Data Privacy

Data processing controller:

Strahlenzentrum Hamburg MVZ

Dr Fabian Fehlauer

Langenhorner Chaussee 369

22419 Hamburg, Germany

Tel.: + 49 (0)40-244 245 80

[email protected]


Data protection officer:

Marcel Petersen

KaroMedia Services GmbH

Gutenbergstr. 2a

21509 Hamburg, Germany

Tel. +49 (0)40 72810070

E-mail: [email protected]


Intended purpose of capturing, processing and using data:

The purpose of the company is to operate a clinic providing radiotherapy and radiosurgery, as well as all related offerings.



Description of the data subjects and the related data and data categories:

Data about patients, suppliers and employees, insofar as such data is required to fulfil the purposes stated above. Consequently, the following data or data categories are collected: address data, insurance data, bank account details, health data, data for human resources management and control, for communications, as well as for processing and checking transactions, billing and performance data, contact data.



Recipients or categories of recipients to whom the data may be disclosed:

Public bodies, should overriding legal regulations prevail (e.g. public health departments), external bodies (e.g. accounting offices, payroll accounting) and internal departments (e.g. management, controlling, care) for the fulfilment of the above-mentioned purposes.



Standard periods for data erasure:

The legislator specifies a variety of obligations and periods concerning retaining and deleting data. Once these periods have expired, the data concerned is deleted routinely. If data is not affected by such periods, it will be deleted when the above-mentioned purposes cease to apply.



Right of access, right to rectification, right to erasure and restriction of processing of data:

You have right of access, at any time, to personal data to stored about you, including where the data came from and who the recipients are, as well as the purpose of storing such data. You also have the right to ask us to rectify, erase or restrict processing of the data we store about you at any time. If legal, contractual, commercial or tax reasons, in particular legal retention periods, prevent the erasure of the data, processing of the data will be restricted instead.


Planned data transmission to third countries:

Data is only transmitted to EU member states and only for the above-mentioned purposes.


Google Analytics

Our website uses Google Analytics, a web-analysis service provided by Google. Google Analytics uses cookies (small text files), which are stored on your computer and can analyse your use of the website. The information generated by the cookie on your use of this website (including your IP address) is sent to a Google server in the US and stored there. Google will use this information in order to evaluate your use of the website, compile reports on website activity for the website operators and provide other services relating to website activity and internet usage. Google might also forward this information to third parties, if required by law, or if third parties process this data on behalf of Google. Google will never link your IP address with other Google data. You can prevent installation of cookies by making the appropriate settings to your browser. However, we would like to point out that you might then be unable to make full use of all this website’s functions. By using this website, you agree to Google processing the data captured about you in the above-mentioned way and for the above-mentioned purpose.


Google Maps

This website uses Google Maps from Google Inc. By using this website, you consent to the collection, processing and use of data automatically collected by Google Inc, its agents and third parties. Google Maps’ Terms of Service provide details of the terms of use.



This website uses cookies. Cookies help improve the website’s functionality. Make the appropriate settings in your browser if you do not want cookies to be stored on your computer.


Jameda seal and widget

Seals or widgets belonging to jameda GmbH, St. Cajetan-Strasse 41, 81669 Munich, Germany, are embedded in our website. A widget is a small window that displays information that changes. Our seal also functions in a similar way, in other words, it does not always have the same appearance but changes regularly. The relevant content is displayed on our website, but it is retrieved from the jameda servers at that moment. This is the only way of showing up-to-date content at all times, especially the current review in each case. To do so, a data connection must be made from this website to jameda and jameda receives specific technical data (date and time of the visit; the page from which the query is made; the internet protocol address [IP address] used, browser type and version, device type, operating system and similar technical information), which are required for content delivery. This data is only used to provide the content and is not stored or used elsewhere.


By integrating such data, we pursue the purpose and the legitimate interest of presenting up-to-date and correct content on our website. The lawfulness of processing is specified in art. 6 para. 1 f) GDPR. We do not store the above-mentioned resulting data. To arrange an appointment, you are forwarded to jameda processes the data you have provided at its own responsibility. For further information on data processing by jameda, please see the data privacy policy at



chocoBRAIN GmbH & Co. KG (“chocoBRAIN”) uses All-in-One Inbound Marketing Software to provide the basic technical requirements (as a “provider”), the visual and interactive functionalities of modern websites, as well as the marketing functionalities necessary for a business. The following data is sent automatically to chocoBRAIN to fulfil these purposes:

  • Visits to and navigation behaviour on the website
  • Visits and navigation behaviour in the case of e-mails sent by chocoBRAIN as a result of action on the website that users have consented to.
  • Queries and forms of any kind, reviews provided, comments etc.
  • Tailored customer support


The lawfulness of processing is specified in art. 6, section 1, lit. b GDPR, which permits the processing of data required for the performance of a contract or where such data is required before a contract is entered into.


chocoBRAIN only stores and processes this data if required by law and for the fulfilment of its contractual obligations. chocoBRAIN does not sell any data to third parties and only forwards data if legally obliged to do so.


To fulfil its contractual obligations, chocoBRAIN does use other third-party providers. Some of these services (such as Tag Manager and Google Analytics) are embedded on our website, but still belong to chocoBRAIN’s All-in-One Inbound Marketing Software. Other embedded services have become active because we have activated them in chocoBRAIN's All-in-One Inbound Marketing Software (e.g. Google Maps or YouTube).


For further details, please refer to chocoBRAIN’s data privacy policy.