Privacy policy

The University Hospital Carl Gustav Carus operates Internet pages for the purpose of providing information, in particular for patients, their relatives, referring physicians, scientists and students as well as all other Internet users. The website is intended to facilitate access to helpful information about the University Hospital Carl Gustav Carus, regardless of time, place and structure.

As an institution under public law, the Carl Gustav Carus University Hospital is subject to the provisions of the Saxon state data protection laws as well as the relevant statutory provisions for the protection of natural persons when processing personal data.

In the following, we provide information on the processing of personal data when using our website.

General information on the processing of personal data
Personal data is all data that can be related to you personally, e.g. name, address, email addresses, user behaviour. The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is the Executive Board named in the legal notice. You can contact our data protection officer by e-mail and at our postal address with the addition ‘to the data protection officer’. If you are given the opportunity to enter data on the website, this data is disclosed on an expressly voluntary basis.

Processing of personal data when visiting our website
When using the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. This serves the purpose of identifying and tracking unauthorised access attempts and access to the web server. Relevant access data is stored for this purpose and used - in anonymised form - to optimise the website. Access profiles are not created. The log data record contains the following information, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):

IP address of the requesting computer
Date and time of the request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status/HTTP status code
Amount of data transferred in each case
Website from which the request comes (URL from which the file was requested/the desired function was initiated)
Browser identification
Language and version of the browser software.
Access method requested by the requesting computer/input values transmitted by the requesting computer (e.g. file name)

The logged data is stored for a period of 7 days and then deleted, unless a recognised web attack leads to the attacker being prosecuted under civil or criminal law.

Cookies

In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which certain information flows to the organisation that sets the cookie (in this case, us). Cookies cannot execute programmes or transfer viruses to your computer. They are used to make the website more user-friendly and effective overall. They are used for client-side storage of user-related configuration settings.

You can set your Internet browser to prevent cookies from being saved on your hard drive or to ask you each time whether you agree to the setting of cookies. If you reject cookies, you will of course still be able to access all the information we offer. Once cookies have been set, you can also delete them at any time. You can find out how this works in detail on the help pages of your browser.

Use of cookies

This website uses the following types of cookies, the scope and function of which are explained below:

Transient cookies
Persistent cookies

Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.

Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in the security settings of your browser.
You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. We would like to point out that you may not be able to use all the functions of this website.

Use of analysis services

Our websites use Piwik/Matomo, a web analysis service software (open source software) for the statistical evaluation of visitor access. This software uses cookies (see previous section), which are stored on your computer and enable your use of the website to be analysed. The IP address is anonymised in the process. You can prevent the installation of cookies by selecting the appropriate settings in your browser software (see previous section). If you do not agree to the storage and analysis of data from your visit to our website, you can object to the storage and use at any time by clicking below. In this case, a so-called opt-out cookie will be stored in your browser, which means that Piwik/Matomo will not collect any session data. Please note that the complete deletion of your cookies means that the opt-out cookie will also be deleted and may have to be reactivated by you.

(Note: The decision in favour of an active ‘opt-out’ instead of ‘opt-in’ was made on the basis of the ‘Position of the EU Commission’ and the ‘Position of the European Parliament’ with regard to the future regulations of the upcoming ePrivacy Regulation and the applicable EU GDPR).

Embedded YouTube videos

We embed YouTube videos on some of our websites. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit a page with the YouTube plugin, a connection to YouTube servers is established. YouTube is informed which pages you visit. If you are logged into your YouTube account, YouTube can assign your surfing behaviour to you personally. You can prevent this by logging out of your YouTube account beforehand.

When a YouTube video is started, the provider uses cookies that collect information about user behaviour.
If you have deactivated the storage of cookies for the Google Ad programme, you will not have to expect any such cookies when watching YouTube videos. However, YouTube also stores non-personalised usage information in other cookies. If you wish to prevent this, you must block the storage of cookies in your browser.

Further information on data protection at ‘Youtube’ can be found in the provider's privacy policy at: https://www.google.de/intl/de/policies/privacy/

Social plugins

Social plugins from the providers listed below are used on our websites. You can recognise the plugins by the fact that they are marked with the corresponding logo.

Under certain circumstances, information, which may also include personal data, is sent to the service provider via these plugins and may be used by them. We prevent the unconscious and unwanted collection and transmission of data to the service provider by means of a 2-click solution. To activate a desired social plugin, it must first be activated by clicking on the corresponding button. Only this activation of the plugin triggers the collection of information and its transmission to the service provider. We do not collect any personal data ourselves by means of the social plugins or through their use.

We have no influence on what data an activated plugin collects and how it is used by the provider. At present, it must be assumed that a direct connection to the provider's services is established and that at least the IP address and device-related information is collected and used. It is also possible that the service providers attempt to store cookies on the computer used. Please refer to the data protection information of the respective service provider to find out which specific data is collected and how it is used. Note: If you are logged in to Facebook at the same time, Facebook can identify you as a visitor to a specific page.

We have integrated the social media buttons of the following companies on our website

Facebook Inc (1601 S. California Ave - Palo Alto - CA 94304 - USA)

Google Plus/Google Inc (1600 Amphitheatre Parkway - Mountain View - CA 94043 - USA

Online donations

We use online fundraising software on our websites to collect donations, carry out fundraising campaigns, organise fundraising campaigns by private supporters and communicate with donors by email. The provider of the software is Altruja GmbH, Augustenstraße 62, 80333 Munich. When you make a donation using this tool, your data is transmitted to Altruja GmbH, whose privacy policy can be viewed here: http://www.altruja.de/datenschutz.html

Contact forms

When you contact us by e-mail or via a contact form, the data you provide (e.g. your e-mail address, name, telephone number and other details that you send to us via contact or registration forms) will be stored by us in order to answer your questions/process your request. We delete the data arising in this context after storage is no longer necessary or restrict processing if there are statutory retention obligations. Your contact data will only be used by us for correspondence with you. The data will not be passed on to third parties.

Newsletter subscription

When you register to receive our newsletter, the data you provide will be used exclusively for this purpose. As a subscriber, you may also be informed by e-mail about aspects that are relevant to the service or registration (e.g. changes to the newsletter offer or technical circumstances).

We require a valid e-mail address for effective registration. We use the ‘double opt-in’ procedure to check that a registration is actually made by the owner of an e-mail address. For this purpose, we log the subscription to the newsletter, the sending of a confirmation email and the receipt of the requested reply. No further data is collected. The data is used exclusively for sending the newsletter and is not passed on to third parties.

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time. There is a corresponding link in every newsletter. You can also unsubscribe directly on this website at any time or inform us of your wish to do so via the contact option provided at the end of this data protection notice.

SSL encryption

We use SSL encryption to protect your data transmitted on our website in the best possible way. You can recognise such encrypted connections by the prefix ‘https://’ in the page link in the address bar of your browser. These websites encrypt information that is transmitted between you and the site. Information exchanged between your browser and the website is therefore not accessible to third parties.
However, no guarantee is given for data security during transmission via the Internet and e-mail. There is a risk that information contained in an unencrypted e-mail and attachments may be intercepted or destroyed during transmission, lost or arrive late.

Your rights

You have the following rights with regard to your personal data:

Right of access,
Right to rectification or erasure (the latter within the scope of statutory retention obligations),
Right to restriction of processing (blocking of data),
Right to object to processing with effect for the future,
Right to data portability.

You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

Changes to our privacy policy

We reserve the right to amend this privacy policy from time to time to ensure that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

Mobile devices

As a precaution, we would like to point out that when you use our products, internet offers and services by means of mobile devices (smartphones, mobile phones, tablets, etc.), precise location data may be collected, used and passed on, including the geographical location of your mobile device. In addition, further data may be collected, processed and used in accordance with the terms of use of your respective telecommunications provider.

Hyperlinks to other websites

Some of our websites contain hyperlinks to other websites that are not operated by UKD. We do not monitor these websites and are not responsible for their content or their handling of personal data. to complain about the processing of your personal data by us.

Disclosure on the Consumer Dispute Settlement Act (VSBG)

The competent consumer arbitration board is:

Allgemeine Verbraucherschlichtungsstelle des Zentrums für Schlichtung e.V.
Straßburger Straße 8
77694 Kehl am Rhein
www.verbraucher-schlichter.de

However, we declare that we are neither willing nor obliged to participate in dispute resolution proceedings.