Information on Data Processing by AOK-Bundesverband

Information on Data Processing by AOK-Bundesverband

• Why do we process your data, and on what legal basis?

  The AOK-Bundesverband processes data in accordance with the provisions of the EU General Data Protection Regulation:

  • To fulfill legal obligations pursuant to Article 6(1)(c) of the GDPR,
  • to fulfill its own contractual obligations pursuant to Article 6(1)(b) of the GDPR, as well as bilateral data protection agreements entered into by the AOK-Bundesverband as a data processor for the respective state AOKs pursuant to Article 28 of the GDPR in conjunction with Section 80 of SGB X. In these cases, data sovereignty remains with the respective state AOK,
  • based on voluntary consent granted for one or more specific purposes. The legal basis for this is Article 6(1), sentence 1, letter a of the GDPR.

• Where do we process your data?

  The processing of social data is only permissible in Germany or another member state of the European Union or the European Economic Area if the legal requirements specified for this are met. Data processing outside the European Union or the European Economic Area may only take place under the strict conditions of the Social Code and the General Data Protection Regulation, provided that an adequacy decision in accordance with Art. 45 EU-GDPR is available, which confirms an adequate level of protection.

• What data do we process?

  We process the following categories of data:

  1. Personal data (e.g. address and communication data, date of birth, photo)
  2. Data on optional tariffs and bonus programmes
  3. Data from promotions and programmes
  4. Data of care providers and other contractual partners
  5. Data of prospective customers, competition participants

• Who receives your data?

  AOK Bundesverband may use and process the lawfully collected and stored data of the data subject for other purposes if there is another legal basis for doing so under the SGB or if the data subject has given their express consent for this. Furthermore, data may be transferred only in those individual cases stipulated by law under Section 67d et seq. SGB X (e.g. police authorities, local and municipal administration, tax authorities).

  The AOK Bundesverband can have its statutory tasks performed by other service providers (in particular, data processors).

• How long do we store your data for?

  We process and store your data for as long as is necessary to fulfil our contractual obligations or for as long as your consent remains valid. Once the data is no longer required to fulfil these obligations, it is deleted on a regular basis.

• What rights do you have?

  • Right of access to processed data (Art. 15 GDPR in conjunction with Section 83 SGB X)
  • Right to rectification of inaccurate data (Art. 16 GDPR in conjunction with Section 84 SGB X)
  • Right to erasure (Art. 17 GDPR in conjunction with Section 84 SGB X)
  • Right to restriction of processing (Art. 18 GDPR in conjunction with Section 84 SGB X)
  • Right to object (Art. 21 GDPR in conjunction with Section 84 SGB X)
  • Right to data portability (Art. 20 GDPR)
  • In the case of data processing based on consent, you have the right to revoke this consent at any time with future effect

• Who is responsible for data processing and who can you contact in this regard?

  Controller:


  AOK-Bundesverband

  Rosenthaler Straße 31

  10178 Berlin


  phone: +49 (0)30 34646-0
  aok.de/pp/bv/

  If you have any questions or if you believe that the processing of your personal data is not being carried out lawfully, you can contact us or our data protection officer. You can reach our data protection officer at:


  Contact details of data protection officer:


  Data protection officer at AOK
  Contact form (german)

  AOK-Bundesverband GbR
  Rosenthaler Straße 31

  10178 Berlin 


  phone: +49 (0)30 34646-0

• Do you have a right of complain?

  You have the right to complain to the supervisory authority if you believe that the processing of your personal data is not being carried out lawfully. The address of the supervisory authority responsible for AOK-Bundesverband is:

  Berliner Beauftragte für Datenschutz und Informationsfreiheit

  Friedrichstr. 219

  10969 Berlin

  phone: +49 (0)30 13889-0
  e-mail: mailbox@datenschutz-berlin.de