Privacy policy of Fellerhoff MED-TEC GmbH
We take the protection of your private data very seriously and want you to feel safe when visiting our website. This privacy policy explains how we process your data, explains your rights and our responsibilities as a data processor.
We use state-of-the-art technical and organizational measures to ensure a high level of protection for your personal data and to secure it against unauthorized access.
Table of Contents:
I. Overview
1. scope
2. person in charge
3. data protection officer
II. The data processing operations in detail
1. general information on the data processing operations
2. call of the website/application
3. newsletter
4. customer support
5. tracking
III. data subject rights
1. right of objection
2. right to information
3. right of rectification
4. right to erasure ("right to be forgotten")
5. right to restriction of processing
6. right to data portability
7. right of withdrawal in case of consent
8. right of appeal
IV. Glossary
V. Use of the Google service "Google Site Kit
I. Overview
In this section of the Privacy Policy, you will find information about the scope, the data controller, its data protection officer and data security.
1. scope
Data processing by Fellerhoff MED-TEC GmbH can essentially be divided into two categories:
- For the purpose of contract processing, all data required for the execution of a contract with Fellerhoff MED-TEC GmbH will be processed. If external service providers are also involved in the processing of the contract, e.g. logistics companies or payment services, your data will be passed on to them to the extent necessary in each case.
- When you call up the Fellerhoff MED-TEC GmbH website/application, various information is exchanged between your end device and our server. This may also be personal data. The information collected in this way is used, among other things, to optimize our website or to display advertising in the browser of your end device.
This privacy policy applies to the following offers:
- our online offer available at www.Fellerhoff-Medizintechnik.de
- whenever otherwise referred to in any of our offerings (e.g. websites, subdomains, mobile applications, web services or third-party integrations), regardless of the way you access or use it.
All of these offerings are also collectively referred to as "Services."
2. person in charge
Data controller - the person who determines the purposes and means of the processing of personal data - in connection with the Services:
Fellerhoff MED-TEC GmbH
Heinrich Hertz Street 17
46399 Bocholt
Phone: 0049 (0) 28713428141 or 08006217772
Mail: Info@fellerhoff-medizintechnik.de
3. data protection officer
You can contact our data protection officer as follows:
Fellerhoff MED-TEC GmbH
E-mail address: info@fellerhoff-medizintechnik.de
II. The data processing operations in detail
In this section of the privacy policy, we will inform you in detail about the processing of personal data within the scope of our services. For better clarity, we structure this information according to certain functionalities of our services. During the normal use of the services, different functionalities and thus also different processing may come into play one after the other or at the same time.
1. general information on the data processing operations
Unless otherwise specified, the following applies to all processing operations described below:
a. No obligation to provide
There is neither a contractual nor a legal obligation to provide the personal data. You are not obliged to provide data.
b. Consequences of non-provision
In the case of required data (data that is marked as mandatory when entered), failure to provide it will mean that the service in question cannot be provided. Otherwise, failure to provide the data may mean that our services cannot be provided in the same form and quality.
c. Consent
In various cases, you have the option of giving us your consent to further processing in connection with the processing described below (where applicable, for part of the data). In this case, we will inform you separately in connection with the submission of the respective declaration of consent about all modalities and the scope of the consent and about the purposes that we pursue with these processing operations.
d. Transfer of personal data to third countries
If we transfer data to third countries, i.e. countries outside the European Union, then the transfer takes place exclusively in compliance with the legally regulated permissibility requirements. The permissibility requirements are regulated by Art. 44 -49 DSGVO.
e. Transmission to government authorities
We transfer personal data to government authorities (including law enforcement authorities) if this is necessary for the fulfillment of a legal obligation to which we are subject (legal basis: Art. 6 para. 1 c) DSGVO) or if it is necessary for the assertion, exercise or defense of legal claims (legal basis Art. 6 para. 1 f) DSGVO).
f. Storage period
We do not store your data longer than we need them for the respective processing purposes. If the data is no longer required for the fulfillment of contractual or legal obligations, it is regularly deleted, unless its temporary storage is still necessary. Reasons for this may be, for example, the fulfillment of commercial and tax law retention obligations or the preservation of evidence for legal disputes. It is also possible for us to continue to store your data with us if you expressly give your consent for this.
g. Data categories
Account data: Email address and password
Personal master data: Gender, first name, last name, date of birth, if applicable.
Address data: street, house number, if necessary address additions, postal code, city, country
Contact information: Phone number(s), e-mail address(es)
Order data: Products ordered, prices, payment and delivery information.
Payment data: Account data, if applicable credit card data or data on other payment services such as Paypal, pay U or Klarna.
Access data: Date and time of the visit to our service; the page from which the accessing system arrived at our site; pages accessed during use; session identification data (session ID); in addition, the following information of the accessing computer system: Internet Protocol address (IP address) used, browser type and version, device type, operating system and similar technical information.
2. calling the website/application
This section describes how we process your personal data when you access our services. In particular, we point out that the transmission of access data to external content providers (see b.) is unavoidable due to the technical functioning of information transmission on the Internet.
a. Processing information
Data category
Purpose
Legal basis
Legitimate interest, if applicable
Storage duration
Access data
Establishing connections, displaying the contents of the service, detecting attacks on our site based on unusual activity, diagnosing errors.
Art. 6 para. 1 f) DSGVO
proper functioning of services, security of data and business processes, prevention of misuse, prevention of damage due to interference with information systems
7 days
b. Recipients of the personal data
Receiver category
Data concerned
Legal basis of the transfer
Legitimate interest, if applicable
External content providers that provide content (e.g., images, videos, embedded posts from social networks, banner ads, fonts, update information) necessary to display the Service
Access data
Art. 6 para. 1 f) DSGVO
Proper functioning of services, (accelerated) display of content
3. newsletter
What happens to your personal data in connection with a subscription to our newsletter is described here:
a. Processing information
Data category
Purpose
Legal basis
Legitimate interest, if applicable
Storage duration
E-mail address
Verification of registration (double opt-in procedure), newsletter delivery
Art. 6 para. 1 letter a) DSGVO
Newsletter subscription duration
Newsletter usage profile data
interest-oriented design of the newsletter
Art. 6 para. 1 letter f) DSGVO
Improvement of our service, advertising purposes
Newsletter subscription duration
b. Recipients of the personal data
Receiver category
Data concerned
Legal basis of the transfer
Legitimate interest, if applicable
Service provider for newsletter dispatch (parent company)
all data mentioned under a.
Order processing (Art. 28 DSGVO)
4. customer support
How we process your personal data when you contact our customer service can be found here:
a. Processing information
Data category
Purpose
Legal basis
Legitimate interest, if applicable
Storage duration
Personal master data, contact data, contents of inquiries/complaints
Handling customer inquiries and user complaints
Art. 6 para. 1 b), f)
Customer loyalty, improvement of our service
Request processing
b. Recipients of personal data
Receiver category
Data concerned
Legal basis of the transfer
Legitimate interest, if applicable
Service provider (parent company)
Name, e-mail address, postal address and payment data
Commissioned data processing (Art. 28 DSGVO)
5. online store
How we process your personal data when you store in our online store can be found here:
a. Processing information
Data category
Purpose
Legal basis
Legitimate interest, if applicable
Storage duration
Personal master data
Delivery of the goods
Art. 6 para. 1 letter b) DSGVO
Order processing, 10 years (invoice)
Address data
Delivery of the goods
Art. 6 para. 1 letter b) DSGVO
Order processing, 10 years (invoice)
Ordering data
Delivery of the goods
Art. 6 para. 1 letter b) DSGVO
Order processing, 10 years (invoice)
Account data
Log-In
Art. 6 para. 1 letter a), b) DSGVO
Until the account is deleted
Payment data
Payment for the goods
Art. 6 para. 1 letter b) DSGVO
Order processing, 10 years (invoice)
Contact details
Queries / Order confirmation
Art. 6 para. 1 letter b) DSGVO
Order processing, 10 years (invoice)
Login data
Logging of the log-in
Art. 6 para. 1 letter f) DSGVO
Security-relevant events, protection against misuse
7 days
b. Recipients of personal data
Receiver category
Data concerned
Legal basis of the transfer
Legitimate interest, if applicable
Payment service provider (paypal, PayU, Klarna)
First and last name and payment data
Commissioned data processing (Art. 28 DSGVO)
6. tracking
Below we describe how your personal data is processed using tracking technologies to analyze and optimize our services and for advertising purposes.
The description of the tracking methods also includes information on how you can prevent or object to the data processing. Please note that the so-called "opt-out", i.e. the refusal of processing, is usually stored via cookies. If you use our services via a new terminal device or in a different browser, or if you have deleted the cookies set by your browser, you must declare your refusal again.
The tracking methods described process personal data only in pseudonymous form. A connection with a concrete, identified natural person, i.e. a combination of the data with information about the bearer of the pseudonym, does not take place.
a. Tracking to analyze and optimize our services and their use as well as to measure the success of advertising campaigns and optimize the display of advertising
(1) Purposes of the processing
The analysis of user behavior by means of tracking helps us to check the effectiveness of our services, to optimize them and adapt them to the needs of users, and to correct errors. It also serves to statistically determine key data on the use of our services (reach, intensity of use, user surfing behavior) on the basis of uniform standard procedures and thus to obtain values that are comparable across the market.
Tracking to measure the success of advertising campaigns is used to optimize our ads for the future. The purpose of tracking to optimize the display of advertising is to show users advertising tailored to their interests and to increase the success of the advertising.
(2) Legal basis of the processing
Legitimate interest pursuant to Art. 6 para.1 f) DSGVO.
(3) You can view the tracking methods used here.
If you wish to opt out of interest-based advertising, you may also visit http://www.youronlinechoices.com/de/, click on "Preference Management" and follow the instructions to opt out of the use of data for interest-based advertising by the service providers listed there, either entirely or individually. You will still receive advertising, but it will not be interest-based.
III. data subject rights
1. right of objection
If we process your personal data for the purpose of direct marketing, you have the right to object at any time with future effect to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is associated with such direct marketing.
You also have the right to object at any time with future effect to the processing of personal data concerning you that is carried out pursuant to Art. 6 (1) (e) or (f) DSGVO for reasons arising from your particular situation; this also applies to profiling based on these provisions.
You can reach us via the contact details mentioned under I.2.
2. right to information
You have the right to know whether personal data concerning you are processed by us, which personal data these are, if any, as well as further information according to Art. 15 DSGVO.
3. right of rectification
You have the right to request that we correct any inaccurate personal data relating to you without undue delay (Art. 16 DSGVO). Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data - also by means of a supplementary declaration.
4. right to erasure ("right to be forgotten")
You have the right to request that we delete personal data concerning you without undue delay, provided that one of the reasons stated in Article 17 (1) of the GDPR applies and the processing is not necessary for one of the purposes regulated in Article 17 (3) of the GDPR.
5. right to restriction of processing
You are entitled to request a restriction in the processing of your personal data if one of the conditions regulated in Art. 18 (1) a) to d) DSGVO is met.
6. right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. Furthermore, you have the right to transfer this data to another controller without hindrance by us or to obtain that a direct transfer is made by us, if this is technically possible. This shall always apply if the basis of the data processing is consent or a contract and the data is processed automatically. Accordingly, this does not apply to data held only in paper form.
7. right of withdrawal in case of consent
Insofar as the processing is based on your consent, you have the right to revoke your consent at any time. The lawfulness of the processing carried out on the basis of the consent until the revocation is not affected by this.
8. right of appeal
You have a right of appeal to a supervisory authority.
IV. Glossary
Processor: a natural or legal person, public authority, agency or other body that processes personal data on behalf of the Controller.
Browser: Computer program for displaying web pages (e.g. Chrome, Firefox, Safari).
Cookies: The term "cookie" describes a small text file that is stored locally on the user's computer when visiting a website. This file stores data about the user's behavior. If the browser is called up and the corresponding website is visited repeatedly, the cookie is used and provides the web server with information about the user's surfing behavior with the help of the stored data.
Cookies are information that a website stores locally on the visitor's computer in a small text file. This can be settings already made by the user on a page, but also information that the website has collected completely independently from the user. Later, these locally stored text files can be read by the same web server that created them. Most browsers accept cookies automatically. You can manage cookies using the browser functions (mostly under "Options" or "Settings"). This allows the storage of cookies to be disabled, made dependent on your consent in individual cases or otherwise restricted. You can also delete cookies at any time.
Third countries: Country that is not bound by the legal requirements of the EU Data Protection Directive (country outside the EEA).
Personal Data: Any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Pixel: Pixels are also called tracking pixels, web beacons, or web bugs. They are small, invisible graphics in HTML e-mails or on web pages. When a document is opened, this small image is loaded from a server on the Internet, and the download is registered there. This allows the server operator to see if and when an e-mail was opened or a web page was visited. Mostly this function is realized by calling a small program (Javascript). In this way, certain types of information on your computer system can be detected and passed on, such as the content of cookies, the time and date of the page view, and a description of the page on which the tracking pixel is located.
Profiling: any automated processing of personal data consisting in using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that natural person's economic situation, personal preferences, interests, behavior, location or change of location
Services: Our offerings to which this Privacy Policy applies (see Scope).
Tracking: The collection and analysis of data regarding the behavior of visitors to our services.
Tracking Technologies: Tracking can occur both via the activity logs stored on our web servers (log files) and by means of data collection from the user's terminal device via pixels, cookies and similar tracking technologies.
Processing: any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
V. Use of the Google service "Google Site Kit
We use the Google service "Google Site Kit", provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"), to obtain and analyze statistics and information about the use of our website. Personal data is processed in the process. In the following, we inform you about the nature, scope and purposes of the processing as well as your rights in relation to the use of Google Site Kit.
Nature and scope of processing
The Google Site Kit allows us to integrate various Google services such as Google Analytics, Google Search Console, Google AdSense and Google PageSpeed Insights into our website and display the associated statistics and information. This gives us insights into visitor numbers, page views, search queries, load times and other relevant data.
To activate and use the Google Site Kit, a special code is embedded in our website. When you visit our website, certain information is then transmitted from your terminal device to Google and processed there. This includes, among other things, the IP address, the browser used, the operating system, the device information and the activities on our website.
Processing purposes
We use Google Site Kit to obtain and analyze statistical data and information about the use of our website. This helps us to improve the user experience, optimize our website and provide relevant content and advertising.
The processing of personal data as part of Google Site Kit is based on our legitimate interest in analyzing and optimizing our website pursuant to Art. 6 (1) f) DSGVO. The legitimate interest is to improve our services and adapt them to the needs of our users.
Transfer of data to third countries
Please note that when using Google Site Kit, personal data may be transferred to Google in the USA or other third countries. The transfer takes place on the basis of the standard contractual clauses issued by the European Commission or other appropriate guarantees within the meaning of Art. 46 DSGVO.
Your rights
You have the following rights in connection with your use of Google Site Kit:
a. Right of access: You have the right to obtain information about the personal data processed by Google and about the purposes of the processing.
b. Right of rectification: You may have inaccurate or incomplete personal data processed by Google rectified.
c. Right of erasure: Under certain conditions, you may request the erasure of your personal data processed by Google.
d. Right to object: You may object to the processing of your personal data by Google Site Kit if there are legitimate grounds for doing so based on your particular situation.
e. Right to restrict processing: Under certain conditions, you can request that the processing of your personal data by Google Site Kit be restricted.
f. Right to data portability: You have the right to receive your personal data that you have provided to Google in a structured, commonly used and machine-readable format and to transfer it to another controller.
g. Right to withdraw consent: If you have given your consent to use Google Site Kit, you may revoke this consent at any time. The lawfulness of the processing until the revocation remains unaffected.
To exercise your rights or to obtain more information about the processing of your personal data in connection with Google Site Kit, you can contact Google directly or contact us (see Section I.3 for our contact details).
For more information about how Google processes your personal data, please see Google's privacy policy: https://policies.google.com/privacy
Google Fonts
Nature and scope of processing
We use Google Fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online offer. To obtain these fonts, you connect to servers of Google Ireland Limited, whereby your IP address is transmitted.
Purpose and legal basis
The use of Google Fonts is based on your consent pursuant to Art. 6 para. 1 lit. a. DSGVO and § 25 para. 1 TTDSG.
We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where no adequacy decision of the European Commission exists (e.g. in the USA), we have agreed with the recipients of the data on other appropriate safeguards within the meaning of Art. 44 et seq. DSGVO. These are - unless otherwise stated - standard contractual clauses of the EU Commission pursuant to Implementing Decision (EU) 2021/914 of June 4, 2021. A copy of these standard contractual clauses is available at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE view.
In addition, before such a third country transfer, we obtain your consent pursuant to Art. 49 (1) sentence 1 lit. a. DSGVO, which you provide via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of third country transfers there may be unknown risks in detail (e.g. data processing by security authorities of the third country, the exact scope and consequences of which for you we do not know, over which we have no influence and of which you may not become aware).
Storage duration
The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Fonts: https://policies.google.com/privacy.
Status: April 2021