Recipients of personal data

Order processor of BetterDoc

Service providers	Type of processing	Data transfer to a third country
Amazon Services Europe S.à r.l. 38 Avenue John F. Kennedy L-1855 Luxembourg	AWS is the cloud infrastructure provider that BetterDoc uses for hosting the website and company data. The data is stored on the server, encrypted 'at rest.' The following data may be processed: name, address, date of birth, insurance, insurance number, as well as provided health information and mentioned specialists, call recordings (only with separate consent from the user)	The data is processed exclusively within the European Union. The AWS server locations are within the European Union and thus in a country included in Annex 1 of the DPO, which has an adequate level of data protection (Art. 16 para. 1 FADP).
CallOne GmbH Posthofstrasse 5 14467 Potsdam Germany	BetterDoc uses CallOne as call center software to conduct patient conversations. The following data may be processed: phone number, duration of the conversation, temporary storage of call recordings (only with separate user consent)	The data is processed exclusively within the European Union and therefore in a country listed in Annex 1 of the DPO that has an adequate level of data protection (Art. 16 para. 1 FADP).
Dracoon GmbH Galgenbergstrasse 2a 93053 Regensburg Germany	Secure Data Exchange and Storage provider used for storing medical data, primarily findings. Patients receive access to a personal password-protected Dracoon space where they can upload their findings and download their BetterDoc results. The data is stored on the server, encrypted 'at rest.' The following data may be processed: medical documents uploaded by the patient, BetterDoc conclusion with name, address, and mentioned specialists.	The data is processed exclusively within the European Union and therefore in a country listed in Annex 1 of the DPO that has an adequate level of data protection (Art. 16 para. 1 FADP).
Google Ads Google Building Gordon House 4 Barrow Street Dublin D04 E5W5 Ireland	Google Ads is a conversion marketing service for measuring the success of advertising campaigns. The following data may be processed: viewed advertisements, cookie ID, date and time of visit, device information, geographic location, IP address, search terms, displayed ads, customer ID, online identifiers, browser information	The data is processed within the European Union and therefore in a country listed in Annex 1 of the DPO that has an adequate level of data protection (Art. 16 para. 1 FADP). Personal data may be processed by this provider in third countries outside the European Union, e.g. by subcontractors. Any transfer by the service provider takes place on the basis of suitable guarantees (Art. 16 para. 2 FADP) or an adequacy decision (Art. 16 para. 1 FADP).
HIN (Health Info Net AG) Seidenstrasse 4 8304 Wallisellen Switzerland	BetterDoc uses this provider as an e-mail service provider for the secure communication of sensitive patient data.	Processing takes place exclusively on servers within Switzerland.
Mailjet GmbH Alt-Moabit 2 10557 Berlin Germany	BetterDoc uses this provider as an email service provider. The following data may be processed: email address	The data is processed exclusively within the European Union and thus in a country listed in Annex 1 of the DPO, which has an adequate level of data protection (Art. 16 para. 1 FADP).
MessageBird B.V. Alt-Moabit 2 10557 Berlin Germany	BetterDoc uses this provider as an SMS service provider. The following data may be processed: phone number	The data is processed exclusively within the European Union and thus in a country listed in Annex 1 of the DPO, which has an adequate level of data protection (Art. 16 para. 1 FADP).
Pipedrive ÖU Mustamäe Tee 3a 10615 Tallinn Estonia	Lead processing when online inquiries are made, for example, through the BetterDoc landing pages of the insurance. The following data may be processed: name, email address, phone number, date of birth, postal address (Pipedrive does not receive health data for processing)	The data is processed exclusively within the European Union and therefore in a country listed in Annex 1 of the DPO that has an adequate level of data protection (Art. 16 para. 1 FADP). If any transfer to a third country is carried out by subcontractors, this is done on the basis of suitable guarantees (Art. 16 para. 2 FADP) or an adequacy decision (Art. 16 para. 1 FADP).
PostDICOM B.V. Boven de Wolfskuil 3 A 24 6049 LX Herten Netherlands	DICOM Viewer, used for viewing radiological images. The data is stored on the server, encrypted 'at rest.' The following data may be processed: DICOM files provided by the patient	The data is processed exclusively within the European Union and thus in a country listed in Annex 1 of the DPO, which has an adequate level of data protection (Art. 16 para. 1 FADP).
Userlike UG Probsteigasse 44-46 50670 Cologne Germany	We use Userlike on our website, a live chat software from Userlike UG. The following data may be processed: date and time of access, browser type/version, IP address, operating system used, URL of the previously visited webpage, amount of data sent, chat duration, and chat content	The data is processed within the European Union and therefore in a country listed in Annex 1 of the DPO that has an adequate level of data protection (Art. 16 para. 1 FADP). Personal data may be processed by this provider in third countries outside the European Union, e.g. by subcontractors. Any transfer by the service provider takes place on the basis of suitable guarantees (Art. 16 para. 2 FADP) or an adequacy decision (Art. 16 para. 1 FADP).
VWO Wingify Software Pvt. Ltd. Heidenkampsweg 58 20097 Hamburg Germany	A/B testing to improve our website The following data may be processed: IP address.	The data is processed within the European Union and therefore in a country listed in Annex 1 of the DPO that has an adequate level of data protection (Art. 16 para. 1 FADP). Personal data may be processed by this provider in third countries outside the European Union, e.g. by subcontractors. Any transfer by the service provider takes place on the basis of suitable guarantees (Art. 16 para. 2 FADP) or an adequacy decision (Art. 16 para. 1 FADP).

Independent responsible persons

Name	Type of processing
Cooperating Insurances	If you use the BetterDoc service as part of an offer from your insurance company - e.g. health, accident, liability insurance, etc. - personal data (name, address, date of birth, insurance number, claim number if applicable) will be passed on to the respective insurance company or its billing service provider for billing and documentation purposes when you use the BetterDoc services. No transfer to a third country takes place.
Doctors and Hospitals	If the user wishes to make an appointment with a doctor or obtain a second medical opinion, the responsible employee at BetterDoc will transmit the patient's first and last name, address, date of birth, telephone number, name of health insurance and description of the health problem (medical history) to the doctor's practice or hospital in question by telephone, fax or an encrypted online channel. The user releases BetterDoc from its duty of medical confidentiality. Consent to this is obtained from the user. No transfer to a third country takes place.

Name

Type of processing

Cooperating Insurances

If you use the BetterDoc service as part of an offer from your insurance company - e.g. health, accident, liability insurance, etc. - personal data (name, address, date of birth, insurance number, claim number if applicable) will be passed on to the respective insurance company or its billing service provider for billing and documentation purposes when you use the BetterDoc services.

No transfer to a third country takes place.

Doctors and Hospitals

If the user wishes to make an appointment with a doctor or obtain a second medical opinion, the responsible employee at BetterDoc will transmit the patient's first and last name, address, date of birth, telephone number, name of health insurance and description of the health problem (medical history) to the doctor's practice or hospital in question by telephone, fax or an encrypted online channel. The user releases BetterDoc from its duty of medical confidentiality. Consent to this is obtained from the user.

No transfer to a third country takes place.