Data Protection Information
1. Contact
Responsible for the data processing:
RAUMEDIC AG
Hermann-Staudinger-Str. 2
95233 Helmbrechts
Germany
Central phone-number: +49 (0)9252 359 0
Central e-mail address: contact@raumedic.com
Data Protection Officer:
Peter Suhren
First Privacy GmbH
Konsul-Smidt-Str. 88
28217 Bremen
office@first-privacy.com
2. General information on data processing
RAUMEDIC welcomes your visit to our website and your interest in our company and our products. At the same time, we take the protection of your personal data very seriously and hope that you will feel comfortable during your visit to our web pages and to our sites. The security of your personal data is an important concern for us that we consider in our business processes. We undertake our web activities in conformity with data protection and data security legislation.
The following information informs you which data we, as the case may be, collect and how we treat it. RAUMEDIC web pages may contain links to the web pages of other providers, to which this data protection declaration does not extend. We do not collect any personal data via our websites without your approval. You alone decide, whether you wish, within the framework of a registration, order or enquiry, to make such data known or not. In general your personal data is used to answer your enquiry, to process your order or to create your access to special information or offers. To maintain customer relationships, it may also be necessary,
- that we save, process and transfer (e.g. to companies within the RAUMEDIC group) your personal data, in order that we can better fulfil your wishes or improve our products and services. Those companies are collecting, storing and processing the data within the legal framework of European Data Protection Legislation,
- that we (or a third party under contract to us), with your consent, use this data in order to inform you of RAUMEDIC offers that would be of benefit to your business or to carry out online surveys, through which we can better fulfil your requirements. The online surveys may be conducted on the basis of your consent, if you have given it, or on the basis of RAUMEDIC's legitimate interest in improving the existing relationship with you.
Of course we well respect your wish not to use your personal data – especially for direct marketing or market research. Obviously your personal data will not be sold to third parties or marketed in any other way.
3. Information on individual processing activities
The following provides you with information on the individual processing activities. Please click on the processes in question for more details on:
- purposes and legal basis for the processing and where applicable the legitimate interests
- where applicable recipients or categories of recipients
- where applicable transfer of personal data to a third country and appropriate safeguards
- the period for which the personal data will be stored
- where applicable particular rights e.g. the right to object or withdraw and its consequences.
Please refer to Section 8 for information on your general rights in relation to processing of your data.
3.1 Use of Cookes and analysis tools
Cookies Overview
FAQ
Necessary cookies enable basic functions and are necessary for the proper functioning of the website.
Functional services are necessary to embed media from third-party platforms such as videos or maps.
Statistics Cookies collect information anonymously. This information helps us to understand how our visitors use our website.
Marketing cookies may be provided by us or our advertising partners on our website to profile your interests and show you relevant content on our and third party websites. In order to present you with relevant content on third-party websites, we share this information with third parties, such as advertising platforms and social networks.
Tools Overview
Google Tag Manager
Our website uses the Google Tag Manager to manage website tags with this service from Google via a separate interface. No personal data is collected with the Google Tag Manager and no cookies are set. It is only used to manage and play out the tools integrated via it. The tool may trigger other tags that may collect data. The Google Tag Manager does not access this data. However, Google Tag Manager collects your IP address, which may also be transferred to Google's parent company in the United States.
The Google Tag Manager is used on the basis of Art. 6 para. 1 lit. f GDPR. As the website operator, we have a legitimate interest in the fast and uncomplicated integration and management of various tools on our website.
If disabling has been done at the cookie or domain level, this disabling will remain in place for all tracking tags when implemented with Google Tag Manager. You can find more information about the Google Tag Manager guidelines here: http://www.google.de/tagmanager/use-policy.html.
Google Analytics
We use the web channel tool "Google Analytics" to design our websites according to your needs. Google Analytics creates usage profiles on the basis of pseudonyms. For this purpose, permanent cookies are stored on your terminal device and read by us. With the help of these cookies, we are able to recognize returning visitors and count them as such.
The data processing is based on your consent in accordance with Art. 6 para. 1 p. 1 lit. a) GDPR, provided you have given your consent via our banner. In the context of Google Analytics, Google Ireland Limited and Google LLC (USA) support us as processors in accordance with Art. 28 GDPR. The data processing may therefore also take place outside the EU or EEA.
With the adequacy decision regulating data transfers between the EU and the USA, Google is certified under the Data Privacy Framework (DPF) and offers equivalent protection of personal data. For more details, please see section 5.
By clicking on "Accept all cookies" in our cookie banner, you consent to your data being processed. You can revoke your consent at any time. If you wish to revoke your consent, you can change your cookie settings.
For more information on terms of use and data protection, please visit www.google.com/analytics/terms/gb.html or at www.google.de/intl/en_uk/policies/.
We also use Google Analytics to evaluate data from AdWords and the double-click-cookie for statistical purposes. If you don’t want this evaluation you can change your settings in the “Ads Settings Manager” (www.google.com/settings/ads/onweb/?hl=en).
Google Maps
Our website uses Google Maps (AP’I) of Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Maps is a web service for displaying interactive (country) maps in order to display geographical information visually. Using this service will show you our location and will make it easier for you to find us.
When you access the sub-pages that contain the Google Maps map, information about your use of our website (such as your IP address) is transmitted to and stored by Google on servers in the United States. This is regardless of whether Google provides a user account that you are logged in with or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation takes place according to Art. 6 (1) point f GDPR on the basis of the legitimate interests of Google in the insertion of personalized advertising, market research and/or demand-oriented design of its website. You have the right to object to the creation of these user profiles. If you want to do so, you must contact Google to exercise this right.
If you do not agree to the future transmission of your data to Google in the context of using Google Maps, you may completely deactivate the Google Maps web service by switching off the JavaScript application in your browser. In this case, Google Maps as well as the map display on this website cannot be used.
The Google terms of use can be found at: https://policies.google.com/terms?hl=en. The additional terms of use can be found at: https://www.google.com/intl/en-US_US/help/terms_maps.html. You can find detailed information on data protection in connection with the use of Google Maps on Google's website ("Google Privacy Policy") at: https://policies.google.com/privacy?hl=en.
Meta Pixel
A meta pixel is an analytical tool that consists of a code that is installed on our website. When you perform certain activities on our website, such as visiting a web page, a transfer is triggered through the meta pixel and sent to the meta environment when you use Meta. The pixel reports to Meta Platforms Ireland what actions you have performed on our website and potentially identifying data about you (including app/browser details, language setting, time, IP address, advertising ID).
Your personal data is processed exclusively on the basis of Art. 6 (1) lit. a GDPR; your consent can be revoked at any time via the cookie banner.
This technology enables us to offer users targeted content and advertising, provide social media functions and analyze traffic on our website. The Facebook pixel may collect personal data from you, including:
- Operating system used
- Website access, for example, on mobile or desktop
- Type of client used, for example, browser or mail program
- Screen resolution of the client
- Time at which the website was visited
- Activities on the website during a session (when using multiple tracking pixels)
- IP address (provides information about the Internet service provider and location)
The data allows Meta Platforms Ireland to recognize that you have visited our website, what you have clicked on, and if you have clicked on a link on Meta that connects you to our website. This allows Meta Platforms Ireland to display interest-based advertising to you on Meta or other websites that also use this feature. Meta may link this data to your user account and use it for its own purposes.
Your personal data will not be processed by third parties other than Meta for this operation. Meta transfers the data to the USA. From a European perspective, the USA does not offer an adequate level of data protection, which carries the risks that authorities access your data without informing you accordingly, that the rights of data subjects are violated, that there are no adequate legal remedies and that you lose control over your personal data. Please take this into account if you decide to give your consent to our use of Meta Pixel. If you click on "Accept all cookies" in our cookie banner, you consent - in accordance with Art. 49 (1) lit. a GDPR- to your data being processed in the USA. You can revoke your consent at any time via the cookie banner. We have no control over the processing of personal data by Meta. You can obtain further information about Meta's data processing here: https://www.facebook.com/policy.php
LinkedIn Services
We use various services provided by LinkedIn Ireland Unlimited Company (hereinafter referred to as 'LinkedIn'). LinkedIn services use cookies, among other things. We use LinkedIn services for marketing and optimization purposes, especially to analyze the usage of our website and to continuously improve individual features, offers, and the user experience. The processing of your personal data is based solely on Article 6(1)(a) of the GDPR; your consent can be revoked at any time via the cookie banner (link in the footer). We delete your data when it is no longer needed, and there are no legal retention obligations.
When you visit our site, a connection is established with LinkedIn servers. These servers may also be located outside the European Union. If you have a LinkedIn account, LinkedIn may associate your visit to our site with your account. You can counteract this by logging out of LinkedIn before visiting our site.
To the extent that personal data is transferred to countries outside the European Union or EEA in this usage, LinkedIn has committed to ensuring legal data protection by adhering to EU Standard Contractual Clauses (Article 46 of the GDPR). Therefore, data processing can also occur outside the EU or EEA. In the case of LinkedIn, Inc., due to processing in the United States, an adequate level of data protection cannot be assumed. There is a risk that authorities may access the data for security and surveillance purposes without informing you or granting you the right to object.
Please consider this when deciding to give your consent to our use of LinkedIn. If you click 'Accept All Cookies' in our cookie banner, you consent, in accordance with Article 49(1)(a) of the GDPR, to your data being processed in the United States. You can withdraw your consent at any time. If you wish to withdraw your consent, you can change your cookie settings here [please insert link].
We use the following LinkedIn services:
- LinkedIn Ads / LinkedIn Marketing Solutions for processing information about your user behavior for advertising purposes, in order to display targeted advertising to you.
- LinkedIn Analytics for processing information about your user behavior on our website in order to measure the reach of our website.
For more information on privacy at LinkedIn, please visit: https://www.linkedin.com/legal/privacy-policy?_l=en_US
LinkedIn Insight Tag
Our website uses the tool "LinkedIn Insight Tag" an analysis and tracking tool of LinkedIn Ireland Unlimited Company. This tool creates a cookie in your web browser that enables the collection of, among other things, the following data: IP address, URL, device and browser properties, timestamp, and page events (e.g., page views).
IP addresses are shortened or (if used to reach LinkedIn members across devices) hashed (pseudonymized). The direct identifiers of LinkedIn members are deleted by LinkedIn after seven days. The remaining pseudonymized data is then deleted within 180 days.
The tag reports to LinkedIn what actions you have performed on our website and you possibly identifying data. With the data, LinkedIn can recognize that you have visited our website, what you have clicked on and if you have clicked on a link on LinkedIn that connects you to our website. This allows LinkedIn to show you interest-based content. LinkedIn may associate this data with your user account and use it for its own purposes.
LinkedIn does not share any personal data with RAUMEDIC, but offers anonymized reports on website audience and display performance. In addition, LinkedIn offers the possibility of retargeting via the Insight Tag. RAUMEDIC can use this data to display targeted advertising outside of its website without identifying you as a website visitor. The purpose of the data collection is to analyze visits to our website and campaign results in order to provide you with interesting information.
Your personal data is processed exclusively on the basis of Art. 6 (1) lit. a GDPR; your consent can be revoked at any time via the cookie banner (see link in footer).
3.2 Handling of offers and inquiries
You can send your inquiry to RAUMEDIC using a contact form on the RAUMEDIC website. Personal data is processed if you do so.
- Purpose: Handling of offers and inquiries
- Legal basis: Performance of a contract or steps prior to entering into a contract in accordance with Article 6 (1) point (b) GDPR, consent according to Art. 6 (1) point (a) GDPR
- Duration of processing: The data will be stored for 10 years
If the processing takes place on the basis of your consent, you can withdraw your consent at any time by sending a written request to RAUMEDIC AG. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
3.3 Handling of contracts and customer support
Personal data, such as the contact details of business contacts, must be processed to handle contracts and as part of business relationships. That also includes preparing contracts and, in particular as part of customer support, follow-up activities relating to contracts. To enable that, your data may be stored on data processing systems of third-party providers. RAUMEDIC and these providers have concluded data processing agreements that ensure a level of data protection complying with the European standard specified in the GDPR.
- Purpose: Performance of contracts, including preparation and follow-up activities for them, and customer support
- Legal basis: Performance of a contract in accordance with Article 6 (1) point (b) GDPR
- Duration of processing: The data will be stored for 10 years after the end of the contractual relationship.
3.4 Direct marketing
We process personal data for promotions as part of direct marketing to you as a customer or interested person. For this purpose, your data may be conveyed to external service providers. RAUMEDIC and these providers have concluded data processing agreements that ensure a level of data protection complying with the European standard specified in the GDPR.
- Purpose: Mailing of product information and marketing materials for advertising purposes, customer support and initiating a business contact.
- Legal basis: Consent according to Art. 6 I a) GDPR, other legal bases such as legitimate interest according to Art. 6 I f) GDPR may be applied exceptionally if certain legal requirements are met.
- Duration of processing: The data will be saved for 10 years.
You can revoke your consent to the processing of your personal data for advertising purposes at any time by sending us an email to contact@raumedic.com or by pressing the unsubscribing button at the bottom of the marketing communication.
3.5 Contractor instruction
We collect your personal information to provide you with important information and training depending on the reason for your visit to our premises. Depending on the reason for your visit, various training sessions include questions that must be completed. In addition, we process your data for administrative purposes and for the assignment of visitors and external employees. We process your data on the legal basis of legitimate interest according to Art. 6 para. 1 (f) DSGVO to ensure that you are registered, informed and trained before entering our premises. The personal data we request from you are first name, last name, company. We use an external service provider - Jochen Blöcher GmbH / eplas- to provide this service to you. The service provider is a processor and there is an agreement according to Article 28 DSGVO. The trainings are valid for a certain period of time (max. 1 year ) and will be checked for validity at the next visit. The data is processed and stored exclusively in the database of eplas. Your data will be deleted when the purpose of the processing has been fulfilled in accordance with the legal provisions. For more information about the processing and storage of your data, please refer to theeplas privacy policy.
4. Recipients of personal data
In general, your personal data is processed only within RAUMEDIC AG by the responsible employees and departments and is not passed on to third parties. For certain processing activities, it may be necessary to transfer personal data to affiliated companies of RAUMEDIC AG. The data is transferred to third countries only if that is necessary on a case-by-case basis.
Affiliated companies of RAUMEDIC AG are:
RAUMEDIC S.A.R.L. (France)
RAUMEDIC s.r.l. (Italy)
RAUMEDIC SA (Switzerland)
RAUMEDIC UK Ltd. (Northern Ireland)
RAUMEDIC Inc. (USA)
RAUMEDIC Pte. Ltd. (Singapore)
In accordance with Article 46 (2) point (c) GDPR, standard contractual clauses adopted by the EU Commission have been concluded between all RAUMEDIC companies at which data is transferred to a third country (transfer of data outside Europe). The internal stipulations of RAUMEDIC AG on data protection also apply to all affiliated companies worldwide, the objective of that being to ensure a consistent standard of data protection.
If a public authority, such as the supervisory authority, conducts a check, it may also be necessary to disclose personal data on a case-by-case basis.
5. International transfer of personal data
RAUMEDIC is an international company and may from time to time need to transfer your personal data within our group of companies or to approved third party service providers. In some cases, we may transfer personal data to third countries outside the EU. Some of the countries to which your personal data is transferred may not provide an adequate level of protection equivalent to that afforded by laws in the EU. In such cases, we ensure that your personal data remains protected when transferred outside the EU by taking appropriate measures, including our intra-group agreement or standard contractual clauses issued by the European Commission. The relevant parts of the contracts concluded within our group of companies can be found here (2021/914/EC). The EU Commission has adopted an adequacy decision for the US regarding data transfers between the EU and the US. Specifically, the U.S. has introduced new safeguards and mechanisms to ensure an adequate level of data protection, substantially equivalent to the level of protection in the EU, for companies certified under a framework called the Data Privacy Framework (DPF). Some of our business partners are certified under the DPF, such as Google and Microsoft. Others may transfer your data to countries (including the U.S. if the provider is not certified under the DPF) where data protection laws do not provide an adequate level of protection. If data is transferred in these circumstances, the authorities may have access to the data without recourse to legal action. In such cases, we will ask for your consent to carry out this transfer on the basis of Article 49(1)(a) of the GDPR. If you wish to withdraw your consent, you can change your cookie settings by accessing the banner again. Simply click on the button at the bottom of the page to make changes.
6. Length of time for which the data is stored
Your personal data will be stored only for as long as required for the purpose of data processing, unless statutory and/or contractual retention periods require otherwise.
7. Security
RAUMEDIC AG uses technical and organizational security measures in order to protect the personal data that we may have collected from you against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. Our security procedures are continually enhanced as new technology becomes available.
8. Your Rights
If you have questions in respect of the processing of your personal data, you can contact our data protection officer, who is also available in case of requests for information, suggestions or complaints.
Right to access and obtain information on data
You have the right to access and obtain information on personal data concerning you that is processed as part of the data processing as stated above (Aricle 15 GDPR). Upon request, RAUMEDIC will inform you as quickly as possible in accordance with the relevant law, whether and which personal data relating to you is saved by us.
Right to rectification
If, despite all our efforts to ensure data correctness and actuality, incorrect information is saved, you have the right to obtain rectification of any inaccurate personal data concerning you (Art. 16 GDPR).
Right to erasure
You have the right to obtain the erasure of personal data concerning you, for example if it is no longer necessary for the purpose for which it was collected (Article 17 GDPR).
Right to restriction of processing
If certain requirements are met, you have the right to demand restriction of processing, i.e. the data is only allowed to be stored, but not processed (Article 18 GDPR). You have to apply for that. To do so, please contact the Data Protection Officer specified above.
Right to data portability
You have the right to receive the personal data concerning you which you have provided to the controller for the processing as stated above. That means you can apply for your data to be transmitted either to you or, where technically feasible, to another body named by you (Article 20 GDPR).
Right to object
You have the right to object, on grounds relating to your particular situation, at any time to specific decisions or measures relating to processing of personal data concerning you (Article 21 GDPR). In principle, such processing will then cease, unless legitimate grounds of the controller override your interests.
If you wish to exercise one of these rights, please contact the Data Protection Officer specified above first of all.
You also have the right to lodge a complaint with the supervisory authority if you believe that processing of data concerning you infringes the GDPR.
The responsible supervisory authority is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
Phone: +49 (0) 981 180093-0
Fax: +49 (0) 981 180093-800
9. Legal Effectiveness
This exclusion of liability is to be considered part of the Internet site that referred you to this page. Insofar as parts or individual formulations of this text are not, are no longer or are not completely in line with current law, the content and validity of the remaining parts of the document shall remain unaffected.
German version prevails.