Privacy Policy Information

Stand 20.02.2023

Privacy Policy Information for participants of the Kassel Stuttering Therapy (KST)

1. Name of the responsible person

KST Institut GmbH
Feriendorfstr. 1
34308 Bad Emstal
Germany

Phone: 05624 921 0
E-Mail: info@kasseler-stottertherapie.de

2. Privacy advocate

Felix Schweinebraten
Schweinebraten IT
Phone: +49 (0) 561 350 295 09
E-Mail: datenschutz@schweinebraten.it
Internet: schweinebraten.it

3. Which personal data are collected

In order to carry out the therapy, we need your name, address, date of birth, telephone number, e-mail address, account details, health data, speech samples, videos, therapy data and reports that are necessary to carry out the therapy.

We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. A complete protection of the data against access by third parties is not possible.

4. Purpose and legal basis

We process your data on the basis of the EU Data Protection Regulation (DSGVO), the Federal Data Protection Act (BDSG) and all other laws relevant to us in terms of data protection.

We collect and store your data for contacting and consulting you about KST. The processing is necessary for the implementation of pre-contractual measures according to Art. 6 lit. b) EU-DSGVO.

The KST is obliged to keep treatment documentation (§ 630f Para. 1 BGB). When information is provided, there are legal obligations or the consent of the person concerned, when data is collected there is a treatment contract with KST or the consent of the person concerned. The processing of health data is based in particular on Article 9 (2) (h) EU GDPR.

5. Recipients of personal data

The data will only be passed on to third parties if KST has the authorization or the obligation based on the applicable law. We are also authorized to pass on personal data if third parties process the data on our behalf.

If KST does not carry out business activities itself (e.g. by using the Freach platform required for therapy, using the video tool from Vitero GmbH or the therapy software Flunatic.Web, participant support, payment processing via the German data center), but by others companies and these activities are associated with the processing of the data, KST has previously contractually obligated the companies concerned to only use the data for the purposes permitted by law to KST.

The KST forwards names, e-mail addresses, telephone numbers, videos and treatment reports in a secure form to the treating therapists in order to prepare and carry out the therapy. Freelance therapists commissioned by KST were obliged to comply with the EU GDPR before the order was placed.

If you are in arrears with a payment, the KST reserves the right to forward the data to a lawyer to enforce the claim as a legitimate interest.

6. Third-party collection according to Art. 14 EU-DSGVO

If treatment is taken over by speech therapists, ENT doctors, pediatric audiologists and other health professionals, the diagnostic documents, reports, etc. relevant to the treatment will be requested from the therapists concerned and sent to the therapists concerned after receipt of the participant’s consent.

7. Public Relations and Marketing

The work of the KST is reported irregularly in the press, radio and television. The work of the KST is also supported and accompanied by marketing measures. In the course of this, KST posts on social media at irregular intervals.

Personal data will only be entered or passed on here if you have previously been informed in writing and have given your consent.

8. Recipients/categories of recipients of your data

Health insurance companies, statutory accounting offices, aid offices, other health professionals, authorities, courts, universities for research purposes, treating therapists will only receive your data after your consent by signing this data protection declaration or due to legal obligations from the KST.

9. Recipient in third country

There is no transfer of data to third countries.

10. Duration of storage

The duration of the storage of your data depends on the statutory retention periods. According to Section 10 (3) of the professional code of conduct for doctors in Hesse, the retention period for patient documents is 10 years, unless there is a longer retention period under statutory regulations. The period begins when your treatment is completed. The period regulated in the professional regulations is a minimum period.

Bank details provided will be deleted after revocation of the direct debit authorization, successful payment of the course fee or, in the case of permanent direct debit clients, 36 months after the last use.

The data of the Kassel stuttering therapy may be stored longer for the purpose of evaluation.

11. Your rights

You have the right to receive information about the personal data stored in the KST in accordance with Art. 15 EU-DSGVO. The correction or supplementation of incorrect data can be requested according to Art. 16 EU-DSGVO.

Deletion or blocking of data can be requested according to Art. 17 or 18 EU-DSGVO. In the case of treatment documentation, only a blocking, not deletion, is possible due to the storage obligations.

You have a right of objection according to Art. 21 EU-DSGVO against the storage of your data. However, without saving your data, no therapy participation can take place. You have the right to data portability in accordance with Art. 20 EU-DSGVO, i.e. to receive the data stored in the KST in a machine-readable format and to transmit it to another person named by you.

12. Right to withdraw consent

If the data is not processed on a contractual or legal basis, but on the basis of the consent of the person concerned, this can be revoked at any time with effect for the future by means of an informal declaration to KST.

13. Right to lodge a complaint with a data protection authority

According to Art. 77 EU-DSGVO, every person affected by the data processing has the right to lodge a complaint with a supervisory authority if they believe that the processing violates data protection law.

For Hesse please contact:

Hessischen Beauftragten für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden
Germany