This privacy notice applies to the website www.avocadoc.de.
Protecting your personal data is an important concern for us. Below we inform you about the processing of your data when using our telemedicine services on www.avocadoc.de.
This notice applies to all visitors and users of our platform and informs you in accordance with Art. 13 and 14 GDPR, § 25 TTDSG and other applicable data protection regulations.
neckaralb gesund GmbH
Pfleghofstraße 8, 72070 Tübingen
Email: [email protected]
3.1 Registration and use of the platform
• Data: first name, last name, email address, password, telephone number (if applicable), insurance status
• Legal basis: Art. 6 (1)(b) GDPR (performance of contract)
3.2 Provision of telemedicine consultations
• Data: health data, medical history, consultation transcripts, diagnoses, laboratory reports
• Legal basis: Art. 9 (2)(h) GDPR (healthcare services)
3.3 Billing and payment processing
• Data: insurance details, billing information, bank account details (if required)
• Legal basis: Art. 6 (1)(b) GDPR
3.4 Technical operation and security of the platform
• Data: IP address, access times, log files
• Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in IT security)
In the course of using the platform, we process the following categories of personal data, among others:
- Master data (e.g. name, date of birth, address)
- Contact details (email, telephone number)
- Health data (medical history, symptoms, diagnoses, medication plans)
- Communication content (e.g. chat transcripts, video consultations)
- Billing data (insurance, payment details)
- Technical data (IP address, device information, log data)
Data is only disclosed:
- to medical professionals, pharmacies or laboratories for treatment
- to IT service providers within data processing agreements (Art. 28 GDPR)
- to payment providers, health insurance companies or billing offices
- where legally required or with your consent
Data transfers to third countries (outside the EU) only occur where appropriate safeguards in accordance with Art. 44 ff. GDPR exist.
6.1 Technically necessary cookies
These cookies are required for the proper functioning of our website (e.g. login, session management, security).
These cookies do not require consent.
6.2 Cookies requiring consent (function, statistics, third-party)
With your consent we use cookies for:
• Analytics & statistics (e.g. Matomo, Google Analytics)
• Functional services (e.g. appointment booking, video consultations)
• External content (e.g. maps, videos)
You can withdraw your consent at any time via the cookie banner or by email to [email protected].
6.3 Legal bases
• Necessary cookies: § 25 (2) TTDSG, Art. 6 (1)(f) GDPR
• Statistics/functional cookies: § 25 (1) TTDSG, Art. 6 (1)(a) GDPR
We determine retention periods based on the specific purposes for which we use the data.
The data is used to operate our website (Art. 6 (1)(f) GDPR) and to fulfill contractual obligations towards our customers and doctors (Art. 6 (1)(b) GDPR).
For health and treatment data, statutory documentation and retention obligations of up to 10 years may apply.
Retention periods are also determined by statutory limitation periods, which are usually three years (§§ 195 ff. BGB, from the end of the calendar year).
8.1 Right of access (Art. 15 GDPR)
8.2 Right to rectification (Art. 16 GDPR)
8.3 Right to erasure – “right to be forgotten” (Art. 17 GDPR)
8.4 Right to restriction of processing (Art. 18 GDPR)
8.5 Right to data portability (Art. 20 GDPR)
8.6 Right to object (Art. 21 GDPR)
8.7 Right to withdraw consent (Art. 7 (3) GDPR)
8.8 Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
Supervisory authority: The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Tel: +49 711 / 61 55 41-0, Email: [email protected], Website: www.baden-wuerttemberg.datenschutz.de
No processing of personal data takes place outside the EU/EEA. If exceptionally required, this will only occur in compliance with Art. 44 ff. GDPR (e.g. EU standard contractual clauses).
Providing your personal data is necessary for using our services. Without the required information, we cannot provide telemedicine consultations.
During a video consultation we collect, process and store personal data to enable medical consultation, diagnosis or treatment via secure digital communication. Processing is based on Art. 6 (1)(b) GDPR (performance of contract) and Art. 9 (2)(h) GDPR (processing of special categories of personal data for medical purposes).
11.1 Types of data collected: Master data (name, date of birth, address, insurance status), contact details, health data (symptoms, conditions, ongoing medication, vital signs, diagnoses, treatment recommendations), technical data (IP address, device, operating system, session ID, connection quality), communication content (consultation details, text or image files, lab results, medical reports).
11.2 No recording or storage of video and audio: Consultations are not recorded. No video or audio material is stored or captured.
11.3 Confidentiality and security: Consultations are conducted exclusively via certified video providers in compliance with § 365 SGB V and KBV guidelines. All connections are end-to-end encrypted.
11.4 Documentation: After the consultation, medical staff document relevant findings, diagnoses, recommended measures (e.g. prescription, referral), time of consultation, and name of the consulting doctor in the patient record. Documentation is subject to a statutory retention period of generally 10 years (§ 630f BGB).
We reserve the right to update this privacy notice if legal requirements or our services change. The current version is always available on our website.
Last updated: July 2025
