The Wicker Group considers the protection of your privacy when processing personal data as well as the security of all business data an important concern that we take into account in our business processes. In the following data protection declaration we would like to inform you in detail about how we handle your data.
Responsible according to Art. 4 para. 7 EU data protection basic regulation (GDPR)
Habichtswald-Klinik
Werner Wilhelm Wicker GmbH & Co. KG
Wigandstr. 1
34131 Kassel
Fon: 0561 3108-0
Fax: 0561 3108-858
Data protection officer of the responsible person
Dr. Ralf W. Schadowski
E-mail: datenschutz@wicker.de
- 1 Legal basis for the processing of personal data
(1) Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 para. 1 letter a EU Data Protection Basic Regulation (GDPR) serves as the legal basis.
(2) In the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 letter b GDPR serves as the legal basis. This also applies to processing operations which are necessary to carry out pre-contractual measures.
(3) Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 letter c GDPR serves as the legal basis.
(4) If the vital interests of the data subject or another natural person make it necessary to process personal data, Art. 6 para. 1 letter d GDPR serves as the legal basis.
(5) If the processing is necessary to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 letter f GDPR serves as the legal basis for the processing.
§ 2 Storage duration & data deletion
(1) The personal data of the person concerned will be deleted or blocked as soon as the purpose of the storage no longer applies.
(2) Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the person responsible is subject.
(3) The data will also be blocked or deleted when a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
§ 3 Information on the collection of personal data
(1) In the following, we provide information about the collection of personal data when visiting our website. Personal data are all data that can be related to you personally, i.e. name, address, e-mail address and user behaviour.
(2) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, your name and telephone number if applicable) will be stored by us in order to answer your questions. We delete the data arising in this connection after the storage is no longer necessary or restrict processing if there are legal storage obligations.
(3) If we use contracted service providers for individual functions of our offer or wish to use your data for advertising purposes, we will inform you in detail about the respective processes below. In doing so, we will also state the specified criteria for the storage period.
Collection of personal data when visiting our website
If you use the website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we will only collect the personal data that your browser sends to our server with your prior consent. If you wish to visit our website, we collect the following data, which is technically necessary for us to display our website and to ensure its stability and security (the legal basis for this is Art. 6 para. 1 letter f GDPR):
- IP-adress
- Host name
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (concrete page)
- Access status/HTTP status code
- Amount of data transmitted in each case
- Website from which the request comes (referrer)
- The specific pages of our website that you call up
- Browser: Type, version and set language
- Operating system: type and version
- With JavaScript enabled as well:
▪ Screen resolution
▪ Colour depth
▪ Size of the browser window
▪ Installed browser plug-ins
Use of cookies
(1) In addition to the above-mentioned data and after your appropriate consent (Art. 6 para. 1 letter a), cookies are also stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive in accordance with the browser you are using and through which certain information flows to the site that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer. They are used to make the website more user-friendly and effective overall.
(2) This website uses the following types of cookies, the scope and function of which are explained below:
• Transient cookies (in addition a)
• Persistent cookies (in addition b)
• Flash-Cookies (in addition e)
a) Transient cookies are automatically deleted when you close the browser. This includes in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. This enables your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.
b) Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
c) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. So-called “third party cookies” are cookies set by a third party, i.e. not by the actual website on which you are currently located. Please note that you may not be able to use all functions of this website.
d) We use cookies to identify you for subsequent visits if you have an account with us. Otherwise you would have to log in again for each visit.
e) The Flash cookies used are not registered by your browser, but by your Flash plug-in. Furthermore we use HTML5 storage objects, which are stored on your end device. These objects store the required data independently of the browser you use and do not have an automatic expiry date.
§ 4 Further functions and offers of our website
(1) In addition to the informative use of our website, we offer various services which you can be used by your interest. For this purpose, you will generally have to provide additional personal data which we use to provide the respective service and to which the aforementioned data processing principles apply. Mandatory information is marked with an asterisk. Information in fields not marked in this way is purely voluntary.
(2) When you contact the service provider by e-mail or via the contact form, your e-mail address and, if you indicate this, your name, your telephone number and […] will be stored by us to answer your questions.
(3) In some cases we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are checked regularly.
(4) Furthermore, we may transmit your personal data to third parties if we offer campaigns, competitions, contract conclusions or similar services together with partners. You will receive more detailed information about this when you provide your personal data or in the description of the offer below.
(5) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the circumstance in the description of the offer.
§ 5 Rights of the data subject
In the following, we will inform you about your rights as a data subject in accordance with Art. 15 GDPR. You can exercise these rights at any time and therefore contact us directly. If you demand these rights from us, we will examine them in detail, taking into account the legal requirements and conditions associated with them. For this purpose, we may ask you for further information. We will explain to you in detail the results of our examination as well as our procedure for fulfilling your request. It is possible that we will not be able to fully comply with your wishes in the way you have requested.
This should not prevent you from asserting your rights against us, or from asking us about them. We will gladly answer all your questions.
(1) Right to information
You have the right to request information from us at any time as to whether and which data relating to your person are being processed by us. This also includes information on the purposes of processing, if applicable on recipients to whom we have disclosed data about you, the planned storage period and, if applicable, information on the origin of this data, unless we have collected it directly from you. In addition, you have the right to receive a one-time copy of your personal data stored with us free of charge. We reserve the right to charge a reasonable administration fee for making subsequent copies.
(2) Right to rectification
You have the right to demand that we correct any incorrect data we have stored about you. This also includes the right to have incomplete personal data completed.
(3) Right to Erasure
You have the right to demand that we delete any data we have stored about you. If we have published data about you, this also includes our obligation, within the framework of the “right to be forgotten” in accordance with Art. 17 para. 2 GDPR, to forward your request for deletion, taking into account available technology and implementation costs, all links to this data as well as copies or replications of this data concerning other persons responsible for processing this published personal data.
(4) Right to restrict processing
You have the right to demand that we restrict the processing of data that we have stored about you. After that, the processing of this data is only possible with your consent or for a few legally defined purposes.
(5) Right to object to processing
Insofar as we base the processing of your personal data on the weighing of interests, you can object to the processing. This is the case if the processing is in particular not necessary for the fulfilment of a contract with you, which is described by us in the following description of the functions. In the event of such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the facts of the case and will either stop or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.
Of course, you can object to the processing of your personal data for the purposes of advertising and data analysis at any time. You can inform us of your objection to advertising by using the above-mentioned contact channels.
(6) Right to revoke a data protection consent
If you have given your consent to process your data, you can revoke it at any time. Such revocation will affect the permissibility of processing your personal data after you have given it to us.
(7) Right to data portability
You have the right to receive from us data relating to you which you have provided to us in a structured, common and machine-readable format for the purpose of transfer to another responsible party. This includes, at your request and taking into account the available technical possibilities, the direct transfer from us to another responsible person.
(8) Right of appeal to a supervisory authority
You have the right to complain at any time to a data protection supervisory authority about our processing of data concerning your person.
(9) Automated decision making including profiling
You have the right to obtain information on the existence of automated decision-making, including profiling, in accordance with Art. 22 (1) and (4) GDPR and – at least in these cases – meaningful information about the logic involved and the scope and intended effects of such processing on the data subject.
§ 6 Web Analysis
The following web analysis tools are used to generate statistics in order to improve our offer and make it more interesting for you as a user. In accordance with Art. 6 para. 1 letter a GDPR, this requires consent to the processing of personal data, which can be revoked at any time. Without such consent, only cookies may be used which are absolutely necessary for the operation of our website. For data processing and transmission of personal data to the USA by Google, our company has entered into a data processing agreement with the service provider on the basis of the EU standard data protection clauses.
1. Use of Google Analytics
(1) This website uses Google Analytics, a web analysis service provided by Google Ireland Ltd. (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the use of cookies about your use of this website is usually transferred to a Google server in the USA and stored there. However, in the event that IP anonymisation is activated on this website, your IP-address will be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before this happens. Only in exceptional cases the full IP-address will be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator in connection within the visit of the website and the internet.
(2) The IP-address transmitted by your browser as part of Google Analytics is not merged with other data from Google.
(3) This website uses Google Analytics with the extension “anonymizeIp()”. This enables IP addresses to be further processed in a shortened form, thus excluding the possibility of personal references. If the data collected about you contains a personal reference, this is immediately excluded and the personal data is therefore deleted immediately.
(4) For the data processing and transfer of personal data to the USA by Google, our company has entered into a data processing agreement with the service provider based on the EU standard data protection clauses.
(5) Third Party Information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001 Terms of Use: www.google.com/analytics/terms/de.html Privacy Policy Overview: www.google.com/intl/de/analytics/learn/privacy.html Privacy Policy: www.google.de/intl/de/policies/privacy.
(6) This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under “My data”, “personal data”.
(7) As an alternative to the browser plugin or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent Google Analytics from collecting data within this website in the future (this opt-out cookie only works in this browser and only for this domain, if you delete your cookies in this browser, you will have to click this link again): Deactivate Google Analytics
§ 7 Social Media & Other Third Party Services
1. Integration of Google Maps
(1) On this website we use the offer of Google Maps. In this way, we are pursuing our interest in increasing the attractiveness of our website by displaying interactive maps directly on our website and enabling you to use the map function conveniently.
(2) By visiting the website and consenting to the processing of your personal data, Google receives the information that you have called up the corresponding subpage of our website. In addition, the data mentioned under § 5 of this declaration is transmitted. This is done regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in at Google, your data will be assigned directly to your account. If you do not wish to be assigned to your profile on Google, you must log out before activating the button. Google stores your data as user profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have a right of objection to the creation of these user profiles, whereby you must contact Google to exercise this right.
(3) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider’s data protection declarations. You can also find more information about your rights and privacy preferences there: Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland; www.google.de/intl/de/policies/privacy.
- Facebook Fanpage
(1) If you consent to the processing of your personal data in accordance with article 6 paragraph 1 letter a, personal data will be collected when you use our Facebook fan page. Some are also collected during an unannounced visit. More specifically, metadata (frequency, duration, location from which the “Like” information was provided, when users are online, which posts reach fans, which fans have interacted with posts to what extent, information about the device used), personal data (gender, age, place of residence, language and other demographic data) are obtained from Facebook. This personal data is used here for statistical purposes.
(2) As a user, you can exercise your rights under Art. 12 – 23 GDPR. Detailed explanations can be found in § 5, Rights of the data subject.
(3) Further information on Facebook’s data policy can be found at www.facebook.com/about/privacy/, as well as information on Insight data at www.facebook.com/legal/terms/information_about_page_insights_data
(4) According to article 26 GDPR, there is a joint responsibility between us and Facebook. This can be found in the form of a contract on www.facebook.com/legal/terms/page_controller_addendum.