Privacy

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Diabeteszentrum-DO Dres. K u. Ch. Busch GBR, Kampstraße 45, 44137 Dortmund.

You can reach us by phone on 0231 / 141 237, by fax on 0231 / 162 308 and by email at kontakt@diabeteszentrum-doc.de. Further details can be found in the imprint.

Every time this website is accessed, your browser transmits technically necessary data that our hosting provider stores in server log files. This covers the shortened or full IP address, the date and time of access, the page accessed, the browser and operating system used and the volume of data transferred.

This processing is technically necessary in order to deliver the website, ensure its stability and fend off attacks. The legal basis is our legitimate interest in secure and trouble-free operation under Article 6(1)(f) GDPR.

This data is not combined with other data sources. No evaluations are carried out that would allow conclusions to be drawn about your person. The log files are deleted automatically after a short time.

This website is hosted by Vercel Inc. (USA). It is delivered via servers in the Frankfurt am Main region (Germany). Vercel processes the access data described above exclusively on our behalf; we have concluded a data processing agreement under Article 28 GDPR.

Where personal data is transferred to the USA in this context, we base the transfer on the European Commission's standard contractual clauses or – where the provider is certified there – on the EU-US Data Privacy Framework.

You can send us a message using the form on the contact page. The data you enter is processed: your first and last name, your email address and the content of your message.

We use this data solely to deal with your request and any follow-up communication. The legal basis is your consent under Article 6(1)(a) GDPR, given when you submit the form, and Article 6(1)(b) GDPR where your enquiry relates to the conclusion or performance of a contract.

For the technical delivery of the form message to our practice mailbox we use the service Resend (Resend, Inc., USA) as a processor under Article 28 GDPR. Resend is certified under the EU-US Data Privacy Framework; in addition, the standard contractual clauses from the data processing agreement apply.

Please do not send us any health data or other sensitive information through the form. Please use the telephone or the post for that. You may withdraw your consent at any time with effect for the future; the lawfulness of processing carried out up to that point remains unaffected.

We delete your enquiry and the associated data as soon as it is no longer required for the purpose stated, provided no statutory retention periods prevent this.

If you contact us by email, telephone or fax, we process your details in order to deal with your request. The legal basis is Article 6(1)(b) GDPR for contract-related enquiries and otherwise our legitimate interest in answering your enquiry under Article 6(1)(f) GDPR.

Please note that emails are transmitted unencrypted and can therefore potentially be read by third parties. For confidential information – in particular health data – please use the post or call us.

On the contact page we embed a map from the Google Maps service (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

The map is not loaded automatically. Only when you expressly click „Load map“ is a connection to Google established and your IP address and further browser data transmitted to Google; this may involve a transfer to the USA. No data is transmitted to Google when you simply visit the page.

The legal basis for loading the map is your consent under Article 6(1)(a) GDPR. You can withdraw this consent at any time by reloading the page – the map is then deactivated again. Alternatively you can go straight to Google Maps using the „Plan route“ button; Google's privacy policy then applies.

The buttons for booking an appointment online lead to our profile on the appointment portal Doctolib (Doctolib GmbH). The bar at the edge of the page also consists exclusively of such links – we embed neither a script nor a widget from Doctolib, and the Doctolib logo shown there is stored on our own server.

The same applies to references to services such as LibreView: no content from these providers is embedded in our website. Data only flows once you click the link and open the provider's page. The campaign parameters appended (utm_…) merely tell Doctolib that you came via our website.

The respective provider alone is responsible for data processing on linked websites. Please read their information on how your data is handled. We have no influence on the content or the data processing of external pages.

You fill in the medical history forms directly in your browser. As long as you do not have the form sent to yourself, your answers stay on your device: they are neither transmitted to us nor stored. At the end there is a summary to print – please bring the printed form to your appointment.

On request we will send you the completed form by e-mail. The only recipient is the address you enter for this; nothing is sent to the practice. The legal basis is your consent under Art. 6(1)(a) and Art. 9(2)(a) GDPR, which you give by sending it.

For this dispatch your answers are transmitted once to our server and from there to the service Resend (Resend, Inc., USA), which we use as a processor under Art. 28 GDPR. Neither your answers nor your e-mail address are stored in the process. To prevent misuse, our server remembers for a short time how many forms have been sent from an IP address.

Please note: e-mails are sent unencrypted in transit and are therefore potentially readable by third parties, and the form contains health data. If you would like to avoid this, simply print the form instead of having it sent to you.

If you apply to us, we process the application documents you send solely in order to carry out the application procedure. The legal basis is section 26(1) of the German Federal Data Protection Act in conjunction with Article 6(1)(b) GDPR.

If no employment relationship comes about, we delete your documents no later than six months after the procedure has been completed, unless you have expressly agreed to longer storage. If you are employed, the data is transferred to your personnel file.

Independently of this website, we process your health data as part of your treatment. The legal basis is Article 9(2)(h) GDPR in conjunction with section 22(1) no. 1(b) of the German Federal Data Protection Act and the treatment contract under sections 630a et seq. of the German Civil Code.

Data is only passed on where this is necessary for treatment or billing or because of statutory obligations – for example to associations of statutory health insurance physicians, health insurers, laboratories or doctors involved in your further treatment. Under section 630f(3) of the German Civil Code we generally keep treatment records for ten years after treatment has ended; longer periods may arise from other provisions.

You will receive detailed information about the processing of your patient data as separate patient information at our practice.

We only pass on personal data where this is necessary for the purposes stated or where there is a statutory obligation. In connection with this website these are:

• Vercel Inc. (USA) – hosting and delivery of the website, server location Frankfurt am Main
• Resend, Inc. (USA) – technical delivery of messages from the contact form and of the medical history forms you have sent to yourself
• Google Ireland Limited (Ireland) – map display, only after you click „Load map“

We store personal data only for as long as it is necessary for the respective purpose or as statutory retention periods require. Server log files are deleted automatically after a short time, enquiries via the contact form or by email once they have been dealt with, application documents no later than six months after the procedure has been completed, and treatment records in accordance with the statutory periods.

As a data subject you have the following rights vis-à-vis the controller:

• Access to the data stored about you (Article 15 GDPR)
• Rectification of inaccurate data or completion of incomplete data (Article 16 GDPR)
• Erasure of your data, unless a statutory retention obligation applies (Article 17 GDPR)
• Restriction of processing (Article 18 GDPR)
• Receipt of your data in a common format (data portability, Article 20 GDPR)
• Objection to processing based on a legitimate interest (Article 21 GDPR)
• Withdrawal of consent given, with effect for the future (Article 7(3) GDPR)

Where we process data on the basis of a legitimate interest under Article 6(1)(f) GDPR, you have the right to object to that processing at any time on grounds relating to your particular situation. We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.

Please send your objection informally to kontakt@diabeteszentrum-doc.de or to the postal address given above.

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your data infringes the GDPR.

The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, telephone 0211 / 38424-0, email poststelle@ldi.nrw.de, www.ldi.nrw.de.

This website is delivered exclusively over an encrypted TLS connection (HTTPS). Data you enter in the contact form is therefore protected in transit. In addition we use technical and organisational measures to protect your data against loss, destruction, manipulation and unauthorised access.

We adapt this privacy policy as soon as changes to our website or to the legal framework make that necessary. The version published here applies in each case. Last updated: September 2026.