Data protection declaration

Introduction and general information
Thank you for your interest in our website. The protection of your personal data is very important to us. Below you will find information on how to handle your data collected through your use of our website. The processing of your data takes place in accordance with the legal regulations on data protection.

 

Controller within the meaning of the GDPR
Orthopaedic technology Chiemgau GmbH
Friedrichshofener Str. 6-10
85049 Ingolstadt, Germany
Tel. 08038-90857741
E-mail: info@ot-chiemgau.de

 

Contact details of the data protection officer
Proliance GmbH / www.datenschutzexperte.de
Data protection supervisor
Leopoldstr. 21
80802 Munich
datenschutzbeauftragter@datenschutzexperte.de

 

Definitions
Our privacy policy should be simple and understandable for everyone. In this data protection declaration, the official terms of the General Data Protection Regulation (GDPR) are usually used. The official definitions are set out in Art. 4 GDPR.

 

Webhosting
This website is hosted by an external service provider (hoster). The hosting of this website takes place in Germany. Personal data collected on this website is stored on the hoster’s servers. In this case, it may be A. IP addresses, contact requests, meta and communication data, website accesses and other data generated via a website.

We have concluded an order processing contract with the provider in accordance with the requirements of Art. 28 GDPR, in which we oblige him to protect the data of our customers and not to pass them on to third parties.

 

Server log files
When you visit our website, it is technically necessary that data is transmitted to our web server via your Internet browser. The following data is recorded during an ongoing connection for communication between your Internet browser and our web server:

  • Date and time of the request
  • Name of the requested file
  • Page from which the file was requested
  • Access status
  • Web browser and operating system used
  • (Full) IP address of the requesting computer
  • Amount of data transferred

We collect the listed data in order to ensure a smooth connection to the website and to enable a comfortable use of our website by users. In addition, the log file is used to evaluate system security and stability as well as administrative purposes. Legal basis for the temporary storage of the data or of the log files is Art. 6 Abs. 1 lit. F DSGVO.
For reasons of technical security, in particular to ward off attack attempts on our web server, this data is stored by us for a short time. On the basis of this data, it is not possible for us to draw conclusions about individual persons. After 30 days at the latest, the data is anonymized by shortening the IP address at domain level, so that it is no longer possible to establish a reference to the individual user.

 

Cookies
Our website uses so-called “cookies”. Cookies are small text files that are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or an automatic solution is provided by your web browser.

Cookies have different functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or language settings). Other cookies are used to evaluate user behavior or to display advertising.

Technically necessary cookies are used on the basis of Art. 6 Abs. 1 lit. F DSGVO Saved. We have a legitimate interest in the storage of cookies for the technically error-free and optimized provision of our services. Other cookies will only be used with your consent on the basis of Art. 6 Abs. 1 lit. a GDPR. The consent can be revoked at any time for the future. The legal basis may also arise from Art. 6 Abs. 1 lit. b GDPR if the processing is necessary for the performance of a contract to which the data subject is a party, or for the implementation of pre-contractual measures taken at the request of the data subject.

Insofar as cookies are used for analysis purposes, we will inform you separately about this in the context of this data protection declaration and obtain your consent.

You can set your browser so that you can

  • be informed about the setting of cookies,
  • Allow cookies only in individual cases,
  • exclude the acceptance of cookies for certain cases or in general,
  • Enable the automatic deletion of cookies when closing the browser.

The cookie settings can be managed under the following links for the respective browsers:

You can also individually manage cookies from many companies and features used for advertising. To do this, use the corresponding user tools, available at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices.

Most browsers also offer a so-called browser. “Do Not Track function”. When this feature is enabled, the browser tells ad networks, websites, and applications that you do not want to be “tracked” for behavioral advertising and the like.

Information and instructions on how to edit this function can be found under the following links, depending on the provider of your browser:

In addition, you can load by default. Prevent scripts. “NoScript” allows the execution of JavaScripts, Java and other plug-ins only with trusted domains of your choice. Information and instructions on how to edit this function can be obtained from the provider of your browser (e.g. for Mozilla Firefox at: https://addons.mozilla.org/de/firefox/addon/noscript/).

Please note that disabling cookies may limit the functionality of our website.

 

Changing cookie settings
You can revoke or change your cookie settings at any time. To do this, call up the cookie settings again via our integrated thumbprint. You can always find it at the bottom left of the website.”

 

Contact form and contact by e-mail
If you send us inquiries via contact form or e-mail, your details from the inquiry form or your e-mail, including the personal data you provide there, will be stored by us for the purpose of processing the request and in the event of follow-up questions. The provision of an e-mail address is required to provide contact, the indication of your first and last name and your telephone number is voluntary. In no case will we pass on this data without your consent. The legal basis for processing the data is our legitimate interest in answering your request in accordance with the kind. 6 Abs. 1 lit. f GDPR and, if applicable, Article. 6 Abs. 1 lit. b GDPR, if your request is aimed at the conclusion of a contract. Your data will be deleted after final processing of your request, provided that there are no statutory retention obligations to the contrary. In the case of Art. 6 Abs. 1 lit. f GDPR to object to the processing of your personal data at any time.

 

External links
Social networks (Facebook) are only integrated on our website as a link to the corresponding services. After clicking on the embedded text/image link, you will be redirected to the page of the respective provider. Only after forwarding, user information is transmitted to the respective provider. For information on the handling of your personal data when using these websites, please refer to the respective data protection regulations of the providers you use.

 

Appearances in social media: Facebook Fanpage
Below you will find information on the handling of your data, which is collected through your use of our social media presences via Facebook fan page. The processing of your data takes place in accordance with the legal regulations.

  1. Responsible body

In the event that the data transmitted to us by you is also or exclusively processed by Facebook, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, is responsible for data processing within the meaning of the GDPR in addition to us or on our behalf. For this purpose, we have an agreement with Facebook in accordance with Art. 26 GDPR on joint responsibility for the processing of data (Controller Addendum). This Agreement sets out for which data processing operations we or Facebook are responsible when you visit our Facebook fan page. This agreement can be viewed at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

Since Facebook Ltd. transfers personal data to the USA, including to Facebook Inc., further protection mechanisms are required to ensure the data protection level of the GDPR. For this purpose, the provider sets standard data protection clauses in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe.

As a visitor to the site, would you like to exercise your rights (information, correction, deletion, restriction, data portability, complaint to the supervisory authority, objection or Revocation), you can contact facebook as well as us.

You can customize your advertising settings independently in your user account. Click on the following link and log in:

https://www.facebook.com/settings?tab=ads or http://www.youronlinechoices.com

For further details, please refer to Facebook’s privacy policy: https://www.facebook.com/about/privacy/

  1. Data Protection Officer of Facebook

To contact Facebook’s data protection officer, you can use the online contact form provided by Facebook under the following link https://www.facebook.com/help/contact/540977946302970.

  1. Data processing for statistical purposes by means of page insights

Facebook provides so-called “Facebook”. Page insights available for our Facebook fan page: https://www.facebook.com/business/a/page/page-insights. This is aggregated data that provides information about how people interact with our site. Page Insights may be based on personal data collected in connection with a visit or interaction of persons to or with our site and in connection with content provided. Please note which personal data you share with us via Facebook. Your data may be processed for market research and advertising purposes, even if you are not logged in to Facebook or do not have a Facebook account. E.g. user profiles are created from the usage behaviour and the resulting interests of the users. The user profiles can in turn be used to e.g. B. to place advertisements inside and outside the platforms that presumably correspond to the interests of the users. This data collection takes place via cookies, which are stored on your device. Furthermore, data that is independent of the devices used by the users may also be stored in the user profiles; in particular, if the users are members of the respective platforms and are logged in to them. The legal basis for processing is Art. 6 Abs. 1 lit. F DSGVO. Our legitimate interest lies in the optimized presentation of our offer, the effective information and communication with customers and interested parties as well as in the targeted placement of advertisements. Please note that we have no influence on the collection of data and further processing by Facebook. As a result, we cannot provide any information about the extent, location and for how long the data is stored by Facebook. Furthermore, we cannot make any statements about the extent to which Facebook complies with existing deletion obligations, which evaluations and links to the data are carried out by Facebook and to whom the data is passed on by Facebook. If you want to avoid the processing of your personal data by Facebook, please contact us by other means.

  1. Data processing for market research and advertising

As a rule, personal data is processed on the company site for market research and advertising purposes. For this purpose, a cookie is set in your browser, which enables the respective provider to recognize you when you visit a website. By means of the collected data, user profiles can be created. These are used to place advertisements inside and outside the platform that presumably correspond to your interests. Furthermore, data can also be stored in the usage profiles regardless of the devices you use. This is regularly the case if you are a member of the respective platforms and are logged in to them.

  1. Data processing when contacting us

We ourselves collect personal data if, for example, you contact us via the contact form or through a messenger service, such as Facebook Messenger. Which data is collected depends on your details as well as the contact details you have provided or approved. These are stored by us for the purpose of processing the request and in the event of follow-up questions. Under no circumstances will we pass on the data to third parties without your consent. The legal basis for processing the data is our legitimate interest in answering your request in accordance with the kind. 6 Abs. 1 lit. f GDPR and, if applicable, Article. 6 Abs. 1 lit. b GDPR, if your request is aimed at the conclusion of a contract. Your data will be deleted after final processing of your request, provided that there are no statutory retention obligations to the contrary. We assume a final processing if it can be inferred from the circumstances that the matter in question has been conclusively clarified.

  1. Data processing for contract processing

If your contact via a social network or other platform is aimed at concluding a contract for the delivery of goods or services with us, we process your data for the fulfilment of the contract or for the implementation of pre-contractual measures or measures. to provide the requested services. The legal basis for the processing of your data in this case is Art. 6 Abs. 1 lit. (b) DSGVO. Your data will be deleted if they are no longer required for the execution of the contract or if it is clear that the pre-contractual measures do not lead to the conclusion of the contract corresponding to the purpose of establishing contact. Please note that even after the conclusion of the contract, it may be necessary to store personal data of our contractual partners in order to comply with contractual or legal obligations.

  1. Data processing based on consent

If you are asked by the respective providers of the platforms for consent to the processing for a specific purpose, the legal basis of the processing is Art. 6 Abs. 1 lit. SA, kind. 7 GDPR. Consent given may be revoked at any time with effect for the future.

 

Data sharing and receivers
Your personal data will not be transferred to third parties unless
– if we have explicitly pointed this out in the description of the respective data processing,
– if you give your express consent in according to Art. 6 Abs. 1 p. 1 lit. a GDPR to that end,
– the transfer according to Art. 6 Abs. 1 p. 1 lit. (GDPR) is necessary to assert, exercise or defend legal claims and there is no reason to believe that you have an overriding interest in not withholding your data,
– in the event that for the transfer according to Art. 6 Abs. 1 p. 1 lit. c GDPR there is a legal obligation and
– insofar as this is in accorded with Art. 6 Abs. 1 p. 1 lit. b GDPR is required for the settlement of contractual relationships with you.
In addition, we use external service providers for the processing of our services, whom we carefully selected, commissioned in writing and, if necessary, with whom we have contract processing contracts in accordance with Art. Article. 28 GDPR. These are bound by our instructions and are regularly checked by us. This includes: service providers for hosting, sending e-mails as well as maintenance and care of our IT systems, etc. The service providers will not pass on this data to third parties.

 

Security
We meet according to the Species. 32 GDPR TAKING Into account the State of the Art, Implementation costs and the Nature, scope, Circumstances and Purposes of Processing, as well as the different Likelihood of Occurrence and Severity of the Risk to the Rights and Freedoms of natural Persons, appropriate technical and organisational Measures to ensure a level Of Protection appropriate to the Risk. This website uses SSL encryption for security reasons and to protect the transmission of confidential content.

 

Duration of storing personal data
The duration of the storage of personal data is measured by the relevant statutory retention periods (e.g. from commercial law and tax law). After expiry of the respective period, the corresponding data will be routinely deleted. If data is required for the fulfilment or initiation of a contract or if we have a legitimate interest in further storage, the data will be deleted if it is no longer required for these purposes or if you make use of your right of revocation or objection.

 

Your rights
Below you will find information on which rights of data subjects the applicable data protection law grants you vis-à-vis the controller with regard to the processing of your personal data:

The right, pursuant to Art. 15 to demand GDPR information about your personal data processed by us. In particular, you can provide information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to be corrected, Deletion, restriction of processing or objection, the existence of a right of appeal, the origin of their data, unless collected by us, as well as about the existence of automated decision-making including profiling and, if necessary, profiling. request meaningful information on their details.

The right, pursuant to Art. 16 GDPR to demand the correction of incorrect or completion of your personal data stored by us without undue delay.

The right, pursuant to Art. 17 GDPR to request the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

The right, pursuant to Art. 18 GDPR to require the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is illegal, but you refuse to delete it and we no longer need the data, but you need it for Claim, exercise or defend legal claims or you must, as of its nature. 21 GDPR have objected to the processing

The right, pursuant to Art. 20 GDPR to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request the transmission to another controller.

The right to exercise in accordance with Art. 77 GDPR to a supervisory authority. As a rule, you can contact the supervisory authority of the federal state of our registered office specified above or, if necessary, that of your usual place of residence or place of work.

The right to revoke granted consent in accordance with Art. 7 para. 3 GDPR: You have the right to revoke a once given consent to the processing of data at any time with effect for the future. In the event of revocation, we will immediately delete the affected data, provided that further processing cannot be based on a legal basis for unauthorised processing. The revocation of the consent does not affect the legality of the processing due to the consent until the revocation.

 

Right to Object
If your personal data is provided by us on the basis of legitimate interests pursuant to Art. 6 Abs. 1 p. 1 lit. f GDPR, you have in accordance with Art. 21 GDPR, the right to object to the processing of your personal data, insofar as this is done for reasons arising from your particular situation. Insofar as the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement to specify a particular situation.
If you would like to exercise your right of revocation or objection, please send an e-mail to info@ot-chiemgau.de

 

Legal obligations
The provision of personal data for the decision on the conclusion of a contract, the fulfilment of the contract or for the implementation of pre-contractual measures is voluntary. However, we can only make the decision within the framework of contractual measures if you provide such personal data that is used for the conclusion of the contract, the fulfilment of the contract or the fulfilment of the contract. pre-contractual measures are required.

 

Automated decision-making
Automated decision-making or profiling in accordance with Art. 22 GDPR does not take place.

 

Subject to change
We reserve the right to adapt this data protection declaration if necessary in compliance with the applicable data protection regulations or to update. In this way, we can adapt them to the current legal requirements and take into account changes in our services, e.g. B. when Introducing new Services. The most up-to-date version applies to your visit.

Status of this data protection declaration: 25.10.2021