Data protection

We attach great importance to the protection of your data and your privacy In the following, we therefore inform you on our website about the collection and use of personal data. Verfahrensverzeichnis für jedermann gem. § 4g Abs. 2 Satz 2 BDSG Angaben nach § 4e Satz 1 Nr. 1-8 BDSG

1) Name or company of the responsible office
Ank-Kaiser Sanitätshaus GmbH

2) Head of the responsible office and the data processing
Frau Christiane Ank-Kunze, managing Director

3) If responsible entity in third country: representative in home country
Not applicable

4) Address of the responsible office Ank-Kaiser Sanitätshaus GmbH
Königstraße 129, 67655 Kaiserslautern
Pirmasenser Straße 7-9, 67655 Kaiserslautern
Merkur Strasse 46, 67663 Kaiserslautern
Brüsseler Strasse 7, 67657 Kaiserslautern
Kaiserstraße 36, 66849 Landstuhl
Bahnhofstraße 52, 66869 Kusel
Vollmersbachstrasse 90 126, 55743 Idar-Oberstein
Roßmarkt 3, 55232 Alzey
Bahnhofstrasse 42, 55232 Alzey
Vorstadt 23, 67292 Kirchheimbolanden
Hauptstr. 77, 67304 Eisenberg
Luitpoldplatz 10, 67269 Grünstadt

5) Purpose of data collection, data processing or data usage
distribution, sale und Administration of medical supplies. Care and equipment of disabled patients with appropriate medical aids, to create a higher quality of life. The legal basis for this is a medical prescription, a personal agreement or a supply order of the health insurance companies.

6) Description of the affected groups of persons and related data or data categories

group of persons
Natural persons in the Federal Republic of Germany, who require appropriate care due to their state of health.
data / related data categories
personal data according to§ 3 Abs. 1 BDSG
personal data are details of personal or factual circumstances of a specific or identifiable natural person (The affected person).
social data according to § 67 Abs. 1 SGB X social data are individual details of personal or factual circumstances of a specific or identifiable natural person (The affected person) collected, processed or used by a body referred to in § 35 of the First Book with regard to its duties under this statute book.
Special data acc. § 3 para. 9 BDSG Health data collected and used in the payroll and religious data.

operating data and business data
Other business-related data, like:
personnel data (employee)
data for gross and net salary
data of Customers and Suppliers
accounting documents and evaluations
ERP (Products and Prices)
Aids and their administration
technical data
data for the preparation of Cost estimates and accounting

Furthermore, company data is collected, processed or used by so-called legal entities. Also, for these data the regulations of the data protection laws can find application.

7) consignees or categories of consignees, whom the data may be shared
internal offices, who are involved in the execution of the respective business processes (personnel administration, accounting, accountancy, purchase, distribution, workshop).

Transmission of billing data to a billing center and forwarding to cost unites and forwarding of electronic cost estimates because of a request of your health insurance via an online portal, also Transmission of billing data via it-systems:
- the list of our order processors:
  - businesses of “opta data group“ (See them all: www.optadata-gruppe.de/Kontakt) represented by opta data Abrechnungs GmbH, Berthold-Beitz-Blvd. 514, 45141 Essen, as the main business like defined in EU-DSGVO (EU-GDPR).
  - Optica Abrechnungszentrum Dr. Güldener GmbH, Marienstraße 10, 70178 Stuttgart
Transmission of your Address data to Logistics company for delivering of products
Transmission of your data to health insurance/ MDK
Transmission of electronic cost estimates because of a request of your health insurance via an online portal
Transmission of your data to Suppliers in case of special products
Transmission of claim data to a debts collection company in case of arrears
No Transmission of data to foreign countrys

8) Standard deadlines for the deletion of the data
The deletion of the data takes place after termination of the statutory retention period; after 10 years all customer data and Suppliers, no matter if they saved electronic or in paper. That includes also patient data. After the last bussiness activity the retention period starts in the following month of the following year after the activity.

9) Planed data Transmission to foreign countrys without GDPR
The processing and utilization of the data takes place exclusively in the territory of the FRG, a member state of the European Union or or in another Contracting State to the Agreement on the European Economic Area.

10) Privacy Guideline
Privacy aim
In our company, data protection is taken very seriously. The aim is to protect the personal data of our customers and employees and to process them in accordance with legal provisions. We comply with the relevant laws, general regulations and regulations on data protection.

Responsibilities
Responsible for data protection in the company is the management. Each employee is responsible for the observance of data protection in his or her area of responsibility and informs the data protection officer in the introduction of new processes in which personal data is processed. The data protection officer monitors compliance with legal provisions and advises and sensitizes employees and company management. He advises on data protection impact assessment on request and is the contact point for the responsible supervisory authority.

reachability of the data protection officer
To reach the data protection officer Mr. Schmitz-Ulrich write info@ank-sanitaetshaus.de or call +49631/201033.

Risk of data protection
Company management and employees are aware that the processing of personal data entails risks to the rights and protectable interests of those concerned. To raise awareness and to sensitize, regular training is provided. To minimize risks, privacy impact assessments are carried out in the processing of sensitive data.

Commitment of employees to data secrecy
All employees of our company are committed to the data secrecy in writing at the beginning of their activity and they receive at the same time appropriate guidelines provided.
Directory of processing activities
In our company, there are corresponding directories of a processing activity for processes in which personal data are handled. This allows a very good assessment of the procedures, in particular the risks to the rights and freedoms of those concerned, and thus the privacy impact assessment can be carried out.

Documentation of data protection relevant processes
Within our privacy policy, our employees have descriptions in the form of process plans, e.g. at Privacy mishaps, Requests for information from those affected, Involvement of the data protection officer etc. Through this documentation, our employees are given the tools to abide by the privacy requirements in the company.

11) obligation of transparency
Information to the data subject pursuant to Article 13 GDPR
We, the company Ank-Kaiser Sanitätshaus GmbH, inform you in accordance with Article 13 of the EU General Data Protection Regulation (GDPR) gladly and in detail about the processing of your personal data (hereinafter referred to as "data"). The EU GDPR imposes some meaningful obligations on us to ensure the protection of your data during processing. We are happy to satisfy these obligations. In the following, we explain which data we process for you and for what purposes and which rights you have in this regard.

a) Purposes of processing
The processing of your data is necessary to process the contractual services. We process your data for the following purposes:

- According to Article 6 Abs. 1a) of the GDPR on the basis of the consent given by you
- To fulfill contractual obligations with your health insurance
- Fulfillment of contractual services
- payment processing
- Delivery of contractually ordered products and services
- Sending interesting information about products and promotions

According to Article 6 Abs. 1 b) of the GDPR on the basis of the consent given by you
Fulfillment of contractual services
payment processing
Delivery of contractually ordered products and services
Sending interesting information about products and promotions

b) Duration of processing
We only process your data for as long as it is necessary to fulfill our contract or applicable laws and to maintain our relationship with you. Business documents are kept in accordance with the provisions of the Commercial Code and the Tax Code for a maximum of 6 and 10 years. As long as you do not agree, you should consider the data for the care and use of your personal information. Should you wish the deletion of your data, we will delete your data immediately, as far as the deletion does not conflict with legal storage requirements.

Your rights as a concerned person
According to the GDPR you have the right to:
- Information about the processing of your data
- Correction or deletion of your data
- Restriction of processing (only storage possible)
- Opposition to the processing
- Data portability
- Revocation of your given consent with effect for the future
- Complaint to the data protection supervisory authority. The responsible supervisory authority is in their federal state. A list of regulators can be found here:
http://www.bfdi.bund.de/DE/lnfothek/Anschriften_Links/anschriften_links-node.html

data protection officer

For all questions about data protection please contact our data protection officer Mr. Schmitz-Ulrich write info@ank-sanitaetshaus.de or call +49631/201033. We hope to have helped you with this information in the exercise of your rights.

cookies
In order to expand the functionality of our website and to make the use more convenient for you, we use so-called "cookies". With the help of these "cookies" data could saved at your computer while calling our website. You have the option to prevent the storage of cookies on your computer by appropriate settings in your browser. This, however, the functionality of our range could be restricted.

How to contact us
Our website provides various means for you to contact us. For example, if you would like to ask us any questions or give us any feedback, you can do this using the contact form provided on our website or the contact details listed (in particular our e-mail address).

When using the contact form, you are required to enter some personal details about yourself before you can send your inquiry to us. For example, you need to provide us with your name and e-mail address. We need this information to communicate with you and to provide you with a fast, high-quality service. This is in our legitimate interest (pursuant to Article 6 (1) f GDPR). In addition, details concerning your request help us to forward it to the right department quickly. You can also choose to give us your telephone number if you would like us to contact you in this way.

We will only use and store your data for the purpose of processing your request. We will pass on the information you enter to the relevant members of staff, who will process your request according to your requirements. We will only share your data with third parties if doing so is necessary in order to process your request.

We will store your request and the data provided in your request for the purpose of processing your request and so that we can respond to any follow-up questions. We will keep this data until you ask us to delete it or until we have fulfilled the purpose for which we were storing it. Any mandatory legal provisions – in particular retention periods – will remain unaffected by this.

Online presence in social media
We maintain online presence within social networks and platforms in order to communicate with customers, prospects and users active there and to inform them about our services.

We point out that some data the user can be processed outside the space of the European Union. This may result in risks for the users because e.g. enforcement of user rights could be made more difficult. With regard to US suppliers that are certified under the Privacy Shield, we point out that they undertake in order to comply with EU data protection standards. Furthermore, the data of the users are usually processed for market research and advertising purposes. Thus, e.g. user profiles are created from the user behavior and the resulting interests of the users. The usage profiles can in turn be used to e.g. Place advertisements inside and outside the platforms that are supposed to be in the interests of users. For these purposes, cookies are usually stored on the computers of the users, in which the user behavior and the interests of the users are stored. Furthermore, data can also be stored in the usage profiles independently of the devices used by the users (in particular if the users are members of the respective platforms and are logged in to them). The processing of the personal data of users is based on our legitimate interests in an effective information of users and communication with users in accordance with. Art. 6 para. 1 lit. f. DSGVO. If the users are asked by the respective providers for a consent to the data processing (that is, they declare their agreement, for example, by ticking a check box or confirming a button), the legal basis of the processing is Art. 6 para. a., Art. 7 GDPR.

For a detailed description of the respective processing and the possibilities of opt-out, we refer to the following linked information of the provider.

Also, in the case of requests for information and the assertion of user rights, we point out that these can be claimed most effectively from the providers. Only the providers have access to the data of the users and can directly take appropriate measures and provide information. If you still need help, then you can contact us.

- Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland) – Datenschutzerklärung: www.facebook.com/about/privacy/, Opt-Out: www.facebook.com/settings and www.youronlinechoices.com, Privacy Shield:

https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

- – Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) – Datenschutzerklärung: twitter.com/de/privacy, Opt-Out: twitter.com/personalization, Privacy Shield: www.privacyshield.gov/participant.

Google Maps
This page uses the Google Maps API. Your IP address needs to be stored in order for you to use Google Maps. This information is generally transmitted to and stored on a Google server in the USA. The operator of this site has no influence over the transmission of this data.

We use Google Maps due to our interest in making our website more attractive and in making it easier for our visitors to find the addresses provided on our website. This represents a legitimate interest within the meaning of Article 6 (1) f GDPR.

Our website uses plugins from the Google-operated site YouTube. The operator of the site is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

YouTube
When you visit one of our pages featuring a YouTube plugin, a connection is made to YouTube’s server. This informs YouTube’s server about which of our pages you have visited. YouTube also acquires your IP address. This even occurs if you are not logged in to YouTube or do not have a YouTube account. The information collected by YouTube is transmitted to YouTube’s server in the USA.

If you are logged in to your YouTube account, YouTube can link your browsing behavior directly to your personal profile. You can prevent this from happening by logging out of your YouTube account.

We use YouTube due to our interest in providing an attractive website. This represents a legitimate interest within the meaning of Article 6 (1) f GDPR.

Further information about how YouTube processes your data can be found in YouTube’s Privacy Policy, which is available at www.google.com/policies/privacy/.

You can find the Google Maps Terms of Service and Google’s Privacy Policy at the following links: www.google.com/help/terms_maps.html and www.google.com/policies/privacy/.

Forwarding to another provider
As far as from our offer to contents of other offerors is linked, this is recognizable by an appropriate symbol (>) or a text hint. Use of these offers may be subject to conditions other than those described in this Privacy Policy.

Responsibility for the Sanivita online store
We are not responsible for the legally compliant operation of the Sanivita online shop, in particular for data protection, which can be accessed at https // www.sanivita.de. The sole responsibility for this is the Sanivita contract and service partner Ludwig Bertram GmbH, Im Torfstich 7, 30916 Isernhagen. Further data protection information can be found in the privacy policy of Ludwig Bertram GmbH.

Right to information
As a user of our website, you have the right to request information about the data stored about you or your pseudonym. At your request, the information can also be issued electronically.

No warning without prior contact
In the case of competition law, domain law, copyright, data protection or similar problems, we ask you to contact us to avoid unnecessary litigation and costs in advance. We guarantee that rightly complained passages are checked immediately and if necessary amended or removed, without you being required to call in a lawyer. The cost note of a legal warning without prior contact with us is rejected in the sense of mitigation obligation as unfounded and possibly counterclaim for breach of the aforementioned provisions.

Data protection officer
For all questions about data protection please contact our data protection officer Mr. Schmitz-Ulrich write info@ank-sanitaetshaus.de or call +49631/201033.