Techniker Krankenkasse (TK) wants to use its website to provide interested parties and insurees with comprehensive, useful and knowledgeable information about services, benefits, contributions and health topics and offer TK’s insurees and business partners the best possible online service from a modern service provider.

Techniker Krankenkasse’s data protection policy is presented in the following.

This data protection policy informs users about the type, scope and purpose of the personal data collected and used by the responsible provider on this website (hereinafter referred to as the “offer”). The legal basis for data protection is contained in the EU General Data Protection Regulation (GDPR), the Sozialgesetzbuch (SGB) [German Social Security Code] and the Bundesdatenschutzgesetz (BDSG) [German Federal Data Protection Act]. TK only collects and uses your personal data in compliance with these provisions. Such personal data includes all information related to an identifiable or identified natural person. This includes your health insurance number, for example.

We are committed to continuously further developing and improving our website and offerings. These developments may necessitate changes to this data protection policy. We recommend that you periodically visit this website in order to keep up to date on our policy.

Contents:

1. Processing and retention period of your data on tk.de
2. Communication channels with TK
3. Information about cookies
4. Analytical tools
5. Social Plugins
6. Integration of third-party services
7. System security with regard to data protection
8. General rights of data subjects and contact persons
9. Contact details of the controller, the data protection officer and our supervisory authorities

1. Processing and retention period of your data on tk.de

1.1 Scope of personal data processing

When personal data is collected on this website, it is collected either on the basis of your express consent (Art. 6(1) Sentence 1(a) GDPR), to comply with legal obligations to which TK is subject (Art. 6(1) Sentence 1(c) GDPR), to perform tasks in the public interest or in the exercise of official authority vested in TK (Art. 6(1) Sentence 1(e) GDPR), or to safeguard the legitimate interests of TK (Art. 6(1) Sentence 1(f) GDPR). The data is stored for as long as it is necessary for the purpose for which it was collected and provided that statutory retention periods do not prohibit its deletion.

  • Informational use

    You do not have to provide any personal data if you simply want to obtain information on tk.de about a particular topic and do not log in or register on the website or otherwise provide us with information.

    In case of such an "informational use", we only collect the data transmitted by your browser in order to enable you to visit the website. This data comprises:

    IP address
    Date and time of request
    Time zone difference from Greenwich Mean Time (GMT)
    Contents of the request (specific page)
    Access status/HTTP status code
    Volume of data transferred in each case
    Referrer URL
    Browser
    Operating system and its interface
    Language and version of the browser software.

    The logged data is used exclusively for data security purposes, in particular to prevent attempts to hack into or attack our web server (Art. 6(1) Sentence 1(f) GDPR). The data is neither used to create individual user profiles nor passed on to third parties and is deleted no later than 90 days afterwards. We reserve the right to statistically evaluate anonymised data records.

    Please also refer to the information on analytical tools in Section 4 of this data protection policy.


  • Use of service offers

    For some TK online services, we need personal data to be able to provide the services. If you want to utilise one of these services, we only collect and store the data required to provide the service. The stored data will exclusively be used for the specified purpose.

    Example 
    If you want to use the TK-Klinikführer [TK Hospital Guide], we will need you to enter a postal code or city in order to inform you about hospitals in your vicinity.

    What data TK collects, stores and uses for a specific service offer can be seen in the individual input form for that service. Required information is indicated as such, all other entries are voluntary. Further information on data collection and data processing can be found in the explanations and terms for each service offer.

    You can register or deregister on your own initiative at any time for any TK service offer that requires registration.


  • Participation in contests and sweepstakes

    Contests and sweepstakes are offered on the TK website from time to time. TK stores the personal data of the entrants that is necessary to run the contest or sweepstakes. For example, TK needs an address in order to be able to send prizes. The data is only passed on to third parties if it is necessary due to the type of prize or presenting the prize. For example, if a contest is held on the TK website together with a cooperation partner who will be sending the prizes directly.

1.2 When will my data be deleted?

TK deletes personal data

  • if the users revoke their consent to having the data stored;
  • if the data is no longer required;
  • if storage of the data is not permitted for other legal reasons.

2. Communication channels with TK

2.1 Password-protected online offers from TK

On the TK website, there are password-protected areas for various offers where particularly sensitive data is collected. More detailed information can be found in the respective terms of use and data protection policies.

The programs used for entering passwords log the following data for each login error and each time a password is blocked:

  • date,
  • time,
  • IP address of the computer via which the incorrect entry was made, and
  • the username.

This data is stored on the TK web server.

2.2 E-mail communication

In certain cases, we reply to customer enquiries by postal mail even if an enquiry has been sent to us by e-mail. This is always the case if our reply contains social data. We regret that for legal reasons, no other option is available at this time. As soon as a more broad-based secure technology becomes available that guarantees the highest possible data security, we will be happy to answer your service enquiries by e-mail as well.

2.3 Newsletter

The data you provide when subscribing to a newsletter will only be used to personalise the newsletter and will not be forwarded to third parties. Providing this information is voluntary. We perform anonymised tracking for statistical purposes.

2.4 Chat

On tk.de, you can access our anonymous TK Chat feature. The corresponding terms of use apply .

We will answer individual questions about services or your TK insurance cover in the secure " Meine TK " ["My TK"] area.

2.5 Contact form

You have the option to contact TK via an online form. The data you voluntarily enter is collected and used solely for the purpose of establishing contact. The data is transmitted using TLS encryption. Further details can be found on the contact form .

2.6 Portals

You have the option to contact TK via various portals (e.g. corporate customers, careers, innovations). The data you voluntarily enter is collected and used solely for the purpose of establishing contact. The data is transmitted using TLS encryption. Further details can be found on each portal.

3. Information about cookies

Like many other websites, the TK website also uses "cookies". Cookies are small text files stored on your computer. They contain information about your visit to our website that is transmitted to TK. Cookies are usually set or read automatically each time you visit tk.de.

We use cookies on tk.de to analyse and improve the use of our online services. This is our legitimate interest pursuant to Art. 6(1)  Sentence 1(f) GDPR.

Important note
No data is stored in the cookies that allows personally identifiable information to be traced to any person visiting our website. The information saved in the cookies is stored separately from any other data provided to us. We do not merge this data with other data sources.

This website uses session cookies and persistent cookies. The term "session" here refers to an Internet session that ends at the latest when the web browser is closed.

3.1 Session cookies

Session cookies are used to save the session data. Session cookies store a "session ID" which is used to assign various requests from your browser to a session. This feature allows your computer to be recognised again when you return to the website.

A session cookie expires at the end of each session. That means that the cookie becomes invalid and can no longer be used as soon as you close the browser completely. The same happens if you are not active on the TK website for more than 30 minutes.

3.2 Persistent cookies

In contrast to session cookies, persistent cookies are stored for a period of up to 6 months. They remain on the computer even after the current visit is over, unless they are intentionally deleted. In addition, persistent cookies contain a predefined expiry date. After that date expires, the cookies are automatically deleted.

TK uses persistent cookies for statistical purposes, for example, in order to identify what content of the TK website is in particularly high demand. This is an important tool that helps us continuously improve tk.de for you. A personally identifiable reference to the user is not created in the process.

3.3 Deletion

You can delete cookies set by TK at any time in your browser. However, please note that your personal settings for using tk.de are also stored in the cookies. Therefore, if you delete these cookies, your settings will also be reset and you may not be able to use all the features and functions of our website.

4. Analytical tools

4.1 General information

We analyse the usage behaviour of visitors to our website in pseudonymised form, i.e. without being able to trace any personally identifiable information about the visitor. The findings and information we obtain this way helps us to improve the TK website and conduct market analyses. This analysis is our legitimate interest pursuant to Art. 6(1) Sentence 1(f) GDPR. As a visitor to tk.de, you have the right to refuse to have your data collected at any time.

4.2 Web tracking

TK uses the web tracking method to analyse usage behaviour. This means that TK records which of its websites have been visited and how often. For this purpose, TK sets cookies that expire after 180 days.

TK has commissioned Webtrekk GmbH as the service provider for conducting the usage analysis. The TÜV Saarland technical inspection association has certified Webtrekk GmbH as a service provider for data protection with regard to web monitoring software.

When you visit our website, your browser transmits certain information to us. Webtrekk GmbH stores this data exclusively on its server in Germany. The following data are collected:

  • Time of access 
  • Technical data about your browser and end device, such as operating system, browser, language setting, screen resolution
  • Information about the content, features and functions used, such as page names, campaigns, link clicks, logins, form sections
  • IP address – this is deleted by Webtrekk during the data processing and is not stored.

If you want to opt out from having your data stored on tk.de, a cookie named "webtrekkOptOut" will be set to exclude you from the web monitoring. The opt-out will remain in effect as long as this cookie is not deleted. If you have configured your browser so that cookies are not stored or are deleted after they are stored, you must click on the link again to renew the opt-out.

For more information about how Webtrekk GmbH handles data protection, please visit:

Opt out of data storage now

4.3 Conversion tracking

TK uses conversion tracking to analyse online advertising campaigns. This means that TK tracks how many users reach the tk.de website via an online advertisement. The information obtained in this way allows us to generate statistics about our online advertising campaigns. The analysis is only conducted in an aggregated form, so that it is not possible to determine any personally identifiable information about you.

To implement the conversion tracking, TK works together with Adform, a provider that measures our online advertising campaigns. For conversion tracking, TK uses persistent cookies that expire in 60 days.

If you want to opt out of conversion tracking, click on:

4.4 Personalisation of website content using Adtelligence Platform software from ADTELLIGENCE GmbH 

On our website, we use the Adtelligence Platform software from ADTELLIGENCE GmbH (www.adtelligence.com). This is used for targeting specific groups with the aim of personalising our online business.  For this purpose, data of website visitors is recorded and assigned to specific target groups by means of cookies and tracking pixels. The target group-specific characteristics are recorded by ADTELLIGENCE, transmitted to the system in anonymous form and stored on servers in Germany. On this basis, pages or contents that are displayed to you are controlled in order to present you with personalised and relevant website content. We will not forward this information to third parties.

The data processing is carried out on the basis of the legal provisions of Art. 6(1) Sentence 1(f) GDPR. Our legitimate interest is the optimisation of our online offer and our website.

If you do not want cookies to be stored on your computer, you can prevent them from being set by configuring your browser software accordingly or deleting cookies that have already been stored. In this case, however, you may not be able to use all the features and functions of the website.

If you want to opt out of this process, please click on the following opt-out link:

Matomo 
Our website uses the open source web analysis service Matomo (formerly "Piwik") as a self-hosted system.

Matomo uses "cookies". These are text files that are stored on your computer and enable an analysis of your usage of the website. For this purpose, the information generated by the cookie about the use of this website is stored on our Matomo server. The IP address is anonymised before it is stored.

The data processing is carried out on the basis of the legal provisions of Art. 6(1) Sentence 1(f) GDPR. Our legitimate interest is the optimisation of our online offer and our website.

The information generated by the cookie about the use of this website will not be passed on to third parties. You may refuse the use of cookies by selecting the appropriate settings on your browser; however, please note that in this case, you may not be able to use the full functionality of this website.

If you do not consent to the storage and use of your data, you can deactivate the storage and use here. In this case, an opt-out cookie is stored in your browser which prevents Matomo from saving usage data. If you delete your cookies, the Matomo opt-out cookie will also be deleted. The opt-out must be reactivated the next time you visit our site.

If you do not want to participate in the optimisation of the website, you can opt-out of it here at any time:

4.5 Retargeting

On tk.de, we use the retargeting technology from Adform. In online marketing, retargeting is a process in which visitors to a website are identified and are then shown targeted advertising on other websites. For retargeting, TK uses persistent cookies that expire after 90 days. In the case of retargeting as well, the data is only collected in pseudonymised form.

You can opt out from retargeting by Adform by clicking on this link:

A cookie will then be set which permanently prevents the collection of data, unless you delete this specific cookie in your browser individually or via the "delete all cookies" function. You can opt out again at any time.

4.6 Customer journey analysis

Exactag GmbH ("Exactag"), located at Philosophenweg 17, 47051 Duisburg, Germany, collects and processes data on our website and its web pages for marketing and optimisation purposes. This data can be used to create user profiles under a pseudonym. The cookies allow the Internet browser to be recognised again. The data collected using Exactag technologies are not used to identify you personally and are not merged with personal data about the bearer of the pseudonym.

You can opt out from having your anonymised visitor data collected in the future by clicking on this link:

5. Social plugins (Facebook, Twitter, Google+)

"Social plugins" are used on the TK website. The plugins we currently use are for Facebook, Twitter, Google+ and WhatsApp. These plugins can be used to send data, including personal data, to U.S. service providers and may be used by them.

5.1 Shariff protection tool

TK itself does not collect any personal data through social plugins or any information about their use. TK uses the "Shariff Solution" to prevent data from being sent to service providers in the USA without the user’s knowledge. This solution ensures that personal data is not automatically sent to the providers of the individual social plugins when you visit the TK website. Data cannot be sent to the service provider or stored there until you actually click on one of the social plugins.

More information about the Shariff Solution can be found on the provider’s website, Heise Medien GmbH & Co. KG:

5.2 Access by service providers

The service provider then receives information that you have accessed the relevant webpage of our online offer. For this, you do not need to have an account or be logged in with the service provider. If you are logged in at the service provider, these data will be assigned directly to your account. If you click on a social plugin and, for example, link to the site, the service provider will also save this information in your user account and share that information publicly with your contacts.

If you do not want this information to be assigned to your profile at the service provider, you must log out before clicking on the social plugin.

TK has no control over whether and to what extent the service provider will collect personal data. Moreover, we have no knowledge of the scope, purpose and retention period of the collected data. It must be assumed that the IP address and device-relevant information will at least be recorded and used. It is also possible that the service provider will use cookies.

5.3 Information from the service providers

You can obtain further information about the data protection handling on the websites of the individual service providers:

a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA
http://www.facebook.com/policy.php;

weitere Informationen zur Datenerhebung:
http://www.facebook.com/help/186325668085084,
http://www.facebook.com/about/privacy/your-info-on-other applications sowie
http://www.facebook.com/about/privacy/your-info everyoneinfo.

b) Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA
https://www.google.com/policies/privacy/partners/?hl=de.

c) Twitter Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA
https://twitter.com/privacy

d) WhatsApp Inc, 650 Castro Street, Suite 120-219, Mountain View, California, 94041; USA
http://www.whatsapp.com/legal/?l=de

6. Integration of third-party services

YouTube

We have integrated YouTube videos into our online offer that are stored on http://www.youtube.com and can be played directly from our website. We have integrated these videos in the "enhanced data protection mode". This mode ensures that no personal data will be sent to YouTube when you visit the TK website without playing a YouTube video.  Data will not be transferred until you play a video. We have no control over this data transfer.

Google Maps

We use Google Maps API to visually display interactive maps. When these maps are used, Google also collects, processes and uses data about the usage of the map functions. For more information about Google's data processing practices, please see Google’s privacy policy:

7. System security

We maintain up-to-date technical measures to ensure data security. These measures are particularly intended to protect your personal data from unauthorised access by third parties. We adapt our protection and security mechanisms to the current state of the art. 

If you are asked to enter personal data in one of our online offers, the data is always transferred using TSL encryption. The purpose of this encryption is to prevent any unauthorised party from gaining possession of your data.

8. General rights of data subjects and contact persons

You have the right

a. to obtain information about the categories of the personal data being processed, purposes of the processing, any recipients to whom the data will be disclosed, the envisaged storage and the retention period (Art. 15 GDPR);
b. to request rectification of inaccurate, incorrect or incomplete data (Art. 16 GDPR);
c. to withdraw consent at any time with effect for the future (Art. 7(3) GDPR);
d. to object to the processing of data on the grounds of legitimate interests, for reasons relating to your particular situation (Art. 21(1) GDPR);
e. to request the erasure (deletion) of personal data in certain cases within the scope of Art. 17 GDPR – particularly if the personal data is no longer necessary in relation to the purposes for which it was collected or it is being unlawfully processed, or if you revoked your consent in accordance with (c) above or declared an objection as described in (d) above;
f. to request, under certain circumstances, the restriction of data where erasure is not possible or the erasure obligation is disputed (Art. 18 GDPR);
g. to data portability, i.e. you can receive your data which you provided to us in a commonly used and machine-readable format, such as CSV, and can, where necessary, transmit the data to others (Art. 20 GDPR).

9. Contact details of the controller, data protection officer and our supervisory authorities

Contact details of the controller
Techniker Krankenkasse
Bramfelder Straße 140
22305 Hamburg
Tel: + 49 (0)800-285 85 85
E-mail: service@tk.de

Contact details of data protection officer
Techniker Krankenkasse
Beauftragter für den Datenschutz
Bramfelder Str. 140
22305 Hamburg
E-Mail: datenschutz@tk.de

Contact details of supervisory authorities
Der Bundesbeauftragte für Datenschutz und die Informationsfreiheit [German Federal Commissioner for Data Protection and Freedom of Information]
Husarenstr. 30
53117 Bonn
poststelle@bfdi.bund.de oder poststelle@bfdi.de-mail.de 

Bundesversicherungsamt [German Federal Insurance Office]
Friedrich-Ebert-Allee 38
53113 Bonn 
poststelle@bvamt.bund.de oder poststelle@bvamt.de-mail.de