Who is responsible for the documentation

For the patient data

Your practice or hospital is the controller under the GDPR. MediSync is the processor and processes patient data only on your instructions. The data processing agreement sets out the details.

MediSync itself is responsible for your own account data: your name, email address and contract data.

If a patient asks you about their own data, for example for access or deletion, your practice handles the request. MediSync supports you technically and carries out your instruction within 30 days at the latest.

For the content of the documentation

Everything MediSync generates is a draft: transcript, documentation, doctor's letter and ICD-10 codes. The doctor reviews the draft and releases it. Whoever releases it is responsible for its content.

• MediSync does not make a diagnosis or a treatment decision.
• MediSync transfers nothing to the patient record without your release.
• You correct errors in the draft before you release it.

For keeping records

The legal duty to keep treatment records, for example under Section 630f of the German Civil Code (BGB), lies with your practice. Meet it in your PVS or KIS. MediSync deletes appointments after the period you set. What MediSync stores and for how long has the details.