Privacy policy

• Customer master data (e.g. name, address, other contact details)
• Order data (e.g. payment data, purchase histories)
• Auftragsdaten (z. B. Zahlungsdaten, Kaufhistorien)
• Correspondence (e.g. correspondence)
• Applicant data (e.g. CV, certificates/certificates)

Legal basis and purpose of processing:

Your data will only be processed within the framework of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The legal basis on which the processing of the data is based is shown below.

Fulfillment of contractual obligations in accordance with Art. 6 para. 1 b GDPR:

The data is processed as part of the business relationship with you for the fulfillment of contractual obligations. The specific purpose of data collection depends on the business relationship with you.

In order to carry out our business relationship and to fulfill contractual requirements you must provide your personal data  . Without the provision of this data, it is not possible for us to enter into a business relationship with you.

In the context of safeguarding interests in accordance with Art. 6 para. 1 f GDPR:

• General business management
• Market observation
• Market and needs analysis
• Assertion of legal claims
• Improvement and further development of our products
• Prevention and investigation of criminal offenses
• Ensuring IT security and IT operations

As far as possible, your data will only be used for the above-mentioned purposes in pseudonymized or anonymized form.

On the basis of your consent in accordance with Art. 6 para. 1 a GDPR:

If you have given us your consent to process personal data, this data may be used for the following purposes:

• Sending sample products or information about products
• Participation in surveys
• Transmission of data to third parties
• Advertising and advertising development

You can revoke your consent at any time. We would like to point out that this revocation only applies to the future processing of your data and cannot be asserted retroactively. This also applies to consents that you gave before May 25, 2018, i.e. before the new General Data Protection Regulation came into force.

On the basis of legal requirements in accordance with Art. 6 para. 1 c GDPR:

We are subject to legal obligations due to legal requirements such as the Medical Devices Act, the Commercial Code or the Industrial Code. This results in the following purposes for processing your data:

• Compliance with statutory retention and documentation obligations
  
• Enforcement of our general terms and conditions
  
• Administration of our business processes

The transfer of your data within MICROMED Medizintechnik GmbH serves the fulfillment of contractual obligations and order processing. For this purpose, it is necessary that we forward your data to departments involved in order processing, such as financial accounting, sales, marketing and shipping.

Your data will not be passed on to third parties outside our company unless we have your consent or are obliged to do so by legal regulations of public authorities. Such regulations apply in particular to the following bodies:

• Legal or law enforcement authorities, such as the police, courts, public prosecutor's offices
• Lawyers and notaries
• Auditors
• Supervisory authorities, such as tax authorities

If we use external service providers (processors Art. 28 GDPR) in areas such as IT, communication, debt collection or printing, they will be contractually obliged to comply with the requirements of the GDPR. In any case, the processing of your data is earmarked and monitored by us.

This does not apply to the forwarding of your data to shipping service providers as part of the shipment of your order. The further use of the data required for shipping is the responsibility of the shipping service provider.

Transfer of data to a third country:

Your data will only be transferred to third countries (countries outside the EU) if it is necessary for the export of goods or required by law or if we have your consent to do so.

In any case, the legal requirements of the GDPR are observed and only the necessary data is transferred.

In the case of service providers whose registered office is located in a third country, your data will only be transferred as soon as the European Commission has decided that it is a third country with an adequate level of protection. (Art 45 GDPR)

Your data will be stored for the duration of the business relationship. This includes a possible inquiry, the processing of the transaction and the statutory retention period. According to legal requirements of e.g. the German Commercial Code (HGB) or the German Fiscal Code (AO),there is a retention period of 2 to 10 years after termination of the business relationship. In order to preserve evidence within the framework of the statutory limitation periods (§§ 195 ff. BGB),limitation periods of up to 30 years are prescribed, whereby the regular limitation period is three years.

After termination of the business relationship and expiry of the retention period, your data will be deleted.

Security of your data:

Your personal data is secured by taking all technical and organizational security measures to ensure that it is inaccessible to unauthorized third parties.

Nevertheless, it is not possible for us to guarantee the complete security of your data. Therefore, the transmission of data via the Internet is at your own risk. When sending very sensitive data or information, it is therefore advisable to use the postal service.

Your data protection rights:

You have the following rights in relation to your personal data:

• In accordance with Art. 15 GDPR, you can request information about your personal data.
  
• In accordance with Art. 16 GDPR, you can request the rectification or completion of your data. If we have passed on your data to third parties, we will inform these third parties of your correction or completion if this is required by law.
  
• In accordance with Art. 17 GDPR, you can request the deletion of your personal data if your data is no longer required for the purpose for which it was collected.
  
• Or, if you withdraw your consent to the processing of your data and there is no other legal basis for the processing.
  
• Or if you object to the dissemination and there are no legitimate grounds for dissemination.
  
• Or if your data has been processed unlawfully.
  
• Or if the deletion of your data is necessary to fulfill a legal obligation under Union law or the law of the member states.
  
• In accordance with Art. 18 GDPR, you have the right to restrict the processing of your personal data.
• In accordance with Art. 20 GDPR, you have the right to data portability.
  
• In accordance with Art. 21 GDPR, you have the right to object to the processing of your personal data.
  
• You also have the right to lodge a complaint with a competent data protection supervisory authority. (Art. 77 GDPR in conjunction with § 19 BDSG).

Information on your right to object pursuant to Art. 21 GDPR:

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (data processing based on a balancing of interests),including profiling based on those provisions.

Once you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

You have the right to object at any time to the processing of your personal data for the purpose of direct marketing; this also applies to profiling insofar as it is associated with such direct marketing.

As soon as you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection can be made informally.

Use of Google Analytics

We would like to point out that our website uses Google Analytics software. This is a web analysis service of Google Inc (“Google”). This service uses so-called “cookies”. These are text files that are stored on your computer. Cookies make it possible to analyze your use of our website. The information generated (including your IP address) is stored on a Google server in the USA. Google then uses this information to evaluate your use of our website, to compile reports on website activity for website operators and to provide other services relating to website activity and internet usage. Google will transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google.

You can prevent cookies by selecting the appropriate settings in your browser software. However, you may then not be able to use all the functions of our website. By using our website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

Automated decision-making:

We do not use automated decision-making. If we use this procedure, you will be informed of this if this is required by law.

Protection of minors:

We do not knowingly request, collect, process or pass on to third parties any personal data of children and young people under the age of 18 without the consent of their parents or legal guardians.