DATA PROTECTION
1. Data protection at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data refers to all data with which you can be personally identified. For detailed information on data protection, please refer to our Data Protection Policy below.
Data collection on our website
Who is responsible for the data collection on this website?
The data processing on this website is done by the website operator. The contact details can be found in the Legal Notice section of this website.
How do we collect your data?
The data is collected, firstly, by you sharing this data with us. Among other things, this could be data that you enter into a contact form.
Other data is automatically collected by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of page call). This data is collected automatically as soon as you access our website.
What do we use your data for?
Some of the data is collected to ensure the smooth delivery of our website. Other data may be used to analyse your user behaviour.
What rights do you have in respect of your data?
You have the right to obtain information about the origin, recipients and purpose of your stored personal data free of charge at any time. You also have the right to have this data rectified, blocked or erased. You can contact us for this purpose, and regarding any other privacy-related issues, at any time using the address specified in the Legal Notice. In addition, you also have the right to lodge a complaint with the supervisory authority.
Under certain circumstances, you also have the right to restrict the processing of your personal data. For more details, see the “Right to restrict processing” section of the Data Protection Policy.
Analysis tools and tools from third party providers
When you visit our website, your browsing behaviour can be statistically evaluated. This is done in particular using cookies and so-called analysis programs. Analysis of your browsing behaviour is usually anonymous and it cannot be traced back to you. You may object to this analysis or prevent it by not using certain tools. For detailed information, please refer to the following Data Protection Policy.
You can object to this analysis. We will inform you about objection options in this Data Protection Policy.
2. General notes and required information
Data protection
The operators of this website take the protection of your personal data extremely seriously. We treat your personal information confidentially and in compliance with the statutory data protection rules and this Data Protection Policy.
When you use this website, different personal data is collected. Personal data refers to data that can be used to identify you personally. This Data Protection Policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
We wish to point out that the transmission of data on the internet (e.g. during e-mail communication) can pose security risks. It is impossible to guarantee complete data protection in relation to third-party access.
Responsibility
The responsible bodies for data processing on this website are as follows:
RP MEDICS GmbH
Reinald Pasedag, Roland Pasedag, Andreas Hainz
Egererstr. 1
D – 83339 Chieming
Germany
Phone: +49 06106 / 66028 154
E-mail: info@medicsblu.com
The responsible body is the natural person or legal entity who decides, alone or jointly with others, on the purpose and means of the processing of personal data (e.g. names, e-mail addresses etc.).
Revoking your consent to data processing
Many data processing processes are only possible with your explicit consent. You can revoke your consent at any time. Just send us an informal e-mail. This will not affect the legality of the data processing performed prior to the revocation.
Right to object to data collection in certain scenarios and to direct marketing (Art. 21 GDPR)
If data processing is performed on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object to the processing of your personal data at any time on grounds relating to your particular situation. This also applies to profiling based on those provisions. Details of the respective legal basis for data processing can be found in this Data Protection Policy. If you submit an objection, we will no longer process your personal data in question except where we are able to demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or where the processing is necessary to establish, exercise or defend legal claims (objection pursuant to Art. 21(1) GDPR).
Where your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data in question for the purposes of this direct marketing. This also applies to profiling where it is related to this direct marketing. If you object, your personal data will then no longer be used for direct marketing purposes (objection pursuant to Art. 21(2) GDPR).
Right to lodge a complaint with a supervisory authority
In the event of breaches of the GDPR, the data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, their workplace or the location of the alleged breach. The right to complain exists irrespective of any other administrative or judicial remedy.
Right to data portability
You have the right to have data that we process automatically, on the basis of your consent or to fulfil a contract, passed to yourself or to a third party in a commonly used, machine-readable format. When you request a direct transfer of the data to another responsible body, this will only be done where it is technically feasible.
SSL and TLS encryption
For security reasons and to protect the transfer of confidential content, for example orders or enquiries you send to us as site operators, this site uses SSL and TLS encryption. You can tell that the connection is encrypted because the browser address line changes from “https://” to “https://” and from the lock icon in your browser line.
When SSL and TLS encryption is enabled, the data you send to us cannot also be read by third parties.
Information, blocking, erasure and rectification
Within the framework of the relevant legal provisions, you have the right to receive information, free of charge and at any time, about your personal data that is stored, its origin and recipients, and the purpose of the data processing. Where applicable, you also have the right to have this data rectified, blocked or erased. You may contact us for this purpose, or with any other queries about personal data, at any time at the address specified in the Legal Notice.
Right to restrict processing
You have the right to request restriction of the processing of your personal data. You can contact us for this purpose at any time using the address specified in the Legal Notice. The right to restrict processing is available in the following scenarios:
If you dispute the accuracy of the personal data stored by us, we usually require time to verify this. For the duration of the check, you have the right to ask for processing of your personal data to be restricted.
If the processing of your personal data was/is done unlawfully, you may request restriction of the data processing instead of erasure of the data.
If we no longer need your personal data but you need it to exercise, defend or assert legal claims, you have the right to restrict the processing of your personal data instead of it being erased.
If you have submitted an objection pursuant to Art. 21(1) GDPR, your interests must be weighed against our interests. Until it is established whose rights take precedence, you may ask for the processing of your personal data to be restricted.
If you have restricted the processing of your personal data, this data may only be processed – apart from its storage – with your consent or for the purposes of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for the sake of an important public interest of the European Union or of a Member State.
Objection to advertising e-mails
The use of the contact details published in our statutory Legal Notice for the purposes of sending unsolicited advertising and information is hereby prohibited. The site operator expressly reserves the right to take legal action in the event of the unsolicited sending of advertising, for example spam mail.
3. Data Protection Officer
Data Protection Officer required by law
We have appointed a Data Protection Officer for our company.
Sicdata Unternehmensberatung
Tobias Erdmann
Heiligenstock 34d
42697 Solingen, Germany
Phone: +49 212 73 87 24-0
E-mail: erdmann@sicdata.de
4. Data collection on our website
Cookies
Some of the websites use so-called cookies. Cookies do not harm your computer and do not contain any viruses. Cookies are used to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and stored by your browser.
Most of the cookies we use are so-called “session cookies”. They will be automatically deleted after your visit. Other cookies remain on your device until you delete them. These cookies enable us to recognise your browser the next time you visit.
You can configure your browser so that you are informed when cookies are set and to only permit cookies in some cases, to exclude the acceptance of cookies in certain cases or generally, and to enable automatic deletion of the cookies when you close your browser. However, disabling cookies may limit the functionality of this website.
Cookies required for electronic communications or to provide certain features required by you (e.g. shopping basket function) will be saved on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the storage of cookies for technically flawless and optimised provision of its services. If other cookies (e.g. cookies for the analysis of your browsing behaviour) are stored, they are treated separately in this Data Protection Policy.
Server log files
The website provider automatically collects and saves information in so-called server log files which are automatically sent to us by your browser. They are as follows:
Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP addresses
This data is not combined with other data sources.
This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically flawless presentation and optimisation of its website – the server log files need to be collected for this reason.
Contact form
If you send us requests via the contact form, we will store the information you provide on the enquiry form, including the contact details you specify therein, to process your enquiry and for any follow-up questions. Where necessary, we may transfer this information to our cooperation partners. We will not forward this data without your consent.
The data entered in the contact form is therefore exclusively processed on the basis of your consent (Section 6, Para 1, Sub-section a of the General Data Protection Regulation (GDPR)). You may revoke this consent with effect for the future. Just send us an informal e-mail. This will not affect the legality of the data processing performed prior to the revocation.
We will keep the data you enter on the contact form until you ask us to delete it, revoke your consent to the storage thereof, or until the purpose for saving the data ceases to apply (e.g. once your enquiry has been processed in full). Mandatory statutory provisions, in particular retention periods, remain unaffected by this.
Enquiry by e-mail, telephone or fax
When you contact us by e-mail, telephone or fax, we will store and process your enquiry, including any resulting personal data (name, enquiry), for the purpose of dealing with your request or concern. We will not forward this data without your consent.
This data is processed on the basis of Art. 6(1)(b) GDPR if your enquiry relates to the fulfilment of a contract or is required to implement precontractual measures. In all other cases, processing takes place based on your consent (Art. 6(1)(a) GDPR) and / or based on our legitimate interests (Art. 6(1)(f) GDPR) since we have a legitimate interest in dealing with enquiries submitted to us effectively.
We will keep the data sent to us by contact enquiries until you ask us to delete it, revoke your consent to the storage thereof, or until the purpose for saving the data ceases to apply (e.g. once your enquiry has been processed in full). Mandatory statutory provisions, in particular retention periods, remain unaffected by this.
Registration on this website
You can register on our website to take advantage of additional features on the site. We will only use the data entered for this purpose for use of the respective product or service for which you have registered. The mandatory information requested at registration must be provided in full, otherwise we will refuse registration.
In the event of important changes, for example to the range of services we offer or in the event of technically necessary modifications, we will use the e-mail address you provided during registration to notify you.
The data entered in the contact form is therefore exclusively processed on the basis of your consent (Art. 6(1)(a) GDPR). You may revoke your consent at any time. Just send us an informal e-mail. This will not affect the legality of the data processing performed prior to the revocation.
We will store the data collected during registration for as long as you remain registered with our website. It will then be erased. Statutory retention periods remain unaffected by this.
Data processing (customer and contract data)
We collect, process and use personal data only if it is necessary for the reason, content or change of the legal relationship (master data). This is done on the basis of Art. 6(1)(b) GDPR, which permits the processing of data to fulfil a contract or to take steps prior to entering into a contract. We only collect, process and use personal data regarding use of our websites (usage data) where necessary to enable the user to use the service or invoice them for the same. The customer data collected will be deleted after the conclusion of the order or termination of the business relationship. Legal retention periods remain unaffected by this.
5. Analysis tools and advertising
Google Analytics
This website uses functions of the Google Analytics web analysis service. The provider is Google Ireland
Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses so-called “cookies.” These are text files that are stored on your computer and enable analysis of your use of the website. The information generated by the cookie about your use of the website is generally transmitted to and stored on one of Google’s servers in the USA.
The storage of Google Analytics cookies and use of these analysis tools is done on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analysing user behaviour to optimise its website and its advertising.
IP anonymisation
We have activated IP anonymisation on this website. This means that your IP address is abbreviated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and abbreviated there. Google uses this information, on behalf of the operator of this website, to evaluate your use of the website, to compile reports on website activities and provide further services relating to website use and internet use to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged by Google with other data.
Browser plug-in
You can prevent the storage of cookies with an appropriate setting in your browser software however, please note that if you do this, you may not be able to make full use of all the features of this website. Furthermore, you can prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en-GB.
Objecting to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie is set which prevents the collection of your data when you visit this website in the future: Disable Google Analytics.
You can find more information about how user data is handled with Google Analytics in Google’s Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=en.
Contract data processing
We have concluded a contract data processing agreement with Google and implement the strict requirements of the German data protection authorities fully when using Google Analytics.
Demographics with Google Analytics
This website uses the Google Analytics “demographic characteristics” feature. This enables reports to be generated that contain information about the age, gender and interests of visitors to the site. This data comes from Google’s interest-related advertising and visitor data from third party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section “Objecting to data collection”.
Storage period
Data stored by Google at user and event level, which is linked to cookies, user names (e.g. UserID) or advertising IDs (e.g. double-click cookies, Android advertising ID) will be anonymised or erased after 14 months. For more details on this, see the following link: https://support.google.com/analytics/answer/7667196?hl=en
6. Newsletter
Newsletter data
If you wish to receive the newsletter offered on the website, we will need your e-mail address and information permitting us to verify that you are the owner of the specified e-mail address and consent to receiving the newsletter. We will not collect any further data or only collect it on a voluntary basis. We will only use this data to send the requested information and we will not forward it to third parties.
The data entered in the newsletter registration form is therefore exclusively processed on the basis of your consent (Art. 6(1)(a) GDPR).You may revoke the consent granted to save your data and email address, and the use thereof to send out the newsletter, at any time, for example via the “Unsubscribe” link in the newsletter. This does not affect the legality of the data processing performed prior to the revocation.
We will store the data you provide for the newsletter subscription until you unsubscribe from the newsletter and it will be erased following cancellation of the newsletter subscription. Data stored by us for other purposes remains unaffected by this.
Inxmail
This website uses Inxmail to send out newsletters. The provider is Inxmail GmbH, Wentzingerstraße 17, 79106 Freiburg, Germany.
Inxmail is a service to organise and analyse the sending of newsletters. The data entered by you to register for the newsletter will be stored on Inxmail servers in Germany.
If you do not want your data to be analysed by Inxmail, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message. You can also unsubscribe directly from the newsletter on the website.
Data analysis by Inxmail
Inxmail helps us to analyse our newsletter campaigns. It enables us to see, among other things, whether a newsletter message has been opened and which links have been clicked. This allows us to determine, among other things, which links have been clicked particularly often.
Inxmail also enables us to subdivide newsletter recipients into different recipient categories (e.g. place of residence). This lets us tailor the newsletter more effectively to the respective target groups.
Legal basis
The data is therefore exclusively processed on the basis of your consent (Art. 6(1)(a) GDPR). You may revoke your consent at any time. This will not affect the legality of the data processing performed prior to the revocation.
Storage period
We will store the data you provide for the newsletter subscription until you unsubscribe from the newsletter and it will be erased following cancellation of the newsletter subscription, both from our servers and also from Inxmail servers. Data stored by us for other purposes remains unaffected by this.
Conclusion of a contract data processing agreement
We have concluded a contract with Inxmail in which we oblige Inxmail to protect our customers’ data and not forward it to third parties.
For further details, see Inxmail’s data privacy policy at: https://www.inxmail.com/data-conditions.
7. Plug-ins and tools
YouTube
Our website uses plug-ins from the YouTube site operated by Google. The operator of the website is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit one of our pages featuring a YouTube plug-in, a connection will be established with YouTube’s servers. At the same time, the YouTube server is told which of our pages you have visited.
Furthermore, YouTube can store various cookies on your device. With the help of these cookies, YouTube can receive information about visitors to our website. This information is used, among other things, to compile video statistics, to improve the user friendliness of the site, and to prevent fraud attempts. The cookies remain on your device until you delete them.
If you are logged in to your YouTube account, you allow YouTube to link your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used for the purpose of the appealing presentation of our website. This constitutes a legitimate interest as defined in Art. 6(1)(f) GDPR.
You can find more information about how user data is handled in YouTube’s privacy policy at: https://policies.google.com/privacy?hl=en-GB.
Google Maps
Our website uses the Google Maps map service via an API. The operator of the website is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Your IP address must be saved to use the Google Maps function. This information is generally transmitted to and stored on one of Google’s servers in the USA. The provider of this site has no influence over this data transmission.
Google Maps is used for the purpose of the appealing presentation of our website and to make it easy to find the locations we refer to on our website. This constitutes a legitimate interest as defined in Art. 6(1)(f) GDPR.
You can find more information about how user data is handled in Google’s privacy policy: https://policies.google.com/privacy?hl=en-GB.
Google Web Fonts
To display fonts consistently, this site uses so-called web fonts which are provided by Google. When you visit a site, your browser loads the necessary web fonts into your browser cache to display text and fonts correctly.
To do this, your browser has to establish a connection to Google’s servers. This will inform Google that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a consistent and appealing presentation of our website. This constitutes a legitimate interest in the sense of Art. 6(1)(f) GDPR.
If your browser does not support web fonts, your computer will use a standard font.
You can find more information about Google web fonts at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=en-GB.
Google reCAPTCHA
We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on our website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of reCAPTCHA is to check if the data input on our website (e.g. in a contact form) was done by a human or by an automated program. To do this, reCAPTCHA uses various characteristics to analyse the behaviour of the website visitor. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA analyses various information (e.g. IP address, time spent by the visitor on the website or the user’s mouse movements). The data collected during the analysis is passed on to Google.
The reCAPTCHA analysis runs completely in the background. Website visitors are not informed that an analysis is taking place.
The data processing is performed on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in protecting the website from abusive automated spying and spam.
You can find more information about Google reCAPTCHA and Google’s privacy policy at the following links: https://policies.google.com/privacy?hl=en-GB and https://www.google.com/recaptcha/intro/android.html.
8. Standalone services
Applications
We provide you with the ability to apply for jobs with us (e.g. by e-mail, post or via an online application form). We outline below to what extent, for what purpose and how the personal data you provide is collected and used during the application process. We assure you that the collection, processing and use of your data is in accordance with applicable data protection law
and all other statutory provisions, and that your data will be handled strictly confidentially.
Extent and purpose of the data collection
When you send us an application, we process your associated personal data (e.g. contact and communication details, application documentation, notes from interviews etc.) where necessary to make a decision on whether or not to establish an employment relationship. The legal basis for this processing is Art. 26 of the new German Federal Data Protection Act (BDSG) (Initiating an employment relationship), Art. 6(1)(b) GDPR (General contract initiation) and, if you have granted consent, Art. 6(1)(a) GDPR. The 12 / 14 consent may be revoked at any time. Your personal data will only be forwarded within our company to individuals involved in processing your application.
If your application is successful, the data you have submitted will be stored in our data processing systems for the purpose of implementing the employment relationship on the basis of Art. 26 of the new BDSG and Art. 6(1)(b) GDPR. Data retention period If we are unable to offer you a position or if you reject an offered position, withdraw your application, revoke your consent to data processing, or ask us to erase your data, the data you provided, including any remaining physical application documents, will be stored and retained for a maximum of 6 months following conclusion of the application process (retention period) so that details of the application process can be verified in the event of disagreements (Art. 6(1)(f) GDPR).
YOU CAN OBJECT TO THIS STORAGE IF YOU HAVE LEGITIMATE INTERESTS THAT OVERRIDE OUR INTERESTS.
Following expiry of the retention period, the data will be erased providing there is no statutory retention obligation or any other legal basis for its continued storage. Where it is evident that retention of your data will be necessary after expiry of the retention period (e.g. due to an imminent or pending legal dispute), this data will only be erased once the data is no longer necessary. Any other statutory retention obligations remain unaffected by this.