Privacy notice for clinverum.de
This privacy notice applies to the IT and service offering at clinverum.de. This website is not intended for the general submission of patient data, medical findings or other health data.
CLINVERUM is a product of moshar media.
1. Controller
moshar media, proprietor Sasan Moshar
Product brand CLINVERUM
Utrilloweg 31
60438 Frankfurt am Main
Germany
Email: info@clinverum.de
Telephone: 069 95806750
2. Purposes and legal bases
We process personal data insofar as this is necessary for providing the website, handling contact requests, maintaining IT security and defending or enforcing legal claims.
- Provision and operation of the website: Art. 6(1)(f) GDPR
- Contract-related enquiries and demo appointments requested by you: Article 6(1)(b) GDPR. We process other business enquiries on the basis of Article 6(1)(f) GDPR; our legitimate interest is responding to your enquiry.
- Recording form acknowledgements and preventing misuse: Article 6(1)(f) GDPR. Our legitimate interest is a traceable and secure contact process. Acknowledging the privacy notice does not constitute blanket consent to additional processing.
3. No health data intended via the general contact form
Health data is a special category of personal data under Article 9 GDPR and is particularly sensitive. The general contact form on this website is not intended for diagnoses, medical findings, medication details, health insurance data or other patient information.
Please do not send medical content through this form. If a separate practice or patient offering is operated, dedicated and technically appropriate communication channels must be provided for that purpose.
4. Server logs and hosting
The website is hosted by ALL-INKL.COM – Neue Medien Münnich, proprietor René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The hosting provider processes technical access data to deliver and secure the website.
When the website is accessed on a purely technical basis, data is processed server-side that is necessary for delivering, stabilizing and securing the website. This may include, in particular, IP address, date and time of access, retrieved resource, amount of data transferred, browser information and referrer.
The legal basis is Art. 6(1)(f) GDPR. Storage takes place only as long as is necessary for secure operation, error analysis and misuse detection.
5. Contact form and communication
If you contact us via the contact form, by email or by phone, we process the information you submit in order to handle your request.
- Required form fields: name, email address, subject, message
- Additional information depending on your enquiry: telephone number, practice profile, team size, existing system, number of locations, project timeframe, demo focus and preferred appointment.
- Additional compliance data: declared privacy confirmations, form version and submission timestamp
- Purpose: handling your request, documenting the consent process, and misuse prevention
Contact enquiries are forwarded to us by email. When a demo appointment is reserved, the enquiry, appointment and processing status are also stored in the website database. The automatic Microsoft Graph integration for Outlook/Teams appointments is currently inactive. Calendar links transmit data only when you open the respective external calendar service; that provider’s notices apply to its processing.
Providing your information is voluntary. Without the contact details and information required by the form, we cannot process your enquiry or appointment reservation. Patient data must not be submitted through these forms. Any separate product or test operation involving personal data requires its own privacy notices and contractual basis suited to the actual operation.
6. No consent-based tracking or third-party tools on simple page access
Our previous collection of technical visit metrics has been paused since 16 September 2026. The data collected comprised an identifier for each page view, page path, loading and interaction times, window size and connection type. Collection will only be reactivated after the required information, consent controls and retention arrangements have been agreed.
This website currently does not use any consent-based analytics, marketing or profiling tools. No external web fonts or icon CDNs are loaded when the page is simply opened.
If services such as analytics, maps, videos, embedded appointment tools or external media platforms are added later, separate privacy- and TDDDG-compliant consent control will be required before activation.
7. Privacy settings
When a language version is explicitly selected, the “CLINVERUM_lang” cookie is set for a maximum of one year. It supports the selected language; opening a page without a language parameter may remove it again. The legal basis is Article 6(1)(f) GDPR in conjunction with section 25(2), point 2 TDDDG; our legitimate interest is providing the requested language version.
In the Privacy settings dialog, you can specify at any time whether optional categories such as statistics, convenience features or external media may be enabled in the future.
The setting you actively choose is stored in a technically required consent cookie so that your choice can be recognized on subsequent page loads. The legal basis is Art. 6(1)(f) GDPR in conjunction with section 25 para. 2 no. 2 TDDDG.
The cookie is named “clinverum_privacy_settings” and lasts for 180 days. The browser also stores your selection as “clinverum_privacy_settings_local” in Local Storage so that it can be restored if technical problems occur. This local entry currently has no automatic expiry; you can remove it by clearing the website data in your browser. A new selection replaces the previous setting. Selecting optional categories does not constitute advance consent to services that may be added in the future.
8. Recipients and data processing agreements
Only parties that need personal data for operating the website or handling specific requests receive access to such data. This may include commissioned hosting, mail and IT service providers.
Service providers acting on instructions require a data processing agreement under Article 28 GDPR. This statutory requirement is distinct from certification of the website or product.
9. Storage periods
We store personal data only for as long as this is necessary for the respective purpose or as long as statutory retention obligations apply.
- Server and security data: generally only short term or according to operational necessity
- Contact requests: until final processing and thereafter only where proof or retention obligations exist
- Obviously misdirected medical information: as restrictively as possible, only where technically or legally necessary
- Consent cookie for privacy settings: up to six months or until a new choice is made
10. Security of processing
We implement appropriate technical and organizational measures in accordance with Art. 32 GDPR to ensure a level of protection appropriate to the risk. This includes transport encryption, access controls, role and permission concepts, and reducing unnecessary third-party requests.
11. Your rights
Under the GDPR, you are entitled in particular to rights of access, rectification, erasure, restriction of processing, data portability and objection to certain processing.
You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation. You may withdraw consent at any time with effect for the future; this does not affect prior processing. Please use the contact details above for your requests.
You also have the right to lodge a complaint with a data protection supervisory authority.
In particular, you may contact the Hessian Commissioner for Data Protection and Freedom of Information: datenschutz.hessen.de. You may also lodge a complaint with another competent supervisory authority.
12. Social media profiles
Additional information about data processing, Meta Platforms Ireland Limited, Insights and joint controllership applies to our business profiles on Facebook and Instagram. You can find it on the central page Legal notice and privacy information for social media.
Please do not submit patient data, medical findings or other health data through social media or messaging services.
13. Last updated
Privacy notice last updated: 16 September 2026