OrthoCoast – Go to home page

Legal information and help

Privacy

Here you can find out which personal data we process, why we need them and what rights you have. The first part concerns use of our website. Under ‘Privacy information for patients’, we explain appointments and data processing in our practice. You do not need to sign this privacy information or confirm that you have read it through a mandatory field. If additional voluntary processing requires your consent, we will ask you specifically. This is separate from medical information about treatment and your consent to treatment.

OrthoCoast practice sign
Open individual sections or all the details on this page.

Controller and contact

The controller responsible for the processing described here is:
Priv. Doz. Dr. med. habil. Richard Kasch
OrthoCoast
Hufelandstraße 1
17438 Wolgast
Telephone: 03836 200893

Email: impressum@orthocoast.de

For questions about data protection or to exercise your rights, contact us by email at impressum@orthocoast.de or by telephone. You can also write to the practice address above.

Website visits and technical logs

We host our website and email service with Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4–6, 32339 Espelkamp, Germany (referred to below as “Mittwald”). We have entered into a data processing agreement with Mittwald under Article 28 GDPR. This agreement is required by data protection law and ensures that Mittwald processes our website visitors’ personal data only on our instructions and in accordance with the GDPR.

When you visit our website, Mittwald records several types of log files. The data is processed to operate the website, investigate errors and protect against misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to provide a functioning and secure website.

Access logs

These record the IP address, any username used for directory protection, date, time, pages requested, protocols, status code, data volume, referrer, user agent and requested hostname. IP addresses are stored in anonymised form. The last one to three digits are removed: for example, “127.0.0.1” becomes “127.0.0.0”. IPv6 addresses are also anonymised. Anonymised IP addresses are retained for 60 days. Details of any username used for directory protection are anonymised after one day.

Error logs

Error logs record unsuccessful page requests and are deleted after seven days. Alongside error messages, they contain the requesting IP address and, depending on the error, the page requested.

Mail logs

Logs for emails sent from the web environment are anonymised after one day and then retained for 60 days. Anonymisation removes all sender and recipient details. Only the time of sending and information about how the email was processed remain, such as the queue ID or a record that it was not sent.

Logs for emails sent through our mail servers are deleted after four weeks. This longer retention period is needed to ensure that email services work reliably and to combat spam.

Cookies and other storage functions

Storing or accessing information on your device generally requires your consent under Section 25 TDDDG. An exception applies in particular where this is strictly necessary for a service you have expressly requested to function. Subsequent processing of personal data is additionally governed by the GDPR (DSGVO). The purposes and legal bases specified for each function apply to the functions used here.

Fonts and embedded content

The Open Sans font is part of our website and is provided without connecting to an external font provider. In particular, our own pages do not request fonts from Google Fonts. External functions may load their own resources after activation; these are described under the relevant function. When you open an ordinary link to another website, you leave our website. The operator of the destination website is responsible for subsequent processing there. Embedded content is different; its data processing is described under the relevant service.

Interactive OpenStreetMap map

On “Contact & directions” and in the footer of our website, a location map showing our practice at Hufelandstraße 1 in Wolgast is displayed immediately. This overview is loaded from our server together with the website. This map feature does not connect to OpenStreetMap at this stage. The map data comes from OpenStreetMap.

By selecting “Allow interactive maps”, you consent to interactive OpenStreetMap maps being loaded on this website. Your IP address and the technical data needed to retrieve the maps are transmitted to OpenStreetMap. Once you have given permission, the maps also open automatically on other pages.

We store your map preference and its expiry time under “oc-osm-consent-v1” in this browser’s local storage for 30 days. After that, permission is needed again. You can withdraw your choice at any time by selecting “Withdraw map permission” next to a map. This removes the embedded maps and prevents further automatic map requests. This does not undo data transfers that have already taken place. If browser storage is unavailable, permission applies only to the page currently open.

Our address and the locally hosted map overview remain visible even without permission. You can also use the OpenStreetMap link to open its website in a new tab.

arzt-direkt online reception

You can load the arzt-direkt online reception at the bottom right of our website. This function connects to the provider only when you open the online reception using one of the designated buttons. Before this click, the reception function does not retrieve program files, settings or fonts from arzt-direkt. When it loads, your IP address and technically necessary request data are transmitted to the provider. Further files and settings needed to operate the online reception may then be loaded. If you submit an enquiry, the information you enter in the displayed process is transmitted to handle your request. Loading the function alone does not send a completed patient enquiry. Please read the notices in the relevant enquiry form. Closing the provider’s dialog box closes its interface; components already loaded are not automatically removed. Without loading the online reception, you can read the other pages and contact the practice by phone.
Website analytics

We use Matomo to analyse how our website is used and to improve its content and usability. Website analytics are provided through matomo.orthocoast.de.

Matomo is configured without analytics cookies. It records page views and clicks on outbound links or downloads. The data processed include the address visited, the time of the visit, the referring page and technical information about the browser and device. Your IP address is also transmitted as part of the connection to the analytics server.

If you have any questions about website analytics, please contact us at impressum@orthocoast.de.

Contact by email or contact form

When you send us a message, we process your contact details and its content to respond to your enquiry. For treatment enquiries, this is based on Article 6(1)(b) GDPR (DSGVO); where health data are included, additionally on Article 9(2)(h) GDPR in conjunction with Section 22(1), point 1(b) of the German Federal Data Protection Act (BDSG). We handle other general enquiries on the basis of our legitimate interest in responding to your message under Article 6(1)(f) GDPR. Please do not send medical documents by unencrypted email without being asked. Ask us about a suitable way to send them. Messages containing information necessary for your treatment may be included in the treatment record.

Privacy information for patients

The following information applies to appointment arrangements, check-in and treatment at our practice. Even the details of an appointment or the type of consultation requested may reveal information about your health. We treat this information as confidential. We use the tomedo practice information system to organise our practice. The choice of this software does not describe all technical data flows. The specific modules, operating locations and technical service providers involved are listed in ‘Appointments and tomedo’.

Appointments and tomedo

We use your information to allocate a suitable appointment, clarify queries and prepare for the agreed visit. For this purpose, we process the identification and contact details needed during booking, appointment details and the information you provide about your concern. Fields that are actually necessary are marked as required; further information is voluntary. Processing is carried out to prepare and perform the treatment contract under Article 6(1)(b) GDPR (DSGVO) and, where health data are involved, under Article 9(2)(h) GDPR in conjunction with Section 22(1), point 1(b) of the German Federal Data Protection Act (BDSG). Without the information needed for reliable identification and allocation, it may not be possible to complete an online booking. You can also discuss your enquiry with our practice by telephone or in person. A necessary appointment confirmation or a message about a change to an agreed appointment serves appointment organisation.

Telephone contact and digital telephone assistant

Our digital telephone assistant receives your enquiry on 03836 200893. Your name, callback number and details of your enquiry are needed to identify the request and return your call. Please provide only the information necessary to handle it. If you do not wish to use the digital telephone assistant, you can discuss your enquiry in person at the practice during opening hours. Other contact options that are actually available are listed under ‘Contact and directions’.

Check-in and treatment

For your care, we process in particular basic personal details, insurance information, symptoms, medical history, examination findings, diagnoses, medication details, treatment history and billing data. These data come mainly from you and from our examinations. Where legally permitted and necessary for treatment, we also receive information from other doctors involved in your care, hospitals or laboratories. Processing serves medical diagnosis and treatment, their documentation, practice organisation and billing. The legal bases include in particular Article 6(1)(b) and (c) GDPR (DSGVO), Article 9(2)(h) GDPR and Section 22(1), point 1(b) of the German Federal Data Protection Act (BDSG). The relevant social legislation and medical documentation and retention duties also apply. We cannot delete necessary data or stop processing them solely because no general ‘data protection consent’ has been signed. Without medically necessary information, safe treatment may not be possible. Any additional voluntary consent is obtained separately. Express check-in processes your health insurance card and the information needed for your agreed practice visit. You can also use the regular reception desk. At the terminal, please make sure the process is complete and take your card with you.

Who may receive data

Within the practice, people involved in your care and its organisation have access insofar as they need it for their role. They are subject to medical confidentiality or an equivalent duty of confidentiality. Data are shared outside the practice only where there is a legal basis or, where required, you have consented. Depending on your treatment and insurance arrangements, recipients may include other doctors involved in your care, laboratories, hospitals, the Association of Statutory Health Insurance Physicians, statutory health insurers or other bodies legally entitled to receive the data. A private insurer does not automatically receive all treatment data. Technical service providers may act as processors, for example for maintenance, backups or hosting. Possible access during this work is distinct from disclosure for the provider’s own purposes.

Electronic patient record and other digital procedures

We use the electronic patient record (ePA) and services within Germany’s telematics infrastructure. You may object to individual ePA processing activities; this is not equivalent to a general refusal of treatment documentation. Information about the use of artificial intelligence to create this website is available under ‘Transparency about the use of AI’. This does not constitute consent to the processing of your patient data by AI systems. Any such processing requires its own information and legal bases appropriate to the specific use.

How long data are stored

We generally retain treatment records for ten years after treatment ends, unless other regulations require a different period. The legal basis is in particular Section 630f(3) of the German Civil Code (BGB). Specific periods may apply to certain documents, such as radiation protection records. These are taken into account in our deletion policy. Data used solely for appointments, contact or technical operations are not stored for the same length of time simply for that reason. The periods or deletion criteria specified for the relevant processing apply to them. Where data remain necessary to meet statutory retention duties or to establish, exercise or defend legal claims, further limited storage may be permitted.

Your rights

You may request access to the personal data we process about you and have inaccurate data corrected. Subject to the statutory conditions, you have a right to erasure or restriction of processing. For example, there is no right to erasure where statutory retention obligations prevent it.

Where the statutory conditions are met, you can receive data you have provided to us in a commonly used, machine-readable format or have them transferred to another controller. This applies in particular to automated processing based on consent or a contract.

Where processing is based on your consent, you may withdraw it at any time with effect for the future. Where processing is based on legitimate interests under Article 6(1)(f) GDPR (DSGVO), you may object on grounds relating to your particular situation. You have the right to object at any time to processing for direct marketing.

To do so, email impressum@orthocoast.de, telephone us or write to the practice address. We may request appropriate information where necessary to establish your identity securely. You do not need to send comprehensive medical documents again for this purpose.

Complaint to a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority, particularly in the place of your habitual residence, workplace or the alleged infringement. For our practice in Mecklenburg-Vorpommern, you may in particular contact: Der Landesbeauftragte für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern Schloss Schwerin Lennéstraße 1 19053 Schwerin Telephone: 0385 59494 0 Email: info@datenschutz-mv.de https://www.datenschutz-mv.de/kontakt/

Optional email notifications

If you would like optional email appointment reminders or notifications when a suitable earlier appointment becomes available, please raise this during your consultation. A valid email address is required. We record your choice in tomedo; this cannot be configured through this website. These services are voluntary. You can withdraw consent given for them at any time with effect for the future, including by telephone or in writing. Your appointment booking and treatment are unaffected.
Book an appointmentCall us

Opening hours

Mon, Tue, Thu
08:00–12:0014:00–17:00
Wed, Fri
08:00–12:00
Contact and directions