We operate our website in accordance with the following principles:
We undertake to observe the statutory data privacy provisions and endeavour to always take into account the principles of data avoidance and data minimisation.
- 1. Name and address of the responsible person and the data protection officer
- 2. Definitions of terms
- 3. Legal basis for the processing of personal data
- 4. Disclosure of personal data
- 5. Storage period and deletion
- 6. SSL encryption
- 7. Collection and storage of personal data and type and purpose of its use
- 8. Cookies
- 9. Analysis and tracking tools
- 10. Video integration
- 11. Rights of the data subject
- 12. Amendment to the privacy statement
1. Name and address of the responsible person and the data protection officer
The responsible person within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States of the European Union as well as other data protection regulations is:
UEBE Medical GmbH
represented by its Managing Directors: Dipl. Betriebswirt (DH) Thomas Neubeck, Felix Uebe and Philipp Uebe
Zum Ottersberg 9
Tel.: (+49) (0) 9342/ 9240-40
Fax: (+49) (0) 9342/ 9240-80
The data protection officer of the responsible person is:
Tel.: (+49) (0)931/41726241
2. Definitions of terms
We have designed our privacy statement in accordance with the principles of clarity and transparency. However, should there be any ambiguities with regard to the use of different terms, the relevant definitions can be found here.
3. Legal basis for the processing of personal data
We process your personal data such as your surname and first name, your email address and your IP address, etc. only if there is a legal basis for this. In particular the following three regulations of the General Data Protection Regulation must be considered:
a) You have given us your consent to the processing of your personal data for one or more purposes (Art. 6, para. 1, sentence 1 a) GDPR). In this context we will inform you in detail about the purpose(s) of such processing and will document your express consent.
b) The processing of your personal data is necessary for the fulfilment of a contract or for the implementation of pre-contractual measures with you (Art. 6, para. 1, sentence 1 b) GDPR).
c) The processing of personal data is necessary to protect our legitimate interests, except where such interests are overridden by your interests or fundamental rights and fundamental freedoms (Art. 6, para. 1, sentence 1 f) GDPR).
We shall however always indicate once again at the respective points on which legal basis the processing of your personal data takes place.
4. Disclosure of personal data
Your personal data will not be transmitted to third parties for purposes other than those listed below. We shall pass on your personal data to third parties only if:
a) you have given your express consent hereto pursuant to Art. 6, para. 1, sentence 1 a) GDPR;
b) disclosure pursuant to Art. 6, para. 1, sentence 1 f) GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of such data;
c) disclosure pursuant to Art. 6, para. 1, sentence 1 c) GDPR is subject to a legal obligation;
d) this is permitted by law and is required pursuant to Art. 6, para. 1, sentence 1 b) GDPR for the management of contractual relationships with you.
5. Storage period and deletion
We shall store all personal data which you transmit to us only as long as required in order to fulfil the purposes for which such data have been transmitted or as long as this is prescribed by law. With the fulfilment of such purposes and/or expiry of the statutory storage periods the data will be deleted or blocked by us.
6. SSL encryption
SSL encryption is used on this website for security reasons and to protect the transmission of confidential contents, for example requests which you send to us as a website operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the padlock symbol in your browser line.
If SSL encryption is activated, the data which you transmit to us cannot be read by third parties.
7. Collection and storage of personal data and type and purpose of its use
a) Contractual relationship
aa) Conclusion of contract
In the context of the establishment of the contractual relationship, only those personal data essential for the execution of the contract are processed pursuant to Art. 6, para. 1, sentence 1 b) GDPR.
If you voluntarily provide further information, this will be processed only on the basis of the consent given by you pursuant to Art. 6, para. 1, sentence 1 a) GDPR. We use such voluntary information in order to provide a customer-friendly service and to constantly improve it.
If you wish to comment on a blog post, your name, your email address, your IP address and the date and time of your post are collected and stored. The legal basis results from Art. 6, para. 1, sentence 1 f) GDPR concerning the protection of legitimate interests, as the storage of such data is necessary for our security, since we can be prosecuted for illegal content on our website.
Other visitors to our website will be shown the date and time of your comment as well as your name as the author of your comment.
c) Contact form/email contact
We provide you with a form on our website so that you can contact us at any time. For the use of the contact form, indication of a name for a personal form of address and a valid email address is required to make contact, so that we know from whom the enquiry originates and can also process it.
If you send us enquiries using the contact form, your details from the enquiry form including the contact data you have provided there as well as your IP address pursuant to Art. 6, para. 1, sentence 1 b) and f) GDPR will be processed for the implementation of pre-contractual measures which are taken at your request or for the exercise of our legitimate interest, namely the exercise of our business activity.
You are also welcome to send us an email using the email address provided on our website instead. In this case, we will store and process your email address as well as the information provided by you in the email pursuant to Art. 6, para. 1, sentence 1 b) and f) GDPR for processing your message.
Enquiries and the associated data will be deleted no later than three months after receipt, unless they are required for a further contractual relationship.
d) Google Fonts
We use Google Fonts on our website. This enables the display of fonts. Google Fonts is a service of Google Inc. (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland). These web fonts are integrated by a server call, usually a Google server in the USA. This may result in the following being transmitted to the server and stored by Google:
• Name and version of the browser used
• Website from which the request was triggered (referrer URL)
• Operating system of your computer
• Screen resolution of your computer
• IP address of the computer making the request
• Language settings of the browser or operating system used by the user
The use of Google Fonts serves to make reading our website easier and graphically more pleasant for you, and is therefore based on our legitimate interests pursuant to Art. 6, para. 1, sentence 1 f) GDPR.
The data processed by cookies are required for the aforementioned purposes in order to pro-tect our legitimate interests and those of third parties pursuant to Art. 6, para. 1, sentence 1 f) GDPR.
Most browsers automatically accept cookies due to the browser settings. However, you can configure your browser so that either no cookies are stored on your end device or at least a message is displayed before a new cookie is stored. If you completely deactivate the cookie function in your browser, you may not be able to use all functions of our website.
Below we explain the different types of cookies which we use.
a) Session cookies
To make your use of our website more pleasant, we use so-called session cookies to recognize that you have already visited individual pages of our website.
These session cookies are automatically deleted after you leave our site.
b) Temporary cookies
These temporary cookies are stored on your end device for a specified period of time.
c) Cookies for optimization purposes
These cookies are automatically deleted after a defined period of time.
9. Analysis and tracking tools
We use the analysis and tracking tools listed below on our website. These serve to ensure the continuous optimization of our website and to design it according to requirements.
These interests are deemed legitimate within the meaning of Art. 6, para. 1, sentence 1 f) GDPR. The respective data processing purposes and data categories can be found in the corre-sponding tools.
a) Google Analytics
On our website we use Google Analytics, a web analysis service of Google Inc. (https://www.google.de/intl/en/about/) (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland; hereinafter referred to as “Google”).
• Name and version of the browser used
• Operating system of your computer
• Website from which access is made (referrer URL)
• IP address of the requesting computer
• Time of the server request
are usually transferred to a Google server in the USA and stored there. However, because we have activated IP anonymisation on our website, your IP address will be shortened beforehand by Google within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
On our behalf, Google will use this information to evaluate your use of our website, to com-pile reports on website activities and to provide us with other services relating to website and Internet use. The IP address transmitted by your browser within the context of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by selecting the appropriate settings on your browser. However, we wish to point out that in this case you may not be able to use all functions of our website to their full extent.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie is set which prevents the collection of your data on future visits to our website:
Disable Google Analytics
10. Video integration
Our website uses the YouTube plugin, which is operated by YouTube, LLC (901 Cherry Ave., San Bruno, CA 94066, USA).
If you activate the YouTube plugin during your visit, a connection to YouTube’s servers is established and the YouTube server is informed which pages of our website you have visited. YouTube can thus assign your surfing behaviour directly to your personal profile. You can prevent this if you log out of your member account before visiting our website.
The legal basis results from Art. 6, para. 1, sentence 1 f) GDPR. The underlying advertising purpose shall be deemed a legitimate interest within the meaning of the GDPR.
11. Rights of the data subject
You have the following rights:
Pursuant to Art. 15 GDPR, you have the right to request information about your personal data processed by us. This right to information includes information on
• the processing purposes
• the categories of personal data
• the recipients or categories of recipients to whom your information has been or will be disclosed
• the planned storage period or at least the criteria for determining the storage period
• the existence of a right to correction, deletion, restriction of processing or objection
• the existence of a right to lodge a complaint with a supervisory authority
• the origin of your personal data, unless they have been collected by us
• the existence of automated decision-making, including profiling and, where appropriate, meaningful information on its details
Pursuant to Art. 16 GDPR, you have the right to have incorrect or incomplete personal data stored by us corrected immediately.
Pursuant to Art. 17 GDPR, you have the right to request the immediate deletion of your per-sonal data by us, unless further processing is necessary for any of the following reasons:
• to exercise the right to freedom of expression and information
• to fulfil a legal obligation required for processing under the law of the European Union or of the Member States to which the responsible person is subject, or to perform a task in the public interest or in the exercise of official authority conferred on the responsible person
• for reasons of public interest in the field of public health pursuant to Art. 9, para. 2 h) and i) and Art. 9 para. 3 GDPR
• for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 GDPR, insofar as the law referred to in a) is likely to make it impossible or seriously impair the attainment of the objectives of such processing
• to assert, exercise or defend legal claims
d) Restriction of processing
Pursuant to Art. 18 DSGVO, you may request that the processing of your personal data be restricted for any of the following reasons:
• You dispute the accuracy of your personal data.
• The processing is unlawful and you refuse the deletion of your personal data.
• We no longer need the personal data for the purposes of processing, but you need them in order to assert, exercise or defend legal claims.
• You file an objection to the processing pursuant to Art. 21 para. 1 GDPR.
If you have requested the correction or deletion of your personal data or a restriction of processing pursuant to Art. 16, Art. 17 para. 1 and Art. 18 GDPR, we will inform all recipients to whom your personal data have been disclosed, unless this proves impossible or involves dis-proportionate effort. You may ask us to inform you of these recipients.
You are entitled to receive the personal data you have provided to us in a structured, common and machine-readable format.
You are also entitled to request the transfer of this data to a third party if the processing was carried out using automated procedures and is based on consent pursuant to Art. 6 para. 1 sentence 1 a) or Art. 9 para. 2 a) or on a contract pursuant to Art. 6 para. 1 sentence 1 b) GDPR.
Pursuant to Art. 7 para. 3 GDPR, you are entitled to revoke your consent to us at any time. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until revocation. In future we may no longer continue the processing of data based on your revoked consent.
Pursuant to Art. 77 GDPR, you are entitled to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR.
If your personal data are processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 f) GDPR, you are entitled to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are reasons for this which arise from your particular situation or the objection is aimed against direct advertising. In the latter case you have a general right of objection, which we will implement without specifying the particular situation. If you wish to exercise your right of revocation or objection, simply send an e-mail to firstname.lastname@example.org .
j) Automated decision in individual cases including profiling
You have the right not to be subject to a decision based exclusively on automated processing – including profiling – which has legal effect against you or significantly impairs you in a similar manner. This does not apply if the decision
i. is necessary for the conclusion or performance of a contract between you and us
ii. is admissible under European Union or Member State legal provisions to which we are subject and such provisions contain appropriate measures to protect your rights and freedoms and your legitimate interests
iii. is taken with your express consent
However, such decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 a) or g) GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.
With regard to the cases referred to in i) and iii), we will take reasonable measures to protect rights and freedoms and your legitimate interests, including at least the right to obtain the intervention of a person on our part, to state our position and to challenge the decision.
12. Amendment to the privacy statement
If we amend the privacy statement, this will be indicated on the website.
January 23, 2019