Privacy policy

Scope

This policy applies to the websites and services of helpwave GmbH reachable under the following domains and their subdomains:

• helpwave.de
• helpwave.io
• helpwave.org
• helpwave.net
• helpwave.eu
• helpwave.dev
• customer.helpwave.de
• tasks.helpwave.de
• id.helpwave.de
• scaffold.helpwave.de
• invest.helpwave.de
• support.helpwave.de
• status.helpwave.de
• appzumdoc.de
• app-zum-doc.de
• abzumdoc.de
• ab-zum-doc.de
• login.app-zum-doc.de
• mediquu.de
• mediquu.app
• mediquu.com
• mediquu.eu

This list is non-exhaustive: all subdomains of the domains listed above — including subdomains that are not explicitly listed here — are likewise covered by and fall under this privacy policy and its jurisdiction.

Please read this policy carefully so that you understand how we use and protect your data.

1. Data controller

The controller within the meaning of applicable data protection laws is helpwave GmbH, represented by the managing director (Felix Evers), with its registered office at:

Forckenbeckstraße 66, 52074 Aachen, Germany.

2. Collection and processing of personal data

We collect and process personal data about you when you visit our websites or use our services. This is done on the basis of your consent or where it is necessary for the performance of a contract or to comply with legal obligations.

The categories of personal data we may collect include:

• Contact data (name, address, email address, telephone number)
• Demographic information (age, gender, etc.)
• Usage data (IP address, browser type and version, pages visited, time spent)

3. Use of services and third-party providers

We use various services and third-party providers to operate and improve our website and services. These may include:

• BSI C5-certified German cloud provider — patient-data workloads and our shared services are hosted exclusively on a German operator that holds a current BSI C5 attestation. Each customer that processes patient data receives its own isolated instance; see our legal & infrastructure overview for details.
• Cloudflare — to optimize and secure our website.
• Facebook, Instagram and LinkedIn — for communication and marketing purposes; please consult the privacy policies of these platforms.
• Spotify and Spotify for Podcasters — to deliver audio content and analyze usage data; please consult Spotify's privacy policy.
• Google Analytics — to analyze website usage; please consult Google's privacy policy.
• Hetzner — for selected non-patient-data hosting workloads; please consult Hetzner's privacy policy.
• Google Firebase — used by App zum Doc for Firebase Cloud Messaging (FCM) push notifications. Further information is available on Google's websites.

4. Purposes of processing

We process personal data for the following purposes:

• To provide and improve our services
• For customer management and communication with you
• To perform contracts and provide services
• To comply with legal obligations
• To ensure IT security and data protection

5. Disclosure to third parties

We only share your data with third parties where this is permitted by law or where you have consented. This may, for example, be necessary in order to fulfil contracts or to process payments.

6. Your rights as a data subject

As a data subject, you have the right to obtain information about, rectification, erasure or restriction of the processing of your personal data. You also have the right to object to processing and the right to data portability.

7. Data protection authority in NRW

For questions about data protection or the processing of your personal data, you may also contact the data protection authority of North Rhine-Westphalia:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2-4, 40213 Düsseldorf, Germany
Website: https://www.ldi.nrw.de/

8. Data security

We take appropriate technical and organisational measures to protect your data against loss, misuse or unauthorised access.

9. Contact — Chief Legal Officer

For questions about the processing of your personal data, requests for information or other data-protection concerns, your direct contact is our Chief Legal Officer:

Dr. med. Ludwig Maidowski, Dipl.-Jur.
Chief Legal Officer · helpwave GmbH
Forckenbeckstraße 66, 52074 Aachen, Germany
Email: ludwig.maidowski@helpwave.de

For an overview of how patient data is isolated per customer, where helpwave is hosted and which certifications cover the underlying providers, see our legal & infrastructure overview.

10. Changes to this privacy policy

We reserve the right to adjust this privacy policy when necessary, in order to keep it in line with changed legal requirements or technical changes. The current version of the privacy policy is always available on our website.