The AOK protects personal data and informs you not only about which data is stored, but also how it is used. The AOK complies with the statutory provisions on data protection.
It is important to us that you always know when we store which data and what we use it for. Each entry form therefore additionally entails a concrete data protection notice as well as the possibility of a revocation.
When you access our online offers, your browser automatically transmits data to our web server, namely:
- Date and time of access,
- Retrieved file,
- Internet address of the referring website,
- Browser type, -language and -version,
- Operating system.
This data is evaluated for statistical purposes and to improve our offer and subsequently deleted, unless otherwise stipulated by law.
Storage of IP Addresses
On behalf of the AOK, a hosting service provider collects data on every access to the server on which this service is located (so-called server log files) in order to safeguard legitimate interests in accordance with Art. 6 (1) lit. f of the General Data Protection Regulation [GDPR]. The access data includes the name of the retrieved website, file, date and time of retrieval, the amount of transmitted data, message about successful retrieval, browser type and version, the operating system of the user, referrer URL (the previously visited page), IP address and the requesting provider.
Logfile information is stored for technical reasons (to ensure the functionality and stability of the website) and for security reasons (for example, to investigate abusive or fraudulent activities) for a maximum of seven days and then deleted. In addition, the IP addresses are stored within the framework of the backup for a maximum of four weeks and then deleted. Data whose further retention is required for evidential purposes shall be exempted from the deletion until final clarification of the relevant incident. The transmission of the complete IP addresses does not take place. The AOK itself does not collect any IP addresses whatsoever and has no access to them at any given time. There is also no evaluation of the data effected for marketing purposes in this context.
The AOK uses the technology known as cookies. Cookies are small files that are stored on your PC. Two different types of cookies are used: so-called session cookies (related to one session) as well as permanent cookies. The general session cookies do not entail any personal data and expire after the end of the session. They serve the purpose of connection control and navigation, as well as provide you with a comfortable use of our Internet offer.
The permanent cookies used for the web analytics, are in order to safeguard the legitimate interests (i.e. interest in the analysis and optimisation of the online offers, in accordance with Art. 6 (1) lit. f of the General Data Protection Regulation [GDPR]), stored by the AOK, for statistical purposes and evaluated exclusively within the framework of the optimisation of the online offers, in the web analytics. These cookies automatically expire after 24 months unless you visit the respective AOK website again during this period. Insofar as you visit the respective AOK website again, these cookies will be read out. They are not used to personally identify the visitor to an AOK website.
Data Security and Encryption
Whenever you are prompted to enter personal data about yourself, your data will be protected, in the case of the transmission of data over the Internet, using the SSL encryption (Secure Sockets Layer Protocol), so that it is not readable by unauthorised third-parties.
For the purposes of the use of social media service offers of various companies, we provide you with social media plug-ins. These are incorporated into the online offers of AOK, by way of a 2-click process. The AOK itself does not collect any personal data whatsoever or make any use thereof by means of the social media plug-ins. However, over these plug-ins, data, including personal data, may be transmitted to the U.S. service providers and where expedient also be used by the latter. The hereby deployed procedure ensures that initially no personal data is passed on to the providers of the respective social media plug-ins, when you use our online offer. Only when you click on one of the social media plug-ins, can data be transmitted to the service providers and stored or processed by them.
Authorisations in Apps
AOK uses technology that is customary in the market to develop its website based on your habits in order to protect its legitimate interests in accordance with Article 6(1)(f) GDPR. To generate web statistics, AOK and its partners use Adobe SiteCatalyst by Adobe Systems Incorporated (hereinafter "Adobe"). AOK uses this service to process anonymous data in order to analyse which headings and text on its website are read more than others or how, for example, you find the navigation experience. Anonymous means that this data does not and cannot identify an individual. Such anonymous data includes information about links to AOK websites (referrer links), browsers, operating systems, screen resolutions, size of viewport , plugins, language settings, cookie settings, date and time, downloaded files, use of online forms (e. g.: frequency of submissions) and search engine terms. The system also records traffic-sources, process abandonment, site exits, the number of visits and visitors, used devices (e. g. smartphone, tablet or pc incl. manufacturer), single page visits, clicks and the time spent on the website and its corresponding web pages.
Adobe provides this information only to AOK in the form of summarised and anonymised data, which provides a picture of how the AOK websites are generally used. The data is not used in any other way or disclosed to third parties.
If you would prefer that AOK did not receive this information in future, you may object to the inclusion of your data in web analytics. To do so, please click here: Prevent tracking with Adobe SiteCatalyst
If you would like more information about data protection at Adobe or you would like to lodge your objection with Adobe directly, please click here.
In both cases, activating the objection will result in a persistent (objection) cookie being placed on your computer. However, the cookie does not mean that data cannot be transmitted to Adobe anymore; it just means that Adobe will no longer use the transmitted data for web analytics. However, any time you erase this (objection) cookie in your browser or by running cleaning software, you withdraw your objection.
Responsibility for Content and Information
The information offer of the AOK entails cross-references (links) to other Internet offers, e.g. of cooperation partners. The external (third-party) contents were checked when setting the links, with regard to whether, they violate applicable standards, pursuant to relevant provisions of civil or criminal law. However, it cannot be ruled out that these contents may be later changed, by the respective providers. Insofar as you are of the opinion that linked external sites violate applicable law or otherwise entail inappropriate content, please do not hesitate to indicate this to us. We shall review your indication and if necessary remove the external link immediately. The AOK is insofar not responsible for the content and availability of the linked external websites.
Please note that this data protection statement only applies to the internet offers of the AOK. The linked external content may be subject to other data protection and data security regulations. For details with regard to who is responsible for the respective offer, please refer to the respective imprint.