Privacy policy

We are very delighted that you have shown interest in our enterprise. Data protection is of a particularly high priority for the management of the BilDuIn GmbH. The following data protection provisions are intended to inform you about our handling of the collection, use and disclosure of personal data and about your rights under the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

Responsible organisation :

BilDuIn GmbH
Wilhelmstraße 92
13593 Berlin
Tel: +49 30 629 327 68
E-Mail: info@ecosero.com
Website: https//videoberatung.ecosero.de

1. general data collection when visiting our websites

If you visit our website https//videoberatung.ecosero.de, an anonymous data record is stored on our web server. This data record consists of

the date and time of the request,
a description of the type of web browser used,
the IP address of the requesting computer. IP addresses are anonymised after one hour on the web server by deleting the last 2 octets.

Data processing is carried out in the interest of enabling our website to be accessed and to improve the design of our website through statistical analyses and to be able to adapt it to the needs of website visitors. The information is also collected and analysed to prevent irregular requests in order to protect our website. Personal user profiles are not created and are therefore not subject to any deletion periods under the GDPR.

When you visit the website, we set a so-called session cookie (‘APPSESSION’), which is necessary for the technical provision of our service. The cookie is stored until the end of the session. You can also delete cookies immediately via your browser, but then you may not be able to use all the functions of our website to their full extent.

The legal basis is our legitimate interest in the technical function of the website in accordance with Art. 6 para. 1 litf. F GDPR

2. Registration on our website

As a service provider (doctors, therapists, carers, nursing staff, counsellors), you can only use our services on the platform if you have previously registered.

Clients (patients, people in need of care, people seeking advice) do not have to register in order to participate in video counselling, but they can do so voluntarily in order to be able to use account functions.

In the following, these persons are also referred to as ‘users’ or ‘data subjects’.

BilDuIn GmbH does not itself provide any medical and/or therapeutic services with videoberatung.ecosero.de. A treatment contract is concluded exclusively between the client and the respective service provider. Therefore, this data protection declaration does not provide any information about data processing procedures that the respective service provider carries out on its own responsibility. However, all service providers participating in the video counselling service are of course legally obliged to treat personal data in accordance with the applicable data protection and professional regulations. The treating service provider is solely responsible for the further processing of your data (including billing) following the video counselling session.

Clients and service providers register on the portal via https://videoberatung.ecosero.de/register or https://videoberatung.ecosero.de/portal/shop/register.

The following are recorded for clients
Salutation/gender
title
First name and surname
e-mail address
Password

For service providers, the following is also recorded
Postal address
Practice name
Type of practice
Contact details Contact person
E-mail address of contact person
Bank details

The data is part of the contractual user relationship between us and the service providers or clients in accordance with Art. 6 para. 1 lit. b GDPR.

Deletion of the profile or account can be triggered by a written cancellation to us.

3. Functions in the account area (service provider / client)

Personal data is processed for the functions in the account area. The following functions are available:

Appointment scheduling and appointment management
Invitation to appointments (only for service providers) incl. sending the invitation e-mail
Contacting BilDuIn GmbH via the contact form
Help page with e.g. user manual
View profile data and make changes
Create tasks (service provider profile only),
Virtual waiting room with later access to the video consultation
Document storage & specifications for events and login
Administration (only for service providers)

The profile picture can be uploaded voluntarily. Consent in accordance with Art. 6 para. 1 lit. a GDPR is given when uploading the profile picture. Before uploading, they will be informed of the possibility to object to this and can revoke their consent at any time.

The user can arrange for certain profile data to be deleted or corrected. Deletion of the profile or account can be triggered by a written cancellation to us.

4. Sending the invitation to participants

To participate in an event, users will be sent the access link by e-mail to the e-mail address they have previously provided.

The link to the waiting room is valid from planning/publication until the scheduled end of the event.

In addition to the access link, registered users can also access their events via the individual event calendar.

The access link to the video consultation is sent to the client by e-mail to the e-mail address previously provided. The functions themselves are part of the contractual use of the video consultation between the clients and us in accordance with Art. 6 para. 1 lit. b GDPR. The processing of client data serves to ensure proper authorisation to access the video consultation.

Insofar as client data is processed in the area of responsibility of the service providers, this is done lawfully in accordance with Art. 9 para. 2 lit. h GDPR within the framework of the treatment relationship or on the basis of the client's consent to the service providers.

5. Registration of participants in a video consultation

Before clients can access a video consultation, they must log in to the virtual waiting room using the access data provided to them and their name/nickname. The processing of client data as part of the registration process is used for authentication on the network provided by us.

Insofar as client data is processed in the area of responsibility of the service provider, this is done lawfully in accordance with Art. 9 para. 2 lit. h GDPR within the framework of the treatment relationship or on the basis of consent.

The registration data will be deleted after the session has ended. The link to the waiting room is valid from planning/publication until the planned end of the video consultation.

6. Implementation of the video consultation

As part of the actual implementation of the video consultation, personal data of the clients and service providers are collected as communication participants, in particular image and sound data. The functions of the video communication itself are part of the contractual use between the service providers and us or between the clients and us in accordance with Art. 6 para. 1 lit. b GDPR.

The data required to conduct the video consultation (video communication, metadata processing, establishing the connection) is automatically deleted after one hour.

7. Functions that are triggered during the video consultation via the portal

During the video consultation, the above-mentioned functions can be triggered, whereby personal data is processed. The functions themselves are part of the contractual use between the service provider and us in accordance with Art. 6 para. 1 lit. b GDPR.

The processing of client data serves the proper planning of video consultations, e.g. in the context of scheduling. Insofar as client data is processed in the area of responsibility of the service providers, this is done lawfully in accordance with Art. 9 para. 2 lit. h GDPR within the framework of the treatment relationship or on the basis of the client's consent to the service providers.

Image and sound data are automatically deleted at the end of the session. There is no recording function.

A chat is automatically deleted at the end of the session.

The moderator is responsible for inviting further participants.

The participants are responsible for sharing desktop content.

During video transmission, the audio and video data as well as text messages and documents are transmitted in encrypted form via a secure peer-to-peer connection between the client and the service provider. If a peer-to-peer connection cannot be established for technical reasons, we provide a proxy server.

The audio and video signals as well as text messages and documents cannot be viewed by us or our service providers at any time. The audio and video data are not stored at any time.

The service provider can save the documents locally. The transmission of this data is necessary for the performance of the video consultation and thus for the fulfilment of the contract (Art. 6 para. 1 sentence 1 lit. b GDPR).

All data required for the technical execution of the video consultation will be deleted from our systems immediately after the video consultation has ended.

8. Online contact form

If you communicate with us via the contact form, e-mail or another channel, we process your personal data to process your request, in particular contact data (e.g. name, e-mail address) and content data of the communication.

The legal basis for the processing of the data is Art. 6 para. 1 sentence 1 lit. b GDPR. According to this, we may process the data insofar as the processing is necessary for the fulfilment of a contract to which you are a party or for the implementation of pre-contractual measures. Otherwise, we base the data processing on your declaration of consent (Art. 6 (1) p. 1 lit. a GDPR), which you can revoke at any time.

The data on the online contact form is only temporarily stored on the form for transmission and is sent to us by email. Depending on the content of the contract or the reason for the enquiry, the data will then be stored within the statutory retention periods.

9. Recipients

We are supported by the following subcontracted service providers, which we have carefully selected. Processors are contractually obliged to comply with data protection.

Alfahosting GmbH, Ankerstraße 3b, 06108 Halle (data centre hosting including hard drive destruction and backup of the proxy server)
myLoc managed IT AG, Am Gatherhof 44, 40472 Düsseldorf (data centre hosting including hard drive destruction and backup of web, backend and DB servers as well as signalling, TURN/STUN servers)
1blu AG, Stromstraße 1-5, 10555 Berlin (data centre hosting including hard drive destruction and backup of the e-mail servers)

Banks and credit institutions support us with billing.

If necessary, we use debt collection agencies, law firms and courts in the event of the assertion of defaulting claims.

10. Data protection rights of the data subject

Data subjects have the right to obtain information from the controller about the personal data concerning them and to have incorrect data corrected or deleted if one of the reasons stated in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued. There is also the right to restriction of processing if one of the conditions specified in Art. 18 GDPR applies and, in the cases of Art. 20 GDPR, the right to data portability. If data is collected on the basis of Art. 6 para. 1 lit. e GDPR (data processing to fulfil official tasks or to protect the public interest) or Art. 6 para. 6 lit. f GDPR (data processing to protect legitimate interests), the data subject has the right to object to the processing at any time for reasons arising from their particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims.

Your consent can be withdrawn at any time, e.g. by sending an email to info@ecosero.com, without affecting the lawfulness of processing based on consent before its withdrawal. If consent is withdrawn, the corresponding data will be deleted unless it is required to fulfil the contract or to protect legitimate interests.

Cancellation notices

If data is collected on the basis of Art. 6 para. 1 lit. e or lit. f GDPR, you have the right to object to the processing at any time for reasons arising from your particular situation. BilDuIn GmbH will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

If possible, please address your objection to: BilDuIn GmbH, info@ecosero.com.

11. right to lodge a complaint with a supervisory authority

Every data subject has the right to lodge a complaint with a supervisory authority if he or she considers that the processing of data relating to him or her infringes data protection regulations. The right to lodge a complaint may be exercised in particular with a supervisory authority in the Member State of the data subject's habitual residence or place of the alleged infringement. In Berlin, the competent supervisory authority is the Commissioner for Data Protection and Freedom of Information:

Alt-Moabit 59-61
10555 Berlin
mailbox@datenschutz-berlin.de

We are member of: