Privacy Policy

Data protection is important to us and we attach great importance to the protection of your data and privacy. In the following we would like to show you which data we process when, for which purpose and on which legal basis.

In accordance with our information obligations under the Basic Data Protection Regulation (DS-GVO), the Federal Data Protection Act (BDSG) and the Telemedia Act (TMG), this should give you as good an understanding as possible of the function of our services offered and how the protection of your personal data is guaranteed.

1. Person responsible

The person responsible for the processing of personal data within the meaning of Article 4 No. 7 of the DS-GVO:

schwa-medico, Medizinische Apparate, Vertriebsgesellschaft GmbH
Germany

Managing director: Jürgen Schaubel

Telephone: +49 6443 8333 - 0
Fax: +49 6443 8333 – 155

2. Contact person for data protection

If you have any questions regarding the processing of your personal data or your rights regarding data protection, please contact us:

schwa-medico, Medizinische Apparate, Vertriebsgesellschaft GmbH
Rechtsabteilung und Datenschutz
Wetzlarer Straße 41-43
35630 Ehringshausen
Germany

Data protection officer: Sibylle Wirth

E-mail: datenschutz@schwa-medico.de
Fax: +49 6443 8333 - 136

3. What personal data are 

According to Art. 4 No. 1 of the DS-GVO, personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is defined as a natural person who can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, customer number, location data, online identification or other characteristics.

In the DS-GVO these are referred to as "data subjects". Further information on this can be found in Art. 4 No. 1 DS-GVO.

4. Data when visiting this site

4.1 Hosting and log files

When you access our website, our web server automatically collects data and information from your device's system and stores it in server log files. This data is automatically transferred by your respective browser when you call up our website:

• Timestamp of the page call by request to the web server
• URL of the accessed website
• Type and version of the browser you use
• the operating system transmitted to us by your browser
• IP address of your computer is masked, i.e. the last octet is zeroed.

The purpose of this processing is to make our site accessible from the device you are using and to enable the best possible presentation by means of adaptation. Furthermore, we use this data for website optimisation and to ensure system security. An evaluation of this data for marketing purposes does not take place.

The legal basis for the processing is Art. 6 (1) lit. f) DS-GVO. We have a legitimate interest in presenting you with a website optimised for your browser and enabling communication between our server and your terminal device. The latter requires in particular the processing of your IP address.

The data is stored for 10 days, older logs are automatically overwritten. 

Recipient of the data is our server host, who works for us within the scope of an order data agreement:

Platform.sh GmbH

Germany

For more information on data protection at Platform.sh, please visit https://platform.sh/privacy-policy/.

They have the right to object. You can assert this right by using the contact details provided for our company.

4.2 Content Delivery Network (CDN)

For the best possible provision of this site we use the CDN service Fastly. Fastly operates servers worldwide for the distribution of traffic which enables a fast and secure delivery of this website (Content Delivery Network). This is linked to our web host via DNS. Technically, the flow of information between your browser and our website is routed via the Fastly network. This enables a fast provision of the site and the filtering of malicious traffic by analysing the traffic. Fastly uses cookies or other technologies to recognise Internet users. There is no use beyond the described purpose.

The legal basis for the processing is Art. 6 (1) lit. f) DS-GVO. We have a legitimate interest in making our website available as quickly, accurately and securely as possible.

The recipient of the data is the operator of the CDN, who works for us within the framework of an order data agreement:

Fastly, Inc.
475 Brannan St. #300
San Francisco, CA 94107
USA

Fastly, Inc. is certified Privacy Shield. For more information about security and privacy at Fastly, please visit https://www.fastly.com/privacy.

They have the right to object. You can assert this right by using the contact details provided for our company.

4.3 Cookies

Our website uses cookies. These are small text files that are stored on your device to make the use of a website more convenient. These can be functions such as saving settings or the device recognition of a user and are carried out via a cookie ID. Cookies help us to design an online offer for you as a website visitor that is as user-friendly and tailor-made as possible. We use both our own cookies and cookies from third parties. 

You can configure the setting of these cookies at any time. In this way, you can restrict the setting of cookies in your browser settings, prevent them altogether or arrange for the automatic deletion of cookies when the browser window is closed. In addition, you can also set the configuration of the cookies via the pop-up window in the lower part of the page. We distinguish between the following categories of cookies:

• Technically necessary cookies: are necessary for the smooth functioning of the website. We use them in accordance with Art. 6 Para. 1 lit. c) DS-GVO.
• Cookies for analysis: measure the reach of our own offer and serve to optimise it in accordance with Art. 6 Para. 1 lit. a) DS-GVO.
• Cookies for marketing purposes (currently not implemented): Enable us to advertise our services through interest-based advertising. This option must be approved and is in accordance with Art. 6 Para. 1 lit. a) DS-GVO.

5. Our services on this page

5.1 Contact form

There is a contact form on our site. You can use this form to contact us electronically. If you contact us using this form, the data entered in the input fields will be processed by us and include the following information:

• Salutation
• Full name
• If applicable, your company affiliation
• Contact details (phone, e-mail)
• Customer category
• Information you enter in "Message".

When you submit the form, your IP address (see "Logfiles") and the time of submission are also saved.

Mandatory and voluntary information is treated equally by us. The mandatory details are necessary to be able to contact you and process your request.

The purpose of the processing of personal data within the scope of the mandatory and voluntary information is to process the contact request and to be able to contact you. The legal basis for the processing of the personal data provided by you in the context of the contact is Art. 6 Par. 1 letter b) DS-GVO.

The collection of further personal data during the sending serves to prevent misuse of our contact form. The legal basis for this is our legitimate interest in accordance with Art. 6 Para. 1 lit. f) DSGVO to prevent misuse of the contact form or to be able to prove a fact.

The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. The recipient of the data is our mail host, who works for us within the framework of an order data agreement. 

5.2 How to contact us

You have the possibility to contact us by post, telephone, fax or e-mail. Depending on which data you provide when you contact us, we will contact you again either by telephone, fax or e-mail, call you back or write to you.

• If you contact us by post, we can process in particular your address data (e.g. surname, first name, street, town, postcode), date and time of receipt of the post as well as those data which result from your letter itself.
• If you contact us by telephone, your telephone number in particular and, if necessary, your name, your e-mail address, the time of the call and details of your request will be processed.
• If you contact us by fax, the fax number or the sender's identification as well as the data resulting from the fax will be processed.
• If you contact us by e-mail, your e-mail address, the time of the e-mail and the data resulting from the message text (and attachments if applicable) will be processed.

The purpose of processing the above-mentioned data is to process the contact request and to be able to contact the person making the request in order to answer the request. 

The legal basis for the processing of personal data described here is Art. 6 para. 1 letter f) DSGVO. It is our legitimate interest to offer you the opportunity to contact us at any time and to be able to answer your questions.

The personal data will be processed for as long as necessary to process the contact request and will be received or processed by the following companies:

1. Mail Hoster (Microsoft Azure)

After sending the contact form or your e-mail to us, it will be received and processed by our mail host. This host works for us within the framework of an order data agreement.

Microsoft Ireland Operations Limited
Ireland

For more information about Microsoft's privacy policy, please visit the following link: https://privacy.microsoft.com/de-de/privacystatement

2. Customer Relationship Management ("CRM") Hubspot

We use Hubspot CRM as an interface between office staff and sales in order to answer our customers' concerns as efficiently and purposefully as possible. Enquiries sent to us via e-mail or contact form are processed by Hubspot and answered by our employees. They work for us within the framework of an order data agreement.

HubSpot Ireland Limited
Ireland

For more information about HubSpot's privacy policy, please follow this link: https://legal.hubspot.com/privacy-policy

Sales Partner

Depending on the type and content of your contact, we reserve the right to forward your request to our sales partners. This forwarding of your data is based on "disclosure by transmission" in accordance with Art. 6 Para. 1, lit a) DS-GVO, which you will be informed of when you send the website contact form:

Johnson Health Tech. GmbH
Germany

The resulting information obligations regarding data protection at "Johnson Health Tech. GmbH" can be found at https://www.johnsonhealthtech.com/de/deu/privacy-policy.

You have the right to object to all data processing and forwarding. You can assert this right by using the contact details provided for our company, as well as when your data is passed on to our sales partners due to "disclosure by transmission".

6. Integrated services on this site

6.1 Google Services

On this site we use various services provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. 

By integrating Google's services, Google may collect and process information that may include personal data. It cannot be excluded that Google may also transfer this information to servers in third countries.

The Privacy Shield certification demonstrates that Google is committed to comply with the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework. This applies to the collection, use and storage of personal data from EU member states and Switzerland. Google, including Google LLC and its wholly owned subsidiaries in the USA, have declared by certification that they will comply with the Privacy Shield Principles.

You will find the entry for the privacy shield certificate under the following link: https://www.privacyshield.gov/list.

Information on compliance with Google at the following link: https://policies.google.com/privacy/frameworks

We ourselves cannot influence which data Google actually collects, processes and stores. Google itself states that it processes the following information (including personal data), among others:

• Protocol data, in particular the IP address
• Location-related information
• Unique application numbers
• Cookies and similar technologies.

If you are signed in to your Google Account, Google may add the processed information to your account and treat it as personal information. This depends on your account settings, see in particular https://www.google.de/policies/privacy/partners.

You can prevent this information from being added directly by signing out of your Google Account or by changing your account settings. You can also change your cookie settings (delete cookies, block cookies, etc.). For more information and instructions, please see the "Cookies" section.

• Information on Google's privacy policy can be found at the following link: https://www.google.com/policies/privacy/
• Information about your privacy settings at Google can be found at the following link: https://privacy.google.com/take-control.html.

Google Ads (formerly AdWords)

This website uses Google Ads (formerly: AdWords) and, within Google AdWords, conversion tracking, an online advertising service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads and Google Conversion Tracking is an analysis service of Google. When you click on an ad placed by Google, a so-called "cookie" (a text file) is stored on your device. This enables an analysis of the pages you visit on our website. This information (including your IP address) is transferred to a Google server and stored there and may affect servers in the USA or third countries. After 30 days, these cookies lose their validity. Within this period, Google and we can recognize when you have clicked on one of our ads and been forwarded to our website. Because each visitor to our site receives an individual cookie, cookies can be tracked by Adwords customers' web page views, and a limitation can be set by editing the cookie policy. Please refer to the section "Cookies" for more information.

• For information on Google's privacy shield certification, please see the introduction to this section above.
• Information on Google's privacy policy can be found at the following link: www.google.com/policies/privacy/
• You can find information about Google's privacy settings at https://privacy.google.com/take-control.html.

The legal basis for the processing of personal data described here is Art. 6 para. 1 letter a) DSGVO.

They have the right to object. You can assert this right by using the contact details provided for our company.

Google Analytics

We use Google Analytics on our website, a web analytics service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies that enable an analysis of the use of the websites you visit. Google Analytics may also use "web beacons" (invisible graphics). These web beacons can be used to evaluate information such as visitor traffic on websites. The information generated by cookies and web beacons about the use of our website (including the IP address of the user) is transferred to a Google server and stored there. This server may be located in the USA or other third countries and may also be passed on to other contractual partners of Google in accordance with Google's SLA.

Google processes the following types of data:

• Online identifiers (including cookie identifiers)
• IP address
• Device IDs

Detailed information on the data processed can be found at: https://www.google.com/intl/de/policies/privacy/#infocollect .

We only use Google Analytics with activated IP anonymisation ("anonymous IP"). As a result, your IP address will be truncated by Google within member states of the European Union or in other states which are party to the Agreement on the European Economic Area. A transfer and shortening of the IP address only takes place in exceptional cases on a Google server in the USA.

Furthermore, we have concluded a contract with Google for the use of Google Analytics for order processing (Art. 28 DS-GVO). Google processes the data on our behalf to evaluate the use of our website, compile reports on activities on our site and provide related services. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.

The integration of Google Analytics enables us to analyse user behaviour on our website, which enables us to improve our offer in a targeted manner. The legal basis for the processing of personal data described here is Art. 6 Para. 1 lit. a) DSGVO. Within the scope of order processing, Google is entitled to engage subcontractors. A list of these subcontractors can be found at https://privacy.google.com/businesses/subprocessors/. The information processed is stored for as long as is necessary for the purpose described or as required by law.

• Further information on data handling in connection with Google Analytics can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245
• You can find information about Google's privacy settings at https://privacy.google.com/take-control.html.

You have the right to object. You can assert this right by using the contact details provided for our company.

The provision of personal data is not required by law or contract and is not necessary for the conclusion of a contract. Nor are you obliged to provide the personal data. However, failure to provide it may mean that you are unable to use our website or cannot use it to its full extent.

Google Tag Manager

We use the Google Tag Manager on our website. The Google Tag Manager is a service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

The Google Tag Manager allows us to integrate various codes and services on our website in an orderly and simplified way. The Google Tag Manager implements or segregates the tags. Google may process information (including personal data) in the process. It cannot be ruled out that this information may be transferred to a server in the USA or third countries. In particular, the following personal data is processed by the Google Tag Manager:

• Online identifiers (including cookie identifiers)
• IP address.

Detailed information on the integration of Google Tag Manager can be found at the following link https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/

Furthermore, we have concluded a contract with Google for the use of the Google Tag Manager for order processing (Art. 28 DS-GVO). Google processes the data on our behalf to trigger the deposited tags and to display the services on our website. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.

If you have deactivated individual tracking services, the deactivation will remain in effect for all embedded tracking tags that are embedded through Google Tag Manager. This can be done by opting out of cookies or third-party tools.

With the integration of the Google Tag Manager we pursue the purpose of a simplified and clear integration of different services. Furthermore, the integration of the Google Tag Manager optimises the loading times of the different services.

The legal basis for the processing of personal data described here is Art. 6 para. 1 letter a) DSGVO.

The processed information is stored for as long as necessary for the intended purpose or as required by law.

They have the right to object. You can assert this right by using the contact details provided for our company.

The provision of personal data is not required by law or contract and is not necessary for the conclusion of a contract. Nor are you obliged to provide the personal data. However, failure to provide it may mean that you are unable to use our website or cannot use it to its full extent.

Use of YouTube

We use videos from YouTube and YouTube plugins on our website. YouTube is a service provided by YouTube LLC ("YouTube"), 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

YouTube is integrated by embedding the service on our website using a so-called "iFrames". When loading this iFrame, YouTube or Google may collect and process information (including personal data). It cannot be excluded that YouTube or Google may also transfer the information to a server in a third country.

Through the integration of YouTube, we pursue the purpose of being able to present various videos on our website so that you can watch them directly on our website.

The legal basis for the processing of personal data described here is Article 6 (1) (f) of the DS-GVO. Our legitimate interest lies in the benefits that YouTube offers through its platform. By integrating external videos through YouTube, we relieve our servers and increase the loading speed by automatically providing different playback qualities. Furthermore, YouTube or Google has a legitimate interest in the collected (personal) data in order to improve our own services.

• You can find more detailed information in the YouTube or Google data protection notices, which can be accessed via the following link: www.google.com/policies/privacy/
• You can find information about Google's privacy settings at https://privacy.google.com/take-control.html.

The provision of personal data is not required by law or contract and is not necessary for the conclusion of a contract. Nor are you obliged to provide the personal data. However, failure to provide it may mean that you are unable to use our website or cannot use it to its full extent.

6.2 Facebook services

We use various Facebook services on our website. "Facebook" is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

Facebook pixel

Via the Google Tag Manager we installed Facebook pixels on the website. This is retrieved from a Facebook server when you call up a page and thus registers the access to the page you have visited. This enables us to use "Facebook Custom Audience". According to the information provided by Facebook, the following information can be recorded (including personal data): 

• Browser Information
• Visited websites
• Hash Facebook ID of the website user.

For more information on the Facebook pixel, please visit: https://www.facebook.com/business/help/651294705016616.

Custom Audiences

The marketing tool is a targeting option that uses the integrated Facebook pixel to match visitor data from our website with people on Facebook. This enables us to target visitor groups with advertisements on the Facebook platform. In addition, this service helps to reduce wastage in marketing.

For more information on Facebook Custom Audiences, please follow the links below:

• https://developers.facebook.com/docs/marketing-api/audiences-api/websites
• https://developers.facebook.com/docs/facebook-pixel/pixel-with-ads/conversion-tracking .

Facebook Conversations

This service allows us to communicate more easily via Facebook chat and is integrated into "Hubspot CRM". For more information, please refer to the "Contact us" section.

In the case of the services used by Facebook, it cannot be ruled out that Facebook may also transfer the information transferred to a server in the USA or a third country.

The Privacy Shield certification indicates that Facebook, Inc. is committed to comply with the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework. This applies to the collection, use and storage of personal data from EU member states and Switzerland. Facebook, Inc. has declared through certification that it will comply with the Privacy Shield Principles. 

• You can find the entry for the privacy shield certificate under the following link: https://www.privacyshield.gov/list
• Information on how to comply with Facebook, Inc. is available at https://de-de.facebook.com/about/privacyshield.

The legal basis for the processing of personal data described here is Art. 6 para. 1 letter a) DSGVO. With regard to the storage period of the information, Facebook states that the data will be stored for as long as is necessary to provide you or other products and services.

For further information and contact details, please follow the link below: https://de-de.facebook.com/about/privacy/ and at the following addresses.

If you live in the USA or Canada:

Facebook, Inc.
1601 Willow Road
Menlo Park, CA 94025

If you live in the rest of the world:

Facebook Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour, Dublin 2
Ireland

Privacy policy for our Facebook fan page Insights

Facebook Ireland Ltd ("Facebook") provides us as Facebook fan page operators with so-called "Facebook Insights" ("Insights"). The "Insights" are various statistics that provide us with information about the use of our Facebook fan page. You can also find detailed information on this at https://www.facebook.com/business/a/page/page-insights.

In order to compile these statistics, various information provided by you (including personal data) is processed by Facebook. The personal data is processed by Facebook and us as jointly responsible parties in accordance with Art. 26 DSGVO. In the following we provide you with the essential information of the agreement concluded between Facebook and us ( https://www.facebook.com/legal/terms/page_controller_addendum) in accordance with Art. 26 DS-GVO.

Information on the agreement concluded jointly responsible between Facebook and us

I.     Appointment of the jointly responsible persons

Jointly responsible for the processing

Facebook Ireland Ltd
4 Grand Canal Square
Dublin 2
Ireland

and

schwa-medico, Medizinische Apparate, Vertriebsgesellschaft mbH
Wetzlarer Str. 41-43
35630 Ehringshausen
Germany

Telephone: +49 6443 8333 - 0
Fax: +49 6443 8333 - 119
E-mail: info@schwa-medico.de

II.    responsibility with regard to the processing of the Insights data

Facebook has assumed primary responsibility (assumption of all obligations under the DS-GVO) for data processing. This means in particular

• Facebook assumes the necessary information obligations (e.g. Art. 13 DSGVO)
• Data subjects' rights can be asserted against Facebook (e.g. the right to information or deletion, objection to data processing or revocation of any consent granted; see also section "V. Data subjects' rights")
• Ensuring the technical and organisational measures of data processing.

Facebook provides comprehensive information on data processing at www.facebook.com (Art. 13 DS-GVO). In order to provide you with an overview of the essential information, we also refer to the content provided by Facebook within the framework of this data protection notice.

Notwithstanding the agreed primary responsibility of Facebook, you can of course also assert your rights under the DSGVO directly against us. We will immediately forward this request to Facebook using a form available for this purpose.

1. Legal basis for the processing

The legal basis and the purposes of Facebook's processing can be viewed at https://www.facebook.com/about/privacy/legal_bases and https://de-de.facebook.com/policy.php. Our legal basis for the processing of Insights data is our legitimate interest in accordance with Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in being able to track user behaviour on our Facebook fan page. In particular, this enables us to record the reach and effectiveness of our campaigns, postings and other activities by means of prepared statistics. This enables us to continuously optimise our website and our range of services in line with demand. This also represents the purpose of processing for us.

2. Data processing on a Facebook fan page

Facebook can process the following data in particular:

• User interaction (click behaviour, postings, likes, viewing videos, page views etc.)
• Cookies
• Demographic characteristics (age, gender, federal state, etc.)
• IP address
• System and device information (e.g. browser type, operating system etc.).

The exact processing of your data when you visit our Facebook fan page depends on whether you have a Facebook account or not:

• If you have an account with Facebook, Facebook can permanently assign the data to your account in order to learn more about you.
• If you do not have an account with Facebook, Facebook can store your data. This can be done through the use of cookies. These are usually small text files that are stored on your device. Various information is written to this text file, which can be read out at a later date. This enables Facebook to store and process information about you even if you do not have a Facebook account. You can find more detailed information about Facebook cookies at https://de-de.facebook.com/policies/cookies/.

Within the scope of the Insights use, we only receive anonymised statistics from Facebook about the use of our fan page. We can only see how many users have carried out certain interactions, but not which user has carried out a certain action. The statistics of the Insights data do not allow us to draw conclusions about a person.

3. Rights of data subjects

In principle, you have the following rights:

• Right of information (Article 15 DS-GVO)
• Right of rectification (Art. 16 DS-GVO)
• Right of objection (Art. 21 DS-GVO)
• Right of deletion (Art. 17 DS-GVO)
• Right to restrict processing (Art. 18 f. DS-GVO)
• Right to data transferability (Art. 20 DS-GVO).

You have the right to revoke at any time with future effect any consent you have given, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.

You can assert these rights directly against Facebook or us (see section "II. Responsibility with regard to the processing of Insights data"). If you would like to assert your rights against us, please contact us at the e-mail address datenschutz@schwa-medico.de and describe your specific request as detailed as possible.

You have the right to object to the processing of cookies. You can exercise this right as follows:

• In your browser settings you can restrict or completely prevent the setting of cookies. You can also arrange for the automatic deletion of cookies when closing the browser window. You can find further information or instructions in the section "Cookies".
• At https://de-de.facebook.com/policies/cookies/ you can also adjust your settings for the use of cookies. Here you will find under the sections "If you have a Facebook account". (Facebook account available) and "Public" (no Facebook account available) Information on how you can object to the processing vis-à-vis Facebook.

You can determine the storage period of the cookies via your browser by having the cookies displayed (usually by clicking on the "i" next to the address bar, e.g. in Firefox or Google Chrome).

7. General information on data provision

The provision of personal data is not required by law or contract and is not necessary for the conclusion of a contract. You are also not obliged to provide the personal data. Failure to provide the data may, however, mean that you will not be able to use our offer or only to a limited extent.

8. Social networks and external links

In addition to this website, we also maintain presences in various social media, which you can access by clicking the appropriate buttons on our website. If you visit such a presence, personal data may be transmitted to the social network provider.

We would like to point out that this may involve the transmission of information (including personal data) to a server in a third country and that data may therefore be processed outside the area of the European Union. US providers certified under the Privacy Shield have undertaken to comply with the EU data protection standards. For further information, please visit https://www.privacyshield.gov/Program-Overview.

Furthermore, it is possible that in addition to the storage of the data you specifically entered in this social medium, further information may also be processed by the social network provider. This concerns, for example, important data of your computer system from which you visit it (IP address, processor type used, browser version and plug-ins used). If you are logged in during your visit to such a website with a user account of the respective network, the corresponding page can assign this visit to your account.

For the purpose, scope and further processing of your data, as well as your rights in this respect, please refer to the respective provisions of the person responsible.

We would also like to point out that our website contains further links to external third-party websites, whereby we have no influence on the processing of the data on these third-party websites.

9. Data security

We secure our website and all other related systems by technical and organisational measures against loss, destruction, access, modification or distribution of your data by unauthorised persons. However, despite regular checks, complete protection against all risks is not possible.

10. Revocation

You have the right to revoke at any time with future effect any consent you have given, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.

11. Rights of data subjects

In principle, you have the following rights:

• Right of information (Art. 15 DSGVO)
• Right of rectification (Art. 16 DSGVO)
• Right of objection (Art. 21 DSGVO)
• Right of cancellation (Art. 17 DSGVO)
• Right to restrict processing (Art. 18f. DSGVO)
• Right to data transferability (Art. 20 DSGVO).

For enquiries of this kind, please contact datenschutz@schwa-medico.de. Please note that in such requests we must ensure that the data subject is indeed the person concerned.

Without prejudice to any other administrative or judicial remedy, you have the right to appeal to a data protection supervisory authority.

Automated decision making ("profiling") does not take place on our website.

schwa-medico, Medizinische Apparate, Vertriebsgesellschaft mbH

Effective: November 2020 / The German version applies.