1. Privacy at a Glance
General Information
Protecting your personal data is important to us. The following information provides an overview of the personal data processed when you visit our website and the purposes for which such data are processed. Personal data are any data that can be used to identify you personally.

Data Collection on Our Website
Data processing on this website is carried out by the website operator. The contact details of the controller can be found below in this Privacy Policy.

Some data are collected when you provide them to us, for example through a contact form, by email or when using our online appointment booking service. Other data are collected automatically by the IT systems used when you visit the website. These are primarily technical data such as your internet browser, operating system, IP address, and the date and time of your visit.

2. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Neuropoli
Joint Medical Practice (Berufsausübungsgemeinschaft)
Dr. (Univ. Tunis El Manar) Khouloud Poli und Prof. Dr. med. Sven Poli
Specialists in Neurology (Fachärzte für Neurologie)
Civil-law Partnership (Gesellschaft bürgerlichen Rechts, GbR)
Sophienstraße 7
76530 Baden-Baden
Germany
Phone: +49 7221 1879010
Email: info@neuropoli.com

3. Data Collection on Our Website
Hosting and Data Processing on Our Behalf
Our website is hosted by Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4–6, 32339 Espelkamp, Germany (hereinafter “Mittwald”).

Personal data collected on this website (e.g. IP addresses, metadata and communication data, or information entered into forms) are stored on Mittwald servers in Germany.

Mittwald is used for the secure, fast and efficient provision of our online services on the basis of Article 6(1)(f) GDPR. To ensure data protection-compliant processing, we have concluded a data processing agreement with Mittwald pursuant to Article 28 GDPR.

Provision of the Website and Creation of Log Files
Whenever our website is accessed, data and information are automatically collected from the computer system of the accessing device. These may include in particular:

• browser type and browser version
• operating system
• internet service provider
• IP address
• date and time of access
• website from which you accessed our website

The legal basis for the temporary processing of these data and log files is Article 6(1)(f) GDPR. The processing serves in particular to ensure the technical availability and functionality of our website and the security of our information technology systems.

Contact Form and Email Contact
If you contact us via the contact form or by email, we process the information you provide, including your contact details, in order to respond to your enquiry and any follow-up questions.

If you submit an enquiry using the contact form on our website, these data are additionally stored temporarily in encrypted form in the secure database of our website for technical reasons.

Depending on the content and purpose of your enquiry, processing is carried out in particular on the basis of Article 6(1)(b) GDPR. If you submit health data through the contact form and explicit consent is obtained for this purpose, processing is carried out on the basis of Article 9(2)(a) in conjunction with Article 6(1)(a) GDPR.

Automatic Deletion of Form Data
In order to comply with the principle of storage limitation, we have implemented an automatic deletion routine. Data temporarily stored in our website database through the contact form are automatically deleted after 30 days.

Where data are transferred to the patient's medical record in connection with medical treatment, the applicable statutory retention periods apply; such data are not affected by the automatic deletion of form data.

Online Appointment Booking via T2med
For online appointment booking, we use the online services provided by T2med GmbH & Co. KG, Bismarckallee 15, 24105 Kiel, Germany. The T2med online services include online appointment booking functionality.

When these services are used, the personal data processed include in particular name, date of birth, mobile phone number and email address. According to T2med's Privacy Policy, the medical practice using the online services is responsible for collecting these personal data.

T2med also processes technically necessary data, including the IP address, date and time of the request, requested content, browser and operating system. This processing is necessary to provide the online services and ensure their stability and security.

Personal data required for arranging an appointment are processed for the purpose of initiating and organizing the treatment relationship on the basis of Article 6(1)(b) GDPR. Where health data are processed in connection with appointment booking, such processing is carried out, where applicable, for the purposes of medical care pursuant to Article 9(2)(h) GDPR in conjunction with the applicable statutory provisions.

Further information on data processing by T2med can be found in the T2med Online Services Privacy Policy: https://account.t2med-online.de/privacy-policy

Special Notice Regarding Medical Confidentiality
Patient and health data are subject to a particularly high level of protection. Such data are processed in compliance with medical confidentiality and the specific data protection requirements applicable to health data, in particular Article 9 GDPR and the relevant national data protection provisions.

4. Your Rights
Subject to the applicable statutory requirements, you have in particular the following rights:

• right of access pursuant to Article 15 GDPR
• right to rectification pursuant to Article 16 GDPR
• right to erasure pursuant to Article 17 GDPR
• right to restriction of processing pursuant to Article 18 GDPR
• right to object to processing pursuant to Article 21 GDPR
• right to data portability pursuant to Article 20 GDPR

You also have the right to lodge a complaint with a data protection supervisory authority.

The competent supervisory authority is:
Baden-Württemberg State Commissioner for Data Protection and Freedom of Information (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, LfDI Baden-Württemberg)
Postfach 10 29 32
70025 Stuttgart
Website: www.baden-wuerttemberg.datenschutz.de

5. Data Security
Our website uses SSL/TLS encryption to protect the transmission of confidential information. An encrypted connection can be recognized, among other things, by the lock symbol in your browser's address bar.