Art. 6 Para. 1 Clause 1 Letter a GDPR or Art. 9 Para. 2 Letter a GDPR). If biometric data, health data, genetic data or data relating to your sex life or sexual orientation are processed for the purposes of healthcare, diagnostics, care and treatment, this is also justified in accordance with Art. 9 Para. 2 Letter h GDPR in conjunction with Section 22 Para. 1 No. 1 Letter b BDSG.

Further information about the online appointment calendar and video consultations can be found at: https://arzt-direkt.de/datenschutz.

III. Data transfer to third parties, data storage
If we involve service providers who support us in the processing of personal data or otherwise (for example hosting or other IT service providers) and they come into contact with personal data, this only happens after the prior conclusion of a so-called contract for order processing in accordance with Art. 28 Para. 2 GDPR, with which we oblige our service providers to process personal data only in accordance with our instructions and to treat it confidentially. The processors only receive access to such personal data that is necessary to perform their services for us.
In other cases, we only pass on personal data if this is permitted by law, for example if we are obliged to do so by law or by an official or court order (Article 6 (1) sentence 1 lit. c GDPR) or if the person concerned has consented to the transfer (Article 6 (1) sentence 1 lit. a GDPR).
If personal data is transferred to a third country, we have taken appropriate measures to ensure that the level of protection for natural persons guaranteed by the GDPR is not undermined. To this end, we have concluded standard contractual clauses as part of the data processing agreement with processors who process personal data in a third country.
Your data is stored in the Federal Republic of Germany. We do not transfer any data to other European countries, outside of Europe or the USA. Our servers are located in Germany.

IV. Secure data transfer
Our website is SSL encrypted. You can tell this by the address line "HTTPS". SSL encryption is a transport encryption so that third parties cannot view your data.

V. Your rights
You have the right to receive information about your personal data stored by us at any time. In particular, you can obtain information about the origin of the data, the storage location, the recipient and the purpose free of charge. You can also request that your data be corrected if it is incorrect or incomplete.

You can also request that we block or delete the personal data we have stored about you. If retention obligations prevent deletion, your data will be blocked for this purpose. You can request the deletion (“right to be forgotten”) of your data at any time, if possible; you can also request correction and information.

If you have given us your consent to process your data, this consent can be revoked. In the event of a revocation, the processing of your data remains legally effective until this point in time. The revocation of consent to data processing is therefore only possible for the future.

You also have the option of having your voluntarily provided data transmitted to a third party upon request.

You are also entitled to complain about data processing to the responsible supervisory authority at any time. The responsible supervisory authority is usually the state data protection officer of the respective federal state

The Hessian Commissioner for Data Protection and Freedom of Information
PO Box 3163
65021 Wiesbaden
Phone 0611 1408-0
poststelle@datenschutz.hessen.de

You also have the right to request that data processing be restricted.
To exercise your rights, please contact our practice. You will find the contact details above.

VI. Current status and changes to this privacy policy
This privacy policy is currently valid and is dated April 2024.
Due to the further development of our website or due to changes in legal or official requirements, it may become necessary to adapt this data protection declaration accordingly. You can access and print out the current data protection declaration on the website at any time.

You can send your claims to us either by email to INFO@MAINMEDICALL.DE or by post.

As of April 2024.