Privacy Policy

We place high value on the protection of your personal data (hereinafter briefly "data"). Hereinafter, we therefore want to inform you in detail about which data we collect and subsequently process.

I. Name and contact data of the responsible person, data protection officer:

The responsible person within the meaning of the privacy provisions for the processing of personal data is:

NEXTEC medical GmbH
Zöllinplatz 4
D-79410 Badenweiler

Managing Director: Dr. Katrin Wiemann, Dr. Johann Zanker

Tel.: +49 7632 8226-70
Fax: +49 7632 8226-555
E-Mail:
Website: https://nextec-medical.com

Contact data protection officer:

NEXTEC medical GmbH
Data Protection Officer
Zöllinplatz 4
D-79410 Badenweiler

Tel.: +49 7632 8226-514
Fax: +49 7632 8226-555
E-Mail:


II. Purpose of the processing of personal data, legal basis and storage duration
:

Hereinafter, we inform you about the data processing taking place on our website (a), the purposes (b), legal basis (c) and the respective storage duration and, if applicable, concrete possibilities of objection and removal (d).

1. Logfiles
a)
When accessing our website, the browser used on your terminal device automatically sends information to the server of our website. This information is temporarily saved in a so-called logfile. Within this process, the following information is collected without your input and stored until its automatic deletion:

  • IP address of the requesting computer
  • date and time of access
  • URL of the accessed website
  • browser information
  • operating system and version of the operating system of your computer
  • data volumes transferred and access status (file transferred, file not found etc.)

b)
The mentioned data are processed by us for the following purposes:

  • establishment of connection and enabling you to use our website and,
  • if necessary, we use the data to prove and assert our and third-party rights in the event of damage or violations of legal regulations, our terms of use and the rights of third parties.

c)
The legal basis for this data processing is Art. 6 par. 1 p. 1 b and f GDPR. Our justified interest results from the above-mentioned data processing purposes. In any case, we do not use the collected data to draw any conclusions about your person.

d)
The data in the logfiles will be deleted at the latest after one year.

2. Social Media Plug-ins
a)
Currently we use the social media plug-in LinkedIn. In doing this, we use the so-called two-click solution. This means that first, in principle, no personal data are forwarded to the provider of the plug-in when you visit our website. However, we give you the option to directly communicate with the provider of the plug-in via the button. If you click on the marked button and thus activate it, the plug-in provider receives the information that you have accessed the respective website of our online offering. Besides, the data mentioned in n° II 1 of this declaration are transmitted. The data are then forwarded irrespective of whether you have an account with the plug-in provider and if you are logged in there. If you are logged in with the plug-in provider, your data collected with us will be directly attributed to the account existing with the plug-in provider. If you confirm the activated button and e.g. link the page, the plug-in provider also saves this information in your user account and communicates it publicly to your contacts. So by activating the plug-in, personal data are transmitted by you to the plug-in provider and saved there. LinkedIn processes both inside and outside of the United States, in a country without an adequate level of data protection.

b)
On our website, we use the above-mentioned social plug-in to increase the awareness of our company.

The plug-in provider saves the data collected about you as user profiles and uses them for advertising, market research and/or adaption of his website to the needs. Such evaluation occurs in particular (also for users not logged in) to present advertising adapted to the needs and to inform other users of the social network about your activities on our website.

c)
The legal basis for the use of the plug-in is Art. 6 par. 1 p. 1 f GDPR. The underlying advertising purpose is to be considered a justified interest within the meaning of the GDPR. We recommend you to regularly log out after using the social network, but especially before activating the respective button, because this allows you to avoid an attribution to your profile with the plug-in provider. In addition, you have a right of objection to the creation of these user profiles for the exercise of which you must contact the plug-in provider.

We have no influence on the collected data and the data processing procedures with the provider of the plug-in. The responsibility lies with him alone. You can infer additional information on the data processing there, in particular on the legal basis and storage duration, from the privacy statements of the provider. There you can also receive additional information on your respective rights and possible settings for the protection of your privacy. You can find further information regarding the processing of your data by LinkedIn and your rights towards LinkedIn at the homepage of the provider.

3. Contact form
a)
On our website, there is a contact form that can be used for taking contact electronically. If you use this option, the data entered in the input mask are transmitted to us and saved. The mandatory details that must be completed to take contact electronically are marked by (*). In the contact form, this is your email address. If you provide us any data in addition to that (name, etc.), this occurs voluntarily.

b)
The data are processed to allow for making contact, to process your request, to avoid a misuse of the contact form and to guarantee the security of our IT systems.

c)
The above-mentioned purpose represents the justified interest in the processing of the data. If the email contact intends to prepare the conclusion of a contract, the additional legal basis for the processing is Art. 6 par. 1 p. 1 b GDPR.
The legal basis for the processing of the data voluntarily provided to us by you is Art. 6 par. 1 p. 1 a GDPR.

d)
see Section “Deletion” below.


4. Google-Maps
a)
On our website, we use the offer of Google Maps. Here we also use the above-mentioned two-click solution (II. n° 4). The above-mentioned data will only be transferred when you activate the service. We have no influence on this data transmission. This occurs irrespective of whether Google provides a user account on which you are logged in or if there is no user account. If you are logged in at Google, your data are directly attributed to your account.

b)
We use Google Maps to show you interactive maps directly in the website and to allow you to comfortably use the map function. Google saves your data as user profiles and uses them for advertising, market research and/or adaption of its website to the needs. Such an evaluation occurs in particular (even for users not logged in) to present advertising adapted to the needs and to inform other users of the social network about your activities on our website.

c)
The legal basis for the use of the plug-in is Art. 6 par. 1 p. 1 f GDPR. The underlying purpose of an interactive description of the itinerary to our company is to be considered the justified interest within the meaning of the GDPR. We recommend you to regularly log out after using your Google account because this allows you to avoid an attribution to your profile with the plug-in provider Google.

You have a right to objection to the creation of these user profiles for the exercise of which you must contact Google. We have no influence on the collected data and data processing procedures with Google Inc. The responsibility lies with it alone.

You can obtain additional information on the data processing, in particular on the legal basis and storage duration, in the privacy statements of the provider at this homepage. Google processes your data in the United States, in a country without an adequate level of data protection.


III. Cooperation with contract processors and third parties:

For the processing of your data, we partially use external service providers (contract processors). They have been carefully selected and commissioned by us, are bound to instructions and regularly controlled. They are external service providers who support us technically (web designers, programmers). This is done on the basis of processing contracts according to Art. 28 GDPR.
Apart from that, we only forward your data to any third parties if:

  • you have given your explicit consent to that according to Art. 6 par. 1 p. 1 a GDPR
  • the transmission is necessary according to Art. 6 par. 1 p. 1 f GDPR to assert, exercise or defend legal rights and there is no reason to assume that you have a prevailing interest worthy of protection in the nondisclosure of your data
  • there is a legal obligation to disclosure according to Art. 6 par. 1 p. 1 c GDPR
  • this is legally admissible and necessary according to Art. 6 par. 1 p. 1 b GDPR for the fulfilment of contractual relationships with you

Service providers are only commissioned in a third country if the special preconditions according to Art. 44 et seq. GDPR are fulfilled.


IV. Deletion:

The data are deleted as soon they are no longer required for the achievement of the purpose of their collection or after expiry of any statutory retention period. As for the data from the input mask of the contact form, this is the case when the respective conversation with you is finished. The conversation is finished when the circumstances indicate that the concerned issue is finally clarified.

Besides, you can revoke your consent to the processing of the data voluntarily provided any time. For this, please simply contact us using the contact information provided in n° I. In such case, the conversation cannot be continued.


V. Rights of the concerned persons:

You have the right:

  • to claim information about the personal data processed by us according to Art. 15 GDPR. In particular, you can claim information about the purposes of processing, the category of personal data, the category of receivers to which your data are or have been disclosed, the planned storage duration, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right to complaint, the origin of your data, as far as they have not been collected by us, and about the existence of an automatic decision-making including profiling and, if applicable, conclusive information on their details
  • to claim the immediate correction or the completion of your personal data saved with us according to Art. 16 GDPR
  • to claim the deletion of your personal data saved with us according to Art. 17 GDPR, unless the processing is necessary to exercise the right to the freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend any legal rights
  • to demand the restriction of the processing of your personal data according to Art. 18 GDPR, as far as the correctness of the data is contested by you, the processing is unlawful, but you refuse their deletion and we do not need the data anymore, but you need them to assert, exercise or defend any legal rights or you have objected to the processing according to Art. 21 GDPR
  • to obtain your personal data you have provided to us in a structured, customary and machine-readable format or to demand their transmission to another responsible person according to Art. 20 GDPR
  • to complain with a supervisory authority according to Art. 77 GDPR. In general, you can contact the supervisory authority of your usual place of residence or job location or of the location of the presumed breach for that

VI. Right of refusal:

As far as your personal data are processed on the basis of justified interests according to Art. 6 par. 1 p. 1 f GDPR, you are entitled to object to the processing of your personal data according to Art. 21 GDPR, as far as there are reasons for that resulting from your special situation; this also applies to a profiling based on these provisions. We will then no longer process the personal data concerning you, unless we can prove compulsory reasons for the processing worthy of protection which outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend any legal rights.

Of course, you can object to the processing of your personal data for purposes of advertising and data analysis anytime. This also applies to the profiling as far as it is connected to such direct advertising.


VII. Right of revocation of the consent according to privacy law:

According to Art. 7 par. 3 GDPR, you have the right to revoke your given consent vis-à-vis us anytime. The consequence of this is that we may not continue the data processing which was based on this consent any longer for the future. The lawfulness of the processing conducted due to the consent until its revocation is not affected thereby.


VIII. Up-to-dateness and changes of this privacy statement:

This privacy statement corresponds to the status of July 2022. Due to the further development of our website and offers on it or due to changed legal or official provisions, it can become necessary to change this privacy statement.