Data protection information
(These provisions apply to our websites and information services such as newsletters and information letters. The privacy policy for the Cara App and Cara Care can be found here (only in German, as app can only be used in German; for globally available app, please refer to Terms of use and privacy policy directly in the app). A German version of this document is available here)
HiDoc Technologies GmbH (hereinafter referred to as “HiDoc”) processes personal data on this website in accordance with the principles described below. HiDoc attaches great importance to the protection of your personal data and other information collected. We can therefore assure you that we will always handle your data in a trustworthy and responsible manner. In particular, we use your personal data strictly in accordance with the legal requirements.
1. responsible party
HiDoc Technologies GmbH, Hohe Bleichen 22, 20354 Hamburg, Germany, is the controller within the meaning of the data protection regulations for the processing of personal data on this website. Further contact details can be found in the imprint of this website. HiDoc has appointed Mr. Michael Panienka as data protection officer, who can be contacted via the email address datenschutz@gohidoc.com.
2. collection and processing of personal data
When you visit our website, our web servers store by default your IP address, the website from which you visit us, e.g. if you have followed a link, the web pages you visit on our site, information about the Internet browser used and its display properties and language settings, the operating system used, as well as the date and duration of the visit. In addition, personal data is only collected and processed if you provide it to us yourself, e.g. when registering, using a contact form or making an inquiry.
The personal data collected in this way will be deleted by us immediately as soon as it is no longer required for the purpose for which it was collected.
3. use and disclosure of personal data and purpose limitation
HiDoc uses this personal data for the purposes of technical administration of the Internet pages, in particular to enable you to access them, and for statistical evaluations of usage. We also use this technical access information to constantly improve the attractiveness and usability of our Internet pages and their content and to identify possible technical problems in our Internet offering. HiDoc will not pass on the personal data you provide to third parties without your express consent. Details are regulated in this data protection notice.
The legal basis for the processing of personal data for this purpose results from Art. 6 para. 1 lit. b) GDPR.
4. contact form, e-mail contact, prescription service
Contact forms via third-party providers (Sumo, Typeform) are available on our website, which can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored. These data are the first and last name and e-mail address, or a telephone number. Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored.
We use the service provider Zammad (operator: Zammad GmbH, Marienstraße 18, 10117 Berlin) to process inquiries by email via our helpdesk. Processing is carried out on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR in providing a means of communication in the context of customer and prospective customer support. Your inquiries will be stored for a period of two years, unless longer storage is necessary in individual cases (enforcement of or defense against claims).
In addition, an individual consultation request can also be arranged via contact forms. A telephone number and information about the type of health insurance and health insurance company are also collected in order to enable HiDoc's services to be billed via a health insurance company if necessary. If you use HiDoc's direct billing service with your insurance company or the prescription service to send your prescription to your health insurance company and send a prescription issued to you for the Cara Care app to HiDoc, for example by email or post, you expressly consent to the processing of the information on the same prescription, as well as the request for the app access code and the processing of the reimbursement of the service with the respective insurance company on your behalf.
If you enter health information in the comment field, you expressly agree that HiDoc may use this information for your personal consultation and pass it on to a HiDoc consultant.
If you enter your telephone number in the comment field, you expressly agree that HiDoc may use this information for an initial individual contact and pass it on to a HiDoc consultant.
You can revoke this consent at any time with effect for the future. The prescription service is a voluntary service offered by HiDoc; you are under no obligation to use it. To provide the contact forms, HiDoc uses the company Typeform, based in Spain, as a technical service provider for processing the contact forms and questionnaires, the company Zapier Inc., based in the USA, for sending emails and Google Ireland Ltd., based in Ireland, for evaluating the questionnaires and sending emails. To process the booking of appointments, we use the platform of Cituro, based in Germany, or Calendly, based in the USA. Deutsche Post (Deutsche Post AG, Charles-de-Gaulle Str. 20, 53113 Bonn) may also be used to process the prescription service for forwarding prescriptions to your health insurance company.
To store contact information and manage contacts, HiDoc uses HubSpot, a software solution offered by HubSpot Ireland Ltd. based in Ireland.
The data will be used exclusively for processing the transmitted request. The data will be deleted as soon as it is no longer required for the purpose for which it was collected. For the personal data from the input screen of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. In the case of billing for the service, the data is stored accordingly until the end of the consultation or treatment and its billing.
If you have given your consent to further contact, e.g. for the purpose of product information, your contact data will also be stored beyond this until you revoke your consent. The legal basis for the processing of data transmitted in the course of sending an email or using the contact form, as well as for address management, is Art. 6 para. 1 lit. a and Art. 9 para. 2 lit. a GDPR. You can revoke your consent at any time with effect for the future.
5. direct marketing
As part of our advertising and marketing activities, we process personal data for the purpose of advertising our own offers. For this purpose, we use names, job titles, addresses and communication information. We have a legitimate interest in the processing of personal data for direct advertising for our products within the meaning of Art. 6 para. 1 f) GDPR, which constitutes the legal basis for the processing.
We only store personal data as part of our direct marketing activities for as long as we need it for advertising purposes, and beyond that only if you become a contractual partner of one of our products.
If we do not collect the personal data for our direct marketing directly from the person concerned, we will inform the person directly about the origin of the data in the context of information in accordance with Art. 14 GDPR.
We only pass on personal data to service providers within the European Union commissioned to carry out an advertising campaign. These are advertising agencies and printers. In addition, we use a data processing system from Hubspot, Inc. based in the USA to manage your contact data.
6. links and references to other internet sites
This website contains links to other websites.Please note that HiDoc is not responsible for the data protection or the content of these other websites.We recommend that all Internet users check the privacy statements, privacy policies, etc. of the other websites they visit when they leave the HiDoc website.
In addition, this website refers to HiDoc websites in social networks such as Facebook, Twitter and Google+. When you use these third-party websites, they collect personal data in accordance with their data protection regulations, over which HiDoc has no influence. In the case of Facebook Twitter and Google+, this data processing may also take place outside the scope of European data protection laws.For details, please refer to the privacy policies of the respective providers:
- Facebook: https://www.facebook.com/about/privacy/
- Twitter: https://twitter.com/de/privacy
- Google: https://www.google.com/intl/de/policies/
- Apple: https://www.apple.com/legal/privacy/en-ww/
7. cookies and analyses
A cookie is a piece of text information that can be stored in the browser on the user's computer for each website visited (web server, server).
The cookie is either sent to the browser by the web server or generated in the browser by a script (JavaScript).The web server can read this cookie information directly from the server on subsequent visits to this page or transmit the cookie information to the server via a script on the website. The purpose of these cookies is, for example, to identify the surfer (session ID), to save a login for an Internet application such as Wikipedia, Facebook, etc. or to save a shopping cart for an online retailer.
Once cookies have been set, you can also delete them at any time.You can find out how all this works in detail in the help function of your browser.Please note that a general deactivation of cookies may lead to functional restrictions on our website. This website uses the following types of cookies, the scope and function of which are explained below:
- Strictly necessary cookies (Necessary - Type I)
- Functional and performance cookies (preferences - type II)
- Cookies requiring consent (statistics and marketing - type III)
7.1. Cookies that are absolutely necessary (Necessary - Type I)
Strictly necessary cookies ensure functions without which you cannot use our websites as intended.
These cookies are used exclusively by us and are therefore so-called “first party cookies”. This means that all information stored in the cookies is sent back to our website.
Strictly necessary cookies are used, for example, to ensure that you as a registered user always remain logged in when accessing various subpages of our website and therefore do not have to re-enter your login data each time you access a new page.
The legal basis is Art. 6 para. 1 lit. b GDPR
- Cloudflare
Our pages use functions of CloudFlare.The provider is CloudFlare, Inc. 665 3rd St. #200, San Francisco, CA 94107, USA.
The operator of this website uses CloudFlare services. CloudFlare offers a so-called globally distributed content delivery network with DNS. Technically, the transfer of information between your browser and our web pages is routed via the CloudFlare network. CloudFlare is thus able to analyze the data traffic between users and our websites, for example to detect and ward off attacks on our services. CloudFlare may also store cookies on your computer for optimization and analysis purposes.
| Cookie used (Type I) | Lifetime/ expiration |
| __cfduid | 5 years |
- Hubspot
HiDoc uses HubSpot, an offering from HubSpot Ireland Ltd. as an integrated marketing solution to unify our email marketing, social media publishing & reporting, reporting, contact management and contact forms.
HubSpot uses both necessary cookies (type I) and analysis cookies (type III).
HiDoc uses the following necessary cookies from HubSpot on its website. These are used to implement and store your consent to the use of cookies on the site, to store which consents you have given for the use of cookies and to allow or prevent the sending of tracking information via cookies.
| Cookie used (Type I) | Lifetime/ expiration |
| __hs_opt_out | 6 months |
| __hs_d_not_tracking | 6 months |
| __hs_initial_opt | 7 days |
| __hs_cookie_cat_pref | 6 months |
- CookieHub
HiDoc also uses CookieHub to store information about whether visitors have approved or rejected the use of the cookie categories used on the website. This information expires after one year.
7.2 Functional and performance cookies (preferences - type II)
Functional cookies enable our website to save information that has already been entered (such as registered name or language selection) and to offer you improved and personalized functions based on this. These cookies only collect and store anonymized information so that they cannot track your movements on other websites.
The legal basis for the use is generally Art. 6 para. 1 lit. f GDPR
- SumoMe
Our website uses SumoMe, a service provided by Sumo Group Inc, 1305 E. 6th St 3, Austin, TX 78702, USA. Among other things, SumoMe uses cookies, which are stored on your computer and enable your use of the website to be analyzed. During use, data, in particular the IP address and user activities, may be transmitted to a server of Sumo Group Inc. and stored there.
| Cookie used (Type II) | Lifetime/ expiration |
| __smSessionId | 1 day |
| __smSmartbarShown | 30 years |
| __smToken | 1 year |
| __smVID | 30 days |
| __smOptOut | 10 years |
| __smVID | 30 days |
7.3 Cookies requiring consent (statistics and marketing - type III)
We reserve the right to use information that we have obtained by means of cookies from an anonymized analysis of the usage behavior of visitors to our websites in order to display specific advertising for certain of our products on our own websites. We believe that you as a user benefit from this because we display advertising or content that we assume, based on your surfing behavior, matches your interests and you are therefore shown less random advertising or certain content that may be of less interest to you.
The legal basis for data processing here is Art. 6 para. 1 lit. a GDPR.
The following description of the tracking and analysis tools also shows the respective processing purposes and the data processed.
By using our website, you hereby expressly consent to the use of cookies and the use of your personal data to use our website for the purpose of improving our Internet offering and for marketing purposes. This consent includes in particular the use of service providers commissioned by HiDoc, such as in particular Google Ireland Ltd, Facebook Inc, Facebook Ireland ltd, Intercom R&D Unlimited Company, Cloudflare Inc, Sumo Group Inc, Issuu Inc, Sanofi Aventis Deutschland GmbH and Bayer Vital GmbH as well as the transfer of data to these service providers for the above-mentioned purpose.
You can revoke your consent at any time and delete existing cookies by deactivating and removing them via your Internet browser. Further information on deleting or disabling cookies can be found in the help texts for your browser or on the Internet, for example by searching for “deactivate cookies” or “delete cookies”.
- Google Analytics
This website uses Google Analytics, a web analysis service of Google Inc (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site.The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will first be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.
We use Google Analytics to analyze and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user.
Cookies own instance
| Cookie used (Type III) | Lifetime/ expiration |
| _ga | 2 years |
| _gat | 1 day |
| _gid | 1 day |
| AMP_TOKEN | 1 day |
- Google Ads Remarketing
We use the remarketing function within the Google Ads service. With the remarketing function, we can present users of our website with advertisements based on their interests on other websites within the Google advertising network (in Google Search or on YouTube, so-called “Google Ads” or on other websites).
For this purpose, the interaction of users on our website is analyzed, e.g. which offers the user was interested in, in order to be able to display targeted advertising to users on other sites even after they have visited our website.For this purpose, Google stores a number in the browsers of users who visit certain Google services or websites in the Google Display Network.
This number is used to uniquely identify a web browser on a specific end device and not to identify a person; personal data is not stored.
| Cookie used (Type III) | Lifetime/ expiration |
| _gcl_au | 3 months |
| __utmx | 18 months |
| __utmxx | 18 months |
| _gaexp | 90 days |
- Google Analytics advertising functions
In addition to the standard functions, we also use the extended functions of Google Analytics on this website. The Google Analytics advertising functions implemented on this website include
- Reports on impressions on the Google Display Network;
- Google Analytics reports on performance by demographics and interests
- Integrated services for which data is collected in Google Analytics for advertising purposes, including the collection of data via cookies for ad preferences and anonymous identifiers
For this purpose, in addition to the data collected by the Google Analytics analysis tool, further data is collected via Google cookies for advertising preferences and anonymous identifiers for accesses. We use this information to improve our website.
| Cookie used (Type III) | Lifetime/ expiration |
| _gac_<property-id> | 90 days |
| _opt_awcid | 24 hours |
| _opt_awmid | 24 hours |
| _opt_awgid | 24 hours |
| _opt_awkid | 24 hours |
| _opt_utmc | 24 hours |
- Campaign Manager - DoubleClick by Google
This website continues to use the online marketing tool Campaign Manager by Google. Campaign Manager uses cookies to display ads that are relevant to users, to improve campaign performance reports or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to record which ads are displayed in which browser and can thus prevent them from being displayed more than once. In addition, Campaign Manager can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a Campaign Manager ad and later visits the advertiser's website with the same browser and makes a purchase there. According to Google, Campaign Manager cookies do not contain any personal information.
| Cookie used (Type III) | Lifetime/ expiration |
| IDE | 1 year |
| test_cookie | 1 year |
- Facebook-Pixel, Conversion Tracking, Custom Audiences
Within our online offer, the so-called “Facebook pixel” of the social network Facebook, which is operated by Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are resident in the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”), is used to optimize and economically operate our online offer.
The website uses the remarketing function “Custom Audiences” of Facebook Inc. (“Facebook”) in order to be able to address you again within 6 months. With the help of the Facebook pixel, it is possible for Facebook to determine the visitors of our online offer as a target group for the display of ads (so-called “Facebook ads”). Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called “custom audiences”). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of users and are not annoying. With the help of the Facebook pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called “conversion”).
| Cookie used (Type III) | Lifetime/ expiration |
| __fbp | 3 months |
| fr | 3 months |
- Issuu
Components of the Issuu web service (operated by Issuu Inc. - 131 Lytton Ave - Palo Alto - CA 94301 - USA) are integrated on this website, which enable the publication and distribution of magazines and catalogs as well as their viewing. Issuu also calls up the Google Analytics tracker. This is Issuu's own tracking, to which we have no access.
| Cookie used (Type III) | Lifetime/ expiration |
| _awl | 3 years |
- Hubspot
We use HubSpot to analyze and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user.
| Cookie used (Type III) | Lifetime/ expiration |
| _hstc | 6 months |
| _hubspotuk | 6 months |
| _hssc | 30 minutes |
| _hssrc | Session |
8. data protection level of third party providers
The third-party providers used by HiDoc and mentioned above are either based in the EU or in a country in which the EU has established an adequate level of data protection. With companies from the USA, HiDoc has agreed so-called EU standard contractual clauses and supplementary protective measures to ensure an adequate level of data protection in accordance with Art. 46 Para. 2 lit c.) GDPR.
9. security
As required by law, HiDoc uses technical and organizational security measures to protect your data managed by us against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously improved in line with technological developments.
10. your rights
As a user of our website, you have the right to request information from us about the data stored about you or your pseudonym. At your request, the information can also be provided electronically. You have the right to request the deletion or restriction of your personal data processed by us or the transfer to third parties in a common format used by us. You can request that incorrect data be corrected. You can revoke any consent you have given, e.g. to the use of analyses by cookies, at any time. Corresponding requests can be addressed to HiDoc or our data protection officer. You can lodge a complaint about the processing of personal data by us with the competent supervisory authority.
11. scope of application
This data protection information applies exclusively to the HiDoc website and newsletter service. We would also like to point out that this data protection information is subject to constant adaptation to current requirements.
Status: October 2024