Data Protection Information for License Customers

 

Preamble

The information and sample texts outlined below are given for informational purposes only and cannot be applied 1:1 to every individual case.

We urgently request you to consult your data protection officer and/or solicitor for the exact wording of your data privacy statement and / or cookie information. This is particularly important with regard to the mandatory mention of the legal basis for the collection of data and the incorporation of the DocCheck login.

This information given does not constitute legal advice and cannot replace legal advice. The information provided within the scope of this Internet website will be kept as complete and up-to-date as possible. However, we do not assume any liability for the accuracy, completeness or topicality of the information provided.

 

Cookies with the DocCheck Login Service

When using the DocCheck Login, Cookies of DocCheck are used.

When calling the Login on a Website, the Cookie PHPSESSID is set for the duration of a session. PHPSESSID stores the particular User's session ID on the server that runs the login and helps identifying the Client between two calls.

Further Cookies are set when using the Login (Login process takes place). The basis for use of these Cookies is the agreement to the General Terms and Conditions of Sale (German AGB), which are agreed to during the registration of a DocCheck User Account.

On the one hand, the Cookie "doccheck_user_id" is set and stored for the duration of one session. The Cookie facilitates the so-called "single sign on" process and ensures that a DocCheck User needs to log-in only once and can access DocCheck-protected pages without any further login process in the course of one session.

Moreover, we also set the Cookie "dc_oauth". This Cookie ensures the User's login on the Websites protected by DocCheck and at the same time the User's login into the DocCheck portal, and it ensures that a User needs to login only once as a DocCheck User while continuing to have access to the DocCheck Portal without any further login process in the course of one session.  

 

The DocCheck login in your data privacy statement

If your website contains information that falls under the German Health Services and Products Advertising Act, the indication of the DocCheck password protection in your Data Protection Declaration could have the wording outlined below:

“In our Internet site, we use the DocCheck Login, an offer of the DocCheck Community, Vogelsanger Straße 66, 50823 Cologne (hereinafter exclusively referred to as "DocCheck"). 
We use the DocCheck login in order to meet our legal obligation according to the German Health Services and Products Advertising Act and to make certain contents of our website exclusively accessible to expert groups after previous registration authentication. 
Data processing is to this extent carried out to meet our legal obligations which we are bound to. Data processing is therefore based on Art 6, section 1, sentence 1 letter c) of GDPR.
User names and passwords are authenticated on DocCheck servers directly. 
Within the constraints of use of the DocCheck login, DocCheck will collect log data from you as outlined below, starting from our website which has incorporated the login by "embed" or iFrame. 

• IP address

• Date of access 

• Time of access

• Referrer-URL

• Information about hard- and software used (such as browser type and features or device information, e.g the resolution),

These log data are not used to draw any conclusions about your person, but they are meant to ensure the correct presentation of page or iFrame contents and / or the safety of the DocCheck services. 
You will find further information on the collection and use of data and your related rights and possibilities of protection in the data protection instructions of DocCheck.“

Rev: Dez. 2021