Preamble

Virtual practice of Dr. Serhat Ucarer thanks you for visiting my website and for your interest in my online services. I take the protection and security of your personal data entrusted to me very seriously and want you to feel safe and comfortable when visiting my website and using my online services.
It is important to me that you know what personal data is collected when you make use of our offers and services and how we use it afterwards.

Definitions

The privacy policy of the virtual practice of Dr. Serhat Ucarer is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). My data protection declaration should be legible and understandable for the general public, my patients as well as my customers and business partners. To ensure this, I would like to explain the terms used in advance.
I use the following terms, among others, in this privacy policy:

Personal data:

Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Person concerned:

Data subject is any identified or identifiable natural person whose personal data is processed by the controller responsible for the processing.

Processing:

Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction (marking of stored personal data with the aim of limiting their processing in the future), erasure or destruction.

Profiling:

Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.

Pseudonymization:

Pseudonymization is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

Controller or controller responsible for the processing:

Controller or controller responsible for the processing is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
Processor:
Processor:

Recipient:

Recipient is a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.

Third:

Third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

Consent:

Consent is any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

Purpose of the data processing

Virtual practice of Dr. Serhat Ucarer is an online medical service. As far as I know Virtual practice of Dr. Serhat Ucarer personal data is processed, this is done for the purposes specified in this privacy policy.

Processing of personal data

Personal data is collected for consultation and treatment purposes and forms the basis of the medical consultation contract. Apart from name, address, date of birth, previous illnesses and consultation requests, no other personal data is collected.
Personal data is also processed if you provide it to me voluntarily. The legal basis in this respect is Art. 6 para. 1 letter "b" GDPR. The data processed by me in this respect includes patient data, employee data and data from suppliers, insofar as this is necessary for the purposes stated in this privacy policy.
Insofar as I process your data for the purposes of your respective treatment, as described above, you are contractually obliged to provide me with this data. In particular, the transfer of data to the cancer registry is required by law. Without this data, we will not be able to provide appropriate treatment.
If you have consented to the processing of personal data (cf. Art. 6 para. 1 letter "a" GDPR), you can revoke your consent for future processing at any time without giving reasons in writing, by telephone or by e-mail, without affecting the legality of the processing carried out on the basis of the consent until revocation.
Disclosure to third parties
The transfer of data to processors takes place on the basis of Art. 28 para. 1 GDPR. In particular, the transfer of data for laboratory evaluations, X-ray, MRI or CT examinations and also to other doctors or psychotherapists (e.g. in the form of doctor's letters) is essential. However, you will be informed in advance if the data is passed on to third parties.
We do not sell your data to third parties, nor do we market it in any other way.
In addition, your personal data will be forwarded to the law enforcement authorities without your express consent if this is necessary to clarify any unlawful use of our services or for legal prosecution. However, this only happens if there are concrete indications of unlawful or abusive behavior. Disclosure may also take place if this serves to enforce terms of use or other agreements and the person concerned has been released from their duty of confidentiality. We are also legally obliged to provide information to certain public authorities on request, provided that the relevant requirements are met. These are law enforcement authorities.

Planned data transfer to third countries

A transfer to third countries is currently not planned, otherwise the corresponding legal requirements will be created. In particular, you will be informed about the respective recipients or categories of recipients in accordance with the legal requirements.

Security

The Virtual practice of Dr. Serhat Ucarer uses technical and organizational security measures to protect the data you provide to me from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. This also applies when external services are used. The effectiveness of our security measures is reviewed and the measures are continuously improved in line with technological developments. When personal data is entered, it is always transmitted in highly encrypted form.
This data is passed on on the basis of the legitimate interest in combating misuse, prosecuting criminal offenses and securing, asserting and enforcing claims, provided that your rights and interests in the protection of your personal data do not prevail.
The website Virtual practice of Dr. Serhat Ucarer collects a series of general data and information each time the website is accessed by a data subject or an automated system. This general data and information is stored in the server log files.
The following are recorded:
- Browser type and version used
- the operating system used by the accessing system
- the website from which an accessing system reaches our website (the so-called referrer)
- the sub-websites that are accessed via an accessing system on our website
- the date and time of access to our website
- the IP address
- the Internet service provider of the accessing system

When collecting this general data and information, the Virtual practice of Dr. Serhat Ucarer no merging with other data of the data subject is initiated or carried out.
Rather, this information is required to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack. This anonymously collected data and information is processed by the Virtual practice of Dr. Serhat Ucarer
Therefore, I analyze anonymously collected data and information statistically, with the aim of increasing the data protection and data security of my online platform, and to ensure an optimal level of protection for the personal data we process. The anonymous data of the server log-in files are stored separately from all personal data provided by a natural person.

Standard deadlines for the deletion of data

The legislator has issued various retention periods and obligations. After these periods have expired, the corresponding data is routinely deleted. If data is not affected by this, it will be deleted or anonymized if the purposes stated in this privacy policy no longer apply. Unless this privacy policy contains other, deviating provisions regarding the storage of data, the data collected by us will be stored by us for as long as it is required for the aforementioned purposes for which it was collected.

Other data uses and data deletion

Further processing or use of your personal data will generally only take place if this is permitted by law or if you have consented to the data processing or use. In the event of further processing for purposes other than those for which the data was originally collected, we will inform you of these other purposes prior to further processing and provide you with further relevant information.

Automated decisions in individual cases including profiling

I as a responsible doctor, completely refrain from automated decisions or profiling

Rights regarding the processing of personal data

Right to information
You have the right to request information from me at any time about the personal data processed by us concerning you within the scope of Art. 15 GDPR. To do so, you can send a request by post to the addresses given below.

Right to rectification of inaccurate data

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you (Art. 16 GDPR). To do so, please use the contact addresses below.

Right to erasure

You have the right to immediate erasure ("right to be forgotten") of personal data concerning you if the legal grounds pursuant to Art. 17 GDPR apply. These exist, for example, if the personal data are no longer necessary for the purposes for which they were originally processed or if you have withdrawn your consent and there is no other legal basis for the processing; the data subject objects to the processing (and there are no overriding reasons for processing). To exercise your above right, please contact us at the addresses below.

Right to restriction of processing

You have a right to restriction of processing if the conditions are met and in accordance with Art. 18 GDPR. According to this, the restriction of processing may be required in particular if the processing is unlawful and the data subject refuses to delete the personal data and instead requests the restriction of the use of the personal data or the data subject has objected to the processing pursuant to Art. 21 para. 1 GDPR, as long as it is not yet clear whether our legitimate reasons outweigh theirs. To assert your aforementioned right, please contact us at the addresses given below.

Right to data portability

You have a right to data portability in accordance with Art. 20 GDPR. You have the right to receive the data concerning you, which you have provided to us, in a commonly used, structured and machine-readable format and to transmit those data to another controller, such as another service provider. The prerequisite for this is that the processing is based on consent or on a contract and is carried out using automated procedures. To exercise the above right, please contact us at the addresses given below.

Right of objection

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based, inter alia, on point (e) or (f) of Article 6(1) GDPR pursuant to Article 21 GDPR. We will stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims. To assert your aforementioned right, please contact us at the addresses given below.

Right to lodge a complaint with a supervisory authority

If you believe that the processing of personal data concerning you by us is unlawful, you have the right to lodge a complaint with the supervisory authority responsible for us, which you can contact as follows:

Independent Data Protection Center Saarland

Fritz-Dobitsch-Straße 12
66111 Saarbrücken
Phone: +49 (0) 681 947810
Fax: +49 (0) 681 94781-29
Email: poststelle@datenschutz.saarland.de

Data Protection Officer
If you have any further questions regarding the processing of your personal data, you can contact our data protection officer directly, who is also available in the event of requests for information, applications or complaints:
Maria Stoll
Karlsbergstrasse 140 A
66424 Homburg
Phone: +49 1719982451
E-mail: info@stoll.de

Contact details of the person responsible

Virtual practice of Dr. Serhat Ucarer

Dr. Serhat Ucarer
Siebenbürgenstraße 19; 66424 Homburg
Phone (mobile): +491753328638
E-mail: ucarerserhat@gmail.com

Status: March 2024