← Back home

Privacy Policy

Controller

Dr. med. Rolf Krebs
Karlsplatz 4
80335 Munich, Germany
E-Mail: info@rolf-krebs.de

Thank you for visiting the website of the practice of Dr. Rolf Krebs based in Munich. Protecting your privacy is very important to us. Below we inform you about the collection, processing and use of your data. This is always carried out in accordance with data protection regulations, in particular the GDPR.

Definitions

Our privacy policy is intended to be simple and understandable. Where relevant, we use the official terms of the General Data Protection Regulation (GDPR) as defined in Art. 4 GDPR.

Data processing when visiting our website

When you access our website, it is technically necessary for data to be transmitted from your browser to our web server. The following data is recorded during an active connection:

  • Date and time of the request
  • Name of the requested file
  • Page from which the file was requested
  • Access status
  • Web browser and operating system used
  • (Full) IP address of the requesting computer
  • Amount of data transferred

We collect this data to ensure a smooth connection to the website and to allow comfortable use of our services. The log file is also used to evaluate system security and stability and for administrative purposes. The legal basis for the temporary storage of the data and log files is Art. 6 (1) lit. f GDPR.

Contact form, booking form and contact by e-mail

When you send us enquiries via our booking form or by e-mail, the information you provide (including your first and last name, salutation, e-mail address and, where relevant, uploaded MRI files) is stored for the purpose of processing the enquiry and for follow-up questions. Providing an e-mail address is required in order for us to reply; providing your name and phone number is voluntary. We do not pass this data on to third parties without your consent. The legal basis for processing is our legitimate interest in answering your request pursuant to Art. 6 (1) lit. f GDPR, and Art. 6 (1) lit. b GDPR where your enquiry is aimed at the conclusion of a treatment contract. Your data will be deleted once your enquiry has been fully dealt with, unless statutory retention obligations apply.

Video consultations and appointment booking

To provide video consultations we use Google Meet / Google Calendar. When you book an appointment, your name, e-mail address and requested time slot are stored so that we can generate the video call, send you the meeting link and remind you of the appointment. The legal basis is Art. 6 (1) lit. b GDPR (pre-contractual measures).

Data sharing and recipients

Your personal data is not shared with third parties unless we have explicitly indicated so, in particular:

  • if you have given your express consent under Art. 6 (1) lit. a GDPR,
  • if disclosure is necessary to assert, exercise or defend legal claims under Art. 6 (1) lit. f GDPR,
  • if there is a legal obligation to disclose under Art. 6 (1) lit. c GDPR, or
  • if this is required for the performance of a contract with you under Art. 6 (1) lit. b GDPR.

We also use carefully selected external service providers to operate our services (e.g. web hosting, e-mail delivery, IT maintenance). Where required, we have concluded data-processing agreements pursuant to Art. 28 GDPR. These service providers do not pass the data on to third parties.

Data security

In accordance with Art. 32 GDPR, we implement appropriate technical and organisational measures to ensure a level of protection appropriate to the risk. This website uses SSL/TLS encryption to protect the transmission of confidential content.

Retention period

The duration for which personal data is stored is based on the applicable statutory retention periods (e.g. under commercial and tax law). After the relevant period expires, the corresponding data is routinely deleted, provided it is no longer required for contract performance or contract initiation, or where you have exercised your right of revocation or objection.

Your rights

Under the GDPR you have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent at any time (Art. 7 (3) GDPR)
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise these rights, or to withdraw a previously given consent, an e-mail to info@rolf-krebs.de is sufficient.

Right to object

Where your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) lit. f GDPR, you have the right under Art. 21 GDPR to object to the processing of your personal data on grounds arising from your particular situation. Where the objection is directed against the processing of personal data for direct marketing purposes, you have a general right to object without needing to state a specific situation.

Changes to this policy

We reserve the right to adjust or update this privacy policy where necessary, in compliance with applicable data protection regulations, in order to reflect legal requirements or changes to our services. The most recent version applies to your visit.

Original German version originally created via datenschutzexperte.de.