Krankenversicherung für Jedermann

Privacy policy

General
Continentale BKK takes the protection of personal data very seriously. We want you to know when we store which data and how we use it. All data collected by us is subject to social data protection in accordance with the German Social Security Code (SGB). Data that is collected and stored in order to participate in offers on the website is subject to the data protection rules of the Digital Services Act (DDG). We collect and use your personal data exclusively within the scope of these provisions. We have taken technical and organisational measures to ensure that the data protection regulations are observed both by us and by external service providers. With regard to the terms used, we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

Responsible
Continentale Company Health Insurance Fund
Stefan Lorenz
Sengelmannstr. 120 | 22335 Hamburg

Data Protection Officer
Continentale Company Health Insurance Fund
Data Protection Officer
Sengelmannstr. 120 | 22335 Hamburg

Types of data processed

Inventory data (e.g., names, addresses).
Contact details (e.g., email, phone numbers).
Content data (e.g., text input, photographs, videos).
Usage data (e.g., web pages visited,
Interest in content, access times).
Meta/communication data (e.g., device information, IP addresses).

Purpose of the processing

Provision of the online offer, its functions and contents.
Responding to contact requests and communicating with users.
Safety measures.
Reach measurement/marketing

Personal data
Personal data is information that can be used to identify you. This includes, for example, information such as your first name and surname, address, postal address and telephone number.

With this data protection declaration, we inform you about the type, scope and purpose for which we collect and use personal data when you visit our website.

In accordance with Art. 13 GDPR, we inform you of the legal basis of our data processing. If the legal basis is not stated in the privacy policy, the following applies: The legal basis for obtaining consent is Art. 6 para. 1 lit. a and Art. 7 GDPR, the legal basis for processing to fulfil our services and implement contractual measures and respond to enquiries is Art. 6 para. 1 lit. b GDPR, the legal basis for processing to fulfil our legal obligations is Art. 6 para. 1 lit. c GDPR, and the legal basis for processing to protect our legitimate interests is Art. 6 para. 1 lit. f GDPR. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

If you are under the age of 16, we require the consent of your parents or legal guardians. Otherwise you may not transmit any data to us.

Use for information
In principle, you can use our online services without disclosing your identity if you only wish to obtain information on this website and do not wish to log in, register or transmit other information on the website.

In this so-called „use for information“, only data that your browser transmits to enable you to visit our website is collected.

These are, for example.

IP address,
Date and time of the request,
Content of the request (concrete page)

Right to information, deletion and revocation
You have the right to request confirmation as to whether the data in question is being processed and to request information about this data as well as further information and a copy of the data in accordance with Art. 15 GDPR.

In accordance with Art. 16 GDPR, you have the right to request the completion of data concerning you or the correction of incorrect data concerning you.
In accordance with Art. 17 GDPR, you have the right to demand that the data in question be deleted immediately or, alternatively, to demand that the processing of the data be restricted in accordance with Art. 18 GDPR.
You have the right to request to receive the data concerning you that you have provided to us in accordance with Art. 20 GDPR and to request that it be transferred to other data controllers.
You have the right to withdraw your consent in accordance with Art. 7 (3) GDPR with effect for the future.
You can object to the future processing of data concerning you at any time in accordance with Art. 21 GDPR. In particular, you may object to processing for direct marketing purposes
In accordance with Art. 77 GDPR, you also have the right to lodge a complaint with the competent supervisory authority.

Our supervisory authority for data protection is:
Federal Commissioner for Data Protection and Freedom of Information (BfDI)
Graurheindorfer Str. 153 | 53117 Bonn
Phone: +49(0)228 997799-0
E-mail: | De-Mail:

Cooperation with processors and third parties
If we disclose data to other persons and companies (processors or third parties) as part of our processing, transfer it to them or otherwise grant them access to the data, this will only be done on the basis of legal permission (e.g. if the transfer of data to third parties, such as payment service providers, is necessary for the fulfilment of the contract in accordance with Art. 6 para. 1 lit. b GDPR), you have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).

If we commission third parties with the processing of data on the basis of a so-called "order processing agreement", this is done on the basis of Art. 28 DSGVO.

Hosting and e-mail dispatch
The hosting services used by us serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, e-mail dispatch, security services and technical maintenance services, which we use for the purpose of operating this online offer.

In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta data and communication data of customers, interested parties and visitors of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer pursuant to Art. 6 (1) lit. f DSGVO in conjunction with Art. 28 DSGVO (conclusion of a contract processing agreement). Art. 28 DSGVO (conclusion of order processing agreement).

Collection of access data and log files
We, or rather our hosting provider, collect data on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. DSGVO, we collect data about each access to the server on which this service is located (so-called server log files). The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.

Log file information is stored for security reasons (e.g. to clarify acts of abuse or fraud) for a maximum of 7 days and then deleted. Data whose further storage is required for evidentiary purposes is exempt from deletion until the respective incident has been finally clarified.

Social media
We maintain online presences within social networks and platforms in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services there. When calling up the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply.

Unless otherwise stated in our privacy policy, we process users' data if they communicate with us within the social networks and platforms, e.g. write posts on our online presences or send us messages.

Integration of services and contents of third parties
Within our online offer, we use content or service offers of third-party providers on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO) content or service offers from third-party providers in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as "content").

This always presupposes that the third-party providers of this content recognise the IP address of the user, as they would not be able to send the content to their browser without the IP address. The IP address is therefore required to display this content. We endeavour to only use content whose respective providers only use the IP address to deliver the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. Pixel tags can be used to analyse information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring websites, visit time and other information about the use of our online offer, as well as being linked to such information from other sources.

Liability for links
Our offer contains links to external websites of third parties, on whose contents we have no influence. Therefore, we cannot assume any liability for these external contents. The respective provider or operator of the pages is always responsible for the content of the linked pages. The linked pages were checked for possible legal violations at the time of linking. Illegal contents were not recognisable at the time of linking. However, permanent monitoring of the content of the linked pages is not reasonable without concrete indications of a legal violation. If we become aware of any infringements of the law, we will remove such links immediately.

Our online offer contains links to other websites. We have no influence on whether their operators comply with data protection regulations.

System security
We shall take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk in accordance with Article 32 of the GDPR, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons.

The measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as the access, input, transfer, assurance of availability and separation of the data. We also have procedures in place to ensure the exercise of data subjects' rights, deletion of data and response to data compromise. Furthermore, we already take the protection of personal data into account in the development and selection of hardware, software and procedures, in accordance with the principle of data protection through technology design and through data protection-friendly default settings (Art. 25 DSGVO).

Matomo (formerly Piwik)

Our website uses the web analysis service Matomo. Matomo is an open source solution of the provider InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand.

Matomo uses "cookies." These are small text files that your web browser stores on your terminal device and which enable an analysis of website usage. Information generated by cookies about the use of our website is stored on our server. Before storage, your IP address is anonymised.

Cookies from Matomo remain on your terminal device until you delete them.

Matomo cookies are set on the basis of Art. 6 para. 1 lit. a GDPR. Matomo is deactivated when you visit our website. Your usage behaviour is only recorded anonymously if you actively consent to this.

No information about the use of this website stored in the Matomo cookie is passed on. The setting of cookies by your web browser can be prevented. However, some functions of our website may be restricted as a result.

Google Analytics

Nature and scope of the processing
We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online offer. This includes, for example, the number of times our online offer is called up, sub-pages visited and the length of time visitors spend on the site.
Google Analytics uses cookies and other browser technologies to evaluate user behaviour and recognise users.
This information is used, among other things, to compile reports on website activity.

Purpose and legal basis
The use of Google Analytics is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.
We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where there is no adequacy decision by the European Commission (e.g. in the USA), we have agreed other suitable guarantees with the recipients of the data within the meaning of Art. 44 et seq. GDPR have been agreed. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2023/1795 of 10 July 2023. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=CELEX:32023D1795.
In addition, before such a third country transfer, we obtain your consent in accordance with Art. 49 Para. 1 Sentence 1 lit. a. DSGVO, which you give via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of third country transfers, there may be unknown risks in detail (e.g. data processing by security authorities of the third country, the exact scope of which and its consequences for you we do not know, over which we have no influence and of which you may not become aware).

Storage period
The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Analytics: https://policies.google.com/privacy.

Google Tag Manager

Nature and scope of the processing
We use Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags through one interface and allows us to control the precise integration of services on our website.
This allows us to flexibly integrate additional services to evaluate user access to our website.

Purpose and legal basis
The use of Google Tag Manager is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Google Ads Customer Match

We use Google Ads Customer Match lists as part of our Google advertising activities. We use Google Ads Customer Match with your consent in accordance with Art. 6 para. 1 a) GDPR. To use Customer Match, lists with encrypted user data (e.g. names, email addresses, addresses, mobile advertiser ID, customer-specific identifiers) are uploaded to Google. Google then compares whether the transmitted user data matches existing Google customers. This in turn can be used to create target groups that can be used to target adverts/campaigns. Once the customer match lists have been created, the encrypted customer data is automatically deleted again. This prevents providers from obtaining new addresses.

The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as the processor. We have concluded a data processing agreement with Google for this purpose. Google LLC, based in California, USA, has joined the EU-U.S. Data Privacy Framework and is certified accordingly.

You can object to this use by preventing the installation of cookies by selecting the appropriate settings in your browser software (deactivation option). You can also customise personalised advertising in your Google user account in the Privacy tab according to your wishes. To do this, log in to Google and go to „Manage Google Account“ in the „Data and Privacy“ section.

You can find out how Google uses and processes your data here:
https://policies.google.com/technologies/partner-sites

Sustainability survey

Survey