Data Privacy Policy

Data Privacy Policy

Personal data (hereinafter referred to simply as "data") is processed by us only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.

Pursuant to Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter "GDPR"), "processing" means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure by transmission, dissemination, alignment, restriction, erasure or destruction.

With the following privacy policy, we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide either alone or jointly with others on the purposes and means of the processing. We also inform you about third-party components we use for optimisation purposes, insofar as third parties process data on their own responsibility.

Our Privacy Policy is structured as follows: I. Information about us as the data controller. II. Rights of users and data subjects. III. Information on data processing.

I. Information About Us as the Data Controller

The data controller responsible for this website within the meaning of data protection law is

openmedic


Deutschland
E-Mail:
Data Protection Officer at the provider:

II. Rights of Users and Data Subjects

With regard to the data processing described in more detail below, users and data subjects have the right

• to confirmation as to whether data concerning them is being processed, access to the processed data, further information about the data processing and copies of the data (see also Art. 15 GDPR);
• to the rectification or completion of incorrect or incomplete data (see also Art. 16 GDPR);
• to the immediate erasure of data concerning them (see also Art. 17 GDPR), or, alternatively, where further processing is required pursuant to Art. 17(3) GDPR, to restriction of processing in accordance with Art. 18 GDPR;
• to receive the data concerning them and provided by them, and to transmit this data to other providers/controllers (see also Art. 20 GDPR);
• to lodge a complaint with the supervisory authority if they believe that the data concerning them is being processed by the provider in violation of data protection regulations (see also Art. 77 GDPR).

In addition, the provider is obliged to notify all recipients to whom data has been disclosed by the provider of any rectification or erasure of data or restriction of processing pursuant to Art. 16, 17(1) and 18 GDPR. This obligation does not apply, however, if such notification proves impossible or involves a disproportionate effort. Notwithstanding this, the user has the right to information about these recipients.

Users and data subjects also have the right under Art. 21 GDPR to object to the future processing of their data, provided that the data is processed by the provider pursuant to Art. 6(1)(f) GDPR. In particular, an objection to data processing for the purpose of direct marketing is permissible.

III. Information on Data Processing

Data processed during your use of our website will be deleted or blocked as soon as the purpose of storage no longer applies, there are no statutory retention obligations preventing erasure, and no further different information is provided below for individual processing procedures.

Server Data

For technical reasons, in particular to ensure a secure and stable website, data is transmitted to us or our web hosting provider by your internet browser. With these so-called server log files, data such as the type and version of your browser, the operating system, the website from which you accessed our site (referrer URL), the page(s) visited, the date and time of access, and the IP address of your internet connection are collected. This data is stored temporarily but not combined with other data about you. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the improvement, stability, functionality and security of our website. The data is deleted after 14 days at the latest, unless further retention is required for evidential purposes.

Contract Processing

Data transmitted by you for the purpose of using our goods and/or services is processed by us for the purpose of contract fulfilment and is necessary for this purpose. Contract conclusion and fulfilment are not possible without the provision of your data. The legal basis is Art. 6(1)(b) GDPR. We delete the data upon complete contract fulfilment, subject to statutory retention obligations under tax and commercial law. In the course of contract fulfilment, we may pass on your data to the transport company entrusted with delivery or to the financial service provider, insofar as this is necessary for delivery or payment purposes.

Contact Requests

If you contact us via the contact form or by email, the data you provide will be used to process your enquiry. The provision of this data is necessary for processing and responding to your enquiry — without it we cannot answer your enquiry or can only do so to a limited extent. The legal basis is Art. 6(1)(b) GDPR. Your data will be deleted once your enquiry has been conclusively answered and there are no statutory retention obligations that prevent erasure.