Skip to content

Privacy Policy

1. Data protection at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. The term “personal data” comprises all data which can be used to personally identify you. For detailed information about data protection, please read our Privacy Policy below.

The collection of data on this website

Who is responsible for the collection of data on this website (i.e.the “controller”)?

Data processing is handled by the website operator, whose contact details can be found in the “Information about the responsible party (“controller”)” section of this Privacy Policy.

How do we collect your data?

We firstly collect your data when you share it with us. This may, for instance, include information you enter into our contact form.

Other data is collected automatically or with your consent by our IT systems when you visit our website. This data mainly consists of technical information (e.g.web browser, operating system or time the site was accessed). This information is collected automatically as soon as you access this website.

For what purposes do we use your data?

Some of the data is collected to ensure that our website can be provided without any errors. Other data may be used to analyse your user behaviour.

What rights do you have concerning your data?

You have the right to receive, at any time and without having to pay a fee, information about the source and recipients of your personal data as well as the purposes for which your personal data is stored. You also have the right to request that your data be rectified or erased. If you have given your consent to data processing, you can revoke this consent at any time with future effect. Moreover, under certain circumstances, you have the right to demand that the processing of your personal data be restricted. You also have the right to lodge a complaint with the competent supervisory authority.

Please do not hesitate to contact us at any time if you have any questions about this or any other matters concerning data protection.

Analysis tools and tools provided by third parties

It is possible that your browsing behaviour will be statistically analysed when you visit this website. Such analyses are primarily performed using cookies and analysis programs.

Detailed information on these analysis programs can be found in this Privacy Policy.

2. Hosting and content delivery networks (CDN)

External hosting

This website is hosted by an external service provider (“hosting provider”). Personal data collected on this website is stored on the hosting provider’s servers. This data may include, but is not limited to, IP addresses, contact requests, metadata and communications, contract information, contact information, names, web pages accessed and other data generated through a website.

The hosting provider is used for the purpose of fulfilling a contract with our potential and existing customers (Art. 6(1)(b) General Data Protection Regulation – GDPR) and in the interest of ensuring that our online services are provided securely, quickly and efficiently by a professional provider (Art. 6(1)(f) GDPR).

Our hosting provider will only process your data to the extent necessary to fulfil its service obligations and to follow our instructions with respect to such data.

We use the following hosting provider:

Strato AG
Pascalstraße 10
10587 Berlin, Germany

3. General information and mandatory information

Data protection

The operators of this website take the protection of your personal data very seriously. This is why we handle your personal data as confidential information and in compliance with the statutory data protection regulations and this Privacy Policy.

A variety of personal data is collected whenever you use this website. Personal data comprises data which can be used to personally identify you. This Privacy Policy explains which data we collect and how it is used. It also explains how and for which purpose the information is collected.

We would like to take this opportunity to make you aware that the transmission of data over the internet (e.g. through email communications) may be prone to security gaps. It is not possible to completely protect data from access by third parties.

Information about the responsible party (“controller”)

The controller responsible for data processing on this website is:

CoviMedical GmbH
Steinwiese 18
35685 Dillenburg, Germany

Phone: +49 (0)2771 4278962
Email: email@covimedical.de

The controller is the natural person or legal entity which single-handedly or jointly with others makes decisions about the purposes and means of processing personal data (e.g.names, email addresses).

Storage period

Unless a more specific storage period is stated within this Privacy Policy, we will store your personal data until the purpose for processing the data no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted after these reasons cease to apply.

Information on data transfer to the USA

Our website uses tools from companies based in the USA. When these tools are active, your personal information may be transferred to these companies’ US servers. Please note that the USA is not a safe third country within the meaning of EU data protection law. US companies are required to release personal data to security authorities without you as the data subject being able to take legal action against this. It is therefore possible that US authorities (e.g. intelligence services) may process, evaluate and permanently store your data on US servers for monitoring purposes. We have no influence over these processing activities.

Withdrawal of your consent to the processing of data

Many data processing operations are only possible if you provide your express consent. If you have given us your consent, you can withdraw this at any time. This shall not affect the lawfulness of any data processing which occurred prior to your withdrawal.

Right to object to the collection of data in special cases and the right to object to direct marketing (Art. 21 of the General Data Protection Regulation – GDPR)

IN THE EVENT THAT DATA IS PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. PLEASE CONSULT THIS PRIVACY POLICY TO DETERMINE THE LEGAL BASIS ON WHICH ANY PROCESSING OF DATA IS BASED. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED, UNLESS WE ARE IN A POSITION TO DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING OF YOUR DATA WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR UNLESS THE PURPOSE OF THE PROCESSING IS THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF THE PERSONAL DATA CONCERNED FOR THE PURPOSES OF SUCH MARKETING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE PROCESSED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR, data subjects are entitled to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work or place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or court proceedings available as legal recourses.

Right to data portability

You have the right to request that any data which we automatically process on the basis of your consent or in order to perform a contract be handed over to you or a third party in a commonly used, machine-readable format. If you request that the data be transmitted directly from one controller to another, this will only be done if it is technically feasible.

SSL and/or TLS encryption

For security reasons and to protect the transmission of confidential content, such as purchase orders or enquiries which you submit to us as the website operator, this website uses either an SSL or a TLS encryption program. You can recognise an encrypted connection by checking whether the URL in your browser’s address line changes from “http://” to “https://” and also by checking whether the lock icon appears in your browser bar.

If SSL or TLS encryption is activated, the data which you transmit to us cannot be read by third parties.

Right of access, erasure and rectification

Within the scope of the applicable statutory provisions, you have the right, at any time and free of charge, to receive information about your stored personal data, its source and recipients as well as the purpose for which your data is being processed. You may also have the right to have your data rectified or erased. Please do not hesitate to contact us at any time if you have any questions about this or any other matters concerning personal data.

Right to restriction of processing

You have the right to request that the processing of your personal data be restricted. You can contact us at any time for this purpose. You have the right to request restriction of processing in the following cases:

  • If you contest the accuracy of the personal data we have stored about you, we will usually need some time to verify this claim.While this investigation is ongoing, you have the right to request that we restrict the processing of your personal data.
  • If your personal data was/is being processed in an unlawful manner, you have the option to request that the processing of your personal data be restricted as opposed to this data being erased.
  • If we no longer need your personal data but you require it for the establishment, exercise or defence of legal claims, you have the option to request that the processing of your personal data be restricted as opposed to this data being erased.
  • If you have raised an objection pursuant to Art. 21(1) GDPR, your rights and our rights must be weighed against one another.Until it is determined whose interests prevail, you have the right to demand that the processing of your personal data be restricted.

If you have restricted the processing of your personal data, this data – with the exception of storage – may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or an EU member state.

4. The collection of data on this website

Cookies

Our website uses so-called “cookies”. Cookies are small text files which do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or they are permanently archived on your device (permanent cookies). Session cookies are automatically deleted once you leave the website. Permanent cookies remain on your device until you actively delete them or they are automatically deleted by your web browser.

In some cases, cookies from external companies may also be stored on your device when you visit our website (third-party cookies). These cookies enable you or us to take advantage of certain services offered by the third party (e.g. cookies for the processing of payment services).

Cookies have a variety of functions. Many cookies are required for technological reasons since certain website functions would not work in the absence of the cookies (e.g.the shopping basket function or the display of videos). Other cookies may be used to analyse user patterns or display advertising.

Cookies which are required for the purpose of electronic communications (necessary cookies) or for the provision of certain functions you want to use (functional cookies, e.g.for the shopping basket function) or those which are necessary for the optimisation of the website (e.g. cookies which provide measurable insights into the web audience) are stored on the basis of Art. 6(1)(f) GDPR, unless a different legal basis is cited. The website operator has a legitimate interest in storing cookies to ensure that it can optimise its services and provide them free from technical errors. If you have been asked to consent to the storage of cookies, the cookies concerned are stored exclusively on the basis of the consent obtained (Art. 6(1)(a) GDPR); this consent may be revoked at any time.

You can adjust your browser settings to make sure that you are notified every time cookies are placed on your device and to enable you to accept cookies only in specific cases or to not accept cookies in specific situations or in general. You can also activate the automatic deletion of cookies whenever you close your browser. Please note that the functions of this website may be limited if you disable cookies.

In the event that third-party cookies are used or if cookies are used for analytical purposes, we will notify you of this separately in this Privacy Policy and, if applicable, will ask for your consent.

Contact form

If you send enquiries to us using our contact form, the information and any contact details you enter into this form will be stored by us so that we can handle your enquiry and answer any further questions you may have. We will not share this information without your consent.

In cases where your enquiry is related to the performance of a contract or if it is necessary for taking steps prior to entering into a contract, the processing of this data is based on Art. 6(1)(b) GDPR. In all other cases, the processing is based on our legitimate interest in the effective handling of the enquiries sent to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested.

We will continue to store the information you have entered into the contact form until you ask us to erase the data or withdraw your consent to the storage of the data or until the purpose for which the data is being stored no longer exists (e.g.after we have finished handling your enquiry). Any mandatory legal provisions – in particular retention periods – will not be affected by this.

Enquiries by email, telephone or fax

If you contact us by email, telephone or fax, your request, including all the personal data provided (name, your enquiry), will be stored and processed by us for the purpose of handling your request. We will not share this information without your consent.

In cases where your enquiry is related to the performance of a contract or if it is necessary for taking steps prior to entering into a contract, the processing of this data is based on Art. 6(1)(b) GDPR. In all other cases, the processing is based on our legitimate interest in the effective handling of the enquiries sent to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested.

The data you send to us when you contact us in this way will continue to be stored by us until you ask us to erase your data or withdraw your consent to the storage of the data or until the purpose for which the data is being stored no longer exists (e.g.after we have finished handling your request). Any mandatory legal provisions – in particular statutory retention periods – will not be affected by this.

5. Newsletter

Newsletter data

If you would like to receive the newsletter offered on the website, we require an email address from you as well as information which allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter. Further data is not collected or is only collected on a voluntary basis. We use this data exclusively for the purpose of sending the requested information and do not pass it on to third parties.

The processing of the data entered into the newsletter registration form therefore occurs exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You can revoke your consent to the storage of the data, the email address and their use for sending the newsletter at any time, for example via the “Unsubscribe” link in the newsletter. The lawfulness of the data processing operations already carried out remains unaffected by the revocation.

The data you provide to us for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe from the newsletter or after the purpose of storage has ceased to exist. We reserve the right to delete or block email addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest pursuant to Art. 6(1)(f) GDPR.

After you have unsubscribed from the newsletter distribution list, your email address may be stored by us or the newsletter service provider in a blacklist so that you are not sent emails again in the future. The data in the blacklist is only used for this purpose and is not merged with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). The storage in the blacklist is not subject to a time limit. You can object to the storage if your interests outweigh our legitimate interest.

6. Plug-ins and tools

Font Awesome (local hosting)

This page uses Font Awesome for the uniform display of fonts. Font Awesome is installed locally. No connection is made to the servers of Fonticons, Inc.

Further information about Font Awesome can be found in the Font Awesome Privacy Policy at: https://fontawesome.com/privacy.

Google Maps

This website uses the mapping service Google Maps. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

To enable the use of the Google Maps features, your IP address must be stored. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this transfer of data.

Google Maps is used in the interest of providing an attractive website and of making it easy to find the places we mention on our website. This is a legitimate interest pursuant to Art. 6(1)(f) GDPR. If your consent has been requested in this regard, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR; the consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

For more information about how Google Analytics handles user data, please consult Google’s Privacy Policy at: https://policies.google.com/privacy?hl=en.

Source: https://www.e-recht24.de