Data Protection
A. DATA CONTROLLER
The data controller responsible for the processing of personal data as part of this website in accordance with the provisions of the General Data Protection Regulation (GDPR) is:
RZ-Medizintechnik GmbH
Unter Hasslen 20
D-78532 Tuttlingen
Telephon: +49 7462 94 70-0
Fax: +497462/9470-50
E-Mail: info@domain1.tld
Our Data Protection Officer
datenschutz@domain1.tld
With this privacy statement, we are informing you about the extent to which your personal data is processed (hereinafter only “data”).
B. DATA PROCESSING
We process data as part of the operation of our website. The processing of data also includes disclosure by way of transfer.
An adequacy decision of the EU Commission, the EU-US Privacy Shield, exists for data transfers to the USA. In this, the Commission has certified that the safeguards for transfers of data to the US based on the EU-US Privacy Shield are equivalent to privacy standards in the EU. To the extent that we transfer data to the USA, we have highlighted the participation of our service providers in the EU-US Privacy Shield.
The individual data concerned, processing purposes, legal bases, recipients and transfers to third countries are listed below:
a) Log file
We log your visit to our websites. This involves processing of the following data: Name of website accessed, date and time of access, the amount of data transferred, the browser type and version, the operating system you are using, the referrer URL (the previously visited website), your IP address and the requesting provider. This is necessary to ensure the security of the website. We process the data accordingly on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR. The log file is deleted after seven days, unless it is needed to clarify or prove specific legal violations that have become known within the retention period.
b) Hosting
All data to be processed in connection with the operation of this website is stored as part of the hosting activities. This is necessary to enable the operation of the website. We process the data accordingly on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR. To provide our online presence, we use the services of web hosting providers to whom we transmit the above data.
c) Contact
If you contact us, your data (name, contact details, if provided by you) and your message will be processed exclusively for the purpose of handling and processing your enquiry. This data is processed by us on the basis of Art. 6 (1)(b) GDPR or Art. 6(1)(f) GDPR to process your enquiry.
d) Applications
If you contact us to send us your application to become an employee, e.g. by email or via a contact form, your data (e.g. name, email address, desired place of employment, if specified by you), your message and the application documents submitted will be processed exclusively for the purposes of processing and handling your application request. The legal basis for data processing is § 26 BDSG (new) (Federal Data Protection Act) as well as Art. 6(1)(b) GDPR.
The application data will be deleted after 2 months after the end of the application process, but no later than 6 months after receipt of the application. If an employment relationship is established, the data will be transferred to the personnel file. The legal basis for this is also Art. 6(1)(b) GDPR.
e) Newsletter
In order to provide you with regular information about our company and our offers, we offer to send you a newsletter. When you register for the newsletter, we process the data you enter (email address and other voluntary information). The dispatch of the confirmation email for your registration is based on our legitimate interest in proving your proper registration in accordance with Art. 6(1)(f) GDPR, while the dispatch of the newsletter is based on your consent in accordance with Art. 6(1)(a) GDPR.
The registration for the newsletter is carried out using what is known as the double opt-in procedure. To prevent misuse, we will send you an email after your registration asking you to confirm your registration. In order to be able to prove the registration process in accordance with legal requirements, your registration is logged. This concerns the storage of the registration and confirmation time as well as your IP address. To send the newsletter, we use service providers to whom we transmit the above data.
The data is transmitted to the servers of the following service providers in Germany:
Rapidmail: rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i.Br., Germany
Certification at:
CSA Certificate
Further information on data protection can be found at:
f) Login area
If you use our login area, you consent to the storage of your usage data (username, password). This allows us to identify you as a customer and gives you the option to manage your orders. Your data is processed on the basis of your consent in accordance with Art. 6(1)(a) GDPR.
g) Purchase processing
We process your order data in order to process the purchase agreement. Data processing takes place accordingly on the basis of Art. 6(1)(b) GDPR.
We transmit your address data to the company commissioned with the delivery. If necessary for the processing of the agreement, we will also transmit your email address or your telephone number to the company commissioned with the delivery in order to coordinate a delivery date (notification).
We will transmit your transaction data (name, date of order, payment method, date of dispatch and/or receipt, amount and payee, bank details or credit card details if applicable) to the payment service provider commissioned with processing the payment.
h) Website analytics and marketing
To enable the use of certain functions, we use “cookies”. These are short data packets that are stored on your end device and exchanged with other providers. Some of the cookies we use are deleted immediately after you close your browser (“session cookies”). Other cookies remain on your end device and enable your browser to be recognised the next time you visit (“persistent cookies”).
You can delete all cookies stored on your end device and adjust common browser settings to prevent cookies from being stored.
In this case, you may have to reapply some settings again each time you visit this website and accept that some functions may be impaired.
We use cookies in connection with the following functionalities:
Google Analytics
We use Google Analytics, a service provided by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google uses certain cookies for this purpose. The information generated by the cookie about your use of the website (including your IP address) is transmitted to and stored by Google on servers in the United States. We use the information stored to evaluate your use of the website, to compile reports on website activities for the website operators and to provide other services associated with use of the website. We process the data obtained in this way on the basis of our overriding interest in the best possible marketing of our online offer in accordance with Art. 6(1)(f) GDPR. Google will not associate your IP address with any other data held by Google.
Please note that this website uses Google Analytics with the extension “anonymizeIp()”. This shortens IP addresses before they are transmitted to a server in the USA. Any direct personal reference in connection with the stored data is therefore generally excluded. Only in exceptional cases will the full IP address be transmitted to a server in the USA and shortened there.
You can object to the collection of data at any time with future effect by using the Google Analytics browser deactivation add-on at
https://tools.google.com/dlpage/gaoptout?hl=en or by clicking on the following opt-out link: Click here to deactivate Analytics for this page.
Please also note the information on the use of data by Google in the Google Partner Network at:
Google is certified at:
Further information on data protection can be found at: https://policies.google.com/privacy?hl=en&gl=en
i) Integration of external content
We use external dynamic content to optimise the presentation and offering of our website. When visiting the website, a request is automatically made to the server of the respective content provider via API, during which certain log data (e.g. the user’s IP address) is transmitted. The dynamic content is then transmitted to our website and displayed there.
We use external content in connection with the following functionalities:
aa) Google Maps
We use the “Google Maps” map service from Google on our website to provide you with an interactive map. When displaying the map, data including your IP address and your location is transmitted to Google servers in the USA and stored there. This processing is carried out on the basis of our overriding legitimate interest in the best possible marketing of our offer in accordance with Art. 6(1)(f) GDPR.
bb) Google Fonts
In order to make visiting our website attractive, we use external fonts from Google Fonts. These are loaded from servers of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) when you visit the site. Google does not store any cookies in your browser for this purpose. However, according to our information, the IP address of the user’s end device is transmitted to Google and stored. This processing is carried out on the basis of our overriding legitimate interest in the best possible marketing of our offer in accordance with Art. 6(1)(f) GDPR.
cc) Google Translator
We use the Google Translator service in order to be able to offer our website in different languages. The corresponding texts are loaded from servers of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) when you visit the site. Google does not store any cookies in your browser for this purpose. However, according to our information, the IP address of the user’s end device is transmitted to Google and stored. This processing is carried out on the basis of our overriding legitimate interest in the best possible marketing of our offer in accordance with Art. 6(1)(f) GDPR.
Google is certified at:
Further information on data protection can be found at: https://policies.google.com/privacy?hl=en&gl=en
C. USE OF COOKIES
a) General
In order to make visiting our website attractive and to enable the use of certain functions, we use cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted again after the end of the browser session, i.e. after you close your browser (“session cookies”). Other cookies remain on your end device and enable us or our partner companies to recognise your browser the next time you visit (“persistent cookies”).
You can delete all cookies stored on your computer and adjust the settings of most browsers to prevent the storage of cookies. One place you can find out how to do so is here: AllAboutCookies.org.
In general, web browsers are currently set to automatically accept cookies by default. These pages tell you how to change these basic settings and block cookies, including from this website:
Chrome
Firefox
Internet Explorer
Opera
Safari
In this case, you may have to apply some settings manually each time you visit a page and accept that some functions will be impaired.
b) Details of the cookies used
_ga, _gid, _gat_gtag_UA_109717004_1, NID, CONSENT, ga-disable-*
These cookies are set by Google. More detailed information is available in section B. h, i or at the following link: https://www.google.com/policies/technologies/types/.
viewed_cookie_policy
This cookie documents your consent to the cookies.
pll_language
This cookie stores your language settings for the website.
PHPSESSID
This cookie stores the session ID, i.e. a randomly generated identification number for your session. This cookie is deleted – depending on your browser settings – when you close a tab or window that has set this cookie. It makes it possible, for example, to have the browser automatically fill in fields of a form that have already been filled in before.
D. DURATION OF DATA STORAGE
We store personal data only as long as is necessary for the purposes for which it is processed or until you have withdrawn any consent you have given. Insofar as statutory retention obligations must be observed, the storage period for certain data can be up to 10 years, irrespective of the processing purposes.
E. YOUR RIGHTS AS A DATA SUBJECT
a) Information
You can request to receive information about all personal data we have stored about you at any time and free of charge.
b) Rectification, erasure, restriction of processing (blocking), objection
If you no longer agree to the storage of your personal data or if it has become incorrect, we will arrange for the erasure or blocking of your data or make the necessary corrections (insofar as this is possible under the applicable law) on the basis of a corresponding instruction. The same applies if we are to restrict data processing activities in the future.
c) Data portability
Upon request, we will make your data available to you in a common, structured and machine-readable format so that you can transfer the data to another responsible party if you so wish.
d) Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority:
e) Right to revoke consent with future effect
You can revoke your consent with future effect at any time. Your revocation will not affect the lawfulness of the processing carried out before the revocation.
f) Restrictions
Data for which we are not able to identify the data subject, e.g. if they have been anonymised for analysis purposes, are not covered by the above rights. Information, erasure, blocking, rectification or transfer to another company may be possible in relation to this data if you provide us with additional information that allows us to identify you.
g) Exercising your rights as a data subject
If you have any questions about the processing of your personal data, and wish to exercise your rights of information, rectification, blocking, revocation or erasure of data, or should you wish to have your data transferred to another company, please contact info@domain1.tld.