Privacy Policy

Introduction and general information

Thank you for your interest in our website. Welcome to the SPIGGLE & THEIS Medizintechnik GmbH website. Thank you for your interest in our company. Protecting your personal data is very important to us. Below you will find information on how we handle your data, which is collected when you use our website. Your data is processed in accordance with the legal regulations on data protection.

Data controller as defined by the GDPR

SPIGGLE & THEIS Medizintechnik GmbH
Burghof 14
51491 Overath, Germany

+49 (0)2206 9081-0

Contact details of the data protection officer

Proliance GmbH / www.datenschutzexperte.de
Data Protection Officer
Leopoldstr. 21
80802 Munich, Germany

Definitions

Our privacy policy should be simple and understandable for everyone. The official terms of the General Data Protection Regulation (GDPR) are usually used in this privacy policy. The official definitions are explained in Art. 4 GDPR.

Server log files

When you visit our website, it is necessary for technical purposes for data to be transmitted to our web server via your Internet browser. The following data is recorded during an ongoing connection for communication between your Internet browser and our web server:

Date and time of the request
Name of the requested file
The page from which the file was requested
Access status
Web browser and operating system used
(Complete) IP address of the requesting computer
Amount of data transferred

We collect the listed data in order to ensure a smooth connection to the website and to make it easy for users to use our website. In addition, the log file is used to evaluate system security and stability as well as for administrative purposes. The legal basis for the temporary storage of data or log files is Art. 6 Para. 1 lit. f GDPR.
For technical security reasons, in particular to prevent attempts to attack our web server, we store this data temporarily. It is not possible to identify specific individuals from this data. After 7 days at the latest, the data are anonymized by shortening the IP address at the domain level, so that it is no longer possible to establish a link to the individual user.
The data may also be processed anonymously for statistical purposes. This data is not stored together with other personal user data, compared with other databases or transferred to third parties at any time.

Cookies

Our website uses cookies that are stored on your device by the browser and that contain certain settings for using the website (e.g. for the current session). Cookies help to make the experience of our website more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are known as session cookies, which are automatically deleted when the browser is closed. Other cookies remain on your device until you delete them or the storage period expires. These cookies enable us to recognize your browser the next time you visit. In some cases, cookies are used to simplify website processes by saving settings (e.g. keeping options that have already been selected). If personal data is also processed by individual cookies implemented by us, the processing takes place in accordance with Art. 6 Para. 1 lit. b GDPR either to implement the contract or in accordance with Art. 6 Para. 1 lit. f GDPR to protect our legitimate interests in providing the best possible functionality of the website and a customer-friendly and effective experience of the page visit.
If you have given us your consent to the use of a cookie, the legal basis for the processing is your consent in accordance with Art. 6 Para. 1 lit. a GDPR.

You can set your browser so that you are informed about the use of cookies and only allow cookies in individual cases, set it so that cookies are not accepted for specific cases or in general, and activate the automatic deletion of cookies when the browser is closed. You can use the following links for the respective browsers to manage their cookie settings.

Google Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: http://help.opera.com/Windows/10.20/de/cookies.html

You can also individually manage the cookies of many companies and functions that are used for advertising. To do this, use the appropriate user tools, available at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices
Most browsers also offer a “do not track function” you can use to avoid being “tracked” by websites. If this function is activated, the respective browser notifies advertising networks, websites and applications that you do not want to be tracked for behavior-based advertising and the like. Depending on the provider of your browser, you can find information and instructions on how to edit this function from the following links:

Google Chrome: https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=de
Mozilla Firefox: https://www.mozilla.org/de/firefox/dnt/
Internet Explorer: https://support.microsoft.com/de-de/help/17288/windows-internet-explorer-11-use-do-not-track
Safari: https://support.apple.com/kb/PH21416?locale=de_DE
Opera: http://help.opera.com/Windows/12.10/de/notrack.html

In addition, you can prevent scripts from loading by default. NoScript only allows JavaScripts, Java and other plug-ins to be run with trusted domains of your choice. You can obtain information and instructions on how to edit this function from the provider of your browser (e.g. for Mozilla Firefox at: https://addons.mozilla.org/de/firefox/addon/noscript/).
Please note that the functionality of this website may be restricted when cookies are deactivated.

“Hospital Finder” form and contact via email

If you send us inquiries via the contact form or e-mail, we save your details from the form or your e-mail, including the data you provided there, such as title, name, postcode, e-mail address and the content of the message for the purpose of processing the request and in case of follow-up questions. An email address is required to provide contact details. The postcode is also necessary so that we can use it to find the closest clinic for you. The title and the name are given voluntarily. We will never pass on the data you provide without your consent. The legal basis for processing the data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit. f GDPR and, if applicable, Art. 6 Para. 1 lit. b GDPR, if your request aims to conclude a contract. Your data will be deleted after your request has been processed, provided there are no statutory retention requirements. In the case of Art. 6 Para. 1 lit. f GDPR you may object to the processing of your personal data at any time.

Analysis tools and advertising

Google Tag Manager

We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

The Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not store cookies, and does not carry out any independent analyses. It only manages and runs the tools integrated via it. However, the Google Tag Manager does collect your IP address, which may also be transferred to Google’s parent company in the United States.

The Google Tag Manager is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and administration of various tools on his website. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TDDDG. This consent can be revoked at any time.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/5780.

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior patterns of website visitors. To that end, the website operator receives a variety of user data, such as pages accessed, time spent on the page, the utilized operating system and the user’s origin. This data is assigned to the respective end device of the user. An assignment to a user-ID does not take place.

Furthermore, Google Analytics allows us to record your mouse and scroll movements and clicks, among other things. Google Analytics uses various modeling approaches to augment the collected data sets and uses machine learning technologies in data analysis.

Google Analytics uses technologies that make the recognition of the user for the purpose of analyzing the user behavior patterns (e.g., cookies or device fingerprinting). The website use information recorded by Google is, as a rule transferred to a Google server in the United States, where it is stored.

The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may revoke your consent at any time.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

IP anonymization

Google Analytics IP anonymization is active. As a result, your IP address will be abbreviated by Google within the member states of the European Union or in other states that have ratified the Convention on the European Economic Area prior to its transmission to the United States. The full IP address will be transmitted to one of Google’s servers in the United States and abbreviated there only in exceptional cases. On behalf of the operator of this website, Google shall use this information to analyze your use of this website to generate reports on website activities and to render other services to the operator of this website that are related to the use of the website and the Internet. The IP address transmitted in conjunction with Google Analytics from your browser shall not be merged with other data in Google’s possession.

Browser plug-in

You can prevent the recording and processing of your data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en.

Contract data processing

We have executed a contract data processing agreement with Google and are implementing the stringent provisions of the German data protection agencies to the fullest when using Google Analytics.

YouTube

Our website uses plugins from the Google-operated YouTube site. The website is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. If you visit one of our pages equipped with a YouTube plug-in, a connection to the YouTube servers will be established. The YouTube server is informed which of our pages you have visited.
If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.
Further information on the handling of user data can be found in YouTube's privacy policy at:
https://www.google.de/intl/de/policies/privacy

The extended data protection mode is used here, which, according to the provider, only starts storing user information when the video/s is/are played back. If the playback of embedded YouTube videos is started, the provider “YouTube” uses cookies to collect information about user behavior. According to information from “YouTube”, these serve, among other things, to record video statistics, improve user-friendliness and prevent abusive behavior. If you are logged in to Google, your data will be assigned directly to your account when you click on a video. If you do not want your YouTube profile to be assigned, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation is carried out in particular in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of Google's legitimate interests in the display of personalized advertising, market research and / or the needs-based design of its website. You have the right to object to the creation of these user profiles, although you must contact YouTube to exercise them.
Regardless of whether the embedded videos are played back, a connection to the Google “DoubleClick” network is established each time this website is accessed, which may trigger further data processing operations without our influence.
Google is certified for the US-European data protection convention “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU.

Data transfer and recipient

Your personal data will not be transferred to third parties, except
- if we have explicitly pointed this out in the description of the respective data processing.
- if you have given express consent in accordance with Art. 6 Para. 1 sentence 1 lit. a GDPR
- the disclosure according to Art. 6 Para. 1 sentence 1 lit. f GDPR is required to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
- in the event that for the transfer pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR there is a legal obligation and
- insofar as this is required for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.
We also use external service providers to process our services, which we have carefully selected and commissioned in writing. They are bound by our instructions and are regularly checked by us. With which, if necessary, we have contract processing contracts in accordance with Art. 28 GDPR. These are service providers for web hosting, sending e-mails, and maintaining our IT systems, etc. The service providers will not pass this data on to third parties.

Data security

In accordance with Art. 32 GDPR, we will take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk, taking into account the latest developments in technology, the implementation costs and the type, scope, circumstances and purposes of processing, as well as the varying probability and severity of the risk to the rights and freedoms of natural persons. This website uses SSL encryption for security reasons and to protect the transmission of confidential content.

Retention period for personal data

The retention period for personal data is based on the relevant statutory retention periods (e.g. from commercial law and tax law). After the respective period has expired, the relevant data will be routinely deleted. If data is required to fulfill or initiate a contract or if we have a legitimate interest in further storage, the data will be deleted if you no longer need it for these purposes or if you exercise your right of withdrawal or objection.

Your rights

Below you will find information on which data subject rights the applicable data protection law grants you with respect to the data controller with regard to the processing of your personal data:
The right to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data, unless it was collected by us, and the existence of automated decision-making, including profiling and, if necessary, meaningful information about its details.
The right to immediately request the correction of incorrect or incomplete personal data stored by us in accordance with Art. 16 GDPR.
The right to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is required to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend of legal claims.
The right to request that the processing of your personal data be restricted in accordance with Art. 18 GDPR, provided that the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to processing in accordance with Art. 21 GDPR.
The right to receive your personal data, which you have provided to us, in a structured, standard and machine-readable format in accordance with Art. 20 GDPR or to request the transfer to another data controller.
The right to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state of our above registered office or, if applicable, that of your usual place of residence or work.
The right to revoke consent given in accordance with Art. 7 Para. 3 GDPR: You have the right to revoke your consent to the processing of data at any time with future effect. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal;

Right to object

If your personal data are processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right, pursuant to Art. 21 GDPR, to object to the processing of your personal data, insofar as this is done for reasons that arise from your particular situation. Insofar as the objection is directed against the processing of personal data for the purpose of direct advertising, you have a general right to object without the need to specify a special situation.
If you would like to exercise your right of withdrawal or objection, an email to is sufficient.

Right to make alterations

We reserve the right to adapt or update this privacy policy if necessary in compliance with the applicable data protection regulations. Doing this allows us to adapt them to the current legal requirements and take changes in our services into account, e.g. when introducing new services. The most current version applies to your visit.

This privacy policy was last updated on: 02.12.2019