Who is responsible for data processing, and to whom can you turn?

Name and address of the controller:

EU-PATIENTEN.DE

National Contact Point for cross-border healthcare

National Association of Statutory Health Insurance Funds

German Liaison Agency Health Insurance – International (DVKA)

Pennefeldsweg 12c

53177 Bonn

Tel.: 0228 9530-0

Fax: 0228 9530-600

e-mail: post@dvka.de

Internet: www.dvka.de

Management authorised to represent the DVKA:

Hans-Holger Bauer (Managing Director)

Markus Weyres (Vice Director)

Name and address of the local representative of the data protection officer of the National Association of Statutory Health Insurance Funds:

Carolin Birker

Pennefeldsweg 12c

D-53177 Bonn

Tel.: +49 (0) 228 9530-717

e-mail: Datenschutz@dvka.de

For what purpose and on what legal basis does EU-PATIENTEN.DE process your personal data?

EU-PATIENTEN.DE is mandated amongst other things with advising patients who would like to avail themselves of cross-border healthcare services, or who have done so, of their rights and obligations, and to provide them with information regarding what further services are available to them. This requires the personal data to be processed which are needed to deal with your enquiry. The legal basis for the processing of such data is constituted by section 219d of Book V of the German Social Code (Sozialgesetzbuch V), in conjunction with Articles 4 to 6 of Directive 2011/24/EU.

Depending on the individual case, EU-PATIENTEN.DE may also receive data from third parties (e.g. German and foreign social insurance institutions and other agencies) which are involved in answering your enquiry.

What personal data are processed by EU-PATIENTEN.DE?

EU-PATIENTEN.DE processes the following personal data:

 individual data (e.g. first name and surname, date of birth, address),

 communication data (e.g. telephone number, e-mail address), and

 data relating to the enquiry (for instance which social insurance institution is providing insurance cover, contact data, contract data, health data, diagnoses and insurance data), and

 data substantiating the enquiry (e.g. health data such as medical reports and information regarding the healthcare provider).

To whom are your personal data provided?

The processing of an enquiry may make it necessary to contact a variety of agencies in Germany and abroad. This involves transmitting personal data within the boundaries of the statutory provisions, but only with your prior consent. This consent is obtained before your data are passed on. This does however mean that any enquiry which you may make which can only be dealt with by stating your personal data cannot take place without obtaining your prior consent in cases in which we ourselves are unable to answer your enquiry. You can download the necessary declaration and complete it at any time by following this link.

Are your personal data transmitted to third countries?

If treatment has been, or is to be, carried out outside of your state of residence, for instance in Switzerland (non-EU State, and therefore a third country), and it is necessary to pass your personal data on to an agency in that country in order to answer your enquiry, we will obtain your consent to the personal data being passed on prior to making the enquiry. This also means that we are unable to pass on your enquiry without your consent.

For how long does EU-PATIENTEN.DE store your personal data?

EU-PATIENTEN.DE only stores your personal data as long as is necessary to carry out the purpose for which they were collected, or as required by law. The standard set for defining the statutory retention periods includes section 110a of Book IV of the Social Code and section 84 of Book X of the Social Code.

What are your rights?

Here we have compiled more information regarding your rights in order to guarantee that your personal data are processed in a manner that is fair and transparent.