Site Logo
Site Logo
Site Logo
Site Logo
Site Logo

Data privacy

Privacy Policy & Data Protection Officer

Thank you for your interest in our website.

In this privacy policy, we inform you about the processing of your personal data within the scope of our website.

The protection of your personal data and your privacy is of particular concern to us. We therefore process your data exclusively on the basis of the statutory provisions [Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), Data Protection Act 2018 (DSG 2018), E-Privacy Directive, Telecommunications Act 2021 (TKG 2021)].

 

Responsible party and data protection officer:

The responsible party for data protection in accordance with Art. 4(7) GDPR for this website is VAMED-KMB Krankenhausmanagement und Betriebsführungsges.m.b.H. (hereinafter: VKMB).

If you have any questions about the processing of your data by VKMB, please feel free to contact us as follows:

  • by letter to: VAMED-KMB Krankenhausmanagement und Betriebsführungsges.m.b.H., Spitalgasse 23, 1090 Vienna, Austria
  • by telephone on: +43 1 40 400-90000

 

Contact data protection officer:
E-Mail: datenschutz@vamed.com

 

1. Processing of personal data when visiting our website

 

1.1. Processing of access data

When you visit our website, we store the access data in so-called web server log files. The following data is collected from you:

  • IP adress
  • Date and time of access
  • Browser
  • Operating system
  • Your internet service provider

This data is statistically evaluated in order to further improve the website and make it more user-friendly, to find and fix errors more quickly, and to manage server capacity. Only if there is concrete evidence of illegal use of our website will we use this data in a personalised form for the purpose of legal prosecution.

Your personal data will be deleted or blocked as soon as the purpose for storing it no longer applies. In the case of data storage in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of users are deleted or anonymised so that it is no longer possible to identify the client accessing the site.

 

The legal basis for the processing of access data is the legitimate interest of VKMB (online service offering & data security) in accordance with Art. 6 (1) (f) GDPR.

 

1.2. Cookies

We use cookies to make visiting our website attractive, to enable the use of certain functions and to support our marketing activities. These are small text files that are stored on your device. They enable us to recognise your browser the next time you visit.

You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general. However, deactivating cookies may restrict the functionality of our website.

The legal basis for setting cookies that are necessary for the display of the website or the provision of a service requested by you is, in accordance with Art. 6 (1) f GDPR, the legitimate interest of VKMB in offering you this website and the corresponding services. For all other cookies, data processing is based on your express consent in the cookie banner (Art. 6(1)(a) GDPR; Section 165(3) TKG 2021), which you can change or revoke at any time.

Cookies are deleted as soon as the purpose for storing them no longer applies, at the latest after one year. You can find the specific storage periods for each cookie set in our Cookie Management Portal.

You can manage your cookie settings here: Cookie Manager

 

1.2.1. Cookiebot Cookie Consent Management

We use Cookiebot on our website, among other things a tool for managing your cookie consent. This enables us to obtain and manage the consent of website users for data processing. For this purpose, the following data are processed by means of cookies:

Your IP address (the last three digits are set to “0”), the date and time of consent, browser information, and the URL from which the consent was submitted. An anonymous, random, and encrypted key is used as proof of consent. The processing takes place within the European Union.

The key and the consent status are stored in the browser for 12 months using the “CookieConsent” cookie. This ensures that your cookie preferences are retained for subsequent page requests. The key allows your consent to be documented and traced.

The service provider is the Danish company Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark. Usercentrics acts as a data processor on our behalf and is a recipient of your personal data. Further information on the data processed through the use of Cookiebot can be found in the provider’s privacy policy. 

 

1.2.2. Plausible Analytics

We use the web analytics service Plausible Analytics on our website. Plausible is a privacy-friendly analytics software that operates without cookies and does not store any personal data such as IP addresses, device identifiers, or individual user profiles. Instead, Plausible processes only anonymised and aggregated data, for example information about which pages were visited, from which country access occurred, or which device categories were used.

Plausible Analytics stores this data on servers located within the European Union. The collected information is used solely to better understand the use of our website and to optimise our online offering. It is not possible to identify individual visitors.

The data collected via Plausible Analytics is not used for advertising purposes, is not shared with third parties, and is not transferred to other companies. There is no further processing for profiling purposes, no cross-site tracking, and no linking of the data with other data sources.

As Plausible Analytics operates purely on a statistical and anonymised basis, no consent via a cookie banner is required.

 

2. Links

The website contains links to other websites. These references to websites of other Internet users are provided as a service to meet the further information needs of the user. VKMB has no influence on their content. VKMB accepts no liability for this content. The respective provider of the linked website is solely responsible for the content and accuracy of the information provided there.

 

3. Recipients

Insofar as this is absolutely necessary for the purposes of data processing, we will transfer parts of your personal data to the following recipients:

  • Service providers employed by us (agencies, hosting providers, etc.)
  • Administrative authorities, courts and public bodies
  • Other recipients specified by the user

Data is not transferred to countries outside the EEA.

All potential processors have contractually committed themselves to us to comply with the applicable data protection standards.

 

4. Data security

The security of your personal data is of particular concern to us.

VKMB takes appropriate technical and organisational measures within the meaning of Article 32 GDPR, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing, as well as the likelihood and severity of the risk to the rights and freedoms of natural persons.

In this sense, the following measures, among others, are taken to protect your data and secure it against loss, destruction, access, modification and distribution by unauthorised persons:

  • Ensuring the confidentiality, integrity, availability and resilience of the systems and services related to processing;
  • Ensuring the rapid restoration of the availability of personal data in the event of a physical or technical incident;
  • Implementing procedures to regularly review, assess and evaluate the effectiveness of technical and organisational measures to ensure the security of processing.

Please note that we accept no liability for the disclosure of information due to errors in data transmission and/or unauthorised access by third parties that are not caused by us or attributable to us.

 

5. Your rights

As a user of our website, you have the following rights:

  • Right to information (Art. 15 GDPR): You have the right to request confirmation from VKMB as to whether your personal data is being processed. In addition, you have the right to further information about the specific purposes of processing, categories of personal data, recipients or categories of recipients of personal data, storage period, the existence of a right to erasure or rectification of your personal data or to restriction of processing, and the right to object, the existence of a right to lodge a complaint, and all available information about the origin of your data.
  • Right to rectification (Art. 16 GDPR): You have the right to request that VKMB rectify your personal data without delay. This right includes the rectification of inaccurate data and the completion of incomplete personal data.
  • Right to erasure (Art. 17 GDPR): You have the right to request that VKMB erase your personal data without delay, provided that the reasons specified in Art. 17(1)(a) to (f) GDPR (e.g. the purpose for processing no longer applies) apply and the processing of your personal data is not necessary.
  • Right to restriction of processing (Art. 18 GDPR): In the cases specified in Art. 18 GDPR (e.g. inaccuracy of the personal data processed, unlawfulness of the processing, etc.), you also have the right to request that VKMB restrict the processing.
  • Right to data portability (Art. 20 GDPR): You have the right to receive the personal data concerning you that you have provided to VKMB in a structured, commonly used format and to request VKMB to transmit this data to another controller (e.g. to another law firm).
  • Right to object (Art. 21 GDPR): You have the right to object at any time to the processing of your personal data processed within the scope of this website.
  • Withdrawal of consent (Art. 7 GDPR): You have the option of withdrawing your consent from VKMB at any time.
  • Right to lodge a complaint: In addition, you can lodge a complaint with the competent data protection authority at any time.

You can assert your rights as a data subject – with the exception of the right to lodge a complaint with the competent data protection authority – against VKMB at the following email address: datenschutz@vamed.com