Data protection
Data protection at a glance
Which details Pflege Patienten processes, for what purpose, on which legal basis, who is responsible and which rights you have – in plain words.
This page explains in plain words how Pflege Patienten handles data. The privacy policy and the data processing agreement are authoritative.
Pseudonymised instead of named
A case contains what a care provider needs for its decision – but no details that directly identify the person to be cared for: name, address, date of birth and health insurance number are not recorded, and the portal checks free texts for such details. Even so, we treat all details of a care need as personal data, because details without a name can, in combination, be linked to a person. They can be health data.
Which data, for what purpose, on which basis?
| Data | Purpose | Legal basis |
|---|---|---|
| Details of a care need: type of care, postcode and town, start, services, care level, age group, sex (optional), diagnoses, care situation, type of payer, short description; for organisations a service contact, for private individuals phone number and email address | Placing the care | explicit consent of the person concerned (Art. 6(1)(a), Art. 9(2)(a) GDPR) |
| User account: name, email address, organisation and location, sign-in data | Registration and use of the portal | contract (Art. 6(1)(b) GDPR) |
| Contract and invoice data of the location subscription | Billing | contract and legal obligations (Art. 6(1)(b) and (c) GDPR) |
| Messages through the contact form or by email | Handling your enquiry | Art. 6(1)(b) and (f) GDPR |
| Technical details when the website is called up | Delivery and security of the website | legitimate interest (Art. 6(1)(f) GDPR) |
Organisations obtain the consent of the person concerned themselves and confirm it in the portal; private individuals give it directly on the platform. A consent can be withdrawn at any time with effect for the future.
Who is responsible?
- If an organisation posts a case – for example a hospital, a practice or a care service –, it remains responsible for this case data. Pflege Patienten processes it on its behalf under a data processing agreement.
- For requests posted by private individuals, the user accounts, contracts, billing and the website, PHP Schmiede KG as the operator is itself responsible.
More: Responsible party and service providers.
How long?
Each kind of data has a period of its own; invoices and accounting vouchers are subject to statutory retention obligations. The periods are listed in How long do we keep what?.
Your rights
Where the legal requirements are met, you have the rights of access, rectification, erasure, restriction of processing and data portability, a right to object and the right to withdraw a consent. You can also lodge a complaint with a data protection supervisory authority. How to make a request: Privacy requests.
Read more