Privacy policy for NQAP

Compliance with data protection regulations is a high priority at MÜNCHENSTIFT. We would therefore like to inform you below about the collection of your personal data in connection with the digital application plattform for a nursing place NQAP for registration for short-term care or full inpatient admission in accordance with Art. 13 of the General Data Protection Regulation (GDPR).

1. Controller

The controller responsible for the collection and processing of your personal data that we receive from you when you complete the medical questionnaire is named in the imprint.

2. Purposes and legal bases of data processing

For pre-contractual measures, we need to process personal data about you and your dependents.

The legal basis for the collection of your data is the processing of data pursuant to Art. 6 para. 1 sentence 1 lit. b) GDPR in connection with the contract to be concluded and Art. 6 para. 1 sentence 1 lit. f) GDPR in connection with special laws (in particular from the Social Security Codes) as well as from direct collection obligations from the special laws of the Social Security Codes (Art. 6 para. 1 sentence 1 lit. c) GDPR).

In particular, the following data is collected within the scope of your application for the purpose of coordinating occupancy and planning the contractual relationship:

  • Master Data: Last Name, First Name; Date of Birth; Contact Information; Address
  • Care or guardianship information
  • Close dependents contact information
  • Desired move-in date
  • Type of health insurance
  • Care model information
  • Preferred care facility and room type

If health data are processed in this context, the legal basis under data protection law is Art. 9 para. 2 lit. h) GDPR. These are processed in particular for various purposes within the framework of the implementation and planning of the contractual relationship:

For resource and problem identification, e.g.:

  • Self-care,
  • Medical prescriptions and medication administration,
  • Risk assessment of pressure sores and fall hazards and consideration of necessary prophylaxis.

To determine the nursing goals, e.g.:

  • Level of care including classification note
  • Need for protective care units

To plan and implement nursing measures, e.g.:

  • Important diagnostic information
  • Information on the required aids

3. Storage period

We will delete your personal data when it is no longer required for the above-mentioned processing purposes and no legal obligation to retain it prevents deletion.

4. Data transmission

Of course, we treat your data confidentially and only pass it on to third parties if there is an obligation to pass it on or a right to do so under data protection law.

We share your data with service providers who support us in the operation of our application platform and related processes as part of order processing in accordance with Art. 28 GDPR. Our service providers are strictly bound by our instructions and contractually obligated to comply with them.

Your data will neither be used for other purposes nor processed outside the EU.

5. Data subject rights

As a data subject, you have the right to information about the personal data that concerns you, as well as to the correction or deletion of incorrect data, provided that one of the reasons cited in Art. 17 GDPR is constituted, such as the data are no longer required for the purposes pursued.

You also hold the right to restrict processing if any of the preconditions set out in Art. 18 GDPR apply and, in cases of Art. 20 GDPR, the right to data transfer.

If data are collected on the basis of Art. 6 para. 1 p. 1 lit. f) GDPR, the data subject has the right to object to the processing at any time for reasons relating to their particular situation. In this case, we shall no longer process your personal data unless we can demonstrate compelling reasons for processing that override the interests, rights and freedoms of the data subject, or unless processing serves the assertion, exercise or defence of legal claims.

Any data subject has the right to complain to the supervisory authority if they consider that the processing of their personal data breaches data protection regulations. The responsible supervisory authority is:

Bayerische Landesamt für Datenschutzaufsicht
Home address: Promenade 18, 91522 Ansbach
Postal address: Postfach 13 49, 91504 Ansbach
+49 981 531300
poststelle@lda.bayern.de

6. Our data protection officer

You also have the right to contact our data protection officer at any time, who is bound to secrecy regarding your request. The contact details of our data protection officer can be found on the privacy policy page.

We will be happy to provide you with more detailed information on request.

Version: December 2024