Privacy policy for "Meine TK" ["My TK"]

As the responsible body as defined by data protection law, we provide various online services via our password-protected "Meine TK" area at tk.de. TK collects and processes the personal data described below to provide and improve the "Meine TK" offering. TK uses these data to provide the services and functions offered under "Meine TK".

"Meine TK" can be used via a browser on any end device. Use of password-protected TK services, such as the TK-App and the electronic medical record, requires participation in "Meine TK".

This privacy policy relates to the use of "Meine TK". The tk.de data protection policy (tk.de, search code 2033782) also applies to the tk.de website. Additional privacy policies may apply to individual services. We will inform you about this in the corresponding declarations of participation.

Responsible body and legal basis

The body responsible for the collection, processing and use of personal data in connection with "Meine TK" is

Techniker Krankenkasse
Bramfelder Street 140
22305 Hamburg
Tel: 0800 - 285 85 85
E-mail:

service@tk.de

Insofar as personal data is collected in "Meine TK", this is done either on the basis of your express consent, Art. 6 para. 1 sentence 1 lit. a GDPR, to fulfil legal obligations to which "Meine TK" is subject, Art. 6 para. 1 sentence 1 lit. c GDPR, to perform tasks in the public interest or in the exercise of official authority conferred on "Meine TK", Art. 6 para. 1 sentence 1 lit. e GDPR. The data will be stored for as long as is necessary for the respective purpose of collection and insofar as no statutory retention periods prevent deletion.

Notes on the use of third-party keyboards

When using devices that allow the use of third-party keyboards, please note that the use of a keyboard other than the one provided by the operating system may result in security vulnerabilities. Your entries can be recorded unnoticed and sent to untrustworthy third parties. We therefore advise you to use the system's own keyboard.
Only use "Meine TK" on trustworthy end devices.

What data is required to use "Meine TK"?

Registration

You need to register to use "Meine TK". The following data is collected and processed during registration:

First name and surname

Date of birth

E-mail address

Insurance number

Various identification methods are available to register for "Meine TK". These methods involve the processing of the data mentioned below:

You can have a personal activation code sent by post to the address we have on file for you. You must then enter this code to complete the registration for "Meine TK".

You can register after submitting an online form which you access using a one-time password. You will receive a one-time password from us in order to answer a TK questionnaire online. As part of this process, you enter 4 digits of the serial number (ICCSN) of your insurance card (eHealth card) in addition to the above-mentioned data.

You can go to a TK customer service centre with your smartphone to register for "Meine TK" in a personal consultation. During this process, we will send you an SMS with a registration TAN and a link to your mobile phone number. You can use this TAN to complete the registration process on your smartphone. We store your mobile phone number, which you provide to us during the consultation, in our system. This can be deleted again at your request.

To complete the registration process, you have to assign yourself a personal password for your user account.

Please note that your activation code must be kept in a safe place. You can request a new activation code at any time or have an existing activation code blocked by TK, for example if you lose it. For security reasons, we will only send this to you by post to the address we have on file.

You have to provide and verify your e-mail address as part of the registration process to use the various functions that we offer in "Meine TK". These include the following functions:

Reset password

Confirmation of receipt when carrying out online processes

Use of additional services, such as the TK mailbox

Security notifications (e.g., for password changes)

Your insurance number is used for unique allocation in our online service "Meine TK". You will need your personal password, which you assigned yourself for the "Meine TK" online service, to log in. As an alternative to your insurance number, you can enter a personal username in "Meine TK". You can then use this to log in together with your password. You can delete your username at any time.

To protect your data and our systems, every attempt to log into "Meine TK" is saved.

Please remember to log out of "Meine TK" properly each time. A logout function is available for this purpose.

Forgotten password

You can reset your password if you forget it. There are various identification methods to reset your password. These methods process the data mentioned below:

You can use the activation code (if it is still valid) we sent to you to register for "Meine TK".

You can have an activation link sent to your verified e-mail address. With this method you also enter 4 digits of the serial number (ICCSN) of your insurance card (eHealth card). You will then receive an e-mail with a link.

You can then assign yourself a new password and use "Meine TK" as usual.

One-time password

In many cases, you can answer a questionnaire from us directly online - even without a user account for "Meine TK". You will then find a personal ten-digit one-time password in your TK letter, which you can enter at tk.de. When you send the online questionnaire, your password becomes invalid and can be destroyed. If you do not use the one-time password, you should make it unrecognisable before disposing of it.

2-factor authentication

2-factor authentication is required to access particularly protected and sensitive content, such as your mailbox in "Meine TK". This ensures that your data does not fall into the wrong hands.

In addition to logging in with your personal password (1st factor), 2-factor authentication takes place in "Meine TK" by entering an smsTAN (2nd factor). We will send the smsTAN to your previously verified telephone number.

You can verify your telephone number and activate the smsTAN procedure in "Meine TK". The following information is required for this:

Activation code for identification

Telephone number

You can cancel the smsTAN procedure at any time and delete your phone number. It is then no longer possible to use specially protected content until it is reactivated.

Alternatively, you can use the 2-factor authentication of the TK-App to access a range of specially protected content without an smsTAN.

The legal basis for the procedures described is Section 217f (4b) SGB V [German Social Security Code, Book V].

Personal data in online services and chats

Further data is collected by TK as part of specific online services (e.g., uploading photographs for the eHealth card) within "Meine TK". You will be informed separately about the collection and processing of this data at the appropriate point in the online service. The data is collected and processed in accordance with TK's statutory duties. Voluntary information can be recognised by the input fields and does not have to be provided.

When using the chat function as part of "Meine TK", all chat content is deleted after the chat has ended, unless storage is required in individual cases and is permitted by law. When using a personalised chat, only a contact without the content of your chat is stored in our system.

Furthermore, we process your data stored with us in the system in order to display it in your user account for you to change or check. These are in particular

First name and surname

Date of birth

Address

E-mail address

Phone numbers

Membership status and insurance history

Optional plans

Username

Status of your TK transactions

Device registration for the TK-App

Relatives covered by dependants' insurance

Information about your insurance card

Contribution amount and payments

Mailbox

With the TK mailbox, Techniker Krankenkasse provides a secure communication channel for insurees. This can be used to receive letters from TK securely online and also send messages to TK.

To participate in the TK mailbox, a verified e-mail address and telephone number are required as well as active confirmation of participation by the insuree.

The following personal data is therefore collected for the operation of the platform when insurees use the TK mailbox:

Participation in the reception of documents

Consent to the terms of use

Date of registration and deregistration

Time at which a letter was sent to the TK mailbox

Time at which a letter was opened by the insuree

Time at which a letter was deleted by the insuree

Data is collected to inform customers about the presence of new letters in their mailbox, to offer an automatic reminder service to open the letter and to realise the legally required documentation on the delivery of letters and notifications. The data on the time of opening and deletion of a letter by the insuree is stored in pseudonymised form and is subject to restrictive access protection.

As soon as participation in the TK mailbox has been cancelled by you or by TK, your participation data will be irrevocably deleted after the legally prescribed period has expired.

Data processing is based on your consent. The legal basis for the retrieval of electronically delivered documents is Section 37 SGB X [German Social Security Code, Book X].

Profile status as an aid to activating online communication

TK has the statutory duty to support the transition to electronic communication with insurees and to expand this through networked digital applications and services. The individual display of the profile status in "Meine TK" allows you to activate all the necessary and optional functions for the complete and efficient use of "Meine TK" which are required for extensive electronic communication with TK.

The functions included in the profile status:

Saving of a verified e-mail address to receive notifications and security information.

Saving of a telephone number for queries.

Activation of the smsTAN procedure for 2-factor authentication to access specially protected content.

Activation of online letter reception to receive letters in the electronic mailbox.

The above-mentioned data from our system is processed for the display and function of the profile status.

Of course, you can also access, edit, activate or deactivate this content without the profile status in "Meine TK".

You can object to the profile status support function at any time, in which case it will no longer be displayed individually. We will set a cookie in your browser for this purpose.

I would like to object to the profile status.

Please note that if you use a different browser or delete cookies, you will have to object again.

Downloadable documents

In "Meine TK", TK offers you documents, such as certificates or summaries of the data you have entered, for downloading as PDF files. These contain personal data. Please only use this function on trustworthy devices and make sure that you delete the documents from your devices yourself.

Personalised information

To date, TK has essentially fulfilled its duty to provide information, advice and information under the German Social Code by means of conventional forms of communication (telephone, letter, magazine and personal conversation). For TK to fulfil this statutory duty in the digital age and to contribute to maintaining the health of the population as an overriding purpose, new forms of communication and interaction must be considered. Furthermore, these must be integrated into the duty to provide information as digital channels. Insurees should be made aware of matters that are important to them in digital formats with which they are familiar. They must be able to call up and handle these matters quickly, ideally digitally and using the same medium.

This is information that must be provided by the health insurance funds due to a legal basis in the SGB [German Social Security Code] or should be provided by these funds in their role as a forward-looking healthcare provider or for which a legal authorisation standard exists. According to the current legal situation, no special form of consent is required for the transmission of such information to insurees. Rather, the authorisation to process and transmit relevant information to the insurees arises directly from the law.

For you, this means that, in future, you will receive personalised information in the protected area of our web portal or in the TK-App. With this information, we fulfil our task of promoting your health, providing you with the best possible support in the event of illness, informing you about suitable or new offers and alerting you to urgent matters that need to be dealt with quickly, for example.

Personalisation areas

The personalised information or offers are divided into different areas and thus assigned to specific topics, purposes and TK tasks. The following personalisation areas are currently available. These can be selected individually:

Personalisation areas	Notes on data processing and examples of personalised content	Legal basis
Valuable prevention and counselling services to keep you healthy	Our mission is to promote your health and prevent illness in the best possible way. In this personalisation area, you will receive relevant information on suitable offers to maintain your health, such as Suitable health courses Check-ups Telephone consultation hotlines Tips, e.g., on allergies and healthy eating Further offers from our co-operation partners The following data is used in this area: Your master data, such as first name, family name, age, gender, place of residence or employment Your insurance or contribution status or that of your co-insured dependants Ongoing benefit claims or administrative proceedings Existing participation in contracts for special forms of care Existing participation in TK-Safe, TK-GesundheitsCoach/TK-Coach and DMP/TK-Plus Existing registrations for newsletters and TK mailbox messages Health data such as diagnoses (ICD-coded), hospitalisations and outpatient treatments DMP documentation data (TK-Plus), such as information on health status, medication intake and types of therapy	Section 284 (1) sentence 1 no. 4 and (3) SGB V [German Social Security Code, Book V]. (provision of services to insurees) Section 284 (1) sentence 1 no. 14, (3) SGB V (recruitment of insurees for structured treatment programmes and their preparation and implementation) Section 284 (1) sentence 1 no. 19, (3) SGB V (promotion of healthcare innovations) Sections 13-15 SGB I (information, counselling and advice) Section 1 SGB V (support in maintaining health) Sections 20-26 SGB V (prevention and health promotion) Section 68b SGB V (promotion of healthcare innovations) Section 137g SGB V (structured treatment programmes) TK statutes
Important assistance in the event of illness with information on special care services	Our task is to provide you with the best possible support in the event of illness. In this personalisation area, you will receive the following information, for example: Information on support telephone hotlines (e.g., TK-MediCall) Recommendations on suitable forms of care and programmes (e.g., DMP) Assistance with finding a hospital, for example Tips for dealing with illness and disease Offers from our cooperation partners who support you with your illness (e.g., "My7Steps") The following data is used in this area: Your master data, such as first name, family name, age, gender, place of residence or employment Your insurance or contribution status or that of your co-insured dependants Ongoing benefit claims or administrative proceedings Existing participation in contracts for special forms of care Existing participation in TK-Safe, TK-GesundheitsCoach/TK-Coach and DMP/TK-Plus Existing registrations for newsletters and TK mailbox messages Health data such as diagnoses (ICD-coded), hospitalisations and outpatient treatments DMP documentation data (TK-Plus), such as information on health status, medication intake and types of therapy External statistical regional data such as INKAR - BBSR, BfArM supply bottlenecks This personalisation area also provides you with information on suitable care innovations or other suitable care services. When offering suitable care innovations or other suitable care services, TK analyses insuree-related data. This analysis can be carried out using statistical prediction models that identify individualised care needs. Events relevant to care can be analysed to determine individual care requirements. Based on the analysis of the master and health data, as well as the historical data, individual offers are made to the insuree.For this analysis, health insurance funds can use the insurance-related data that they have lawfully collected and stored (e.g., from the outpatient and inpatient sectors). External statistical data can also be taken into account. Machine learning and artificial intelligence methods can also be used to analyse the insuree-related data listed above. These methods are carried out by TK and model results are checked and refined. In principle, all TK insurees who belong to the care group can take advantage of the services and receive information on these care services.	Section 284 (1) sentence 1 no. 4, (3) SGB V (provision of services to insurees)Section 284 (1) sentence 1 no. 14, (3) SGB V (recruitment of insurees for structured treatment programmes and their preparation and implementation)Section 284 (1) sentence 1 no. 19, (3) SGB V (promotion of healthcare innovations)Section 284 (1) sentence 1 no. 20, (3) SGB V (information on the electronic medical record)Section 67 SGB V (electronic communication)Section 68b SGB V (promotion of healthcare innovations)Section 137g SGB V (structured treatment programmes)Sections 341ff SGB V (electronic medical record)TK statutes
Up-to-date information on activity offers, such as the TK Bonus Plan and TK-Fit	Our tasks also include the promotion of health-conscious behaviour, e.g., through appropriate programmes. In this personalisation area, you will receive valuable information about our so-called activity programmes, which give you incentives to stay healthy and fit. This may include the following information: Current points balance in the Bonus PlanPurchased vouchers in TK-Fit Important news in the respective programmes The following data is used in this area: Your master data, such as first name, family name, age, gender, place of residence or employment Your insurance or contribution status or that of your co-insured dependants Existing participation, points balance and possible activities in the Bonus PlanExisting participation and ongoing activities in TK-Fit Existing registrations for newsletters and TK mailbox messages	Section 284 (1) sentence 1 no. 4 and (3) SGB V (provision of services to insurees)Section 65a SGB V (bonus for health-conscious behaviour)TK statutes
Information on plans that save premiums or offer additional protection	It is also our job to organise your insurance cover in the best possible way and to inform you about possible gaps or suitable additional options. In this personalisation section, you will receive valuable information on how you can extend your insurance cover with additional plans, such as New supplementary insurance policies from our cooperation partners (e.g., envivas) Suitable optional plans, e.g., to save on premiums Changes to existing supplementary plans The following data is used in this area: Your master data, such as first name, family name, age, gender, place of residence or employment Your insurance or contribution status or that of your co-insured dependants Existing registrations for newsletters and TK mailbox messages Conclusion of supplementary insurance and optional plans	Section 284 (1) sentence 1 no. 4 and (3) SGB V in conjunction with TK statutes (provision of services to insurees)Section 194 (1a) SGB V (conclusion of private supplementary insurance contracts)Section 53 SGB V (optional plans)
Important information on the insurance relationship (e.g., end of membership)Important information on benefits (e.g., current benefit applications)Important notes on technical operability (e.g., required updates)	TK is legally obliged to provide you with information in certain areas, for example when it comes to your insurance cover, ongoing claims or other urgent matters. You thus cannot deselect this information in the settings.	Section 284 (1) sentence 1 no. 3, (3) SGB V (obligation to pay contributions)Sections 13-15 SGB I (information, counselling and advice)OZG [German online access law] in conjunction with Section 37 SGB X

At some points we explicitly ask whether you are interested in this offer or not. If you confirm this selection, it will be saved by TK so that you will no longer receive this offer in the future, e.g., if you express a lack of interest.

Note on cancellation

You can revoke the display of the personalised information described above at any time in the settings of the TK-App or on the web in whole or in part - differentiated for the above-mentioned personalisation areas - and also reactivate it. In the event of a revocation, you will no longer receive any personalised information or personalised information in the personalisation areas you have deactivated. This will not result in any further disadvantages for you.

Avoiding misuse and ensuring traceability

To prevent misuse of your personal access to the TK and to ensure the necessary traceability, the following processes are logged:

All login processes (Login)

All failed login processes

The processing operation (transaction) triggered in each case

Registration processes

Identification processes

The user ID, time, date and a transaction identifier are logged. If the login process fails, the IP address is also saved.

To protect your access from unauthorised misuse by third parties, TK sends a notification to your verified e-mail address in the event of security-relevant processes (e.g., a password change).

The data is processed on the legal basis of Art. 32 GDPR.

Use of cookies and analysis tools

The use of cookies and analysis tools is explained in sections 3 and 4 of the general privacy policy. If you wish to object to data storage in connection with web controlling exclusively for the password-protected area "Meine TK", please send an e-mail to service@tk.de.

Does TK or its partners receive data, and if so, for what purpose?

TK and its partners receive and process the data you provide in "Meine TK" for specific purposes. In the following, we would like to inform you in detail about the purposes and their recipients:

All data collected and processed in "Meine TK" is sent exclusively to TK and will not be passed on to third parties without your consent. The transmission of data between "Meine TK" and the recipients described here is always carried out using state-of-the-art SSL encryption.

Registration for externally hosted TK services

In many cases, you can use your "Meine TK" user account to log in to externally hosted TK services such as online sleep training or the TK health coach. The use of some services also requires the transfer of certain personal data. We will inform you at the appropriate point about the respective externally hosted service and the requested data transfer and ask for your consent before registration and transfer.

Storage periods and deletion of the data used

Storage periods for active use

If you actively use "Meine TK", your data will be stored until your user account is deleted.

Personal data collected in the context of specific online forms is stored for the statutory retention periods.

Deletion of your data

If you no longer wish to use "Meine TK", you can delete your user account at any time via "Meine TK", by e-mail or telephone. Your personal data collected specifically for "Meine TK" will then be deleted.

This does not affect personal data that you have transmitted via online forms from "Meine TK", as these were collected and processed to fulfil our tasks as a health insurance company. There are separate statutory retention rights or obligations for this data.

Please note that your user account will be automatically deleted after 3 months if you leave TK or if you no longer have an authorised insurance policy (e.g., if we only provide temporary benefits within the meaning of the German Social Code).

If you have downloaded documents from "Meine TK", such as TK letters received online, and saved them permanently on your device, they will not be deleted automatically.

Contact details of the data protection officer and the supervisory authorities

Techniker Krankenkasse
Data protection officer
Bramfelder Str. 140
22305 Hamburg
E-mail: datenschutz@tk.de

The Federal Commissioner for Data Protection and Freedom of Information
www.bfdi.bund.de

Federal Social Security Office
www.bundesamtsozialesicherung.de

Amendment or adaption of the privacy policy

The privacy policy is valid from 01.07. 2024 and is dated 23 May 2024. Due to the further development of "Meine TK" or the implementation of new technologies, it may become necessary to amend this privacy policy.