Data protection declaration
1. Data protection at a glance
General information
The following information provides a straightforward overview of what happens to your personal data when you visit this website. Personal data are all data that can be used to personally identify you. The following data protection declaration provides you with detailed information on our data protection policy.
Data collection on this website
Who is responsible for data collection on this website?
Data processing on this website is undertaken by the website operator. You can find their contact details in the Legal Notice of this website.
How do we collect your data?
One way we collect your data is by recording the data you provide us with. As an example, this can include data that you enter in a contact form.
Another way is to collect data automatically or using IT systems when you visit the website after you provide your consent. These are primarily technical data (e.g. Internet browser, operating system or time of page views). Such data is collected automatically when you visit this website.
What do we use your data for?
A portion of the data is collected to ensure that we can provide you with the website free of errors. Other data can be used to analyze your behavior as a user.
What are your rights regarding your data?
You have the right to information about the origin, recipient and purpose of your
stored personal data. You also have the right to request this data be corrected or deleted. If you have given your consent to data processing, you can revoke this consent at any time in the future. You also have the right, under certain circumstances, to request that restrictions be imposed on how your personal data is processed.
You also have a right of appeal to the competent supervisory authority.
You can contact us at any time under the address provided in the Legal Notice to do so, as well as to ask us any further questions on the subject of data protection.
2. Hosting and content delivery networks (CDN)
External hosting
This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster’s servers. Such data can include in particular IP addresses, contact requests, metadata and communication data, contract data, contact data,
names, website visits, and other data generated via a website.
We use the hoster for the performance of the contract we have entered into with our potential and existing customers (point (b) of Article 6(1) GDPR) and in the interest of secure, fast and efficient provision of our online services by a professional provider (point (f) of Article 6(1) GDPR). Our hoster will only process your data to the extent necessary to fulfill its obligations regarding such performance and will follow our instructions concerning such data.
We employ the following hoster:
Musterhosting AG
Musterweg 100
90210 Musterstadt
3. General notes and mandatory information
Data protection
As the operator of this website, we take protecting your personal data very seriously. We will treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.
If you use this website, various personal data are collected.
Personal data are data that can be used to personally identify you. This data protection declaration explains what data we collect and how we use such data. It also explains how this is done and for what purpose.
We would like to point out that data transmission over the Internet (e.g. via e-mail) can be vulnerable to security breaches. Complete protection of data against access by third parties is impossible.
Note on the data controller
The data controller for data processing on this website is:
SMI – Medical Instruments GmbH & Co. KG
Robert - Bosch - Straße 36
78579 Neuhausen, Germany
Telephone: +49 (0) 7467 94610
E-mail: info@smi-medical.com
The data controller is the natural or legal person who individually or jointly with others determines the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).
Retention period
If no specific retention period has been indicated within this data protection declaration, we will retain your personal data until the purpose for processing the data ceases to exist. If you make a justified request for deletion or you withdraw your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods). In the latter case, your data will be deleted after these reasons have lapsed.
Note on data transfer to the USA
Our website integrates tools, among others, from companies based in the USA. If these tools are enabled, your personal information may be transferred to servers in the USA of the respective companies. We hereby point out that the USA does not constitute a safe third country under EU data protection law. US companies are required to disclose personal data to security authorities with no possibility for you, as the affected party, to legally challenge such disclosure.
There is therefore no guarantee that US authorities (e.g. intelligence agencies) will not process, evaluate, and permanently store your data on US servers for monitoring purposes. We have no control over such processing.
Withdrawal of your consent to data processing
Many data processing procedures are only permissible with your express consent. You can withdraw your previously granted consent at any time. The legality of the data processing carried out up until withdrawal remains unaffected by revocation.
Right to object to data collection on grounds relating to particular situations and to direct marketing purposes (Article 21 GDPR)
IF THE DATA PROCESSING IS CONDUCTED ON THE BASIS OF POINT (E) OR (F) OF ARTICLE 6(1) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, INCLUDING PROFILING BASED ON THESE PROVISIONS.
THE RESPECTIVE LEGAL BASIS FOR PROCESSING CAN BE FOUND IN THIS DATA PROTECTION DECLARATION. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS FOR THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS (OBJECTION ACCORDING IN ACCORDANCE WITH ARTICLE 21(1) GDPR).
IF YOUR PERSONAL DATA ARE PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING, INCLUDING PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING.
IF YOU OBJECT, YOUR PERSONAL DATA
WILL NO LONGER BE PROCESSED FOR PURPOSES OF DIRECT MARKETING (OBJECTION IN ACCORDANCE WITH ARTICLE 21(2) GDPR).
Right to lodge a complaint to the competent supervisory authority
In the event of infringements of the GDPR, the data subjects have the right to lodge a complaint with
a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged infringement. The right to lodge a complaint does not prejudice any other administrative or judicial remedies.
Right to data portability
You have the right to have data that we process automatically based on your consent or in the execution of a contract sent to you or a third party provided to you in a structured, commonly used and machine-readable format.
You may request the data be transmitted directly from one controller to another, where technically feasible.
SSL and TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential contents, such as orders or inquiries that you send to us as the site operator.
You can tell that a connection has been encrypted by the browser address line changing from “http://” to “https://” and by the padlock symbol in your browser line.
If SSL or TLS encryption is activated, the data you send to us cannot be read by third parties.
Information, deletion and correction
Within the framework of the applicable legal provisions, you have the right to obtain information free of charge at any time regarding your stored personal data, its origin and recipients and the purpose of the data processing, and, if applicable, a right to correct or delete this data. You can contact us at any time under the address provided in the Legal notice to do so, as well as to ask us any further questions on the subject of personal data.
Right to restriction of processing
You have the right to request that restrictions be imposed on how your personal data is processed. You can contact us at any time under the address provided in the Legal notice to do so. The right to restrict processing exists in the following cases.
You can contest the accuracy of your personal data stored with us; we usually require time to verify this. While we verify this, you have the right
to request that we restrict the processing of your personal data.
You can request the restriction of the data processing instead of the deletion, if the processing of your personal data was/is carried out unlawfully.
You have the right to request that we restrict the processing of your personal data instead of deleting it, if we no longer require your personal data, but you need it for the exercise, defense or establishment of legal claims.
If you have lodged a complaint in accordance with Article 21(1) GDPR, a balance must be struck between your interests and ours. Until such time as it is determined whose interests prevail, you have the right to request that processing of your personal data be restricted.
If you have restricted how your personal data are processed, these data may only be processed – apart from their storage – with your consent or in order to establish, exercise or defend legal claims or to protect the rights of another natural or
legal person or for reasons of an important public interest of the European Union or a Member State.
4. Data collection on this website
Cookies
Our Internet pages use “cookies”. Cookies are small text files and cannot harm your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or until they are automatically deleted by your web browser.
Sometimes third-party cookies may also be stored on your device when you access our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies to process payment services).
Cookies have various functions. Many cookies are technically necessary, as certain
website functions would otherwise not function (e.g. the shopping cart function or displaying videos). Other cookies are used to evaluate user behavior or display advertising. Cookies that are required to conduct electronic communication (essential cookies) or to enable certain functions that you have requested (functional cookies, e.g. for the shopping cart function) or to optimize the website (e.g. cookies to gauge visitor numbers) are stored in accordance with point (f) of Article 6(1) GDPR, unless another legal basis is specified. The website operator has a legitimate interest that cookies be stored to ensure technically error-free and optimized provision of their services. If consent to the storage of cookies is requested, the storage of the relevant cookies will be based solely on this consent (point (a) of Article 6(1) GDPR), and consent may be withdrawn at any time.
You can adjust the settings of your browser in such a way that you are informed about the setting of cookies and
allow cookies only in individual cases, prevent cookies from being accepted either in certain cases or in general, and activate automatic deletion of cookies when the browser is closed. If you disable cookies, the functionality of this website may be restricted.
If cookies are employed by third-party companies or for analysis purposes, we will inform you separately of this in this data protection declaration and, if necessary, request your consent.
Contact form
If you send us a request via the contact form, your details from the
request form including the contact data you have provided in this form will be stored by us to process the request and to answer any follow-up questions. We will not pass on this data without your consent.
This data is processed on the basis of point (b) of Article 6(1) GDPR, if your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest to effectively process requests sent to us (point (f) of Article 6(1) GDPR) or on your consent (point (a) of Article 6(1) GDPR), provided such consent was requested.
We will retain the data you enter in the contact form until you request us to delete it,
withdraw your consent to its storage, or the purpose for which it was stored ceases to exist (e.g. after your request has been processed). Mandatory statutory provisions – in particular retention periods – remain hereby unaffected.
Requests by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, your request including all
personal data (name, request) will be stored and processed by us in order to process your request. We will not pass on this data without your consent.
This data is processed on the basis of point (b) of Article 6(1) GDPR, if your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest to effectively process requests sent to us (point (f) of Article 6(1) GDPR) or on your consent (point (a) of Article 6(1) GDPR), provided such consent was requested.
Any data you send to us via contact requests will be retained by us until you request us to delete it, withdraw your consent to its storage, or the purpose for which it was stored ceases to apply (e.g. after your request has been processed). Mandatory statutory provisions – in particular legal retention periods – remain hereby unaffected.
5. Plug-ins and tools
Google Maps
This site uses the map service Google Maps. This is provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Maps functions require storage of your IP address. This
information is usually transmitted to a Google server in the USA and stored there.
The provider of this site has no influence on this data transmission.
We use Google Maps to present our online
services in an appealing way and to help you easily locate the places mentioned on our website. This constitutes a legitimate interest within the meaning of point (f) of Article 6(1) GDPR. Provided you have been requested to provide your consent to this, such processing will be performed exclusively on the basis of point (a) of Article 6(1) GDPR; consent may be revoked at any time.
More information on how user data is handled can be found in Google’s data protection declaration:
policies.google.com/privacy.
Source:
eRecht24
