1. Clarification of facts according to Article 13 DSGVO.
The user scans a QR code. WhatsApp (if installed) is then opened automatically and a connection to the service provider Messenger People GmbH is established. The user then types in the text (the detected defect), after which the message is sent. The chat, or the message, is encrypted on the smartphone and only then does the message leave the device in the direction of WhatsApp. The chat is therefore only an encrypted file for WhatsApp and does not contain any personal readable data. The transfer to the Messenger People GmbH service is decrypted at Messenger People GmbH. From this moment on, personal data is accessible. This is where the AV contract with Messenger People GmbH and UKM IM GmbH takes effect immediately. Communication from Messenger People GmBH to UKM takes place via HTTPS (TLS 1.2 encryption). As soon as the message has been sent, the sender (user) immediately receives a confirmation with the privacy policy according to Art. 13 and Art. 14. The data is temporarily stored at WhatsApp and Messenger People GmBH and automatically deleted directly after transmission to UKM IM GmbH.
2. Which data / types of data are specifically affected?
Only name or pseudonym and mobile phone number of the reporting party and or personal data that the reporting party writes in the text.
3. Processing purposes
Shortening the communication channels through which the messages described in point 1 reach the entities responsible for their processing.
4. Legal basis for the processing
Art. 6 para. 1 lit. f; does not apply to patient data.
Use of personal data in the legitimate interest of Münster University Hospital.
Shortening of the communication paths by which the messages described in point 1 reach the bodies responsible for processing them.
5. Recipients or categories of recipients
UKM IM GmbH, for the processing of the reported defects/malfunctions. Only the reported faults or defects are forwarded to the respective departments. Personal data is not passed on in its entirety. Personal data is no longer available at this time.
6. Concrete duration of storage; alternatively: the criteria for the duration
Until the transfer to the UKM IM Service Stelle or technically necessary, after which personal data will be deleted immediately and the contents of the messages thereby anonymized.
7. Provision of personal data by the person concerned
In this case, the message is transmitted via a cell phone, including the data described in point 2. In this case, the telephone number is transmitted in any case.
8. Use of personal data for automated decision making
An "automated individual decision" means that decisions are calculated completely automatically without a human being evaluating the content of these calculations. At Münster University Hospital, personal data is not used for automated decision-making.
9. Name, contact details of the responsible person
The responsibility for the processing of personal data has:
UKM IM GmbH
Albert Schweitzer Campus 1
48149 Münster
10. Contact details of the data protection officer
University Hospital Münster
Data Protection Officer
UKM Albert Schweitzer Campus 1
48149 Münster
E-Mail: datenschutz@ukmuenster.de
11. Votice of rights of data subjects
Pursuant to Art. 13 (2) (b) of the General Data Protection Regulation, you have the right to the following
- Information (Art. 15 DSGVO and § 34 BDSG)
- Objection (Art. 21 DSGVO and § 36 BDSG)
- Data portability (Art 20 DSGVO)
- Deletion (Art 17 DSGVO and § 35 BDSG)
- Restriction of processing (Art 18 DSGVO)
- Correction (Art 16 DSGVO)
To assert the aforementioned rights, please use the form available on the Internet at the following address: www.betroffenenrechte.ukmuenster.de.
Alternatively, you can obtain a paper copy of the form from the Administration Gate, Albert Schweitzer Campus 1, Building D 5 (Domagkstraße 5).
Furthermore, you have the right to file a complaint with the supervisory authority:
State Commissioner for Data Protection and Freedom of Information
Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
Tel.: 0211/38424-0
