Personal data (hereinafter referred to as “data”) are processed by us only as necessary and for the purpose of providing a functional and user-friendly website, including its contents and the services offered there.

Pursuant to Article 4(1) of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (“GDPR”), “processing” means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

With the following data protection declaration, we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide either alone or jointly with others on the purposes and means of the processing. In addition, we inform you below about the third-party components we use for optimisation purposes and to increase the quality of use, insofar as third parties process data under their own responsibility.

Our privacy policy is structured as follows:

I. Information about us as the responsible party
II. Rights of users and data subjects
III. Information on data processing

I. INFORMATION ABOUT US AS THE RESPONSIBLE PARTY

The responsible provider of this website in terms of data protection law is:

DEHAS Medical Systems GmbH
Wesloer Str. 107 – 109
23568 Lübeck
Deutschland

Phone: +49 451 – 80 90 4 – 0
Telefax: +49 451 – 80 90 4 – 111
E-Mail: Info@dehas.de

II. RIGHTS OF USERS AND AFFECTED PARTIES

With regard to the data processing described in more detail below, users and data subjects have the right to

confirmation as to whether data concerning them is being processed, information about the data being processed, further information about data processing, and copies of the data (see also Art. 15 GDPR)
correction or completion of inaccurate or incomplete data (see also Art. 16 GDPR)
to the immediate erasure of data concerning them (see also Art. 17 GDPR), or, alternatively, if further processing is necessary in accordance with Art. 17 (3) GDPR, to the restriction of processing in accordance with Art. 18 GDPR;
to receive the data concerning them and provided by them and to have this data transferred to other providers/controllers (see also Art. 20 GDPR);
to lodge a complaint with the supervisory authority if they believe that the data concerning them is being processed by the provider in violation of data protection regulations (see also Art. 77 GDPR).
In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any correction or deletion of data or restriction of processing that takes place on the basis of Articles 16, 17 (1), 18 GDPR. However, this obligation shall not apply if such notification is impossible or involves disproportionate effort. Without prejudice to this, the user has a right to information about these recipients.

Likewise, users and data subjects have the right to object to the future processing of data concerning them in accordance with Art. 21 GDPR, provided that the data is processed by the provider in accordance wit Art. 6 (1) (f) GDPR. In particular, an objection to the processing of data for the purpose of direct advertising is permissible.

III. INFORMATION ON DATA PROCESSING

Your data processed when using our website will be deleted or blocked as soon as the purpose of the storage no longer applies, the deletion of the data does not conflict with any statutory retention obligations and no other information is provided below on individual processing procedures.

Serverdaten
Aus technischen Gründen, insbesondere zur Gewährleistung eines sicheren und stabilen Internetauftritts, werden Daten durch Ihren Internet-Browser an uns bzw. an unseren Webspace-Provider übermittelt. These so-called server log files are used to collect information such as the type and version of your Internet browser, the operating system, the website from which you accessed our website (referrer URL), the website(s) of our website that you visit, the date and time of the respective access and the IP address of the Internet connection from which our website is used.

The data collected in this way is temporarily stored, but not together with other data about you.

This storage takes place on the legal basis of Art. 6 (1) f) GDPR. Our legitimate interest lies in the improvement, stability, functionality and security of our website.

The data will be deleted after seven days at the latest, unless further storage is required for evidence purposes. Otherwise, the data is exempt from deletion in whole or in part until the final clarification of an incident.

Cookies

a) Session cookies
We use cookies on our website.

Cookies are small text files or other storage technologies that are placed and stored on your terminal device by the internet browser you use. Through these cookies, certain information from you, such as your browser or location data or your IP address, is processed to an individual extent.

This processing makes our website more user-friendly, effective and secure, as the processing enables, for example, the reproduction of our website in different languages or the offer of a shopping cart function.

The legal basis for this processing is Art. 6 para. 1 lit b.) of the GDPR, insofar as these cookies data are processed for the purpose of initiating or executing a contract.

If the processing does not serve to initiate or execute a contract, our legitimate interest lies in improving the functionality of our website. The legal basis in this case is Art. 6 (1) f) GDPR.

When you close your internet browser, these session cookies are deleted.

b) Removal option
You can prevent or restrict the installation of cookies by adjusting your Internet browser settings. You can also delete cookies that have already been saved at any time. However, the steps and measures required for this depend on your specific Internet browser used. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support. In the case of so-called Flash cookies, however, processing cannot be prevented via the browser settings. Instead, you must change the setting of your Flash player. The steps and measures required for this also depend on your specific Flash player used. If you have any questions, please also use the help function or documentation of your Flash player or contact the manufacturer or user support.

However, if you prevent or restrict the installation of cookies, this may mean that not all functions of our website can be fully used.

c) Consent management
We use Borlabs as a consent management tool in the context of tracking and analysis activities in our services. Borlabs is a service provided by Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg (“Borlabs”). Borlabs collects log file and consent data using JavaScript. This JavaScript enables us to inform you about your consent to certain tags in our services and to obtain, manage, and document this consent.

We process the following data: (1) Consent data (anonymized logbook data (Consent ID, Processor ID, Controller ID), Consent Status, Timestamp), (2) Device data (including truncated IP addresses (IP v4, IP v6), device information, Timestamp), (3) User data (including email, ID, browser information, setting IDs, changelog). The consent ID (containing the above data) and the consent status, including timestamp, are stored in your browser’s local memory and simultaneously on the cloud servers we use. Further processing will only take place if you submit a request for information or revoke your consent. We store personal data that we process using Borlabs on our servers at the same time. The legal basis for processing personal data using Borlabs in accordance with the provisions set out here results from our legitimate interest and from the fulfillment of legal requirements, and thus from Art. 6 (1) lit. f GDPR. Art. 6 (1) f and c GDPR. By using Borlabs, we aim to comply with legal requirements regarding data protection and tracking, thereby ensuring that our information technology systems function in a manner that is both legally compliant and user-centered.

Contract processing
The data you provide when using our goods and/or services will be processed by us for the purpose of contract processing and is necessary for this purpose. Conclusion and processing of the contract are not possible without the provision of your data.

The legal basis for the processing is Art. 6 (1) b) GDPR
We delete the data once the contract has been fully processed, but we must also comply with the retention periods under tax and commercial law.

As part of the contract processing, we pass on your data to the transport company commissioned with the delivery of the goods or to the financial service provider, insofar as the transfer is necessary for the delivery of the goods or for payment purposes.

The legal basis for the disclosure of the data is then Art. 6 (1) b) GDPR.

Contact requests / Contact options
If you contact us via the contact form or email, the data you provide will be used to process your request. The provision of the data is necessary for the processing and answering of your enquiry – without their provision we cannot answer your enquiry or at best only to a limited extent.

The legal basis for this processing is Art. 6 (1) b) GDPR
Your data will be deleted once your request has been conclusively answered and there are no legal retention obligations preventing deletion, such as in the event of any subsequent processing of the contract.

Google Analytics
We use Google Analytics on our website. This is a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”.

Through certification under the EU-US Privacy Shield https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active, Google guarantees that EU data protection requirements are also complied with when processing data in the USA.

The Google Analytics service is used to analyse the usage behaviour of our website. The legal basis is Art. 6 para. Art. 6 (1) f) GDPR. Our legitimate interest lies in the analysis, optimisation and economic operation of our website.

Usage and user-related information, e.g., the following information IP address, location, time or frequency of the visit to our website are transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymisation function. Through this function, Google already shortens the IP address within the EU or the EEA.

The data collected in this way is in turn used by Google to provide us with an evaluation of visits to our website and of the usage activities there. This data may also be used to provide other services related to the use of our website and the use of the internet.

Google states that it will not associate your IP address with any other data. Google also provides further information on data protection law at https://www.google.com/intl/de/policies/privacy/partners, for example on the possibilities to prevent the use of data.

In addition, Google offers a so-called deactivation add-on at https://tools.google.com/dlpage/gaoptout?hl=de along with further information on this. This add-on can be installed with the most common internet browsers and offers you further control over the data that Google collects when you visit our website. In doing so, the add-on tells the JavaScript (ga.js) of Google Analytics that information about the visit to our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analytics services. Of course, you can also find out whether and which other web analytics services we use in this privacy policy.

Changes to the privacy policy:
Privacy policy version 1.0 / as of 09/2018
We therefore reserve the right to change or supplement the privacy policy as necessary. This does not imply a change of purpose in the use of already stored data.

All information contained on our website has been checked with great care. However, we do not guarantee that the contents of our websites are correct, complete and up-to-date at all times.

Third-party websites
DEHAS Medical Systems GmbH also provides links to third-party websites. We do not assume any guarantee or liability for the correctness or completeness of the contents and the data security on their websites. This privacy policy also does not apply to linked third-party websites.

Model privacy policy of the law firm Weiß & Partner