Vienna IDDM - Privacy policy

International Dermatology and Dermatosurgery Mallorca

Dr. med. Lena Hampel

Specialist for dermatology and venereology

 

The international dermatology practice IDDM of Dr. Lena Hampel in Palma and Mallorca is closed.

For further information you will be forwarded within 5 seconds to the Austrian location in Vienna - MOHS.AT


 

Privacy policy

This Privacy Policy describes how personal data is processed by IDDM - International Dermatology und Dermatosurgery Mallorca - Dr. Lena Hampel and employees (hereinafter also referred to as "IDDM").

1. Legal basis of processing

The basis of the processing of personal data, in the same way whether they are interested parties, customers or business partners, is carried out in accordance with the provisions of the Spanish Data Protection Act Ley Orgánica 3/2018, de 5 de diciembre, de Protección de Datos Personales y garantía de los derechos digitales (hereinafter also LOPDGDD) and EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of personal data (hereinafter also EU GDPR).

1.1 interested parties and business partners

Potential future customers and business partners are defined as all natural and legal persons who have an interest in a future business relationship, e.g. interested patients, interested customers for non-medical services, interested suppliers and other interested business partners

In case of using the IDDM website, voluntary disclosure of personal information via eMail, website and voluntary consent (LOPDGDD Art. 6, EU GDPR Art. 6, 1a), personal information is processed for the legitimate interests of the controller (LOPDGDD Art. 6, EU GDPR Art. 6, 1f) and for contacting, initiating business, sending information and advertising (LOPDGDD Art. 6, EU GDPR Art. 6, 1b).

1.2 Existing customers and business partners

Existing customers and business partners are are defined as all natural and legal persons with whom a business relationship already exists, e.g. patients, customers for non-medical services, suppliers and other business partners.

In this case, the personal information provided is processed on the basis of voluntary consent (LOPDGDD Art. 6, EU GDPR Art. 6, 1a), for the purpose of the legitimate interests of the controller (LOPDGDD Art. 6, EU GDPR Art. 6, 1f) and for the purpose of sending information and advertising, service or contract performance (LOPDGDD Art. 6, EU GDPR Art. 6, 1b).

1.3 Voluntary provision of personal data

If personal data are provided by interested parties, customers (patients and non-medical service recipients), suppliers and other business partners, the provision is fundamentally voluntary.

If no voluntary disclosure of the necessary personal data is provided, it is possible that the desired requests and contractual services of IDDM can not be fulfilled.

2. Data controller for data processing

The controller of the personal data is IDDM - International Dermatology und Dermatosurgery Mallorca - Dr. Lena Hampel. Due to the activities in different locations, the following central address is given:

  • Post mail: Dr. Lena Hampel - IDDM, Consultorio Médico en Palma Clinic, Camí dels Reis 308, Bloque 3A, 07010 Palma de Mallorca, España
  • E-mail: 

3. Purpose of data processing

Personal data will be processed for the following purposes depending on paragraphs 1.1 Potential future customers and business partners and 1.2 Existing customers and business partners:

3.P.1 General conditions for processing along the entire life cycle of the business relationship:
Application, establishment, management, service provision, termination and archiving in accordance with legal requirements.

3.P.2 Service provision to interested parties and customers:

3.P.2(a) Patients
Promotion of services
Patient management and internal organization
Medical history
Diagnostics in the form of laboratories and analytical procedures
Treatment information and follow-up
Periodic reminder services and information delivery
Referrals to other physicians and information exchange
Cost settlement with banks and payment service providers
Continuing education and research purposes on an anonymous data basis
Claims management for outstanding payments

3.P.2(b) Clients for non-medical services
Promotion of services
Customer data management
Service deployment and maintenance services
Periodic reminder services and information delivery
Information exchange with subcontractors for service provision
Cost settlement with banks and payment service providersn
Training and research purposes on an anonymous data basis
Claims management for outstanding payments

3.P.2(c) Business partners and suppliers
Promotion of services
Business partner data management
Service deployment and maintenance services
Periodic reminder services and information delivery
Exchange of information with subcontractors for the provision of services
Cost settlement with banks and payment service providers
Training and research purposes on an anonymous data basis
Claims management in case of outstanding payments

3.P.3 Website and contacting by interested parties and customers
Technically necessary information within the scope of the legitimate interests of the controller
Provided information through requests by phone, email and website

If, for whatever reason, the customer does not wish to commission certain business partners or suppliers, or if certain countries are not to be used for the transmission of personal data, the customer must make this known in writing before commissioning the provision of services.

If a transfer of personal data is required by laws or regulations, IDDM must comply with them (e.g. court order, health authorities or other legal obligations).

4. Date processor

According to the processing mentioned in paragraph 3 Purpose of data processing, the personal data are also processed by the correspondingly necessary involved business partners and suppliers as processors, because otherwise the service provision cannot take place.

Due to the provision of services, it may happen that the place of business of business partners and suppliers is located outside of Spain. However, the aim is to ensure that the same or a similar level of data protection exists as provided for in the respective current requirements of the EU GDPR.

If the controller subcontracts a respective processors within the framework of the processing of data, they are also subject to the provisions of the EU GDPR, and if its registered office is located in Spain, they are also subject to the Spanish LOPDGDD and are bound to process the data in accordance with the law.

5. Website without Cookies

The IDDM website serves exclusively to present information about IDDM and its services. No cookies, web analytics or social media plugins are used for user tracking. The scripts used are unavoidably necessary for the implementation of the technical functionality of the website and IT security. The technically necessary data for this purpose, which may also include personal, technical data, are therefore subject to the purpose of the legitimate interests of the controller (LOPDGDD Art. 6, EU GDPR Art. 6, 1f).

6. Storage period

The storage period of personal data depends on the processing mentioned in paragraph 3 Purpose of data processing and must at least comply with the legal requirements, which is determined not only by the Spanish LOPDGDD and EU GDPR but also by various other laws. In addition, it may be in the interest of the customer or in the legitimate interest of IDDM that data is stored longer.

7. Questions about data protection and the execution of all rights of the data subjects

Please contact
a) for all questions regarding data protection and
b) for the execution of all rights of the data subjects (e.g. information, modification, correction, restriction, deletion)

to the contact details mentioned above under paragraph 2 Controller for data processing or to the contact details mentioned in the voluntary consent.

8. Severability clause and final provision

Should individual provisions of this privacy policy be invalid in whole or in part, this shall not affect the validity of the remaining provisions of this privacy policy. An invalid provision shall be replaced by the corresponding correct legal provision.

Interested parties, customers, business partners and suppliers, expressly waiving their own jurisdiction or any other that may correspond to them, submit to the jurisdiction of the courts and tribunals of the capital of Mallorca for the resolution of all disputes that may arise in connection with the interpretation, validity, effectiveness or performance of this agreement.