1. General information

This notice provides information on how personal data is handled when using www.pflege-ukhd.de. Here you will find contact details for data protection enquiries and information about your data protection rights.

2. Data controller

The controller responsible for the processing of personal data on this website is:

Heidelberg
University Hospital, a public-law institution, represented by the Executive Board
Im Neuenheimer Feld 672
69120 Heidelberg
Telephone: +49 6221 56-0
Email: klinikumsvorstand@med.uni-heidelberg.de

For enquiries regarding nursing services and the content of this website, please contact the Nursing Directorate at pflegedirektion@med.uni-heidelberg.de or by telephone on +49 6221 56-38900.

3. Data Protection Officer

Heidelberg
University Hospital Data Protection Officer
Im Neuenheimer Feld 672
69120 Heidelberg
Telephone: +49 6221 56-6566
Email: datenschutz@med.uni-heidelberg.de

You may contact this person with any questions regarding data protection and the exercise of your data protection rights.

4. Detailed description of data processing

We process your personal data only to the extent necessary for the operation and use of our website. The legal bases for this are set out in Article 6 of the GDPR:

• Your consent (Article 6(1)(a) of the GDPR)
• For the performance of a contract or pre-contractual measures (Article 6(1)(b) of the GDPR)
• Compliance with legal obligations (Article 6(1)(c) of the GDPR)
• Our legitimate interests (Article 6(1)(f) of the GDPR)
   

5. Cookie settings

We use Cookiebot to manage your preferences regarding cookies and similar storage technologies. You can find the selections you made in the consent dialogue under ‘Details’. You can access and change your preferences again via ‘Cookie settings’. Withdrawing your consent takes effect from that point onwards.

Cookie settings

6. Hosting and technical security

Our website is hosted by Mittwald CM Service GmbH; data transmission is always encrypted using SSL/TLS technology.

7. Comprehensive explanation of integrated services

• Google Fonts: Local integration without server requests
• Analysis and optimisation: Matomo (no cookies), Hotjar, Semrush
• Newsletters and marketing: CleverReach (GDPR-compliant)
• Online surveys: Survio (via iFrame technology, GDPR-compliant)
• Automatic translations: DeepL API (GDPR-compliant)
• Accessibility: Userway Widget (GDPR-compliant)
• Social media: Instagram integration via Typo3 extension; Facebook and LinkedIn via external links
• Video platforms: YouTube (enhanced privacy mode), Vimeo (Do Not Track mode)
• Map services: Google Maps, OpenStreetMap
   

8. File transfer with TransferNow

We use the TransferNow service (provider: TransferNow SAS, 9 rue Anatole de la Forge, 75017 Paris, France) for the secure transfer of large files. Your data is encrypted and stored exclusively on servers in Frankfurt am Main, Germany. Processing is carried out in accordance with the provisions of the EU GDPR. Further information: https://www.transfernow.net/de/datenschutz
Legal basis: Article 6(1)(f) of the GDPR (legitimate interest in the secure transfer of large amounts of data), Article 6(1)(b) of the GDPR (performance of a contract).

9. Data transfers to third countries

Some providers transfer data to third countries outside the EU (in particular to the USA). This data transfer takes place exclusively on the basis of the EU Commission’s Standard Contractual Clauses.

10. Retention period and deletion of data

Personal data is stored only for as long as is necessary for the purposes for which it was collected, or insofar as statutory retention periods apply. After that, your data will be deleted without delay.

11. Your data protection rights

Subject to the statutory requirements, you may request access to your personal data, as well as its rectification, erasure or restriction of processing. Under the conditions set out in Article 20 of the GDPR, you also have a right to data portability.

Where processing is based on Article 6(1)(e) or (f) of the GDPR, you may object to it on grounds relating to your particular situation. You may object to processing for direct marketing purposes at any time.

You may withdraw any consent you have given at any time with effect for the future. This does not affect the lawfulness of processing carried out on the basis of that consent prior to its withdrawal. To do so, please use the withdrawal method provided or contact the data protection officer mentioned above.

You may lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or where the alleged infringement occurred. In Baden-Württemberg, you can contact the state supervisory authority via:
https://www.baden-wuerttemberg.datenschutz.de/kontakt-aufnehmen/

12. Changes to this policy

Any changes to this privacy notice will be published on this page. If you have any questions, please contact the data protection officer mentioned above.