Supplements to the privacy policy

Status: January 2024

The information provided here supplements the data protection declaration for data processing by the controller when using digital patient admission and other services ("dPA").

Re section 3.5 "Cookies":

The dPA uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the computer or mobile device. The cookie contains a string of characters that enables the system to be uniquely identified when the dPA is used.

The cookies used ("session cookies") and the data stored and transmitted in them are automatically deleted at the end of your visit. The following cookies are used:

Analysis or marketing cookies are not used by dPA. These are only technically necessary cookies.

If personal data is processed by the cookies, we process it on the basis of a balancing of interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, which always takes your interests into account.

Re section 4.2 "Sub-processors of Nelly Solutions GmbH":

Nelly in turn uses sub-processors to fulfill the processing operations commissioned by the controller. These sub-processors have been checked and approved by the controller. Nelly has also concluded order processing contracts with these sub-processors in accordance with Art. 28 GDPR.

The following sub-processors are used:

If you have any questions about individual subcontractors or the processing of your personal data by them, you can contact Nelly at any time at the e-mail address datenschutz@nelly-solutions.com.

Analytical or marketing cookies are not used by dPA. These are exclusively technically necessary cookies.

Should personal data be processed by cookies, we process it on the basis of a balance of interests in accordance with Art. 6 (1) (f) GDPR, which always takes your interests into account.

With regard to Section 4.2 “Subprocessor of Nelly Solutions GmbH”:

Nelly in turn uses sub-processors to fulfill the processing operations commissioned by the person responsible. These sub-processors have been reviewed and approved by the controller. Nelly has also concluded order processing contracts with these sub-processors in accordance with Art. 28 GDPR.

The following sub-processors are used:

Name des Unterauftragnehmers	Adresse	Auszuführende Arbeit	Internationale Übermittlung (soweit zutreffend)
Amazon Web Services EMEA SARL	5 Rue Plaetis, L-2338 Luxembourg	Cloud-Server	Nicht zutreffend
Twilio Inc.	70 Sir John Rogerson's Quay, Dublin 2, Dublin, Ireland	Cloud-Kommunikation	EU
majUP (Majorel Berlin GmbH)	Wohlrabedamm 32, 13629 Berlin, Germany	1st (und 2nd Level) Kundenanfragen über E-Mail und Telefon.	Nicht zutreffend
Z.A.P Kerstin M. Marciniak e.Kfr.	Markt 35 - 37 57072 Siegen	Erstattungs- management	Nicht zutreffend
TYPEFORM SL	C/Bac de Roda, 163 (Local), 08018 – Barcelona (Spain)	Online-Formulare zur Patientenbefragung	EU
Intercom R&D Unlimited Company	2nd Floor, Stephen Court, 18-21 St. Stephen's Green, Dublin 2 (Republic of Ireland)	Patient Support	EU
Adyen N.V.	Simon Carmiggeltstraat 6-50, 1011 DJ in Amsterdam	Zahlungsabwicklung und POS-Terminals	EU
Mixpanel Inc.	Avenida Diagonal, 442 - P. 3 PTA. 1 08037, Barcelona, Spain	Produktanalytik und Nutzerverhalten Analyse	EU
DataDog Ireland Limited	70 Sir John Rogerson's Quay, Dublin 2, D02 R296, Ireland	Monitoring, Logging und Analyse von Anwendungs- und Infrastrukturdaten; Erfassung von Systemmetriken, Logs, Performance-Daten und APM (Application Performance Monitoring); Alerting und Dashboards	EU

Unterauftragnehmer Module “KI-Abrechnung” und “KI-Dokumentation”	Adresse	Auszuführende Arbeit	Internationale Übermittlung (soweit zutreffend)
Langfuse GmbH	Gethsemanestr. 4, 10437 Berlin, Germany	Bereitstellung von Observability- und Logging-Tools für KI-Anwendungen	Nicht zutreffend
Corti ApS	Kuglegårdsvej 2, 2. sal, 1434 København K, Dänemark	KI-gestützte Entscheidungsassistenz für medizinische Dokumentation	Nicht zutreffend
Microsoft Ireland Operations Limited	One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland	Betrieb von KI-Modellen (Azure) über Cloud APIs	Nicht zutreffend
Google Ireland Limited (Vertex AI)	Gordon House, Barrow Street, Dublin 4, D04 E5W5, Ireland	Betrieb von KI-Modellen (Vertex AI) über Cloud APIs	Nicht zutreffend
Amazon Web Services EMEA SARL (Amazon Bedrock)	5 Rue Plaetis, L-2338 Luxembourg	Zugriff auf Foundation-Modelle (KI-Modelle über Bedrock API)	Nicht zutreffend

If you have any questions about individual subcontractors or the processing of your personal data as a result of these, you can contact us at the e-mail address datenschutz@nelly-solutions.com contact Nelly at any time.