Data protection
Operational data from radiology comes from a sensitive environment. That is why we settle how data is handled before the first record is shared. This page describes how we work in client projects. Information on the processing of personal data on this website can be found in the privacy policy.
Data minimisation and pseudonymisation
Section titled “Data minimisation and pseudonymisation”- We only request the fields required for the question at hand.
- Direct identifiers such as names, addresses, dates of birth or insurance numbers are removed or replaced by pseudonyms before handover.
- The mapping of pseudonyms to individuals stays with you.
- Report texts and image content are not needed. Billing data, organisational data, technical metadata and selected exam-related attributes, pseudonymised, are sufficient for the analyses.
Pseudonymised is not anonymous. Pseudonymised exam data remains personal health data within the meaning of Art. 9 GDPR and is treated accordingly – with all the requirements on legal basis, access control and deletion. Only evaluations that no longer allow conclusions about individuals are treated as anonymous.
Employee data
Section titled “Employee data”- Personal identifiers of staff are removed before processing, in particular DICOM fields such as
OperatorsNameandPerformingPhysicianName. - We produce no evaluations of individual members of staff. Evaluations refer to scanners, exam types, slots, sites and periods.
- Where an identifier is technically needed for linking, it is pseudonymised before handover and never resolved back in the evaluation.
Professional confidentiality
Section titled “Professional confidentiality”Radiological data is subject to medical confidentiality. As a contributing service provider we are bound to secrecy under Section 203(4) of the German Criminal Code (StGB); everyone involved is instructed accordingly and bound in writing. The data processing agreement covers this in addition.
Contractual basis
Section titled “Contractual basis”- Before any data is shared, we sign a data processing agreement under Art. 28 GDPR.
- It defines purpose, scope, technical and organisational measures, sub-processors and deletion periods.
- Data is processed exclusively for the agreed purpose and deleted or returned at the end of the project.
Technical measures
Section titled “Technical measures”- Client and project data is processed on systems in data centres located in Germany
- Encrypted transmission (TLS) between all systems involved
- [PLACEHOLDER: statement on encryption at rest – to be added only once implemented and verified]
- Access limited to people involved in the project, with personal accounts
- [PLACEHOLDER: statement on the separation of project systems from the website and the demo – name the actual degree of separation]
- Project data is not routed through the content delivery network that serves this website and the demo
Public demo
Section titled “Public demo”The demo works exclusively with synthetic, artificially generated data. It contains no data from real practices or patients.
What this is for
Section titled “What this is for”Our analyses, and any tools that may grow out of them, are intended for organisational and economic planning. They are not intended to make diagnoses, recommend treatments or support reporting. The guardrails that apply to economic planning are described under Approach.