What is a gough

Privacy policy

I. General information


Contact details of the person responsible
Group practice
Physiotherapy, manual and occupational therapy
David M. Gough & Linda-Ellen Blacks
Industriestrasse 5
32469 Petershagen
Phone:(05702) 8 39 91 44
Fax:(05702) 85 17 94
E-mail:[email protected]

II. Specific information on the collection of personal data


  1. Visit the website

    1. Purpose of data collection and processing

      Every time a user accesses a page of our offer and every time a file stored on the website is called up, access data about this process is stored in a log file. Each data record consists of:

      (1) the page from which the file was requested,
      (2) the name of the file,
      (3) the date and time of the request,
      (4) the amount of data transferred,
      (5) the access status (file transferred, file not found etc.),
      (6) a description of the type of operating system and web browser used,
      (7) the client IP address.

      The client IP address is used for the purpose of transmitting the requested data; after the technical requirement has ceased to exist, it is anonymized by deleting the last number block (Ipv4) or the last octet (Ipv6).

    2. Duration of storage

      The data is stored every time a user accesses a page of our offer and every time our website is accessed and is deleted as soon as it is no longer required for the purpose of collection, which is the case when the visitor leaves our website.

    3. Legal basis

      The temporary storage of the aforementioned data takes place on the legal basis of Article 6 (1) (f) of the EU General Data Protection Regulation (hereinafter "GDPR"). The legitimate interest lies in the provision of our website.

    4. Opposition and removal option

      The data subject can object to the processing.

  2. Execution of the contract

    1. Purpose of data collection and processing

      Name, address (es), bank details, e-mail address, telephone or fax number, client IP address at the time of submitting a contract declaration are collected, stored and processed solely for the purpose of establishing or executing the contract, in particular the billing and the Execution of the contract includes.

      The personal data will only be passed on to third parties if this is necessary for the purpose of executing the contract, for example when commissioning a shipping company or using a payment service company.

    2. Duration of storage

      The data will be deleted as soon as they are no longer required for the purposes for which they were collected or otherwise processed. This period is five years for personal data subject to Section 147 AO and ten years for personal data subject to Section 257 HGB. The deadlines begin at the end of the calendar year in which the data was collected.

    3. Legal basis

      The aforementioned data is stored on the legal basis of Art. 6 Paragraph 1 lit. b and lit. c GDPR.

    4. Opposition and removal option

      Since there are legally standardized retention periods and the data must remain stored and processed for the execution of the contract, an objection or deletion is not possible.

  3. E-mail, fax or telephone contact

    1. Purpose of data collection and use

      A user can contact us by email (also using the contact form), fax or telephone. We save the data transmitted to us and provided by the person concerned in order to process the request. This data is name, address, e-mail address, telephone and / or fax number, date and time of the request and the description of the request, if necessary contract data, if the request is made in the context of a contract entry or processing. The data will not be passed on to third parties. They are used to process the data subject's contact request.

    2. Duration of storage

      As soon as the data is no longer necessary to achieve the purpose, it will be deleted, which is the case when the conversation has finally been settled and the matter has been clarified and there are no contractual or tax retention periods to the contrary. This period is five years for personal data subject to Section 147 AO and ten years for personal data subject to Section 257 HGB. The deadlines begin at the end of the calendar year in which the data was collected.

    3. Legal basis

      The aforementioned data is stored on the legal basis of Article 6 (1) (a) GDPR only after prior consent in the context of the request, in accordance with Article 6 (1) (b) GDPR in the context of initiating or fulfilling a contract or in accordance with Art. 6 para. 1 lit.f GDPR. The legitimate interest of the person responsible is to be able to process the contact request and to be able to prevent misuse of the contact request. A revocation of consent at any time does not affect the legality of the processing of personal data that was carried out on the basis of the consent until the revocation.

    4. Opposition and removal option

      The data subject has the option at any time to revoke the consent he has given to data processing and to object to the storage. The data stored for the process will then be deleted. If a contract has been concluded, what has been said above under Section II.2 applies.

III. Rights of the data subject

If "personal data" is processed by the user on our website, the person concerned (affected person) has the following rights vis-à-vis the person responsible in accordance with the GDPR.

  1. Right to information according to Art. 15 GDPR

    The person concerned has the right to the following information:

    1. the purposes of the processing;
    2. the categories of personal data that are processed;
    3. the recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed, in particular in the case of recipients in third countries or international organizations;
    4. if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
    5. the existence of a right to correction or deletion of the personal data concerning you or to restriction of processing by the person responsible or a right to object to this processing;
    6. the existence of a right to lodge a complaint with a supervisory authority;
    7. if the personal data are not collected from the data subject, all available information on the origin of the data;
    8. The existence of automated decision-making including profiling in accordance with Art. 22 Paragraphs 1 and 4 GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
    9. If personal data is transmitted to a third country or to an international organization, the person concerned has the right to be informed about the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transmission.
      We provide the data subject with a copy of the personal data that is the subject of the processing. For all further copies that the person concerned requests, the person responsible can demand an appropriate fee based on the administrative costs.

  2. Right to correction according to Art. 16 GDPR

    The person concerned has the right to demand that the person responsible immediately correct any incorrect personal data relating to them. Taking into account the purposes of the processing, the data subject has the right to request the completion of incomplete personal data - including by means of a supplementary declaration.

  3. Right to deletion according to Article 17 GDPR

    The person concerned has the right to demand that the person responsible delete personal data concerning him immediately, and the person responsible is obliged to delete personal data immediately if one of the following reasons applies:
    1. the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
    2. the data subject revokes their consent on which the processing was based in accordance with Article 6 (1) (a) or Article 9 (2) (a) GDPR, and there is no other legal basis for the processing;
    3. the data subject objects to the processing in accordance with Art. 21 Paragraph 1 GDPR and there are no overriding legitimate reasons for the processing, or the data subject objects to the processing in accordance with Art. 21 Paragraph 2 GDPR;
    4. the personal data was processed unlawfully;
    5. the deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the member states to which the person responsible is subject;
    6. the personal data was collected in relation to information society services offered in accordance with Art. 8 Para. 1 GDPR.

  4. Right to restriction of processing according to Art. 18 GDPR

    The data subject has the right to request the controller to restrict processing if one of the following conditions is met:
    1. the correctness of the personal data is disputed by the data subject for a period that enables the person responsible to check the correctness of the personal data,
    2. the processing is unlawful and the data subject refuses to delete the personal data and instead requests that the use of the personal data be restricted;
    3. the person responsible no longer needs the personal data for the purposes of processing, but the data subject needs them to assert, exercise or defend legal claims, or
    4. the person concerned has lodged an objection to the processing in accordance with Art. 21 Para. 1 GDPR, as long as it has not yet been determined whether the legitimate reasons of the person responsible outweigh those of the person concerned.

  5. Right to information according to Art. 19 GDPR

    If the person concerned has asserted a correction according to Art. 16 GDPR, a deletion according to Art. 17 Para. 1 GDPR or a restriction of processing according to Art. 18 GDPR to the person responsible, and the person responsible has all recipients to whom the personal data of the person concerned have been disclosed, informed about the request of the person concerned (unless this was impossible or associated with disproportionate effort), the person concerned has the right to be informed by the person responsible about the recipient.

  6. Right to data portability Art. 20 GDPR

    The person concerned has the right to receive the personal data concerning him, which he has provided to a responsible person, in a structured, common and machine-readable format, and he has the right to transmit this data to another responsible person without hindrance from us, provided that

    1. the processing is based on consent in accordance with Article 6 (1) (a) or Article 9 (2) (a) or on a contract in accordance with Article 6 (1) (b) GDPR and
    2. the processing is carried out using automated procedures. This must not impair the rights and freedoms of other people. When exercising the right to data portability in accordance with paragraph 1, the person concerned has the right to have the personal data transmitted directly from us to another person responsible, insofar as this is technically feasible. Exercising the right to data portability does not affect the right to erasure according to Art. 17 GDPR. The right to data portability does not apply to processing that is necessary for the performance of a task that is in the public interest or takes place in the exercise of official authority that has been transferred to the person responsible.

  7. Right to object according to Art. 21 GDPR

    The data subject has the right to object at any time to the processing of personal data concerning him or her on the basis of Article 6 (1) (e) or (f) GDPR for reasons that arise from his or her particular situation; this also applies to profiling based on these provisions.
    We no longer process the personal data unless we can prove compelling legitimate reasons for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
    If personal data is processed in order to operate direct mail, the person concerned has the right to object at any time to the processing of personal data concerning him for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising. If the data subject objects to processing for direct marketing purposes, the personal data will no longer be processed for these purposes. Any consent given by the person concerned can be revoked at any time. However, the collection and processing that has taken place up to this point remains lawful.

  8. Automated decisions in individual cases including profiling according to Art. 22 GDPR

    The person concerned has the right not to be subjected to a decision based solely on automated processing - including profiling - which has legal effect on him or which significantly affects him in a similar manner. This does not apply when making the decision

    1. is necessary for the conclusion or performance of a contract between the data subject and us,
    2. is permissible on the basis of Union or Member State legislation to which we are subject and this legislation contains appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the person concerned or
    3. takes place with the express consent of the person concerned.
      These decisions may not be based on special categories of personal data according to Art. 9 Paragraph 1 GDPR, unless Art. 9 Paragraph 2 lit. a or g GDPR applies and appropriate measures to protect the rights and freedoms as well as the legitimate interests of the data subject were hit.
      In the cases mentioned under a) and c), we take appropriate measures to protect the rights and freedoms as well as the legitimate interests of the person concerned, including at least the right to obtain intervention by a person on our side, to express our own point of view and heard on contesting the decision.

  9. Right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR

    Without prejudice to any other administrative or judicial remedy, every person concerned has the right to lodge a complaint with a supervisory authority, in particular in the member state of their place of residence, their place of work or the place of the alleged violation, if the person concerned is of the opinion that the processing of the personal data concerning them is against violates this regulation.
    The supervisory authority to which the complaint was submitted informs the complainant about the status and the results of the complaint, including the possibility of a judicial remedy in accordance with Art. 78 GDPR.

  10. Right to an effective judicial remedy according to Art. 79 GDPR

    Without prejudice to any available administrative or extrajudicial remedy, including the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR, every person concerned has the right to an effective judicial remedy if he is of the opinion that the rights to which he is entitled based on this ordinance are inconsistent processing of his personal data in accordance with this regulation has been violated.
    The courts of the member state in which we or the processor have an establishment are responsible for actions against us or against a processor. Alternatively, such actions can also be brought before the courts of the Member State in which the data subject is domiciled, unless we or the processor are an authority of a Member State that has acted in the exercise of its sovereign powers


Privacy policy provided by:

Law firm for media, IT & advertising

Are you looking for an external data protection officer?
Our specialist and partner: