Privacy policy

Controller

Jan Ortgies
Ortgies Consulting
Philipp-Reis-Platz 1A, 33602 Bielefeld, Germany

Email: info@krankenkasse-guenstiger.de
Phone: 015150628990

Hosting – Vercel

This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA, and delivered via its worldwide content delivery network. Vercel acts as a processor within the meaning of Art. 28 GDPR. When you visit the website, the hosting provider automatically collects information in server log files:

• IP address
• Date and time of the request
• Browser type and version
• Operating system used
• Referrer URL

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing the website securely, quickly and without disruption).

Transfer to third countries: Personal data may be transferred to the USA in this context. Vercel Inc. is certified under the EU-U.S. Data Privacy Framework (DPF); the transfer is based on the European Commission's adequacy decision (Art. 45 GDPR). In addition, the European Commission's standard contractual clauses have been agreed (Art. 46(2)(c) GDPR).

Storage period: Server log files are stored only for as long as is necessary for the secure operation of the website and are then deleted.

A data processing agreement pursuant to Art. 28 GDPR has been concluded with Vercel Inc.

Embedded VGK24 comparison calculator

A comparison calculator provided by VGK24 GmbH is embedded on our website via an iFrame. If you use the comparison calculator, the data you enter (e.g. federal state, income details, insurance status) is transmitted directly to VGK24 and processed there. You enter the data within the iFrame directly with VGK24.

The following categories of data may be affected: the comparison parameters you enter, technical connection data (IP address, browser information) and, where applicable, cookies or similar technologies set by VGK24.

The comparison calculator is the central function of this website and is therefore loaded immediately with the page, so that you can use the comparison you requested without an intermediate step.

Our legal basis for embedding the calculator: Art. 6(1)(b) GDPR (taking steps prior to entering into a contract at your request) and Art. 6(1)(f) GDPR (legitimate interest in providing a functioning comparison calculator).

The controller for data processing within the calculator is VGK24 GmbH as a separate controller in its own right. This also applies to the cookies and audience measurement used in the calculator: VGK24 uses its own consent tool within the calculator for this purpose and obtains any required consent pursuant to Section 25(1) TDDDG there. Our cookie banner does not control this processing.

Partner identifiers, QR codes and usage statistics

Our cooperation partners (e.g. doctors' practices) refer to this website via notices, QR codes or links. These addresses contain a partner identifier, such as krankenkasse-guenstiger.de/p/name or ?p=name. The identifier refers to the partner, not to you as a person.

Counting page views, QR scans and partner visits: Our server counts every visit to a page of this website so that we can see how many visits there are. If you open an address containing a partner identifier, we also count which partner you came through. Counting takes place exclusively on our server: it evaluates the address your browser transmits anyway when opening the page and stores the page visited, the time, the partner identifier (if any) and the device type derived from the browser identification (e.g. “mobile”). For this, no script runs in your browser, no cookies are set and no information is stored on your device; your IP address is not stored for the count. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in evaluating and settling our cooperations). You can object to this at any time.

Passing the partner identifier on to VGK24: The partner identifier is passed on to VGK24 GmbH when the comparison calculator loads, so that a change of health insurer completed via the calculator can be attributed to the respective partner. To ensure you do not lose the identifier when clicking through our website, it is appended to our internal links – this, too, does not store anything on your device.

Usage statistics (only with consent): If you have consented to the “Statistics” category in the cookie banner, we additionally record anonymously whether a page was visited, whether the comparison calculator was loaded and which section of the calculator you reached (results list, switching form). We do not see what you enter in the calculator. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG; you can withdraw it at any time via the cookie banner.

Storage: We store the counts and statistical data in our internal lead management system. The database is operated by Supabase Pte. Ltd. (Singapore) as a processor in a data centre in Frankfurt am Main (EU); a data processing agreement pursuant to Art. 28 GDPR is in place with Supabase, which incorporates the EU standard contractual clauses for any access from third countries. The data is deleted after 24 months at the latest.

Cookies and consent management

This website uses cookies. Cookies are small text files that your browser stores on your device.

We use Cookiebot (Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark) to manage your consents. Cookiebot stores your choice in a technically necessary cookie (CookieConsent) for 12 months. As proof of your consent, Cybot logs your choice together with a shortened IP address, date/time and the URL visited; the data is stored within the EU.

Legal basis: Section 25(2) no. 2 TDDDG (strictly necessary) in conjunction with Art. 6(1)(f) GDPR (legitimate interest in documenting and managing consents given).

Third-party cookies may be set within the embedded VGK24 comparison calculator. VGK24 GmbH is itself responsible for these; consent for them is obtained via the consent tool in the calculator, not via our cookie banner. These are in particular:

• Google Analytics (_ga, _ga_XXXXXXXX) – for audience measurement by VGK24 within the calculator. The exact cookie names depend on the measurement ID used by VGK24. Data may be transferred to the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF); the transfer takes place on this basis (Art. 45 GDPR). Legal basis for the processing: consent (Art. 6(1)(a) GDPR), which VGK24 obtains in the calculator.
• PHPSESSID – technically necessary session cookie of the VGK24 calculator.

You can withdraw or adjust your consent at any time via the cookie banner on our website. Further information on the cookies set by VGK24 can be found at www.vgk24.de/datenschutz.

Google Ads conversion tracking

With your consent (“Marketing” category in the cookie banner), we use Google Ads conversion tracking. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Without your consent, the Google Ads script is not loaded.

Conversion tracking helps us recognise whether visitors came to this website via one of our Google ads and, for example, used the comparison calculator. This allows us to measure the success of our ads. In the process, cookies (e.g. _gcl_au) are stored on your device and the following data is transmitted to Google: IP address, device and browser information, pages visited, date and time, and information on the ad clicked. We only receive aggregated statistics from Google and cannot identify you personally.

We use Google Consent Mode: your choice in the cookie banner is passed on to Google so that Google takes your settings into account.

Legal basis: your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time with effect for the future via the cookie banner.

Transfer to third countries: Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF); the transfer is based on the European Commission's adequacy decision (Art. 45 GDPR).

Storage period: Conversion cookies usually expire after 90 days.

Further information: policies.google.com/privacy

Contacting us by email

If you contact us by email, the data you provide (name, email address, content of your message) is stored and processed to handle your enquiry.

Email service – Microsoft 365: To receive, send and store emails, we use Microsoft 365 (Exchange Online) provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, as a processor pursuant to Art. 28 GDPR. The data processing agreement is part of Microsoft's contractual terms (Data Protection Addendum). The mailboxes are stored in data centres in the EU. Access by Microsoft Corporation in the USA, for example in the course of support or security measures, cannot be ruled out. Microsoft Corporation is certified under the EU-U.S. Data Privacy Framework (DPF); any transfer is based on the European Commission's adequacy decision (Art. 45 GDPR). In addition, the European Commission's standard contractual clauses apply (Art. 46(2)(c) GDPR).

Legal basis: Art. 6(1)(b) GDPR (initiation of a contract or pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).

Storage period: The data is deleted as soon as your enquiry has been fully dealt with and no statutory retention obligations apply (usually after 3 years; commercial and tax records after 6–10 years).

Apart from the processor named above, the data is not passed on to third parties unless there is a legal obligation to do so.

Contacting us by phone

If you contact us by phone, the data arising during the call (e.g. name, phone number, content of the conversation) is processed to handle your enquiry. Phone calls are not recorded.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in answering enquiries); where the contact is aimed at concluding a contract, additionally Art. 6(1)(b) GDPR.

Storage period: The data is deleted as soon as your enquiry has been fully dealt with, unless statutory retention obligations apply.

Your rights

You have the following rights towards us at any time:

• Access to your stored personal data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Withdrawal of consent given at any time with effect for the future (Art. 7(3) GDPR)

Right to object

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with the competent data protection supervisory authority:

Accessibility

This website is offered by a micro-enterprise within the meaning of Section 3(3) of the German Accessibility Strengthening Act (Barrierefreiheitsstärkungsgesetz, BFSG) and is therefore exempt from the requirements of the BFSG.