1. Name and contact details of the controller and the company data protection officer
Medinorm Medizintechnik GmbH
Gewerbepark 7-9 66583 Spiesen
Telefon: 0 6821 – 964 78-0
The company data protection officer of Medinorm Medizintechnik GmbH is listed under the following address, Mr. Dieter Junker or reachable at the following e-mail address: E-Mail: datenschutz(at)medinorm.de
2. Collection and storage of personal data as well as the nature and purpose of their use
The management of Medinorm Medizintechnik GmbH,
attributes great importance to the protection of the users of its website www.medinorm.eu.
Users of this website are therefore, generally speaking, not obliged to provide
personal data. If a user – hereinafter: data subject – wishes to make use of
particular services of Medinorm Medizintechnik GmbH that require the processing
of personal data, Medinorm Medizintechnik GmbH will only process this data if
it has legal permission to process personal data or if the data subject has
explicitly given permission to process their personal data.
Personal data, which includes for instance name,
address, contact information such as telephone number or email address, will be
processed in accordance with the provisions of Regulation (EU) 2016/679
(General Data Protection Regulation) as well as the corresponding national
provisions for the handling of such data. In this statement and with regard to
the usage of our website, we intend to inform data subjects on the type, extent
and purpose of the collected and communicated data and about their rights
regarding the handling of their data.
Medinorm Medizintechnik GmbH has taken certain
measures and precautions for the processing of the aforementioned data as a way
of preventing this data from being processed without legal basis and inspected
by an unauthorized party. However, we also have to inform you that it is
technically impossible to guarantee a complete protection of data transmitted
via the internet. For this reason, you can also communicate with us via
different channels such as post or telephone.
To explain our processing activities, we use the same
terms as the ones used in the relevant provisions of the General Data
Protection Regulation in order to avoid any misunderstandings and ambiguity.
The party responsible for the processing of the
collected and communicated data within the use of www.medinorm.eu is:
small text files that are stored on a computer system via a browser.
which is a unique identifier of the cookie. It consists of a string of
characters that associates websites and servers with the specific browser, in
which the cookie has been stored. This enables any website and server visited
to distinguish the individual browser of the data subject from other browsers
containing different cookies. A specific browser can be recognized and
identified via the unique cookie ID.
cookies, Medinorm Medizintechnik GmbH is able to provide its website
users with services that are more user-friendly. This would not be possible
cookies, information and services on our website can be optimized for the user.
As men-tioned above, cookies enable us to recognize the users of our website.
By recognizing our users, we are able to simplify the usage of our website for
them. For example, the user of a website that stores cookies will not have to
re-enter their login data every time they visit the website. The web-site and
the cookie that is stored on the user’s computer system will do this for them.
correct settings in their browser, the data subject is able to prevent cookies
from being stored via our website at any time and consequently object to the
storage of cookies permanently. Furthermore, all standard browsers and other
types of software can delete any cookies previously stored. If the data subject
disables the storage of cookies in his or her browser, our website may be
limited in its functions.
Every time a data subject retrieves content via our
website under the aforementioned internet address, general information and data
will be collected as a result of transmission technology. This information and
data is stored in so-called server log files. The following information may be
1. the type
of internet browser used by the data subject;
installed operating system of the computer that is used by the data subject;
website, from which the data subject has navigated to our website (so-called
subpages within our website which are visited by the data subject with the used
5. date and
time of the access of our website by the data subject;
internet protocol (IP) address that was designated to the internet connection
used by the data subject to retrieve content from our website;
internet service provider (ISP) of the internet connection, from which content
of our website was retrieved.
Medinorm Medizintechnik GmbH will not draw any
conclusions in regard to using this data to identify the data subject. The data
is used to:
the content of our website correctly;
the content and advertisements on our website;
that our IT systems and website always work
law enforcement authorities with the necessary data in case of a cyber-attack.
In order to achieve these purposes, the aforementioned
information will be analyzed in an anonymized fashion, statistically and with
the objective to ensure data protection and data security for the data subject
and to create an optimal level of protection. If server log files are stored
until the end of the evaluation for stated reasons, they will not be merged
with the data that is actively transmitted by the data subject. They will be
stored separately to this information.
Due to legal obligations, the website of Medinorm
Medizintechnik GmbH provides information that enables users to quickly contact
us electronically or communicate with us directly. A contact form enables users
to contact us, however, its use is not mandatory. When a data subject contacts
us using any of the stated means, any personal data transmitted by the data
subject will be processed and stored in order to process the request that
prompted them to contact us.
Medinorm Medizintechnik GmbH will only store personal
data for the period of time that is needed to achieve the processing purpose
and during which Medinorm Medizintechnik GmbH is obligated to retain data due
to legal provisions. As soon as the storing purpose lapses or the data
retention period expires, personal data will be erased routinely and according
to legal requirements, and any further processing of the relevant data will be
Regarding the handling of their personal data, data
subjects can contact the person responsible for data protection – hereinafter:
controller – and assert the following rights:
1. the right
to receive a confirmation from the controller if personal data concerning him
or her is processed by the controller;
2. the right
to receive information from the controller regarding what kind of personal data
concerning him or her is being processed by the controller as well as a copy of
this information, both free of charge; the data subject is particularly
entitled to receiving the following information:
regarding the processing purposes;
b. information regarding the categories of the processed personal data;
c. information regarding the recipients or categories of the recipients who have already received the relevant personal data or will receive the relevant personal data, especially recipients in so-called third countries and international organizations; also – in such cases and on explicit request – information regarding the existence of adequate data protection guarantees;
d. where possible, information regarding the planned storage period for personal data or the criteria for determining the storage period;
e. information regarding the existence of the right to rectify or erase the data subject’s personal data and the existence of the right to restrict the processing of personal data;
f. information regarding the existence of a revocation right regarding the processing of the data subject’s personal data by the controller;
g. information regarding the existence of the right to appeal in front of a supervisory authority;
h. information regarding the existence of an automated decision-making process including profiling according to art. 22 par. 1 and 4 of the General Data Protection Regulation and – in case such an automated decision-making process is intended – significant information regarding the logic as well as the scope and the aspired effect of this processing on the data subject.
3. the right
to request the controller to rectify any inaccurate personal data concerning
him or her; this includes the right to request that any possibly incomplete
personal data is completed – if necessary with a complementary declaration – in
consideration of processing purposes;
4. the right
to request the controller to erase any personal data concerning him or her if
a. the data was collected and processed for purposes for which it is (no longer) necessary;
b. permission to process personal data has been revoked or no other legal basis exists (anymore);
c. the data subject has objected to the processing of his or her personal data and no overriding legitimate grounds for processing exist;
d. the data subject’s personal data has been processed in an unlawful fashion;
e. the controller is legally obligated to erase the data subject’s personal data.
If personal data has been made public by Medinorm
Medizintechnik GmbH and we are responsible for erasing the relevant data
according to art. 17 par. 1 of the GDPR, we will – in consideration of the
available technology and implementation costs – take measures to inform other
controllers who are processing the personal data that the data subject has
requested that any links to or copies and replications of this personal data
are erased provided that the processing is not necessary.
5. the right
to request the controller to restrict the processing where one of the following
accuracy of the personal data is contested by the data subject, for a period
enabling the controller to verify the accuracy of the personal data;
b. the processing is unlawful and the data subject is opposed to the erasure of the personal data and instead requests that its use is restricted;
c. the controller no longer needs the personal data for the purposes of the processing, but it is still required by the data subject for establishing, exercising or defending legal claims;
d. the data subject has objected to any processing pursuant to art. 21 par. 1 and the verification is still pending as to whether the legitimate grounds of the controller override those of the data subject.
6. the right
to receive personal data concerning him or her, which he or she has provided to
a controller, in a structured, commonly used and machine-readable format. The
data subject also has the right to transmit the data to another controller
without being hindered by Medinorm Medizintechnik GmbH, provided that the
processing is based on consent pursuant to point a) of art. 6 par. 1 or point
a) of art. 9 par. 2 of the General Data Protection Regulation or on a contract
pursuant to point b) of art. 6 par. 1 of the General Data Protection Regulation
and the processing is carried out by automated means; this right does not apply
if the processing is necessary for executing a task which is being carried out
in the public interest or in the exercise of an official authority assigned to
In this context, the data subject has the right to
have his or her personal data transmitted directly from one controller to
another, where technically feasible and where no rights and liberties of others
are being adversely affected.
7. the right
to object, on grounds relating to his or her particular situation, at any time
to the processing of personal data concerning him or her which is based on
point e) or f) of art. 6 par. 1 of the General Data Protection Regulation. This
includes the right to object to a possible profiling.
Medinorm Medizintechnik GmbH will no longer process
the personal data unless compelling legitimate grounds for the processing which
override the interests, rights and liberties of the data subject or for the
establishment, exercise or defense of legal claims can be established.
If personal data is processed for direct marketing
purposes, the data subject has the right to object at any time to the
processing of personal data concerning him or her for such marketing, which
includes profiling to the extent that it is related to such direct marketing.
If the data subject objects to having their personal data processed for direct
marketing purposes, the personal data will no longer be processed for such
purposes Medinorm Medizintechnik GmbH.
Furthermore, if personal data is processed for
scientific or historical research purposes or statistical purposes pursuant to
art. 89 par. 1, the data subject, on grounds relating to his or her particular
situation, has the right to object to having his or her personal data
processed, unless the processing is necessary for the performance of a task
carried out for reasons of public interest.
8. the right
not to be subject to a decision based solely on automated processing, including
profiling, which produces legal effects concerning him or her or similarly
significantly affects him or her. The data subject does not have this right if
a. is necessary for entering into or carrying
out a contract between the data subject and a data controller;
b. is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and liberties and legitimate interests;
c. is based on the data subject’s explicit consent.
In cases where the processing of personal data is
necessary for concluding or carrying out a contract between us and the data
subject or on the basis of the permission of the data subject, Medinorm
Medizintechnik GmbH will implement suitable measures to safeguard the data
subject’s rights and liberties and legitimate interests. This includes at the
least the right to request human intervention on the part of the controller as
well as the possibility to express his or her point of view to the controller.
9. the right
to revoke permission previously provided to the controller at any time for
processing personal data concerning him or her.
The legal basis for the processing of personal data is
the regulation provided in point a) of art. 6 par. 1 of the General Data
Protection insofar as Medinorm Medizintechnik GmbH requests permission from the
If the processing of a data subject’s personal data is
necessary for the initiation, performance or termination of a contract with the
controller, the processing of such data is lawful pursuant to point b) of art.
6 par. 1 of the General Data Protection Regulation.
If the controller is subject to a legal obligation
which makes the processing of personal data necessary, such processing is
lawful pursuant to point c) of art. 6 par. 1 of the General Data Protection
In rare cases, processing personal data is necessary
in order to protect the vital interests of the data subject or of another
natural person. This applies, for example, if the controller is aware that the
data subject is injured and the controller needs to call for medical
assistance. In such and similar cases, the processing of personal data is
lawful pursuant to point d) of art. 6 par. 1 of the GDPR.
Medinorm Medizintechnik GmbH is allowed to process
personal data pursuant to point f) of art. 6 par. 1 0f the GDPR for the
purposes of the legitimate interests pursued by the controller or by a third
party, except where such interests are overridden by the interests or
fundamental rights and liberties of the data subject which require protection
of personal data. The execution of business activities for the benefit of our
employees and our shareholders is a legitimate interest.
Medinorm Medizintechnik GmbH explains explicitly that we are legally bound to provide personal data to some extent. This applies, for example, in relation to the tax law and contractual provisions. A contract with the controller can only be concluded if the necessary personal data of the person concerned is fully provided. If you have any questions concerning the basis and necessity of processing, you can contact the controller by any of the communication means stated above.
Using Google Maps