Privacy
Privacy
This platform is operated by BuildingBridges gGmbH. Within the projects offered here, BuildingBridges gGmbH acts as processor on behalf of and according to the instructions of DontBePatient Intelligence GmbH, which is the controller under data protection law.
Definitions
a) personal data
Personal data means any information relating to an identified or identifiable natural person.
b) data subject
A data subject is any identified or identifiable natural person whose personal data is processed by the controller.
c) processing
Processing means any operation performed on personal data, such as collection, recording, organization, storage, adaptation, retrieval, use, disclosure, restriction, erasure or destruction.
d) restriction of processing
Restriction of processing means the marking of stored personal data with the aim of limiting their future processing.
e) profiling
Profiling means automated processing of personal data used to evaluate personal aspects of a natural person.
f) pseudonymization
Pseudonymization means processing personal data in such a way that it can no longer be attributed to a specific data subject without additional information.
g) controller
The controller is the natural or legal person that determines the purposes and means of processing.
h) processor
A processor processes personal data on behalf of the controller.
i) recipient
A recipient is a natural or legal person or other body to which personal data is disclosed.
j) third party
A third party is a person or body other than the data subject, controller, processor and authorized persons.
k) consent
Consent is any freely given, specific, informed and unambiguous indication of the data subject’s wishes.
Thank you for your interest in our surveys. Protecting your personal data is important to us.
1. Controller
The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:
DontBePatient Intelligence GmbH
Ferdinandstr. 12
20095 Hamburg
Email: info@dontbepatient.com
Web: www.dontbepatient.com
2. Data Protection Officer
We have appointed a data protection officer for our company. You can reach the officer at:
Email: ds@dontbepatient.com
3. Processor
The controller has commissioned BuildingBridges gGmbH with the technical implementation of the surveys, hosting of the platform and anonymized evaluation of the data:
BuildingBridges gGmbH
Ferdinandstr. 12
20095 Hamburg
Germany
Email: info@buildingbridges.social
An agreement for commissioned processing pursuant to Art. 28 GDPR exists between DontBePatient Intelligence GmbH and BuildingBridges gGmbH, regulating the protection of your data and compliance with high security standards.
4. Collection of data when visiting our website (log files)
When the website is used for informational purposes only, BuildingBridges gGmbH collects on behalf of the controller only the data that your browser transmits to the server: IP address (deleted immediately for anonymization), date and time of access, browser type and version, and operating system used. The legal basis is Art. 6(1)(f) GDPR.
5. Cookies
The websites of BuildingBridges gGmbH use cookies. Cookies are text files stored on a computer system through an internet browser. You can prevent cookies at any time using your browser settings or delete cookies already stored. In that case, not all website functions may be fully available.
6. Online surveys
Participation in surveys is voluntary. By starting a survey and submitting answers, you consent to the processing of data by the processor (BuildingBridges gGmbH) for evaluation by the controller (DontBePatient Intelligence GmbH). Where health data is requested, this is based on your explicit consent pursuant to Art. 9(2)(a) GDPR.
Purpose of processing and anonymization
The objective is generally anonymized processing. No IP addresses, names or email addresses are stored in direct connection with your survey responses. If you provide an email address for notifications, it is stored technically separate from survey data. BuildingBridges gGmbH prepares the data so that DontBePatient Intelligence GmbH cannot identify a specific person.
Exception: If projects are conducted for qualifying patients for clinical studies or other activities involving personal interaction, the required contact data will be processed only on the basis of explicit consent pursuant to Art. 9(2)(a) GDPR.
7. Storage period
Anonymous data sets are stored for statistical and research purposes where a personal reference can no longer be established. Contact data for follow-up studies is stored for the project duration and an additional five years unless statutory retention obligations apply.
8. Disclosure of data
BuildingBridges gGmbH discloses personal data only to the controller (DontBePatient Intelligence GmbH) or to third parties on its instruction, where explicit consent exists or a legal obligation applies. Survey results are generally published only in aggregated and anonymized form.
9. Hosting
The website and survey tools are hosted by BuildingBridges gGmbH with specialized IT service providers in Germany or the EU, which are subject to strict data protection requirements.
10. Your rights as a data subject
You have rights of access, rectification, erasure, withdrawal of consent with effect for the future and further rights under the GDPR. Since DontBePatient Intelligence GmbH is the controller, you should primarily exercise your rights there.
Note on anonymization: Once a survey has been completed and the data set has been fully anonymized, data can no longer be deleted and information can no longer be provided because assignment to your person is technically no longer possible.
11. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your data.