Controller responsible for data processing

CARE VISION GERMANY GMBH, 

Postal address: Friedrich-Ebert-Anlage 56, 60325 Frankfurt am Main 

Contact Data Protection Officer (DPO):;

datenschutz@care-vision.com

If your enquiry is directed to another company of the Baviera Group*, your data will be processed by that company for the purpose of handling your enquiry as well as for sending promotional information if you give your consent by ticking the box provided for this purpose. 

* COMPANIES OF THE BAVIERA GROUP:

CARE VISION TRIER GMBH

CLINICA BAVIERA, S.A.

CLINICA BAVIERA ALICANTE, S.L.

CLINICA BAVIERA CÓRDOBA, S.L.

CLINICA BAVIERA MALLORCA, S.L.

CLINICA BAVIERA SAN SEBASTIAN, S.L.

CLINICA BAVIERA ZAPATEROS, S.L.

If you are considering treatment at the Trier location, we point out that here there is joint responsibility of the companies CARE VISION GERMANY GMBH, CARE VISON TRIER GMBH AND MVZ AUGENKLINIK PETRISBERG. You can view more detailed information here.

Purpose of processing

The data submitted is processed for the following purposes:

• Contact: to get in touch with you and to process your enquiries, information, suggestions or complaints.
• Online appointment booking: to fulfil your appointment requests at one of our clinics. You will have the option to complete a form that serves to speed up your registration as a patient at our clinics and to verify your identity. Should you not complete this form or not present the requested documents, the registration and verification of your identity will be carried out during your visit to our facilities. If you complete this form and you, or where applicable the minor for whom you have parental custody or guardianship, attend the requested medical appointment, this data will be included in your medical record and processed in order to provide you with the medical services and treatments agreed by contract, as you will be informed during your visit to the clinic. 
• Video consultation: to carry out an arranged video consultation. You arrange an appointment for a video consultation either online or are contacted for this purpose. After the appointment has been arranged, you will receive a confirmation email with a link through which you can dial in for the video consultation, as well as an SMS reminder. The data you provide during the video consultation, including health data, is processed by CARE VISION in order to fulfil your consultation. The video consultations are accompanied and carried out by clinic staff with clinical expertise. In the event that you or the minor for whom you have custody or guardianship are already a patient of CARE VISION, the personal data that you provide to us or that our specialists collect or generate in the context of the relevant video consultation, including your health data, will be included in your patient record or in that of the aforementioned minor and processed in accordance with the information we provided to you when you registered as a patient with CARE VISION.
• Video appointment: to carry out the arranged video appointment. You arrange an appointment for a video appointment. The video provider sends you the dial-in details for the video appointment, with which you can enter the virtual waiting area. Subsequently, you will be connected to the appointment by the advising specialist. The video appointment takes place as a TLS-encrypted peer-to-peer connection, i.e. directly between the participants without an intermediary server. The content of the chat and screen sharing is transmitted via a TLS-encrypted peer-to-peer connection and is not stored. The data you provide during the video appointment, including health data, is processed by CARE VISION in order to fulfil the treatment contract. Video appointments are offered to you or the minor for whom you have custody or guardianship as an existing patient of CARE VISION. For this reason, the personal data that you provide to us or that our specialists collect or generate in the context of the relevant video consultation, including your health data, will be included in your patient record or in that of the aforementioned minor and processed in accordance with the information we provided to you when you registered as a patient with CARE VISION.
• Surgery images: to capture, where applicable and from a medical point of view, images of intraocular surgical procedures in order to improve techniques and procedures, to assess the quality of treatment and to monitor possible complications after the procedure.
• Sending commercial communications: to send you, by any means including digital media, commercial information and advertising about the services offered by CARE VISION or the “Baviera Foundation” as controllers.
• Work with us: to manage the personnel selection process when you send your CV via the email addresses provided in the “Careers” section. 
• Other purposes: 

• Statistical purposes to analyse user behaviour and trends as well as to analyse how the services we offer to users can be improved, and to display advertising, as indicated in the Cookie Policy. 
• Detection and investigation of fraud as well as other illegal activities and possible breaches of our data protection provisions, cookies and/or legal notice. 

Legal bases for legitimisation 

The basis for the data processing is:

• Contact: the fulfilment of our contractual obligations or the safeguarding of our legitimate interests, which consist in particular of getting in touch with you and communicating regarding the respective matters on account of which you contacted us. In addition, your consent, given by voluntarily completing and submitting the contact form.
• Online appointment booking: the consent voluntarily given by you, which is provided when voluntarily completing and submitting the form, as well as the legitimate interest in verifying your identity or the identity of the minor for whom you have parental custody or guardianship. In the case of attendance at the desired medical appointment, the legal basis lies in the necessity for the provision of care or treatment.
• Video consultation: the consent voluntarily given by you when voluntarily completing and submitting the form and when voluntarily participating in the video consultation. In the case of participation in the video consultation, the legitimacy for the processing of the data is based on the performance of the contractual relationship and thus on compliance with all legal obligations arising for us from the contractual relationship with you. You confirm and warrant that the data you provide is truthful and correct and that it corresponds to your current status or to the current status of the child for whom you have custody or guardianship.
• Video appointment: the declaration of consent given before the start of the video appointment for carrying out the video appointment and processing your personal data, both towards CARE VISION and online when dialling in with the access data towards the video service provider. The subsequent processing of the personal data, including health data, during the video consultation is based on your consent and on the fulfilment of the treatment contract. Otherwise, it is based on the legitimate interest in enabling the use of the product. 
• Surgery images: the performance and fulfilment of the treatment contract. The data is exclusively pseudonymised.
• Sending commercial communications: the consent obtained in the online area by clicking a check box. Insofar as a contractual relationship has existed between you and CARE VISION in the past, the sending of commercial communications about identical or similar products or services serves the legitimate interest of the controller (Recital 47, sentence 7 GDPR). You may object to this processing at any time. 

• Work with us: the carrying out of pre-contractual measures to assess your potential employment.
• Statistical purposes: the consent given when cookies are set.
• Detection and investigation of fraud as well as other illegal activities and possible breaches of our data protection provisions, cookies and/or legal notice: the performance of the contractual relationship as a user of the website.

Storage period

• Contact and online appointment booking: Personal data processed for the purpose of handling your enquiries regarding medical appointments, suggestions and complaints is only processed for as long as is necessary to handle the enquiry. 
• Video consultation: If you carry out a video consultation with one of our specialists, we retain your personal data until you visit one of our clinics, so that the medical specialist who treats you there knows the reasons for your visit. In the event that you or the minor for whom you have custody or guardianship are already a patient of CARE VISION, we retain the personal data that becomes part of your patient record or that of the minor for the period for which we are obliged to do so under the applicable laws on health matters. If you do not visit our clinics, your data will be retained for a period of three months.
• Video appointment: If you carry out a video appointment with one of our specialists, you or the minor for whom you have custody or guardianship are already a patient of CARE VISION. We retain the personal data that becomes part of your patient record or that of the minor for the period for which we are obliged to do so under the applicable laws on health matters. 
• Surgery images: The images are stored in pseudonymised form for three months. 
• Sending commercial communications: The data for sending commercial communications is processed until you withdraw your consent or object to this processing.
• Work with us: The data from your CV is retained for six months. 

You can consult our Cookie Policy to check the validity of the individual cookies. 

Storage may take place beyond the specified period in the event of a (threatened) legal dispute with you or other legal proceedings, or where storage is provided for by legal provisions to which we are subject as controller (e.g. Section 257 HGB, Section 147 AO). When the storage period prescribed by the legal provisions expires, your personal data will be destroyed.

Disclosure of data to third parties

• Video consultation: The video consultations are carried out via Vonage API, so that Vonage Holdings Corp., as the owner of this tool, may have access to the personal data provided in the context of the video consultation in which you or the minor for whom you have custody or guardianship are involved, as a result of the services that CARE VISION has agreed with you. Vonage Holdings Corp. is a company based in the United States which in turn has contracted service providers outside the European Economic Area, so that an international transfer of such data occurs. Such international transfers take place in compliance with appropriate safeguards, and Vonage Holdings Corp. has signed the corresponding standard contractual clauses. CARE VISION assumes no responsibility for the processing of the remaining data that Vonage Holdings Corp. collects directly as a result of your use of Vonage API, provided that the services commissioned by CARE VISION to provide the video consultation service to you do not require any further processing by Vonage Holdings Corp. than that which is necessary to carry out the video consultation. You can view the Vonage Holdings Corp. data processing addenda at Data Processing Addendum | Vonage. 
• Video appointment: The video appointment is provided by CompuGroup Medical Deutschland AG. If the access code for a video appointment is sent to you by email, the email address is transmitted to a server of CompuGroup Medical Deutschland AG. The email address is then deleted immediately. To establish the video appointment with the product, your IP address is transmitted to a server of CompuGroup Medical Deutschland AG and anonymised. During a video appointment, your name and access code are transmitted to a server of CompuGroup Medical Deutschland AG. Insofar as the whiteboard is used by you or the advising specialist during the video appointment, the uploaded files are stored temporarily and in encrypted form on a server of CompuGroup Medical Deutschland AG. After the video appointment has ended, the files are deleted.

CARE VISION uses the services of Salesforce and the “Online Services for Business” of Microsoft Corporation with tools such as Office 365, whereby such use constitutes an international data transfer to the United States or another country in which Microsoft or Salesforce or their subprocessors operate, and is subject to the 2021 standard contractual clauses. You can view the contract signed with Microsoft at https://www.microsoft.com/licensing/docs/documents/download/MicrosoftProductandServicesDPA(WW)(German)(Jan022024)(CR).docx. 

The website uses cookies for analysis and advertising purposes, the acceptance of which involves the international transfer of data to the United States, which does not offer a level of protection comparable to that of the European Union.

Rights of the data subjects

You have the right to withdraw the consent given at any time with effect for the future, as well as to exercise your rights to access, rectification, erasure, objection, portability and restriction. To do so, please contact the legal department of Care Vision Germany GmbH, Friedrich-Ebert-Anlage 56, 60325 Frankfurt am Main, or datenschutz@care-vision.com in writing. You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data by us.