Data protection information for translations involving technical support from our partner, DeepL SE
The following data protection policy contains information under data protection law pertaining to the type, scope and purpose of the collection and use of personal data for the translation of foreign-language conversations, correspondence and documents by DeepL.
The legal basis for data protection can be found in the General Data Protection Regulation (GDPR), the German Social Security Code (SGB) and the German Federal Data Protection Act (BDSG). TK collects and uses your personal data exclusively within the scope of these statutory provisions.
Furthermore, general information on data processing as per Art. 13 General Data Protection Regulation (GDPR) by Techniker Krankenkasse (TK) shall apply, unless otherwise specified here. General information on data processing by Techniker Krankenkasse can be found here: Information on data processing in accordance with Art. 13 General Data Protection Regulation (GDPR).
Further developments may require amendments to this data protection policy. We recommend that you visit these pages at regular intervals, in order to stay up-to-date. In the following, we would like to explain what types of personal data are collected in connection with translations using DeepL, for what purposes these are collected, and what rights you have in relation to your personal data.
1. Data controller
The data controller for the collection, processing and use of personal data in connection with this offer is:
Techniker Krankenkasse ("TK")
Bramfelder Straße 140
22305 Hamburg
TK has commissioned the following service provider to support foreign-language communication with its customers: DeepL SE, Maarweg 165, 50825 Cologne renders technical translation services on behalf of TK and in accordance with the specifications set out by TK.
2. Purposes of processing, legal basis, types of data processed and deletion
2.1 Purpose and legal basis of data processing
The translations by DeepL serve to improve our service for you and prevent any misunderstandings or incorrect advice attributable to a language barrier. The following legal bases are deemed relevant for the processing of data:
Regulation (EC) No 883/2004 of the European Parliament and of the Council of 29 April 2004 on the coordination of social security systems - Article 76 (7): this stipulates that health insurance funds may not refuse (or reject) applications or other documents simply because they are written in an official language of another Member State that is recognised as an official language under the EU Treaty.
Regulation (EU) No 1231/2010 of the European Parliament and of the Council of 24 November 2010 extending Regulation (EC) No 883/2004 and Regulation (EC) No 987/2009 to nationals of third countries: this extends the above-mentioned regulations pertaining to the coordination of social security systems to third-country nationals who are legally resident in an EU Member State and whose life situation is characterised by cross-border transitions.
Taken together, these regulations result in an obligation pursuant to Article 6 (1) lit. c General Data Protection Regulation (GDPR). In order to fulfil these obligations, we - as a health insurance company - use the applications DeepL Translate and/or DeepL Voice for Conversations to facilitate the translation process.
For the simultaneous interpreting of the spoken word (the use of DeepL Voice), your consent is required in accordance with Art. 6 (1) lit. a, Art. 9 (2) lit. a General Data Protection Regulation (GDPR). A live voice translation will, therefore, only be started if you have given your express consent.
2.2 Type of data collected
DeepL Translate (document translation for chat and e-mail and insurance documents), any personal (social) data contained in the text (names, insurance numbers, addresses, etc.) is also transferred and inserted into the translation. We use the translation, in order to assess the case at hand.
DeepL Voice (real-time interpreting of the spoken word): your voice will only be processed during your on-site visits to our customer service centres or during on-site meetings with our sales colleagues via the app on TK’s mobile devices. The words are converted from speech to text and translated in real time. Personal (social) data provided by you (names, insurance numbers, addresses, etc.) will also be transferred.
2.3 Retention period and deletion
DeepL Translate
The translation itself is not permanently stored by the provider, DeepL. On DeepL, the text is only saved until DeepL Translate has translated the entered text. As a rule, this involves storage of less than 5 seconds (technical processing time) on multiple, technically secured DeepL servers. At TK, the translation is attached to this case in part or in full as part of the assessment of the case at hand in the TK IT system and thus stored.
DeepL Voice
Your voice recording will not be saved. The translation and text transcription service is provided in real time and by way of "instant" processing without intermediate storage by the provider, DeepL or the TK. TK employees can reproduce parts of the translation in their own words in a log of the case at hand. The data will only be made accessible to those TK employees who speak to you on site as part of the specific case, or who process the specific request.
3. Processing in third countries, automated decision-making, profiling, origin of the data
We receive data from you. Should we not collect the personal data directly from you, we shall also inform you of the source from which the personal data originates and, where applicable, whether it originates from publicly accessible sources.
No processing shall take place in so-called third countries (countries outside the EU). In addition thereto, no use shall be made of automated decision-making or profiling in accordance with Art. 22 (1) and (4) General Data Protection Regulation (GDPR).
4. General rights of data subjects
You shall have the right:
- to request the disclosure of information on categories of processed data, processing purposes, any recipients of the data, the planned retention period (Art. 15 GDPR);
- to demand the correction or completion of incorrect or incomplete data (Art. 16 GDPR);
- to request the deletion of data in certain instances within the scope of Art. 17 GDPR - in particular, if the data is no longer required for the intended purpose, respectively, is processed unlawfully, or if you have withdrawn your consent;
- under certain conditions, to demand the restriction of data if deletion is not possible or the obligation to delete is disputed (Art. 18 GDPR);
- to request data portability, i.e. you can receive the data you have provided to us in a commonly used, machine-readable format such as CSV and, where necessary, transmit it to others (Art. 20 GDPR), and
- to lodge a complaint with a supervisory authority (Art. 77 GDPR).
The contact details of the supervisory authorities can be found below.
We would like to draw your attention to the following point: You may exercise your data subject rights in connection with the use of DeepL Translate and/or DeepL Voice at any time and, in particular, via deeplhilfe@tk.de.
Right to lodge your objection (Art 21 GDPR):
In order to be able to use DeepL Voice (simultaneous interpreting), we require your consent. Our employees will consult you on this point. This consent is voluntary and may be revoked by you at any time - without providing reasons - with effect for the future. You have the right to withdraw your consent at any time with effect for the future (Art. 7 [3] GDPR). Should you not wish to provide your consent, we may not be able to provide you with the best possible support. This shall not result in any further disadvantages for you. You may send your withdrawal of consent as follows (deeplhilfe@tk.de).
5. Contact details of the data protection officer and supervisory authorities
Should you have any questions or concerns regarding our data protection policy, please contact us:
Techniker Krankenkasse
Data Protection Officer
Bramfelder Str. 140
22305 Hamburg
datenschutz@tk.de
Contact details of the competent supervisory authorities
Der Bundesbeauftragte für Datenschutz und die Informationsfreiheit
Graurheindorfer Str. 153
53117 Bonn
poststelle@bfdi.bund.de or poststelle@bfdi.de-mail.de
Bundesamt für Soziale Sicherung
Friedrich-Ebert-Allee 38
53113 Bonn
poststelle@bas.bund.de or poststelle@bas.de-mail.de
6. Amendment or customisation of the data protection policy
The data protection policy is currently valid and dated 8 September 2025.