Privacy policy for the online courses

HelloBetter is a trademark of the

GET.ON Institute for Online Health Trainings GmbH
Schrammsweg 11
20249 Hamburg

Tel.: +49 (0)40 / 532 528 67
E-mail: kontakt@hellobetter.de

which is responsible for the processing of your personal data.

Data protection officer of HelloBetter
GET.ON Institute for Online Health Trainings GmbH
Oranienburger Str. 86a
10178 Berlin

E-mail: datenschutz@hellobetter.de

We process the following registration and health data as part of the use of our online courses:

• user name
• email address
• gender
• telephone number
• your answers within questionnaires (screening)
• symptoms
• date of birth
• information entered in free text fields during the course in order to work on exercises or to get in contact with us
• messages to us via the encrypted messaging function of the course platform (only for courses accompanied by psychologists)
• language setting

If you participate in our courses as part of an offer of your health insurance company (e.g. preventive care offers, additional offers, offers of special care), additional data may be collected for billing purposes towards your health insurance, e.g.

• insurance number
• insurance company

We process personal data of our users only insofar as this is necessary for the provision of a functional platform as well as our content and services. The health data collected during the course is used exclusively to carry out the course and thus to improve your mental state of health. Some courses are accompanied by psychologists and offer a built-in messenger to allow a direct exchange with the psychologist.

Personal data of our users is regularly processed only with the consent of the user.

The processing of your personal data within the course is based on your consent according to Article 6 (1) (a) GDPR for registration data and Article 9 (2) (a) GDPR for medical data. If you do not give us your consent, participation in the online course is not possible.

You can revoke your consent to the processing of personal data at any time. You can do this in your profile settings. If you revoke your consent, you can no longer use the online course. Please note that the revocation is only effective for the future. Data processing that took place before the revocation is not affected.

In general, your medical data will not be passed on to third parties (e.g. your health insurance company). For the provision of our service, we use the AWS european sorvereign cloud, in which your data is stored. The operator is Amazon Web Services EMEA SARL (38. Avenue John F. Kennedy, L-1855 Luxemburg). Your data will be processed in the Paris AWS region.

If your participation is based on an offer from your health insurance company, registration data required for billing the service provided will be transmitted to the health insurance company. A transmission of course data to the health insurance company is excluded.

As long as you use your account, your data will be stored. If you want to delete your data, you can do so within your profile settings. Data for billing purposes will be kept as long as required by legal retention periods (up to 6 years).

When using our servers (e.g. when registering and going through the course), technical connection data is processed that is transmitted to us by your device. This includes the following data:
• IP address
• Browser and version number
• Date and timestamp of the web page access

The processing is carried out within the scope of our legitimate interest pursuant to Article 6 (1) (f) GDPR for the provision of our online platform, to secure our systems and to ensure technical functionality. Providing this data is technically necessary so that the retrieved content can be delivered to you.

In principle, this data is not passed on to third parties. However, in the event of an attack on our systems, the data in question may be passed on to the law enforcement authorities.
The data is automatically deleted after six months. In the event of criminal proceedings, the data will be deleted after the proceedings have been concluded.

You have the option during registration and in your profile settings to give consent to participate in a scientific evaluation of your course data. The following section provides information about the data processing in case you give your consent. Your data will not be processed for these purposes without your consent. Your participation is voluntary. There will be no negative consequences if you do not give your consent.

Scientific evaluation is used to conduct studies to explore intervention effects in routine care. The use of this research data provides insights into the actual effectiveness of the intervention under routine conditions and enables the ongoing optimization of our products. Your data will not be processed without your consent pursuant to Article 6 (1) (a) GDPR and Article 9 (2) (a) GDPR.
 

If you give your consent, your data will be anonymized as far as possible within the framework of the scientific evaluation so that it is impossible to draw conclusions about your person. The evaluation will only be carried out with anonymized data.

The anonymized data can be passed on to other researchers in universities and other research institutions for study purposes. Data will only be passed on after it has been anonymized.

The anonymization of your course data cannot completely exclude a later conclusion to your person by information that you may have published about yourself via other sources (e.g. by references on your social media profiles about your participation in the study). You can revoke your consent in your profile settings at any time. A revocation is only effective for processing from the time we receive it. Processing that took place before the revocation is not affected. Please note that a right of revocation does not apply to anonymized data, as an assignment of the data to your person will no longer be possible at this point.

You can assert the rights listed below against HelloBetter. HelloBetter enables you to exercise numerous rights via the profile settings within the online courses. Please contact us to exert any rights that are not covered by the profile settings within the course itself.
For the right to information and the right to deletion, the restrictions according to Sections 34 and 35 BDSG (German Federal Data Privacy Act) apply.

You can request information about your personal data processed by HelloBetter, along with a copy of the data. In the online course, you have access to the data processed in the course of the course at any time.

If your data is incorrect or incomplete, you have the right to request the correction or completion of your personal data. You can correct and complete your data via your profile settings within the online course.

You can request the deletion of your personal data. You can perform a deletion of your data within the options in the profile settings by choosing the option to delete your account. Please note that this cannot be undone.

You have the right to receive the personal data which you have provided to HelloBetter in a structured, commonly used and machine-readable format and to transmit those data to another company without hindrance from HelloBetter.

You have the right to receive the personal data which you have provided to HelloBetter in a structured, commonly used and machine-readable format and to transmit those data to another company without hindrance from HelloBetter.

You have a right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for HelloBetter is

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Thomas Fuchs
Ludwig-Erhard-Str. 22, 7th floor
20459 Hamburg

Tel.: +49 (0)40 / 428 54 – 4040
Fax: +49 (0)40 / 428 54 – 4000
Email: mailbox@datenschutz.hamburg.de

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6 (1) (f) GDPR (data processing on the basis of a legitimate interest of HelloBetter).
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims.

Automated decision-making or profiling that produces a legal effect concerning you does not take place.