Privacy Policy

This privacy policy explains how HELIOS Kliniken GmbH ("we," "us," "our") collects, uses, and protects personal data when you visit this website or contact us. It is written to comply with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the German Federal Data Protection Act (BDSG).

1. Data controller

The controller responsible for personal data processed through this website is:

HELIOS Kliniken GmbH
Friedrichstraße 136
10117 Berlin, Germany
Email: [email protected]
Commercial register: HRB 106350 B
D-U-N-S®: 322728288

2. Categories of data we collect

2.1 Data you provide directly

When you contact us through the contact form or by email, we collect the data you choose to provide: your name, email address, company name (optional), website (optional), monthly advertising budget range (optional), the topic of your enquiry, and the content of your message.

2.2 Data collected automatically

When you visit the website, our hosting infrastructure automatically processes certain technical data, including: your IP address (truncated where possible), the date and time of the request, the URL requested, the HTTP status code returned, the volume of data transferred, the referring URL (if any), and your user agent string (browser and operating system).

This data is stored in server log files for a maximum of 30 days for the purpose of operating, securing, and troubleshooting the website.

3. Purposes and legal bases

We process personal data only for specified, legitimate purposes and only where we have a lawful basis under Article 6(1) GDPR:

• Responding to enquiries — processing your contact form submission or email so we can reply. Legal basis: Article 6(1)(b) GDPR (steps prior to entering a contract) and/or Article 6(1)(a) GDPR (consent, given by submitting the form with the consent checkbox).
• Operating the website — processing technical data necessary to deliver the site to your browser and protect it from abuse. Legal basis: Article 6(1)(f) GDPR (legitimate interests in operating a secure website).
• Performance of a contract — where you become a client, processing data necessary to deliver the services you have engaged us for. Legal basis: Article 6(1)(b) GDPR.
• Legal compliance — retaining records as required by applicable accounting, tax, and commercial law. Legal basis: Article 6(1)(c) GDPR.

4. Recipients of personal data

We do not sell, rent, or trade personal data. We may share personal data with the following categories of recipients, in each case under appropriate contractual safeguards:

• Service providers acting on our behalf, including our hosting provider, email provider, and where applicable our payment processor and accounting provider. Each acts as a processor under Article 28 GDPR and is bound by a data processing agreement.
• Professional advisors such as accountants and legal counsel, where strictly necessary.
• Public authorities where we are required by law to disclose data — for example, to tax or law enforcement authorities under a valid legal basis.

We do not transfer personal data outside the European Economic Area unless an appropriate safeguard under Chapter V GDPR is in place (such as the EU Standard Contractual Clauses).

5. Retention periods

We retain personal data only as long as necessary for the purposes for which it was collected, or as required by law.

• Contact form submissions and email correspondence: up to 24 months after the last meaningful contact, unless a longer period is required by law.
• Client contractual data and related correspondence: retained for the duration of the engagement and for the statutory retention period thereafter (up to 10 years under German commercial and tax law).
• Server log files: maximum of 30 days.

6. Your rights

Under Articles 15 to 22 GDPR, you have the right to:

• Request confirmation of whether we process personal data about you, and obtain a copy of that data (right of access, Article 15);
• Request correction of inaccurate or incomplete data (right to rectification, Article 16);
• Request deletion of your data where one of the grounds in Article 17 applies (right to erasure);
• Request restriction of processing in the circumstances described in Article 18;
• Receive your data in a portable, machine-readable format (right to data portability, Article 20);
• Object to processing carried out on the basis of legitimate interests (right to object, Article 21);
• Withdraw consent at any time, where processing is based on consent — without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond within one month of receipt, in accordance with Article 12(3) GDPR.

7. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for our establishment is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61, 10555 Berlin, Germany

8. Cookies

This website uses a single first-party cookie to remember your choice on the cookie consent banner. We do not load analytics, advertising, or other third-party trackers without your explicit consent. For details please see our Cookie Policy.

9. Security

We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These include transport-layer encryption (TLS) for all data sent to and from the website, access controls on our internal systems, and regular review of our security practices.

No transmission over the internet can be guaranteed as 100% secure. We take reasonable steps to protect your data but cannot guarantee absolute security.

10. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. The "Last updated" date at the top of this page indicates when the policy was most recently revised. Material changes will be communicated through a notice on this website prior to taking effect.

11. Contact

For any questions about this privacy policy or how we handle personal data, please write to [email protected] or to the postal address listed in Section 1.