Data protection

Data protection

§ 1 Information about the collection of personal data

(1) In the following we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. B. name, address, e-mail addresses, user behavior.

(2) Responsible acc. Art. 4 para. 7 EU General Data Protection Regulation (GDPR) is MediGen GmbH, Klosterstraße 15a, 61462 Königstein i. T., e-mail address: info@abc-testzentrum.de, (see also our imprint).

(3) When you contact us by e-mail or via our contact form, the data you provide (your e-mail address, your first and last name, telephone number, if applicable the company you represent) will be stored by us , to answer your questions. The processing takes place on the basis of a legitimate interest (Art. 6 Para. 1 lit. f GDPR). If you contact us to request an offer, the data will be processed to carry out pre-contractual measures (Article 6 (1) (b) GDPR). We delete the data arising in this context after the storage is no longer necessary, or restrict the processing if there are statutory storage obligations.

(4) If you contact us by telephone, your inquiry including all resulting personal data (name, inquiry) will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent. This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6 Para. 1 lit. f GDPR) or on your consent (Art. 6 Para. 1 lit. a GDPR) if this was queried. We delete the data arising in this context after the storage is no longer necessary, or restrict the processing if there are statutory storage obligations.

(5) If we use commissioned service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes. We also state the specified criteria for the storage period.

§ 2 Your rights

(1) You have the following rights towards us with regard to your personal data:

• right to information,
• right to rectification or erasure,
• right to restriction of processing,
• right to object to processing,
• Right to data portability.

(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

§ 3 Collection of personal data when visiting our website

(1) If you only use the website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you want to view our website, we collect the following data that is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 Para. 1 S. 1 lit. f DS-GVO ):

• IP address
• Date and time of the server request
• Content of the request (specific page)
• Access Status/HTTP Status Code
• amount of data transferred
• Website from which the request comes
• Browser type and browser version
• Operating system and its interface
• Language and version of the browser software.

(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using and through which certain information flows to the place that sets the cookie (here from us). Cookies cannot run programs or transmit viruses to your computer. They serve to make the Internet offer more user-friendly and effective overall.

(3) Use of cookies:

a) This website uses the following types of cookies, the scope and functionality of which are explained below:

• Transient cookies (see b)
• Persistent cookies (see c).

b) Transient cookies are automatically deleted when you close the browser. These include in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.

c) Persistent cookies are automatically deleted after a specified period, which can vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

d) You can configure your browser settings according to your wishes and e.g. B. refuse to accept third-party cookies or all cookies. We would like to point out that you may not be able to use all the functions of this website.

§ 4 Other functions of our website

(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do this, you may have to provide additional personal data that we use to provide the respective service and for which the aforementioned data processing principles apply.

(2) If you book a paid or free appointment via our website to carry out a COVID-19 test, it is necessary for the conclusion of the contract that you provide your personal data, which we need to process your order. This is your first name, last name, street number, zip code, city, date of birth, telephone number, e-mail address, test date and test location. Depending on the reason for the test and the purpose of the finding certificate, a document number may be given voluntarily. (identity card or passport) and nationality. The purpose of this processing is to create a complete certificate with all mandatory information: in some countries entry and/or exit is not possible without this information on the certificate. Please check the travel regulations at the Foreign Office carefully before booking an appointment. The legal basis is Art 6 para. 1 lit b) GDPR.

In addition to the processing mentioned under § 3 (1), your test result will be stored in our database after the test has been carried out in the test center. Your health data, including participant data, are stored on specially secured servers and are available to you for 48 hours using the individual authentication code sent to you electronically. After 48 hours, neither the result nor the issued certificate can be downloaded. The transmission of the test result via online retrieval takes place on the basis of your consent given when booking the appointment in accordance with Art. 6 para. 1 p. 1 lit. a GDPR.

All participant data will be automatically deleted after one week if the test is not taken. If the test is taken, all health and participant data will be automatically deleted in accordance with our deletion concept, provided there are no storage obligations.

§ 5 Objection or revocation against the processing of your data

(1) If you have given your consent to the processing of your data, you can revoke this at any time. Such a revocation affects the admissibility of the processing of your personal data after you have given it to us. The legality of the data processing that took place up to the point of revocation remains unaffected by the revocation.

(2) If we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if the processing is not necessary in particular to fulfill a contract with you, which is shown by us in the following description of the functions. If you exercise such an objection, we ask that you explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and will either stop or adjust the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.

(3) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us about your objection to advertising using the following contact details:[alle Kontaktdaten] .

§ 6 SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.