Privacy policy

This policy explains what personal data Medigo GmbH (“Medigo”, “we”, “us”) processes when you use this website, why, and what rights you have. We process personal data in line with the EU General Data Protection Regulation (GDPR) and German data protection law.

1. Who is responsible

Medigo GmbH, Torstraße 124, 10119 Berlin, Germany, is the controller for the processing described here. For privacy enquiries, contact dataprotection@medigo.com. Our external data protection officer is Philipp Herold (mein-datenschutzbeauftragter.de).

2. Visiting this website

Hosting. This website is hosted by Vercel Inc., USA. When you open a page, our host processes the technical data your browser sends: IP address, date and time, the page requested, the referring page, and browser and operating system. This is needed to deliver the website and keep it secure. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR). Server logs are kept only as long as needed for security and are then deleted.

Website statistics. We use Vercel Web Analytics to understand which pages are used and how visitors find us. It does not use cookies and stores nothing on your device. Visits are counted using a value calculated from the request, which is discarded after 24 hours; we cannot use it to identify you or to follow you across other websites. For each page view it records the page address, the referring page, the country, region and city derived from your connection, device type, operating system and browser. We remove all URL parameters except campaign tags (utm_source, utm_medium, utm_campaign and ref) before anything is sent. We also count when a form is sent successfully and when certain buttons are clicked, without recording anything you type. We see the results only as aggregated statistics. Legal basis: our legitimate interest in understanding and improving our website (Art. 6(1)(f) GDPR). You can object at any time (see section 8).

3. Contact and provider forms

When you use our contact form or apply to join our provider network, we process the details you enter: name, email address, company or facility, job title, country, the type of organisation, the services you’re interested in and your message. We use them only to answer your enquiry or assess your application. Legal basis: steps prior to a contract (Art. 6(1)(b) GDPR) or, for general enquiries, our legitimate interest in answering them (Art. 6(1)(f) GDPR).

Form messages are delivered to our team by email through Amazon Web Services (Amazon SES), using servers in Europe. To block spam, the forms use a hidden field and a timing check; no third-party captcha is used. We delete enquiries once they are concluded, unless they lead to a contract or we must keep them by law.

4. Job applications

Our open positions are published through Personio. When you apply, you do so on Personio’s site, and your application is processed by Medigo using Personio SE & Co. KG, Munich, Germany, as our processor. The applicant privacy notice shown there applies.

5. Our services for insurers, employers and patients

When we handle claims, medical cases or assistance for our clients, we process health and claims data either on their behalf (Art. 28 GDPR) or, for patients who come to us directly, as controller. That processing is governed by our client agreements and the information we give patients when their case starts. This data is stored and processed within the EU. Health data is processed under Art. 9 GDPR.

6. Recipients and transfers outside the EU

We share personal data only with service providers bound by data processing agreements, and only as far as needed: Vercel Inc. (hosting and website statistics), Amazon Web Services (email delivery of form messages, on servers in Europe) and Personio (job applications). We do not sell personal data or use it for advertising.

Vercel is based in the USA. Transfers to Vercel rely on its certification under the EU–US Data Privacy Framework and on the EU Standard Contractual Clauses in Vercel’s data processing agreement.

7. Cookies

This website sets only one cookie, which remembers your language when you use the language switcher. It is strictly necessary, and nothing else is stored on your device. Details are in our cookie policy.

8. Your rights

You have the right to access, rectification, erasure, restriction of processing and data portability, and the right to withdraw any consent with effect for the future. Where we rely on our legitimate interests, you have the right to object to the processing on grounds relating to your particular situation (Art. 21 GDPR). To exercise your rights, write to dataprotection@medigo.com. You can also complain to a supervisory authority; ours is the Berlin Commissioner for Data Protection and Freedom of Information.

9. Changes to this policy

We update this policy when our website or our processing changes. The date at the top shows the latest version.