Privacy policy

    We take the protection of your personal data very seriously and adhere strictly to the statutory and official data protection regulations.
    We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

    Responsible
    The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:
    Isar Kliniken GmbH
    Sonnenstraße 24-26
    80331 München

    Tel: 089 149903 – 0
    E-mail: [email protected]
    Web address: www.isarklinikum.de

    Pettenkofer Klinik GmbH
    Sonnenstraße 24-26
    80331 Munich
    Tel: 089 149903 – 0
    E-Mail: [email protected]
    Web address: www.isarklinikum.de

    Isar MVZ GmbH
    Sonnenstraße 24-26
    80331 Munich
    Tel: 089 149903 – 0
    E-Mail: [email protected]
    Web address: www.isarklinikum.de

    Legal basis of the processing
    Art. 6 para. 1, sentence 1 lit. a GDPR serves our company as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service or consideration, the processing is based on Article 6(1)(b) GDPR. The same applies to such processing operations that are necessary for the implementation of pre-contractual measures, for example in cases of inquiries about our products or services. If our company is subject to a legal obligation that requires the processing of personal data, such as for the fulfillment of tax obligations, the processing is based on Art. 6 para. 1 lit. c GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person, Art. 6 para. 1 lit. d GDPR. Finally, processing operations could also be based on Art. 6 para. 1 lit. f GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not prevail.

    Transfer of data
    Your personal data will not be transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties if:
     you have given your express consent to this in accordance with Art. 6 Para. 1, S. 1 lit. a GDPR,
     the disclosure in accordance with Art. 6 Para. 1, S. 1 lit. f GDPR is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
     in the event that there is a legal obligation to disclose your data in accordance with Art. 6 para. 1, sentence 1 lit. c GDPR, and
     this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1, sentence 1 lit. b GDPR.

    Rights of data subjects
    You have the right:
     to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
     in accordance with Art. 16 GDPR to immediately request the correction of incorrect or incomplete personal data stored by us;
     in accordance with Art. 17 GDPR to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
     in accordance with Art. 18 GDPR to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
     in accordance with Art. 20 GDPR to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request the transmission to another controller;
     pursuant to Art. 22 GDPR not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you;
     in accordance with Art. 7 para. 3 GDPR to withdraw your consent once given to us at any time. As a result, we may no longer continue the data processing based on this consent in the future and
     in accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority without prejudice to any other administrative or judicial remedy. As a rule, you can contact the supervisory authority of your habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes the EU General Data Protection Regulation (GDPR).
    The locally responsible supervisory authority:
    Landesamt für Datenschutzaufsicht
    Postfach 1349, 91504 Ansbach
    Promenade 18, 91522 Ansbach
    Tel.: 0981/ 180093-0
    Fax: 0981/ 180093-800
    Email: [email protected]

    Your trust is important to us. That is why we are always available to answer your questions regarding the processing of your personal data. If you have any questions that are not answered by this data protection declaration or if you would like more detailed information on a specific point, please contact our data protection officer:

    kraussfirmengruppe GmbH & Co. KG
    Streitheimer Str. 22, 86477 Adelsried
    Tel.: 08294 – 511480
    Fax: 08294 – 5114829
    Email: [email protected]
    Internet: www.kraussfirmengruppe.de

    Cookies
    Our website uses cookies. A cookie is a data record that is created when you visit a website and is temporarily stored on the website user’s system. If the server of our website is called up again by the user of the website, the browser of the user of the website sends the previously received cookie back to the server. The server can evaluate the information received through this process. Cookies can be used, for example, to control the display of advertisements or make it easier to navigate a website. Cookies are partly necessary to enable the functionality of our website operation (the legal basis is Art. 6 para. 1 lit. f GDPR, the protection of the legitimate interests of the operator of this website – we only use cookies in agreement with Art. 5 para. 1 lit. a GDPR, i.e. in accordance with the principles of “lawfulness, fairness and transparency”).
    If you want to prevent the use of cookies in general, you can do this by making local settings in your Internet browser (e.g. Internet Explorer, Mozilla Firefox, Opera or Safari).
    If cookies are not technically necessary, you will find further information on cookies used by tools and plugins in this privacy policy.

    Server log files (general data collection)
    Data and information are collected by an automated system each time this website is accessed. This data is stored in the server log files for a period of 14 days. The following data may be collected:
     Browser type and browser version
     Operating system used
     Internet service provider
     IP address
     Date and time of the server request
     Websites from which your system accesses our website
     Websites that are accessed by your system via our website
    The processing of the data serves to deliver the contents of our website, to ensure the functionality of our information technology systems and to optimize our website. The data in the log files is always stored separately from other personal user data.
    We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.

    External hosting
    This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster’s servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.
    The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).
    Our hoster will only process your data to the extent necessary to fulfill its performance obligations and follow our instructions with regard to this data.
    We use the following hoster:
    raidboxes®

    Order processing
    We have concluded an order processing contract (AVV) with the above-mentioned provider. This is a contract prescribed by data protection law, which ensures that the provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

    Links to other websites
    Our website/app may, from time to time, contain links to third party websites or to other websites of our own. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these privacy policies before you submit any personal data to these websites.

    Contact forms
    If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide there, will be stored and processed by us for the purpose of processing the inquiry and in the event of follow-up questions. Your data will be used exclusively for the purpose of answering and processing your question. The data processing is carried out in accordance with Art. 6 para. 1, sentence 1 lit. a GDPR on the basis of your voluntarily given consent. You can object to this at any time (right of revocation).

    References to third-party websites
    This website contains references to third-party websites in the form of so-called links. Links to third-party websites are marked with . Only when you click on such a link will data be transferred to the link destination. This is technically necessary. The data transmitted are in particular Your IP address, the time at which you clicked on the link, the page on which you clicked on the link, details of your Internet browser. If you do not want this data to be transmitted to the link destination, do not click on the link.

    Objection to advertising emails
    We hereby object to the use of contact data published as part of our duty to provide a legal notice for the purpose of sending unsolicited advertising and information material. We expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

    Inquiry by e-mail, telephone or fax
    If you contact us by e-mail, telephone or fax, your inquiry, including all personal data (name, inquiry), will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.

    Real Cookie Banner
    This website uses the cookie consent technology “Real Cookie Banner” to obtain consent to the storage of certain cookies on your end device or to the use of certain technologies and to document these in compliance with data protection regulations. The provider of this technology is devowl.io GmbH, Tannet 12, 94539 Grafling, website:
    https://devowl.io/de/wordpress-real-cookie-banner/ (hereinafter referred to as “Real Cookie Banner”).
    The following personal data is transmitted to Real Cookie Banner:
    – Consent(s) or revocation of your consent(s). the revocation of your consent(s)
    – IP address
    – information about the Internet browser used
    – information about the end device
    – time of visit to the website
    Furthermore, Real Cookie Banner stores a cookie in the browser in order to be able to assign the consents given or their revocation. The data collected in this way is stored until a request for deletion is made, the Real Cookie Banner cookie itself is deleted or the purpose for data storage no longer applies. Mandatory statutory retention obligations remain unaffected.
    Real Cookie Banner is used to obtain the legally required consent for the use of certain technologies. The legal basis for this is Art. 6, p. 1 lit. c GDPR.

    Google Analytics
    This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
    Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.
    Google Analytics cookies are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimize both its website and its advertising.
    IP anonymization
    We have activated the IP anonymization function on this website. As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
    Objection to data collection
    You can prevent the collection of your data by Google Analytics by not agreeing to the cookie consent for the corresponding cookie class (see Cookies).
    You can find more information on the handling of user data at Google Analytics in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
    Contract data processing
    We have concluded a contract with Google for contract data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

    Google Fonts
    Google web fonts(http://www.google.com/webfonts/) from Google Inc. (“Google”) are used for the uniform presentation of various information on the website. The web fonts are transferred to the browser cache when the page is called up so that they can be used for the display. If the user’s browser prevents access or does not support web fonts, the information is displayed in a standard font. In order to use web fonts, the browser used by the user must connect to Google’s servers. As a result, Google becomes aware that the provider’s website has been accessed via the user’s IP address.
    The uniform presentation of the information on the page constitutes a legitimate interest of the provider within the meaning of Art. 6 para. 1 lit. f GDPR.
    The user can prevent the loading of fonts via Google Web Fonts by setting their browser software accordingly. Information on the data protection conditions of Google Web Fonts can be found at: https://developers.google.com/fonts/faq#Privacy

    Google reCAPTCHA
    This website uses the Captcha service provided by Google to ensure that our website is used by humans and not by a computer program or bot. This service is provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. You can find more information about reCAPTCHA and Google’s privacy policy at the following links: https://policies.google.com/privacy?hl=de and https://www.adsimple.de/datenschutzerklaerung/google-recaptcha/

    Google Maps
    This website uses the Google Maps API to display geographical information. When using Google Maps, Google (Google LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043) also collects, processes and uses data about the use of the Maps functions by visitors to the websites. Google Maps is an interactive map that allows you to view addresses shown by us and use the map function.
    When you interact with Google Maps, it establishes a connection to Google and transmits information. If you are logged into your Google account during the interaction, Google can link this data directly to your account. We make Google Maps available to you exclusively via a double-click procedure. Before you can view the interactive map, you must therefore confirm once again that you agree to the associated transmission. The website will only establish contact with Google Maps once you have given your consent. The legal basis for our processing is consent in accordance with Art. 6 para. 1 lit. a GDPR or § 25 para. 1 TTDSG. You can object to the processing within the cookie settings in the browser.
    You can find more information about data processing by Google in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

    Google Tag Manager
    This website uses Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags via an interface. The tool itself (which implements the tags) is a cookie-free domain and does not store any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.
    Information from the third-party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. So-called standard contractual clauses pursuant to Art. 46 GDPR have been concluded with this service provider as suitable guarantees. Further information can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_de

    Hubspot
    This website uses Hubspot, a tool from the provider HubSpot, Inc, HubSpot Ireland Limited. Hubspot sets various cookies in different categories on our website. In this case, Hubspot sets cookies to recognize visitors over a longer period of time. This also supports the more precise separation of legitimate users under common IP addresses. The cookie therefore sets security settings on a per-client basis.
    We use this service as a service for marketing, content management, web analysis and search engine optimization. In particular, Hubspot stores information about your browser type, your IP address, files viewed and the time of your access.
    Further information on the processing of data by Hubspot can be found here: https://legal.hubspot.com/de/privacy-policy and https://legal.hubspot.com/de/website-terms-of-use
    “Addthis” bookmarking service
    This website contains “Addthis” plugins that allow you to set bookmarks or share interesting website content. The use of “Addthis” involves the use of cookies. The data generated (e.g. time of use or browser language) is transferred to Add This LLC in the USA and processed there. You can find more information on data processing by Add This LLC and the data protection maintained by Add This LLC at www.addthis.com/privacy. In particular, this website contains information on the type of data processed and the purpose for which it is used. We do not process the data concerned. By using the “Addthis” field, you consent to data processing by Add This LLC to the extent shown on the website www.addthis.com. You can object to the use of your data at any time by using an “opt-out cookie”. Further information on this can also be found on the aforementioned Add This LLC website.

    WordPress
    We use WordPress as the content management system for our website. WordPress uses functional (necessary) cookies to ensure the login process for editors and administrators.
    In particular, a cookie called wordpress_test_cookie is set when you attempt to log in to the WordPress administration interface. This cookie is used exclusively for the active session and is deleted as soon as you close the browser.
    The cookie is not used to evaluate users.

    SSL encryption
    This website uses SSL encryption (Secure Socket Layer) for the transmission of data from your browser to our server and to servers that provide files that we include on our website.
    SSL encrypts the transmission of data. The data cannot be changed and the sender can be identified.
    You can recognize the presence of SSL encryption by the text “https” in front of the address of the website that you call up in the browser.

    Security notice
    We secure our website and other IT systems against loss, destruction, unauthorized access, unauthorized modification or unauthorized dissemination of your data by means of suitable technical and organizational measures. However, despite all due care, complete protection against all risks is not possible in every case. As we cannot guarantee complete data security when communicating by e-mail, we recommend sending confidential information by post.

    Changes to this privacy policy
    We reserve the right to change this privacy policy if the legal situation or this online offer or the type of data collection changes. However, this only applies to declarations on data processing. If the user’s consent is required or components of the privacy policy contain a regulation of the contractual relationship with users, the privacy policy will only be amended with the user’s consent.

    Applicant information website

    Handling applicant data

    We offer you the opportunity to apply to us via various channels (e.g. by email, post, online application form or WhatsApp). In the following, we inform you about the scope, purpose and use of your personal data collected as part of the application process.

    Scope and purpose of data collection

    If you send us an application, we process your associated personal data (e.g. contact and communication data, application documents, notes taken during job interviews, etc.) insofar as this is necessary to decide on the establishment of an employment relationship. The legal basis for this is § 26 BDSG under German law (initiation of an employment relationship), Art. 6 para. 1 lit. b GDPR (general contract initiation) and – if you have given your consent – Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time with effect for the future.

    If the application is successful, the data submitted by you will be stored in our data processing systems on the basis of § 26 BDSG and Art. 6 para. 1 lit. b GDPR for the purpose of implementing the employment relationship.

    Data retention period

    If we are unable to make you a job offer, you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR) for up to 6 months from the end of the application process (rejection or withdrawal of the application). The data will then be deleted and the physical application documents destroyed. The retention serves in particular as evidence in the event of a legal dispute. If it is apparent that the data will be required after the six-month period has expired (e.g. due to an impending or pending legal dispute), the data will only be deleted when the purpose for further storage no longer applies.

    Data may also be stored for longer if you have given your consent (Art. 6 para. 1 lit. a GDPR) or if statutory retention obligations prevent deletion.

    Inclusion in the applicant pool

    If we are currently unable to make you a job offer, you may be able to join our applicant pool. If you are accepted, all documents and details from your application will be transferred to the applicant pool so that you can be contacted in the event of suitable vacancies.

    Inclusion in the applicant pool is based exclusively on your express consent (Art. 6 para. 1 lit. a GDPR). Giving your consent is voluntary and is not related to the current application process. You can revoke your consent at any time, in which case the data will be irrevocably deleted from the applicant pool, provided there are no legal reasons for storage.

    We will irrevocably delete the data from the applicant pool no later than 18 months after consent has been granted.

    Application via messenger service WhatsApp

    We inform you below about the processing of your personal data if you use the option of transmitting your applicant data and documents via WhatsApp.

    WhatsApp generally stores and transmits your data in encrypted form; however, the following so-called metadata is stored in unencrypted form:

    • Telephone number,
    • Location,
    • IP address,
    • Device information,
    • the type and frequency of app use

    Legal basis for data processing

    The permissibility of data processing is generally based on your consent in accordance with the European General Data Protection Regulation (GDPR), Art. 6 para. 1 lit. a). Your data may also be forwarded by WhatsApp to other companies of the META Group and other subcontractors. In order to ensure the permissibility of data processing in accordance with applicable law, we have concluded an order processing contract with WhatsApp. Any data transfers to a third country (e.g. the USA) are always carried out in accordance with the provisions of the European standard contractual clauses that are applied between the partners involved.

    If you use WhatsApp for your application process at our company, you can determine the storage period of your data at WhatsApp yourself. If you do not make use of this option, it is ensured in any case that your applicant data will not be stored indefinitely by WhatsApp or another company cooperating with WhatsApp in the USA or another third country.

    You can revoke your consent to data processing by WhatsApp at any time with effect for the future. To do so, please contact our company or our data protection officer.

    You can find more information in our flyer.