Declaration on data protection for the BARMER physician search at BARMER Doctor Finder

The BARMER doctor search is a service of BARMER, which is provided by Stiftung Gesundheit as operator for BARMER. BARMER would like to inform you about doctors, dentists and psychotherapists.

Since Stiftung Gesundheit is the technical operator of the website BARMER Doctor Finder, the data protection declaration of Stiftung Gesundheit follows. This privacy policy informs users about the nature, scope and purpose of the collection and use of personal data by the responsible provider on this website (hereinafter referred to as "offer"). The legal basis for data protection can be found in the General Data Protection Regulation (GDRP), the German Social Code (SGB) and the German Federal Data Protection Act (BDSG). Stiftung Gesundheit collects and uses your personal data exclusively within the framework of these provisions. This refers to all information relating to an identifiable or identified natural person.

We are constantly striving to further develop our Internet offering. Such further developments may necessitate changes to this data protection declaration. We recommend that you visit these pages at regular intervals to keep up to date.

1. Processing and storage period of your data on

1.1 Scope of the processing of personal data

Insofar as personal data is collected on this website, this is done either on the basis of your express consent, Art. 6 para. 1 p. 1 lit. a GDRP or to protect the legitimate interests of the Stiftung Gesundheit, Art. 6 para. 1 p. 1 lit. f GDRP. The data will be stored as long as it is necessary for the respective purpose of collection and as long as no legal retention periods prevent deletion.

Informational use

You do not have to provide any personal data if you merely wish to obtain information on a specific topic at and do not log in to the website, register or provide us with any other information. In this so-called "informational use", we only collect the data that your browser transmits to enable you to visit the website. These are:

  • IP address
  • Date and time of the request
  • Time zone difference from Greenwich Mean Time (GMT)
  • Content of the request (concrete page)
  • Access status/HTTP status code
  • Data volume transferred in each case
  • Website from which the request comes (referrer URL)
  • Browser
  • Operating system and its interface
  • Language and version of the browser software.

The logged data is used exclusively for data security purposes, in particular to defend against attempted attacks on our web server (Art. 6 para. 1 p. 1 lit. f GDRP). They are neither used for the creation of individual user profiles nor passed on to third parties and are deleted after 90 days at the latest. We reserve the right to statistically evaluate anonymized data records.

In order to ensure that external websites do not receive information about which website you have come from, the referrer policy (a kind of "sending concept") has been set in such a way that the referral header (URL of the previously visited page) is only set when you are on the BARMER doctor search pages.

When will my data be deleted?

The Stiftung Gesundheit and the providers do not store any social data. The respective appointment provider is responsible for processing your data in the context of online appointment booking. Please read the privacy policy of the respective appointment provider. The appointment providers are obliged to store your social data for the retention period in accordance with the provisions of the respective professional regulations.

2. Communication channels

Contact form

You have the option of contacting Stiftung Gesundheit via an online form. The data collected and used exclusively for contacting are voluntary. The data is transmitted using TLS encryption. You can find further details in the contact form.

3. Integration of the services of third parties


The BARMER doctor search uses the open source mapping tool "OpenStreetMap" (OSM), whose provider is the OpenStreetMap Foundation. The transmission and storage of your IP address may be necessary for the respective services. The contents of the BARMER doctor search are not processed via OSM.

The use of the services is in the interest of an appealing presentation and function in the BARMER doctor search as well as an easy findability of the service providers indicated on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDRP.

More information on the handling of user data can be found in OSM's privacy policy at You have the option of deactivating JavaScript in your browser or installing JavaScript blockers. As a result, however, the functionality of the BARMER doctor search is massively restricted.

4. System security

We maintain current technical measures to ensure data security. These measures serve in particular to protect your personal data from access by unauthorized third parties. We adapt our protective mechanisms to the current state of the art.

If you are requested to enter personal data within our online offer, the data transmission via the Internet always takes place using TLS encryption. This encryption is intended to prevent unauthorized persons from gaining possession of your data.

5. General data subject rightse

You have the right

  • Request information on the categories of data processed, the purposes of processing, any recipients of the data, the planned storage period (Art. 15 GDRP)
  • demand the correction or completion of incorrect or incomplete data (Art. 16 GDRP)
  • revoke a given consent at any time with effect for the future (Art. 7 para. 3 GDRP)
  • object to data processing which is to be carried out on the basis of a legitimate interest for reasons arising from your particular situation (Art. 21 (1) GDRP)
  • in certain cases, within the framework of Art. 17 GDRP, to demand the deletion of data - in particular insofar as the data is no longer required for the intended purpose or is processed unlawfully, or you have revoked your consent or declared an objection
  • under certain conditions, to demand the restriction of data, insofar as deletion is not possible or the obligation to delete is disputed (Art. 18 GDRP)
  • to data portability, i.e. you can receive your data that you have provided to us in a common machine-readable format such as CSV and, if necessary, transfer it to others (Art. 20 GDRP).

6. Contact details of the data controller, the data protection officer and our supervisory authorities.

VResponsible party within the meaning of the General Data Protection Regulation:

Stiftung Gesundheit
Nonprofit foundation under civil law
Behringstraße 28 a
22765 Hamburg

Data Protection Officer of the Health Foundation:

Stiftung Gesundheit
– The Data Protection Officer –
Behringstraße 28 a
22765 Hamburg

You can find BARMER's privacy policy and further information at

Contact details of the supervisory authority

Die Bundesbeauftragte für Datenschutz und die Informationsfreiheit
(The Federal Commissioner for Data Protection and Freedom of Information)
Husarenstr. 30
53117 Bonn or