data protection information

By submitting the contact form, you are transmitting the data entered to the following controller (responsible party):

Düsseldorf University Hospital (UKD)

Public law institution

Moorenstr. 5

40225 Düsseldorf

Phone: 00 49 (0) 2 11 – 81 00

Fax: 00 49 (0) 2 11 – 81 04 855

info@med.uni-duesseldorf.de

You can reach the UKD data protection officer at:

Datenschutzbeauftragte UKD

Moorenstrasse 5

40225 Düsseldorf

Datenschutz@med.uni-duesseldorf.de

We take an interest in handling your request comprehensively. The data you enter will be processed by us for this purpose. If planned or requested, we will send you feedback.

In addition to the content of your request, usage data; meta communication data (e.g. device information, IP addresses, access times) are collected in connection with the access and use of the contact forms. The purposes of the processing are providing our website content and ensuring user-friendliness; secure operation of the information technology infrastructure and technical devices (computers, servers, etc.).

The legal bases for the aforementioned purposes are Article 6(1)(f) of the General Data Protection Regulation (GDPR) (our legitimate interest, which lies in responding to your request and ensuring the security of our systems) and, with regard to the processing of health data, Article 9(2)(h) GDPR in conjunction with Section 22(1)(1)(b) of the Federal Data Protection Act (BDSG) and Article 9(2)(a) GDPR (consent).

Your data is principally not transmitted or shared with third parties but only processed to respond to your request. We also use technical service providers as processors who have been carefully selected by us in advance and who, if necessary, have been obligated to maintain medical confidentiality and with whom a contract has been concluded in accordance with Art. 28 GDPR.

The personal data you transmitted via the contact form will be automatically deleted after five weeks, unless there is a need for further processing. This may be the case, for example, if the transmitted information is intended to remain in our records or if we are obliged to retain it due to legal requirements.

The transmission of data to us via the contact form is a secure transmission method according to the current state of the art. In our contact forms, you can often enter different types of contact data (e.g. your telephone number or your e-mail address) in order to receive feedback from us regarding your request. As a rule, providing an e-mail address is a mandatory field, as this is the common way to receive feedback on a contact request. Please only provide further contact details for the feedback channels via that you would like us to use to contact you. If you enter an e-mail address for our message to you, please note that we may only send you information’s as a non-encrypted (i.e. without so-called end-to-end encryption) e-mail.

You have the following rights under the General Data Protection Regulation (GDPR):

• Right of access by the data subject (Art. 15 GDPR): You have the right to access to the personal data that we have stored.
• Right to rectification (Art. 16 GDPR): If you discover that incorrect data relating to you is being processed, you can request rectification. Incomplete data must be completed, taking into account the purpose of the processing.
• Right to erasure (Art. 17 GDPR): You have the right to have your data erased, , if certain reasons for erasure apply. This is particularly the case if it is no longer required for the purpose for which it was originally collected or processed.
• Right to restriction of processing (Art. 18 GDPR): Under certain conditions, you have the right to restrict the processing of your data. This means that your data will not be deleted, but will be labelled in order to restrict its further processing or use.
• Right to object on grounds relating to your particular situation (Art. 21 GDPR): You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (e) or (f) of Article 6(1) GDPR. In the event of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defence of legal claims.
• Conditions for consent (Art. 7 (3) GDPR): If you have given us consent to process your data for a specific purpose, for example to receive a reminder of an examination appointment by text message, you have the right to withdraw this consent at any time. Processing up to the moment consent is withdrawn remains lawful. To exercise your right of withdrawal, send an e-mail to the e-mail address provided in the respective contact form. Please make sure that we can assign the revocation to your person. If you wish to use another form of communication for your revocation, please state your name and the clinic or institute to which you originally sent your data.
• Right to data portability (Art. 20 GDPR): You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller.
• Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority responsible for data protection. The supervisory authority responsible for the UKD is the North Rhine-Westphalia Data Protection Authority :

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen

Kavalleriestr. 2-4

40213 Düsseldorf

Phone: 0211/38424-0

Fax: 0211/38424-999

E-mail: poststelle@ldi.nrw.de

Further information can be found in the general privacy policy.

Status: 01.03.2024