Data protection approval of WCMS Fiona online forms
Websites often offer online forms for visitors to fill in so that they can leave information. As personal data is often collected in the process, these forms must be approved under data protection law before they go live.
Once they have been approved by the hospital's data protection officer, they can be published on the intranet and/or internet.
Procedure
We will show you how you can apply for data protection approval and what you need for this. Please select one of the following two systems in which your online form is or should be set up.
WCMS Fiona online forms
Form templates in WCMS Fiona
- Contact forms
- Feedback forms
- Registration forms
- Appointment request forms
Data protection workflow for WCMS Fiona online forms
Step 1: Requesting data protection approval
Request the release from the Data Protection Officer (DPO) with the following information:
- Title of the form (procedure to be released)
- The form (contents)
- Screenshots of the online form
Step 2: Processing the data protection approval
The DPO will then send you further attachments, which you must complete and return to him:
- Application for approval under data protection law in accordance with Art. 26 BayDSG (directory of procedures) forward please complete
- Task description and declaration of consent on data protection for data controllers in the context of the evaluation of WCMS online forms; please adapt forward to your circumstances, sign it and have it signed by everyone who evaluates the data.
- Then send the attachments back to the data protection officer.
The data protection officer sends another attachment to the Web Requirements and Services unit (attachment 4). This is completed directly by the staff unit and sent back to the DPO. You do not need to take care of this any further.
Step 3: Publishing the Fiona online form
As soon as the procedure has been approved by the data protection officer, you can release and publish the online form in the WCMS.
Data usage information for WCMS Fiona online forms
Your personal data will be treated confidentially by us and used exclusively for the purpose of contacting you by e-mail, telephone and/or in writing. Your data will be adequately protected from access by third parties and collected, processed and used in accordance with the provisions of the Bavarian Data Protection Act and the Federal Data Protection Act. The provision of your personal data is voluntary. Your data will not be passed on or transmitted to third parties. Your data will be deleted at the latest 3 months after completion of this survey.
You can revoke your consent to the processing and use of the data for a specific purpose at any time in writing without giving reasons. Your stored data will then be deleted immediately.
☒ I hereby give my consent.
Your personal data will be treated confidentially by us and used exclusively for the purpose of contacting you by e-mail, telephone and/or in writing.
Your data will be adequately protected from access by third parties and collected, processed and used in accordance with the provisions of the Federal Data Protection Act. The provision of your personal data, in particular your health data, is voluntary.
If necessary, your request will be forwarded to the relevant departments or persons within the LMU Clinic. In this context, it is possible that non-medical staff of the LMU Klinikum may become aware of the information you have disclosed. This information will not be passed on or transmitted to third parties outside the LMU Clinic. Your data will be deleted at the latest 3 months after evaluation or forwarding of your data to the responsible office.
You can revoke your consent to the processing and use of the data for a specific purpose at any time in writing without giving reasons. Your stored data will then be deleted immediately in accordance with legal regulations.
The relevant information relating to your request will be sent or forwarded to the e-mail address provided in unencrypted form without any health data. This represents a risk under data protection law.
"I am aware and have been informed that my personal data may be disclosed to third parties on the Internet and may be visible to anyone without protection!"
☒ I declare that I agree to this.
