Privacy Policy of Medinorm Medizintechnik GmbH

1.    Name and contact details of the controller and the company data protection officer 

This privacy policy applies to data processing by : 

Responsible: 

Medinorm Medizintechnik GmbH 
Gewerbepark 7-9 66583 Spiesen 
Telefon: 0 6821 – 964 78-0  
E-Mail: info(at)medinorm.de 

The company data protection officer of Medinorm Medizintechnik GmbH is listed under the following address, Mr. Dieter Junker or reachable at the following e-mail address:   E-Mail: datenschutz(at)medinorm.de   

2. Collection and storage of personal data as well as the nature and purpose of their use  

The management of Medinorm Medizintechnik GmbH, attributes great importance to the protection of the users of its website www.medinorm.eu. Users of this website are therefore, generally speaking, not obliged to provide personal data. If a user – hereinafter: data subject – wishes to make use of particular services of Medinorm Medizintechnik GmbH that require the processing of personal data, Medinorm Medizintechnik GmbH will only process this data if it has legal permission to process personal data or if the data subject has explicitly given permission to process their personal data.  

Personal data, which includes for instance name, address, contact information such as telephone number or email address, will be processed in accordance with the provisions of Regulation (EU) 2016/679 (General Data Protection Regulation) as well as the corresponding national provisions for the handling of such data. In this statement and with regard to the usage of our website, we intend to inform data subjects on the type, extent and purpose of the collected and communicated data and about their rights regarding the handling of their data.  

Medinorm Medizintechnik GmbH has taken certain measures and precautions for the processing of the aforementioned data as a way of preventing this data from being processed without legal basis and inspected by an unauthorized party. However, we also have to inform you that it is technically impossible to guarantee a complete protection of data transmitted via the internet. For this reason, you can also communicate with us via different channels such as post or telephone.  

To explain our processing activities, we use the same terms as the ones used in the relevant provisions of the General Data Protection Regulation in order to avoid any misunderstandings and ambiguity.   The party responsible for the processing of the collected and communicated data within the use of www.medinorm.eu is:  

The website of Medinorm Medizintechnik GmbH uses cookies. Cookies are small text files that are stored on a computer system via a browser. Numerous websites and servers use cookies. Many cookies contain a so-called cookie ID, which is a unique identifier of the cookie. It consists of a string of characters that associates websites and servers with the specific browser, in which the cookie has been stored. This enables any website and server visited to distinguish the individual browser of the data subject from other browsers containing different cookies. A specific browser can be recognized and identified via the unique cookie ID. By using cookies, Medinorm Medizintechnik GmbH is able to provide its website users with services that are more user-friendly. This would not be possible without the use of cookies. By using cookies, information and services on our website can be optimized for the user. As men-tioned above, cookies enable us to recognize the users of our website. By recognizing our users, we are able to simplify the usage of our website for them. For example, the user of a website that stores cookies will not have to re-enter their login data every time they visit the website. The web-site and the cookie that is stored on the user’s computer system will do this for them. Using the correct settings in their browser, the data subject is able to prevent cookies from being stored via our website at any time and consequently object to the storage of cookies permanently. Furthermore, all standard browsers and other types of software can delete any cookies previously stored. If the data subject disables the storage of cookies in his or her browser, our website may be limited in its functions.  

Every time a data subject retrieves content via our website under the aforementioned internet address, general information and data will be collected as a result of transmission technology. This information and data is stored in so-called server log files. The following information may be collected:

1.     the type of internet browser used by the data subject;

2.     the installed operating system of the computer that is used by the data subject;

3.     the website, from which the data subject has navigated to our website (so-called http referer);

4.     the subpages within our website which are visited by the data subject with the used system;

5.     date and time of the access of our website by the data subject;

6.     the internet protocol (IP) address that was designated to the internet connection used by the data subject to retrieve content from our website;

7.     the internet service provider (ISP) of the internet connection, from which content of our website was retrieved.  

Medinorm Medizintechnik GmbH will not draw any conclusions in regard to using this data to identify the data subject. The data is used to:  

1.     display the content of our website correctly;

2.     optimize the content and advertisements on our website;

3.     ensure that our IT systems and website always work

4.     provide law enforcement authorities with the necessary data in case of a cyber-attack.  

In order to achieve these purposes, the aforementioned information will be analyzed in an anonymized fashion, statistically and with the objective to ensure data protection and data security for the data subject and to create an optimal level of protection. If server log files are stored until the end of the evaluation for stated reasons, they will not be merged with the data that is actively transmitted by the data subject. They will be stored separately to this information.  

Due to legal obligations, the website of Medinorm Medizintechnik GmbH provides information that enables users to quickly contact us electronically or communicate with us directly. A contact form enables users to contact us, however, its use is not mandatory. When a data subject contacts us using any of the stated means, any personal data transmitted by the data subject will be processed and stored in order to process the request that prompted them to contact us.  

Medinorm Medizintechnik GmbH will only store personal data for the period of time that is needed to achieve the processing purpose and during which Medinorm Medizintechnik GmbH is obligated to retain data due to legal provisions. As soon as the storing purpose lapses or the data retention period expires, personal data will be erased routinely and according to legal requirements, and any further processing of the relevant data will be restricted.  

Regarding the handling of their personal data, data subjects can contact the person responsible for data protection – hereinafter: controller – and assert the following rights:  

1.     the right to receive a confirmation from the controller if personal data concerning him or her is processed by the controller;  

2.     the right to receive information from the controller regarding what kind of personal data concerning him or her is being processed by the controller as well as a copy of this information, both free of charge; the data subject is particularly entitled to receiving the following information:

a.     information regarding the processing purposes;
b.     information regarding the categories of the processed personal data;
c.     information regarding the recipients or categories of the recipients who have already received the relevant personal data or will receive the relevant personal data, especially recipients in so-called third countries and international organizations; also – in such cases and on explicit request – information regarding the existence of adequate data protection guarantees;
d.     where possible, information regarding the planned storage period for personal data or the criteria for determining the storage period;
e.     information regarding the existence of the right to rectify or erase the data subject’s personal data and the existence of the right to restrict the processing of personal data;
f.     information regarding the existence of a revocation right regarding the processing of the data subject’s personal data by the controller;
g.     information regarding the existence of the right to appeal in front of a supervisory authority;
h.     information regarding the existence of an automated decision-making process including profiling according to art. 22 par. 1 and 4 of the General Data Protection Regulation and – in case such an automated decision-making process is intended – significant information regarding the logic as well as the scope and the aspired effect of this processing on the data subject.  

3.     the right to request the controller to rectify any inaccurate personal data concerning him or her; this includes the right to request that any possibly incomplete personal data is completed – if necessary with a complementary declaration – in consideration of processing purposes;  

4.     the right to request the controller to erase any personal data concerning him or her if

a.     the data was collected and processed for purposes for which it is (no longer) necessary;
b.     permission to process personal data has been revoked or no other legal basis exists (anymore);
c.     the data subject has objected to the processing of his or her personal data and no overriding legitimate grounds for processing exist;
d.     the data subject’s personal data has been processed in an unlawful fashion;
e.     the controller is legally obligated to erase the data subject’s personal data.  

If personal data has been made public by Medinorm Medizintechnik GmbH and we are responsible for erasing the relevant data according to art. 17 par. 1 of the GDPR, we will – in consideration of the available technology and implementation costs – take measures to inform other controllers who are processing the personal data that the data subject has requested that any links to or copies and replications of this personal data are erased provided that the processing is not necessary.  

5.     the right to request the controller to restrict the processing where one of the following applies:

a.     the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
b.     the processing is unlawful and the data subject is opposed to the erasure of the personal data and instead requests that its use is restricted;
c.     the controller no longer needs the personal data for the purposes of the processing, but it is still required by the data subject for establishing, exercising or defending legal claims;
d.     the data subject has objected to any processing pursuant to art. 21 par. 1 and the verification is still pending as to whether the legitimate grounds of the controller override those of the data subject.  

6.     the right to receive personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format. The data subject also has the right to transmit the data to another controller without being hindered by Medinorm Medizintechnik GmbH, provided that the processing is based on consent pursuant to point a) of art. 6 par. 1 or point a) of art. 9 par. 2 of the General Data Protection Regulation or on a contract pursuant to point b) of art. 6 par. 1 of the General Data Protection Regulation and the processing is carried out by automated means; this right does not apply if the processing is necessary for executing a task which is being carried out in the public interest or in the exercise of an official authority assigned to the controller.   In this context, the data subject has the right to have his or her personal data transmitted directly from one controller to another, where technically feasible and where no rights and liberties of others are being adversely affected.  

7.     the right to object, on grounds relating to his or her particular situation, at any time to the processing of personal data concerning him or her which is based on point e) or f) of art. 6 par. 1 of the General Data Protection Regulation. This includes the right to object to a possible profiling.   Medinorm Medizintechnik GmbH will no longer process the personal data unless compelling legitimate grounds for the processing which override the interests, rights and liberties of the data subject or for the establishment, exercise or defense of legal claims can be established.   If personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing. If the data subject objects to having their personal data processed for direct marketing purposes, the personal data will no longer be processed for such purposes Medinorm Medizintechnik GmbH.   Furthermore, if personal data is processed for scientific or historical research purposes or statistical purposes pursuant to art. 89 par. 1, the data subject, on grounds relating to his or her particular situation, has the right to object to having his or her personal data processed, unless the processing is necessary for the performance of a task carried out for reasons of public interest.  

8.     the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her. The data subject does not have this right if the decision

a.      is necessary for entering into or carrying out a contract between the data subject and a data controller;
b.     is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and liberties and legitimate interests;
c.     is based on the data subject’s explicit consent.  

In cases where the processing of personal data is necessary for concluding or carrying out a contract between us and the data subject or on the basis of the permission of the data subject, Medinorm Medizintechnik GmbH will implement suitable measures to safeguard the data subject’s rights and liberties and legitimate interests. This includes at the least the right to request human intervention on the part of the controller as well as the possibility to express his or her point of view to the controller.

9.     the right to revoke permission previously provided to the controller at any time for processing personal data concerning him or her.  

The legal basis for the processing of personal data is the regulation provided in point a) of art. 6 par. 1 of the General Data Protection insofar as Medinorm Medizintechnik GmbH requests permission from the data subject.   If the processing of a data subject’s personal data is necessary for the initiation, performance or termination of a contract with the controller, the processing of such data is lawful pursuant to point b) of art. 6 par. 1 of the General Data Protection Regulation.  

If the controller is subject to a legal obligation which makes the processing of personal data necessary, such processing is lawful pursuant to point c) of art. 6 par. 1 of the General Data Protection Regulation.  

In rare cases, processing personal data is necessary in order to protect the vital interests of the data subject or of another natural person. This applies, for example, if the controller is aware that the data subject is injured and the controller needs to call for medical assistance. In such and similar cases, the processing of personal data is lawful pursuant to point d) of art. 6 par. 1 of the GDPR.  

Medinorm Medizintechnik GmbH is allowed to process personal data pursuant to point f) of art. 6 par. 1 0f the GDPR for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and liberties of the data subject which require protection of personal data. The execution of business activities for the benefit of our employees and our shareholders is a legitimate interest.  

Medinorm Medizintechnik GmbH explains explicitly that we are legally bound to provide personal data to some extent. This applies, for example, in relation to the tax law and contractual provisions. A contract with the controller can only be concluded if the necessary personal data of the person concerned is fully provided. If you have any questions concerning the basis and necessity of processing, you can contact the controller by any of the communication means stated above.   

Using Google Maps 

This website uses Google Maps to display a site map. Google Maps is operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. By using this website, you consent to the collection, processing and use by Google, one of its agents, or third parties of the data collected and entered by you. The terms of service for Google Maps can be found in Google Maps Terms of Service. For details, see the Privacy Center at google.com: Transparency and Choice, and Privacy Policy.