Privacy Policy

1. Data Controller

The entity responsible for data processing is:

MVZ Diabeteszentrum Dr. Tews GmbH
Herzbachweg 14E
Germany

Email: info@tews-diabetes.de

2. General Information on Data Processing

The protection of personal data is our top priority. Personal data is processed exclusively in accordance with legal requirements, in particular:

  • GDPR
  • BDSG
  • medical confidentiality
  • professional regulations.

3. Data Processed

When using NOVVA, the following data, in particular, may be processed:

Master Data

  • First and Last Name
  • Date of Birth
  • Address
  • Phone number
  • Email address

Health Data

  • Body weight
  • BMI
  • Pre-existing conditions
  • Medication
  • Allergies
  • Lab results
  • medical questionnaires
  • Treatment Information

Payment Information

  • Payment Status
  • Transaction Information

4. Purposes of Processing

In particular, the data is processed:

  • for the provision of telemedicine services,
  • for medical evaluation,
  • for communicating with patients,
  • Regarding the issuance of prescriptions,
  • for documenting medical services,
  • for billing,
  • for the technical implementation of the platform,
  • on abuse and safety prevention.

5. Legal Basis

Data processing is based on:

  • Art. 6(1)(b) of the GDPR (performance of a contract),
  • Art. 6, para. 1, subparagraph c GDPR (legal obligations),
  • Art. 9, para. 2 lit. Article h of the GDPR (medical treatment),
  • Art. 9, para. 2 lit. a GDPR (Consent).

6. Recipients of the Data

Data may be transmitted to:

  • attending physicians,
  • technical service providers,
  • Web hosting providers,
  • Payment service providers,
  • IT security service provider.

Information is disclosed only to the extent necessary.

7. Storage

Health data is stored in accordance with statutory retention requirements.

Medical records may be retained for up to ten years or longer due to legal requirements.

8. Rights of Data Subjects

Data subjects have the right, in particular, to:

  • Information,
  • Correction,
  • Deletion,
  • Restriction of processing,
  • Data portability,
  • Objection.

In addition, you have the right to file a complaint with a data protection supervisory authority.

9. SSL/TLS Encryption

The platform uses state-of-the-art encryption technologies to protect the transmission of confidential data.

10. Cookies and Tracking

The platform uses technically necessary cookies.

Analytics or marketing cookies are used only with your explicit consent.