Data protection declaration of the GPR Group

in accordance with §§ 12 ff of the European General Data Protection Regulation (GDPR)

As of January 2023

 

Privacy Policy

The following Privacy Policy describes the data protection measures of the GPR Academy for Continuing Education and Training at the GPR Clinic in Rüsselsheim and explains how we process your personal data.

 

Who is responsible for data processing?

Gesundheits- und Pflegezentrum Rüsselsheim gemeinnützige GmbH
August-Bebel-Straße 59
65428 Rüsselsheim am Main
Phone: 06142 88-0

You can reach our company data protection officer:
Ms. Ute Soffel
Phone: 06142 88-1563
Email: datenschutz@~@gp-ruesselsheim.de

 

What data do we process, and from which sources does it come?

Your master data consists of:

  • Personal and business address data
  • Personal and business phone and fax numbers as well as email addresses
  • Your academic title
  • Your medical specialty and/or professional title
  • Name of your employer, e.g., hospital or pharmacy name
  • Your contact hours
  • Your preference regarding the communication channel through which you can be reached
  • Bank details (unless cash payment has been agreed upon)

We require your personal information to process:

  • Event concepts (these include, for example, factual information such as travel options or other obligations of the speaker)
  • Cost estimates
  • for drafting contracts, e.g., for speakers or room rental agreements
  • Payment transactions
     

On what legal basis and for what purpose do we process your data?

We process the personal data described above in accordance with legal provisions, in particular those of the Hessian Data Protection and Freedom of Information Act (HDSIG).

A) To fulfill our contractual obligations to you and to provide our agreed-upon services.

B) To comply with legal requirements, including data for fulfilling sample requests and master data for compliance purposes in the context of combating crime, fraud, and corruption.

C) Based on your previously given consent (master and contract data) as well as information for the purpose of contacting you for advertising purposes. To achieve these purposes, we process the aforementioned data in particular in the context of the following activities: to provide information, to invite you to and organize regional and national events, to send personalized emails, and to contact you by phone, email, fax, and in person.

 

Are you required to provide personal data?

You are under no obligation to provide us with data for free events or events paid for in cash. However, by doing so, you waive your right to receive application information.

 

How long do we store your data?

We process and store your data for as long as necessary to fulfill our contractual and legal obligations. If the data is no longer required for these purposes, it will be deleted no later than ten years after the event for participants/speakers/lecturers/instructors, or ten years after the end of the employment relationship with GPR-Klinikum.

 

Do we share personal data, and with whom?

We may share your personal data on a case-by-case basis to document services provided in connection with events (working hours and qualifications) or for the purpose of reimbursing fees.

These are:

  • Chamber of Physicians, Pharmacists, and Midwives (depending on the event location/state)
  • Collection agency
  • Disease Management Centers (= DMP, of the health insurance companies)
  • Within the GPR: Human Resources, Accounting, Medical Technology, Department Heads, and the Academy for Continuing Education
  • KTQ-GmbH / Cooperation for Transparency and Quality in Healthcare GmbH
  • Hessen Hospital Association
  • AHA ®


Your Rights

You have the right to access the personal data concerning you. You may also request the correction of inaccurate data.
Furthermore, under certain conditions, you have the right to erasure of data, the right to restrict data processing, and the right to data portability.

You also have the right to lodge a complaint with the competent data protection supervisory authority if you believe that the processing of your personal data is not lawful.

Details of the supervisory authority responsible for us:

The Hessian Commissioner for Data Protection and Freedom of Information
P.O. Box 3163
65021 Wiesbaden
Phone: 0611 1408-0