Privacy Notice


Customize your cookies

You can customize your cookies here.

Thank you for visiting our website and for your interest in our company. Data protection is of particular importance to the German Heart Center Berlin. In the following, we provide you with some information on how we handle data, in particular personal data.


Responsible for data processing

The responsible party within the meaning of the General Data Protection Regulation (GDPR) is:

Deutsches Herzzentrum Berlin Stiftung bürgerlichen Rechts
Augustenburger Platz 1
13353 Berlin
Deutschland
Tel.: +49 30 4593 1498
E-Mail: webmaster@dhzb.de


Collection of personal data, purpose and legal basis of processing

It is generally possible to use the website of the Deutsches Herzzentrum Berlin without providing any personal data. However, if you wish to make use of special services, e.g. the contact form, it may be necessary to process personal data. The processing takes place either on a legal basis or as part of a consent that you have expressly given.

We process personal data in the following cases:

Data collected automatically when you visit our website

When you visit our website, data and technical information is automatically sent to our server. This involves the temporary storage of your computer's IP address, name and URL of the retrieved file, access status/HTTP status code, your computer's browser and other similar data and information that serve to avert danger in the event of attacks on our information technology systems, in so-called log files.

We collect and use this information to correctly deliver the contents of our website, to optimize the contents of our website and the advertising for it, to ensure the long-term functionality of our information technology systems and the technology of our website and to provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber attack.

The legal basis for temporary storage is Art. 6 para. 1 lit. f GDPR. Our legitimate interest follows from the aforementioned purposes. Under no circumstances will this data be used to draw conclusions about your person. This data is not stored together with other personal data.

Newsletter

We use your e-mail address to send you our newsletter on a regular basis, if you so wish. To receive the newsletter, you must provide an e-mail address.
The purpose of the processing is to send you our newsletter.

The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. a GDPR. Consent can be revoked at any time with effect for the future. The revocation can be made, for example, via a link at the end of each newsletter.

Your data will be deleted as soon as you unsubscribe from the newsletter and thus revoke your consent.

Contact form

We offer you the opportunity to contact us via a form provided on the website. You must provide a valid e-mail address, your name, your address and your telephone number. You must also specify the subject of your enquiry. We need this information so that we can trace who sent the enquiry and respond to it. Further information can be provided voluntarily.

Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time with effect for the future.

Cookies

You can find more information on cookies under the separate section "Cookies".

Application for educational programmes

You can apply directly for specific educational programmes via the website. The application is made via a broad-based form in which you can enter all the information we need to consider your application.

We process information on your name, gender, address, e-mail address and details of your application documents, which you can make available to us via an upload function. You can also voluntarily provide further information.

We transmit your data to our partner institutions with which we offer the educational programmes. These are in particular Charité-Universitätsmedizin Berlin, Deutsches Herzzentrum der Charité (DHZC) Charitéplatz 1, 10117 Berlin.

The purpose of the processing is to consider your application for the allocation of places in educational programmes and your participation in these programmes.

The legal basis for the processing is Art. 6 para. 1 lit. b GDPR. The processing of the above-mentioned data is necessary for the initiation of the contract and the implementation of the educational programme. In addition, the processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR, insofar as it concerns data that is not directly required for the initiation of the contract and implementation of the educational programme. Consent can be withdrawn at any time with effect for the future.


Utilisation and disclosure of personal data

Insofar as data is passed on to external service providers as part of order processing, we comply with the provisions of Art. 28 GDPR.

If data is transferred to the USA or another country that does not have an equivalent level of data protection, we would like to point out that there is a theoretical risk that your data may be processed by US authorities for control and monitoring purposes without you possibly having any legal recourse.

We only pass on your personal data to third parties if

  • you have given your express consent in accordance with Art. 6 para. 1 lit. a GDPR,
  • the disclosure pursuant to Art. 6 para. 1 lit. f GDPR is necessary for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
  • in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 lit. c GDPR, and
  • if this is necessary for the fulfilment of contractual relationships with you in accordance with Art. 6 para. 1 lit. b GDPR.

Cookies

The Internet pages of the German Heart Centre Berlin use cookies.

Cookies are text files that are stored locally in the cache of your Internet browser. The next time you visit our website with the same device, the information stored in cookies is subsequently sent back. Through the stored and returned information, the respective website recognises that you have already accessed and visited it with the browser of your end device. Only the cookie itself is identified on your end device. Any further storage of personal data only takes place with your express consent or if this is absolutely necessary in order to be able to use the service offered and accessed by you accordingly.

Most browsers are set to accept cookies automatically. However, you can deactivate the storage of cookies or set your browser to notify you as soon as cookies are sent.

Use of technically necessary cookies

Technically necessary cookies guarantee functions without which you cannot use our website as we intended. We use such cookies for our cookie banner and for your login in the backend.

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. e GDPR.

The use of technical cookies on our website is therefore possible without your consent. For this reason, technical cookies cannot be individually deactivated or activated. However, you have the option of generally deactivating cookies in your browser at any time.

Use of Matomo

We have integrated "Matomo" on our website, which we use to analyse data about the behaviour of visitors to websites. Web analysis is mainly used to optimise a website and to analyse the cost-benefit of internet advertising. Among other things, we use the data and information obtained to analyse the use of this website in order to compile online reports showing the activities on our website.

The software is operated on our server and the log files are stored exclusively on this server.

Matomo places a cookie on your computer. By setting the cookie, we are able to analyse the use of our website. Each time you access one of the individual pages of this website, the internet browser on your computer is automatically prompted by the Matomo component to transmit data to our server for the purpose of online analysis. As part of this technical process, we obtain knowledge of personal data, such as the IP address, which we use, among other things, to trace the origin of visitors and clicks.

Cookies are used to store personal information, such as the access time, the location from which access was made and the frequency of visits to our website. Each time you visit our website, this personal data, including the IP address of the Internet connection used by the data subject, is transmitted to our server. This personal data is stored by us. We do not pass this personal data on to third parties.

Further information and the applicable data protection provisions of Matomo can be found at matomo.org/privacy/.

The legal basis for the processing of personal data using Matomo is Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time with effect for the future.

Google Tag Manager

This website uses Google Tag Manager. This service allows website tags to be managed via an interface. The Google Tool Manager only implements tags. This means that no cookies are used and no personal data is collected. The Google Tool Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, it remains in place for all tracking tags, provided they are implemented with the Google Tag Manager.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc (Google). Google Analytics uses cookies that enable your use of the website to be analysed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

However, if IP anonymisation is activated on this website, your IP address will first be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. IP anonymisation is active on this website. Google will use this information on behalf of the operator of this website to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you disable cookies you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at the following link:

Further information on terms of use and data protection can be found at https://www.google.com/analytics/terms/de.html and https://www.google.com/intl/de/analytics/privacyoverview.html.

IP anonymisation

We have activated the IP anonymisation function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.

On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Youtube

We have integrated videos via the provider YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) into our online offer, which are stored on YouTube and can be played directly from our website to improve user-friendliness and the presentation of various content.

The videos are only displayed and cannot be played until you have set the cookie accordingly and thus given your consent. When you play the videos, your data is transferred to YouTube. We have no influence on this data transfer.

The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. a GDPR.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy.


Social Media

On our website, we link to social media providers by means of corresponding clickable buttons. In order to prevent your usage data (e.g. address of the page you are currently visiting) from being transferred to these services, you will only access the services by clicking on the button. These providers may collect usage and user data on the respective provider's website. We have no influence on the data collected and data processing procedures, nor do we have full knowledge of them. We therefore only provide information to the best of our knowledge:

Your browser may only establish a direct connection with the servers of the aforementioned providers when you access the links. As a result, the information that you have visited our website is indirectly forwarded to these providers. If you are registered with the provider and logged in, you can perform actions that involve the processing of personal data (e.g. commenting, sharing) within the scope of the service's capabilities.

Further information on the purpose and scope of data collection and its processing by the provider can be found in the data protection declarations of these providers provided below. There you will also find further information on your rights in this regard and setting options to protect your privacy.

Addresses of the respective providers and URLs with their data protection notices can be found below:

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL (Secure Socket Layer) encryption. This means that data that you transmit via this website cannot be read by third parties. You can recognise an encrypted connection by the "https://" address line of your browser and the lock symbol in the browser line.

We have also implemented technical and organisational measures to ensure that the personal data processed via this website is protected as completely as possible. Nevertheless, Internet-based data transmissions can generally have security gaps, meaning that absolute protection cannot be guaranteed.
You should generally keep personal and confidential data (e.g. relating to your health) secret and therefore not send it to us by e-mail. We expressly point out that security cannot be guaranteed for data transmission on the Internet, such as communication by e-mail, which means that unauthorised access by third parties cannot be ruled out with certainty. For this reason, every data subject is free to transmit personal data to us by alternative means, for example by telephone.

Deletion and storage duration

Unless otherwise specified in the context of a specific processing activity, personal data of data subjects will be deleted as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be deleted if a storage period prescribed by the aforementioned standards expires and the further storage of the data is not necessary for the conclusion or fulfilment of a contract.

Your rights as a data subject

In accordance with Article 15 GDPR, you have the right to request information from us about the personal data concerning you that we process. You also have the right to receive the information specified in Article 15 (1) GDPR and to receive copies.

You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and the completion of incomplete personal data in accordance with Article 16 GDPR.
You have the right to request the erasure of personal data concerning you without undue delay in accordance with Article 17 GDPR.

In accordance with Article 18 GDPR, you have the right to request the restriction of the processing of personal data concerning you if one of the conditions of Article 18 (1) GDPR is met. In this case, we may continue to store this data, but may only process it beyond this under strict conditions.

In accordance with Article 20 GDPR, you may request to receive the personal data you have provided to us, which we process by automated means on the basis of the contract between us or your consent, in a structured, commonly used and machine-readable format. We are prohibited from preventing you from transferring this data to another controller.
You can withdraw your consent to the processing of your personal data at any time. Please note that the revocation is only effective for the future and does not affect the legality of the processing carried out on the basis of the consent until the revocation. A revocation can be sent, for example, to the contact details given in this notice.

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (processing for the purposes of the legitimate interests pursued by the controller or by a third party). If you would like to exercise your right of cancellation or objection, simply send an email to datenschutz@dhzb.de.

As a data subject, you have the right to lodge a complaint with a data protection supervisory authority pursuant to Article 77 GDPR, without prejudice to any other administrative or judicial remedy, if you consider that the processing of your personal data infringes the GDPR.


External links

The assurances of this data protection declaration naturally only apply to the website of the German Heart Centre Berlin and not to websites of third parties to which we have linked from our website. We have no influence on compliance with the statutory data protection regulations by these providers.


Any further questions?

If you have any further questions or suggestions regarding data protection in our company, please contact our data protection representative.

Data protection contact

Frau Dr. Andrea Kirsch
datenschutz@dhzb.de