PATIENT INFORMATION ON DATA PROTECTION

Status 1.1.2021

The protection of your personal data is important to us. According to the EU General Data Protection Regulation (GDPR), we are obliged to inform you about the purpose for which we collect, store or forward data. The information also tells you what rights you have in terms of data protection.

  1. RESPONSIBILITY FOR DATA PROCESSING
    The responsibility for data processing depends on the institution you have visited. Below you will find our facilities:
    Lanserhof Lans: Lanserhof GmbH, Kochholzweg 153, 6072 Lans, Austria
    LHM Management GmbH, Kochholzweg 153, 6072, Lans, Austria
    Lanserhof Tegernsee: Lanserhof Tegernsee GmbH, Gut Steinberg 1-4, 83666 Waakirchen, Germany
    Lanserhof Management GmbH, Gut Steinberg 1-4, 83666 Waakirchen, Germany
    Marienstein Privatklinik GmbH, Gut Steinberg 1-4, 83666 Waakirchen, Germany
    LANS Medicum, branch of Marienstein Privatklink GmbH, Stephansplatz 5, 20354 Hamburg, Germany
    LANS Medicum - Dr. Catalá-Lehnen & Kollegen Ärzte, Stephansplatz 1, 20354 Hamburg, Germany
    Health Care Sylt GmbH, Landwehrdeich 1, 25992 List, Germany
    Lanserhof Sylt: Lanserhof Sylt GmbH, Landwehrdeich 1, 25992 List, Germany

You can reach our Group Data Protection Officer: Ms Katharina Ditz, datenschutz@lanserhof.com.

  1. PURPOSE OF DATA PROCESSING
    Treatment contract
    Data processing is carried out on the basis of legal requirements in order to fulfil the treatment contract between you and your doctor and the associated obligations. For this purpose, we process your personal data, in particular your health data. This includes medical histories, diagnoses, therapy suggestions and findings that we or other doctors collect. For these purposes, other doctors or psychotherapists with whom you are receiving treatment may also provide us with data (e.g. in doctor's letters).
    The collection of health data is a prerequisite for your treatment. If the necessary information is not provided, careful treatment cannot take place.
    Visiting our resorts
    If you are a guest at our resorts, we use your personal data to process your booking and to conclude and fulfil the accommodation contract with you. This includes verifying your identity, taking payment guarantee and/or payment information and sending communications relating to your stay.
    In this context, we process the dates you have selected, the number of rooms included in the booking, the number of people included in the booking, any additional packages you have selected, your full name, address, email address and credit card details.
    We also process your personal wishes regarding accommodation and meals as well as medical-therapeutic treatments and the forwarding of the collected health data for your further treatment and care, including by non-medical staff.
    Product information via newsletters, email advertising and other direct marketing campaigns
    If you provide us with your contact details for direct marketing purposes, we may use this personal data to send you our newsletters and information about our services and the services of the Lanserhof Group that may be of interest to you, based on our previous interactions with you (e.g. bookings).

  2. LEGAL BASIS
    Treatment contract Article 9 Paragraph 2 lit. h) in conjunction with. Article 6 paragraph 1 lit. b GDPR in conjunction with section 22 paragraph 1 no. 1 lit. b) Federal Data Protection Act (for data processing in Germany).
    Accommodation contract Article 6 paragraph 1 lit. b) GDPR.
    Direct marketing for products of the Lanserhof Group Direct marketing measures are carried out exclusively on the basis of your consent in accordance with Article 6 paragraph 1 lit. a) GDPR.
    If you have any questions, please do not hesitate to contact us.

  3. RECIPIENTS OF YOUR DATA
    We only transfer your personal data to third parties if this is permitted by law or you have given your consent.
    Recipients of your personal data may primarily be other doctors / psychotherapists / health care professionals, associations of panel doctors, health insurance companies, the medical service of the health insurance companies, medical associations and private medical clearing centres.
    The transmission is mainly for the purpose of billing for the services provided to you, for clarifying medical questions and questions arising from your insurance relationship. In individual cases, data is transferred to other authorised recipients or - if you have given your consent and released our doctors from their duty of confidentiality - to other doctors / psychotherapists / health care professionals in order to enable holistic care and treatment.
    Furthermore, we transmit personal data to Lanserhof Management GmbH, which acts as an order processor within our group of companies.

  4. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES
    When transferring data to countries outside the European Economic Area, we ensure that appropriate security measures have been taken. If your personal data is transferred to a country that is not subject to an adequacy decision by the European Commission, the data will be adequately protected by the standard contractual clauses approved by the EU Commission or by binding internal data protection rules of the third party concerned.

  5. STORAGE OF YOUR DATA
    We will only retain your personal data for as long as is necessary to carry out the treatment.
    Due to legal requirements, we are obliged to keep this data for at least 10 years after the treatment has been completed. According to other regulations, longer retention periods may apply. We only store your other personal data for a limited period of time that is necessary to achieve the further processing purposes mentioned above. After this period, your personal data will be deleted. If we process your personal data on the basis of your consent, we store your personal data until you revoke it.
    The criteria used to determine the storage period are the legal and contractual regulations, the nature of our relationship with you, the type of data concerned and technical requirements. We may be required by law to retain certain information for certain periods of time.
    Where we process personal data for marketing purposes or with your consent for marketing purposes, we will process that data until you request us to stop such processing and for a short period thereafter (so that we can comply with your request). We also record the fact that you have asked us not to send you direct marketing or not to process your data so that we can continue to comply with your request.

  6. YOUR RIGHTS
    You have the right to obtain information about personal data concerning you. You may also request that incorrect data be corrected.
    In addition, under certain conditions, you have the right to have data deleted, the right to restrict data processing and the right to data portability.
    The processing of your data is based on legal regulations. Only in exceptional cases do we require your consent. In these cases, you have the right to revoke your consent for future processing.
    You also have the right to complain to the competent data protection supervisory authority if you believe that the processing of your personal data is not lawful.