Legal
Privacy information
Controller
Rümeysa Kansu
hauscura7/24
Erper Feld 9
45768 Marl
Telephone: +49 1520 4970342
Email: kontakt@hauscura724.de
Hosting and server logs
This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin. Technically necessary connection data is processed when the website is accessed. This may include the IP address, time, requested file, amount of data transferred, browser and operating system. Processing is based on Article 6(1)(f) GDPR to provide the website securely and reliably. A data processing agreement has been concluded with STRATO. STRATO provides web server log files for the previous six weeks. Host names and IP addresses are anonymised in the log files available to us.
Cookies and audience measurement
When the hygiene box configurator is opened, a technically necessary session cookie is set. It contains a random security identifier, protects the form against abusive requests and is deleted when the browser is closed. The number of submission attempts is also limited without storing an IP identifier or form content. The legal basis is Article 6(1)(f) GDPR. No analytics, convenience or advertising cookies are used.
Fonts and external content
The Nunito Sans and Noto Sans Arabic fonts and all brand images are served from our own web space. No Google Fonts, maps, videos or social media plugins are embedded.
Configurator
When you submit a hygiene box request, we process the selected products, personal and address data, contact details, information about the private caregiver and care situation, health insurance details, insurance number, care grade, advice requirements, your declarations concerning assignment and billing, and your signature. Processing is carried out to review, handle and prepare the requested supply. The legal basis is Article 6(1)(b) GDPR. Information marked as required in the form is necessary for review and processing. Without it, the request cannot be submitted or processed.
Information concerning care needs, care grade and the care situation may constitute health data under Article 9 GDPR. We process this data on the basis of your explicit consent under Article 9(2)(a) GDPR. Consent covers processing for advice, provision and billing of care aids and the required transfer to the responsible long-term care insurance fund. You may withdraw consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. Without this information, we cannot process the online request. You may contact us by telephone instead.
Transfer and protection of the request
The information is transmitted to our web server via an encrypted HTTPS connection, checked on the server, compiled into a PDF document and sent to the responsible internal contact address through an authenticated, transport-encrypted STRATO mailbox. The email itself contains no names, addresses or health data. No permanent copy of the request is stored on the web server. Technical and organisational measures protect the documents against unauthorised access.
Recipients are the persons responsible for processing at hauscura7/24 and STRATO as part of hosting and email operation. Where required for the requested supply or its processing, information may also be transferred to the responsible health or long-term care insurance fund, shipping and logistics providers, and billing or tax advisory services. Transfer for preparation and performance of a contract is based on Article 6(1)(b) GDPR. Processing required to meet statutory retention, billing or documentation duties is based on Article 6(1)(c) GDPR. For health data, the explicit consent described above also applies. Each recipient receives only the data required for its task.
Retention period
Form emails, including the PDF attachment, are regularly reviewed after processing has been completed and manually deleted no later than 30 days afterwards. If a request results in a supply arrangement or contractual relationship, the necessary information is transferred to the subsequent processing workflow. Contracts, billing records and other documents subject to statutory retention duties are stored only for the required period. Data may be retained for longer where necessary to establish, exercise or defend legal claims.
Data may temporarily be included in technical backups of the hosting or email system. Such data is not used for other purposes and is deleted or overwritten as part of the relevant backup cycle.
Contact by telephone or email
If you contact us by telephone or email, we process the information you provide to handle your enquiry. The legal basis is Article 6(1)(b) GDPR for pre-contractual or contractual matters and Article 6(1)(f) GDPR for other enquiries. Please do not send sensitive health data in unencrypted emails; use the protected configurator or call us instead.
Your rights
Subject to the statutory requirements, data subjects may request access, rectification, erasure, restriction of processing, data portability and object to processing. Consent may be withdrawn at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.