Privacy Policy
This privacy notice has been translated from the german Datenschutzerklärung, where inconsistencies occur, the german version will take precedence.
This privacy notice for CARE VISION GERMANY GMBH describes how and why we might collect, store, use and/or share data information when patients and other persons use our services.
By submitting their personal data via website, by phone or by completing a web or printed form and, where applicable, ticking the relevant consent boxes, users expressly consent to the processing of personal data in accordance with the data protection provisions and for the purposes stated therein.
CARE VISION GERMANY GMBH (‘CARE VISION’) complies with the applicable data protection regulations, particularly the EU General Data Protection Regulation (GDPR) and other applicable laws.
Below you will find detailed information about the processing of personal data:
INFORMATION ON PERSONAL DATA PROTECTION
| Data Controller | CARE VISION GERMANY GMBH, Address: Friedrich-Ebert-Anlage 56, 60325 Frankfurt am Main Contact Data Protection Officer (DPO): datenschutz(at)care-vision.com. If your enquiry is addressed to another company of the Baviera Group*, your data will be processed by this company for the purpose of handling your enquiry and sending advertising information if you give your consent by ticking the box provided for this purpose. * COMPANIES OF THE BAVIERA GROUP: CARE VISION TRIER GMBH CLINICA BAVIERA, S.A. CLINICA BAVIERA ALICANTE, S.L. CLINICA BAVIERA CÓRDOBA, S.L. CLINICA BAVIERA MALLORCA, S.L. CLINICA BAVIERA SAN SEBASTIAN, S.L. CLINICA BAVIERA ZAPATEROS, S.L. |
| Purpose of the processing | The submitted data will be processed for the following purposes: Contact: to contact you and process your enquiries, information, suggestions or complaints. Online Appointment: to fulfil your appointment requests at one of our clinics. You will have the opportunity to complete a web form to expedite your registration as a patient at our clinics and to prove your identity. If you do not complete this form or do not provide the requested documents, admission and verification of your identity will be carried out during your visit to our facilities. If you complete this form and you or, where applicable, the minor for whom you have parental custody or guardianship, attend the requested medical appointment, this data will be included in your medical record and processed in order to provide you with the contracted medical services and treatment, as you will be informed during your visit to the clinic. Video Advice Session: to carry out a video advice session. You either arrange an appointment for a video advice session online or are contacted for this purpose. After scheduling an appointment, you will receive a confirmation email with a link to dial in for the video advice session and an SMS reminder. The data you provide during the video advice session, including health data, will be processed by CARE VISION to fulfil the medical services. The video advice sessions are accompanied and conducted by medical staff with medical expertise. In the event that you or the minor for whom you have custody or guardianship is already a patient of CARE VISION, the personal data that you provide to us or that our professionals collect or generate in the context of the corresponding video advice session, including your health data, will be included in your medical record or in that of said minor and processed in accordance with the information we provided to you when you registered as a patient at CARE VISION. Video Consultation: to carry out the agreed video consultation. You arrange an appointment for the video consultation. The video provider will send you the dial-in details for the video consultation, which you can use to enter the virtual waiting area. You will then be connected to the consultation by the specialist. The video consultation takes place as a TLS-encrypted peer-to-peer connection, i.e. directly between the participants without an intermediary server. The content of the chat and screen sharing is transmitted via a TLS-encrypted peer-to-peer connection and is not stored. The data you provide during the video consultation, including health data, is processed by CARE VISION to fulfil the medical services. Video consultations are offered for you or the minor for whom you have custody or guardianship as a current patient of CARE VISION. For this reason, the personal data that you provide to us or that our professionals collect or generate in the context of the corresponding video consultation, including your health data, will be included in your medical record or in that of the said minor and processed in accordance with the information that we provided to you when you registered as a patient with CARE VISION. Surgery Images: to capture images of intraocular surgical procedures, if necessary under medical aspects, to improve techniques and procedures, evaluate the quality of treatment and control possible complications after the procedure. Commercial Communication: to send you commercial information and advertising about the services offered by CARE VISION or the ‘Baviera Foundation’ through any means, including digital media. Work with us: to manage the recruitment process when you send your CV via the email address provided in the ‘Careers’ section. Other purposes: To analyse user behaviour and trends for statistical purposes, to analyse how the services we provide to users can be improved and to display advertising as specified in the cookie policy. Detection and investigation of fraud and other illegal activities and possible violations of our privacy policy, cookies and/or legal notice. |
| Legal basis | The legal basis for data processing is: Contact: the fulfilment of our contractual obligations as well as the protection of our legitimate interests, which consist primarily in contacting and communicating with you regarding the matters for which you have contacted us. In addition, your consent by voluntarily completing and sending the contact form. Online Appointment: the free consent given by you by voluntarily completing and sending the web form, as well as the legitimate interest in proving your identity or the identity of the minor for whom you have parental custody or guardianship. In the case of attendance at the requested medical appointment, the legal basis is the necessity for care or treatment. Video Advice Session: the free consent given by you by voluntarily completing and sending the form and by voluntarily participating in the video advice session. If you participate in the video advice session, the authorisation for the processing of the data is based on the performance of the contractual relationship and thus on compliance with all legal obligations arising for us from the contractual relationship with you. You confirm and guarantee that the data you provide is true and correct and that it corresponds to your current status or the current status of the child for whom you have custody or guardianship. Video Consultation: the declaration of consent prior to the start of the video consultation both towards CARE VISION and online when dialling in the access code to the video provider. The subsequent processing of personal data, including health data, during the video consultation is based on your consent and for the fulfilment of the medical services. Otherwise, it is based on our legitimate interest in enabling the use of the product. Surgery Images: the performance and fulfilment of the medical services. The data is pseudonymised. Commercial Communication: the consent obtained in the online area by clicking on the checkbox. If there has been a contractual relationship between you and CARE VISION in the past, the sending of commercial communications about identical or similar products or services serves the legitimate interest of the data controller (Recital 47, Sentence 7 GDPR). You can object to this processing at any time. Work with us: the implementation of pre-contractual measures to evaluate your potential employment. Statistical Data: the consent given when setting cookies. Detection and investigation of fraud and other illegal activities and possible violations of our privacy policy, cookies and/or imprint: the implementation of the contractual relationship as a user of the website. The personal data requested in the respective forms is absolutely necessary in order to process your enquiry, registration or participation, which means that we will not be able to process your enquiry, registration or participation appropriately if you do not provide it. Information on the cookies that are required for the operation of the website can be found in our Cookie Policy. |
| Processing period | Contact and Online Appointment: Personal data that is processed for the purpose of dealing with your enquiries about medical appointments, suggestions and complaints will only be stored for as long as is necessary to deal with your enquiry. Video Advice Session: If you have a video advice session with one of our professionals, we will keep your personal data until you visit one of our clinics so that the specialist who treats you there knows the reasons for your visit. If you or the minor for whom you have custody or guardianship are already a patient of CARE VISION, we will keep the personal data that will become part of your medical record or that of the minor for the period for which we are obliged to do so under current legislation on health matters. If you do not attend our clinics, your data will be kept for a period of three months. Video Consultation: If you conduct a video consultation with one of our professionals, you or the minor for whom you have custody or guardianship are already a patient of CARE VISION. We will retain the personal data that becomes part of your medical record or that of the minor for the period for which we are required to do so under applicable healthcare law. Surgery Images: The images are stored pseudonymised for three months. Commercial Communication: The data for sending commercial communications will be processed until you withdraw your consent or object to this processing. Work with us: The data from your CV will be stored for six months. You can view our Cookie Policy to check the validity of individual cookies. Data may be stored beyond the specified period in the event of an (impending) legal dispute with you or other legal proceedings or if storage is prescribed by statutory provisions to which we are subject as the data controller (e.g. § 257 HGB, § 147 AO). If the storage period prescribed by the statutory provisions expires, your personal data will be deleted. |
| Data transfer to third parties | Video Advice Session: The video advice sessions are provided through Vonage API, so Vonage Holdings Corp. as the owner of this tool may have access to the personal data provided during the video advice session involving you or the minor for whom you have custody or guardianship as a result of the services contracted with CARE VISION. Vonage Holdings Corp. is a company based in the United States, which in turn has contracted service providers outside the European Economic Area, resulting in an international transfer of such data. Such international transfers are made with appropriate safeguards and Vonage Holdings Corp. has signed the appropriate standard contractual clauses. CARE VISION will not be responsible for the processing of any other data that Vonage Holdings Corp. collects directly as a result of your use of Vonage API, provided that the services commissioned by CARE VISION to provide the video advice service to you do not require any further processing by Vonage Holdings Corp. other than that necessary to provide the video advice service. You can view the Data Processing Addendum of Vonage Holdings Corp. at Data Processing Addendum | Vonage. Video Consultation: The video consultation is offered by CompuGroup Medical Deutschland AG. If the access code for a video consultation is sent to you by email, the email address will be transmitted to a CompuGroup Medical Deutschland AG server. The email address will then be deleted immediately. To set up the video consultation with the product, your IP address is transmitted to a CompuGroup Medical Deutschland AG server and anonymised. During a video consultation, your name and access code are transmitted to a CompuGroup Medical Deutschland AG server. If the whiteboard is used by you or the specialist during the video consultation, the uploaded files are stored temporarily and encrypted on a CompuGroup Medical Deutschland AG server. The files will be deleted at the end of the video consultation. CARE VISION uses the services of Salesforce and the ‘Online Services for Business’ of Microsoft Corporation with tools such as Office 365, whereby such use constitutes an international data transfer to the United States or another country in which Microsoft or Salesforce or their subcontractors operate and is subject to the Standard Contractual Clauses of 2021. You can view the contract signed with Microsoft at https://www.microsoft.com/licensing/docs/documents/download/MicrosoftProductandServicesDPA(WW)(German)(Jan022024)(CR).docx. The website uses cookies for analytical and advertising purposes, the acceptance of which involves the international transfer of data to the United States, which does not offer a level of protection comparable to that of the European Union. |
| Rights of data subjects | You have the right to revoke your declaration of consent at any time and to exercise your rights to information, correction, deletion, objection, transferability and restriction. To do so, please submit a written request to the legal department of Care Vision Germany GmbH, Friedrich-Ebert-Anlage 56, 60325 Frankfurt am Main or to datenschutz(at)care-vision.com. You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us. |
We take the necessary technical and organisational measures to protect personal data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. In this context, the state of the art, the type of data and the risks to which it is exposed are considered.
The website is equipped with the SSL certificate (Secure Socket Layer), which guarantees the security of data transmission between your browser and our website.
The secure server establishes a connection so that the information is transmitted in encrypted form and can only be understood by the user’s end device and the website. Therefore, the use of the SSL protocol guarantees the following:
- The user transmits their data to the website’s server centre and not to another.
- The data between the user and the website is transmitted in encrypted form so that it cannot be read or manipulated by third parties.
To check whether you are in a safe environment:
- Make sure that the address of the page begins with https://.
- Check that a padlock symbol appears in the address bar of your browser.
- Check that the SSL certificate is present by checking the website properties in your browser.
Any changes to the Privacy Policy and information management practices will be announced in due time and the Privacy Policy may be amended, modified or deleted as necessary.
Under no circumstances may measures or practices that reduce the effectiveness of the protection of personal data be changed without the prior consent of the data subjects.
Last updated: 27th March 2025