Data protection information according to the GDPR for membership in and contribution to DAK-Gesundheit

Processing purposes and legal basis

DAK-Gesundheit uses your personal data for the purpose of establishing membership and insurance relationships and maintaining records in connection with membership and contribution rights; including the allocation procedure according to the AAG, debt collection and the legally required reporting procedures.

Your personal data is processed for this purpose either on the basis of

• Section 284 (1) no. 1, 2 and 3 of the Fifth German Social Code (SGB V) in conjunction with the respective standard of SGB V or
• Section 202 (2) SGB V or
• Section 33 (3) of the German Data Collection and Transfer Ordinance (DEÜV).

Data source

For the collection of receivables, we process data from official institutions, such as registration offices, enforcement agencies and credit agencies. As part of the statutory reporting procedures, we process data from social security institutions and employers.

Categories of data

• Identity details (name, date of birth)
• Contact details (address, e-mail, telephone numbers)
• Creditworthiness data
• Data for maintaining records (income data, employment periods, pension data, ...)

Categories of recipients

The categories of data recipients are service providers who process the data on behalf of DAK-Gesundheit for the above-mentioned purposes: IT service providers, enforcement bodies, employers, social security institutions and official institutions.

Data transfer to third countries

The data collected will not be transferred to a third country (countries outside of the European Union or the European Economic Area) or to an international organization. The only exception is Switzerland for the transmission of requests for enforcement.

Storage period

The data you provide are processed in accordance with the above-mentioned processing purposes and stored for these purposes until the statutory order lapses or the statutory retention period has expired.

Data controller and data protection officer

Rights of data subjects and right to lodge a complaint

Data protection information according to the GDPR for contacting us

Processing purposes and legal basis

DAK-Gesundheit uses your personal data for acquiring new members and maintaining member records, including retention work. The processing of your personal data for this purpose is based

• on consent that you have given on the basis of Art. 6 (1) sentence 1 lit. a GDPR or
• for acquiring new members on the basis of Art. 6 (1) sentence 1 lit. f GDPR, possibly in conjunction with Section 284 (4) SGB V.

Data sources

For the evaluation of insurance-related data, only the data legally collected and stored in accordance with Section 284 (1) SGB V is used. The acquisition of members is based on data from generally accessible sources in accordance with Section 284 (4) SGB V.

Categories of data

The categories of data are contact data:

• First and last name
• Date of birth
• If applicable, health insurance number
• Contact options such as address, telephone number, if applicable, and
• E-mail address

Categories of recipients

In addition to DAK-Gesundheit, data recipients are service providers who process the data on behalf of DAK-Gesundheit for the above-mentioned purposes: IT and communication service providers, marketing/event agencies, lettershops, market research institutes as well as telecommunications providers and logistics service providers. These recipients must guarantee that appropriate technical and organizational measures are carried out in such a way that the processing meets the requirements of the GDPR and the Social Codes, including SGB X, and that the rights of the data subjects are safeguarded.

No data transfer to third countries

The data collected is not transferred to a third country (countries outside of the European Union or the European Economic Area) or to an international organization.

Storage period

The data you provide are processed in accordance with the above-mentioned processing purposes and stored for these purposes until the consent you have given is revoked or the legal order no longer applies.

Data controller and data protection officer

Rights of data subjects and right to lodge a complaint

Data protection information according to the GDPR on automated individual case decisions

DAK-Gesundheit makes fully automated decisions in individual cases.
A decision is made using technical means without the direct involvement of a person. The requirements of Art. 22 GDPR are observed. In this context, DAK-Gesundheit may also make sovereign decisions (administrative acts) in administrative proceedings in a fully automated manner (Section 31a SGB X).
DAK makes fully automatic decisions in processes that can be checked and approved by a machine according to a defined scheme.
DAK takes into account all information from you that may affect the decision.