Data Protection Information
In this data protection information, we, "Kranken- und Unfallfürsorge für oö. Gemeinden" (KFG), as the responsible party according to Art. 4 lit 7 GDPR, inform you about which data we process within the scope of our legal mandate according to the state regulations, statutes, and health regulations, as well as our other business activities.
Since the protection of your personal data is of particular concern to us, we strictly adhere to the legal requirements of the Data Protection Act (DSG) and the GDPR when collecting and processing your personal data.
Below, we provide detailed information about the scope and purpose of our data processing as well as your rights as a data subject. Please read our privacy policy carefully.
1. Personal Data
Personal data includes all information relating to an identified or identifiable natural person. This includes, for example, your name, address, telephone number, or date of birth.
Special categories of personal data particularly include health information of a natural person.
In the course of our legal mandate and to fulfill our other service obligations, we process personal data of any category equally.
2. Processing and Storage Duration
As part of our legal mandate, we must collect and process various information from insured persons that is essential for fulfilling our service obligations. Insured persons in the context of this data protection information are members according to § 3 and dependents according to § 8 of the KFG statutes.
We receive the personal master data and general insurance information of our policyholders from the municipalities and municipal associations of Upper Austria, the Office of the Upper Austrian Provincial Government, and possibly from hospitals and other insurance carriers. This data is necessary to create a profile in our system for our insured persons to manage the data required for service provision in the event of a claim.
In the event of a claim, we receive various information about the claim from our insured persons through a separate application, including health-related information about diseases, injuries, diagnoses, and any necessary medical treatments. The processing of this data is necessary for us to verify the claim and, if applicable, to make a commitment to provide services. We retain this data during the active insurance relationship and beyond as long as legal retention obligations exist or we are confronted with claims from policyholders or third parties and need the data to defend against unjustified claims.
In the case of contract initiation or completion with other customers or third parties involved in service provision, we process their personal data until the expiration of the warranty, guarantee, statute of limitations, and legal retention periods applicable to us, and beyond that until the end of any legal disputes where the data is needed as evidence.
3. Data Transmission
In principle, your data will not be transmitted to third parties unless we are legally obliged to do so, the data transfer is necessary for the performance of a contract between us, or you have explicitly consented to the transfer of your data. External processors or other cooperation partners will only receive your data to the extent necessary for contract execution or if we have a legitimate interest in doing so, which we will always disclose separately in each case. If one of our processors comes into contact with your personal data, we ensure that they comply with the data protection laws in the same way we do.
We do not sell or otherwise market your personal data to third parties.
4. Security
We employ numerous technical and organizational security measures to protect your data against manipulation, loss, destruction, and access by third parties. Our security measures are continuously improved in line with technological developments.
5. Your Rights
According to the General Data Protection Regulation (GDPR) and the Data Protection Act (DSG), you have the following rights and remedies as a data subject of our data processing:
- Right to Access (Art. 15 GDPR)
As a data subject of the aforementioned and other data processing, you have the right to request information about whether and, if so, which personal data about you is being processed. For your own protection – so that no unauthorized person can obtain information about your data – we will verify your identity in an appropriate manner before providing any information.
- Right to Rectification (Art. 16) and Erasure (Art. 17 GDPR)
You have the right to request the immediate rectification of incorrect personal data concerning you and, taking into account the purposes of the data processing, the completion of incomplete personal data as well as the erasure of your data, provided the criteria of Art. 17 GDPR are met.
- Right to Restriction of Processing (Art. 18 GDPR)
You have the right under the legal requirements to request the restriction of the processing of all collected personal data. From the time of the restriction request, this data will only be processed with your individual consent or for the assertion and enforcement of legal claims.
- Right to Object (Art. 21 GDPR)
You may object to the processing of your personal data at any time for reasons arising from your particular situation if the data processing is necessary to protect our legitimate interests or those of a third party, unless there is a legal obligation to process the data. After an objection, your data will no longer be processed unless there are compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms, or the processing is for the assertion, exercise, or defense of legal claims.
- Withdrawal of Consent
If you have given separate consent for the processing of your data, you can withdraw it at any time. Such a withdrawal affects the admissibility of the processing of your personal data after you have declared it to us.
We will respond to all reasonable requests within the legal framework free of charge and as promptly as possible.
6. Contact Information / Contact Person
Contact information of the responsible party:
Kranken- und Unfallfürsorge für oö. Gemeinden (KFG)
Friedrichstraße 11
4041 Linz, Upper Austria
Phone: 0732 / 788000-0
Fax: 0732 / 788000-30
Email: office@kfg.ooe.gv.at