Source: https://www.dii-healthcare.com/contact/data-security-liability.html
Timestamp: 2019-04-20 06:36:58+00:00

Document:
as well as for other administrative purposes.
The legal basis for data processing is Art. 6 para. 1 sentence 1 f GDPR (legitimate interest). Our legitimate interest follows the purposes listed above for data collection. Under no circumstances do we use the collected data to draw personal conclusions about you..
If you agreed to receive our newsletter according to Art. 6 para. 1 p. 1 lit. a GDPR, we will use your e-mail address to regularly send you our newsletter.
The following notes will inform you about the content of our newsletter as well as the registration, dispatch and statistical evaluation procedures and your rights of objection. By subscribing to our newsletter, you agree to the receipt of the newsletter and the described procedures.
We send newsletters, e-mails and other electronic notifications containing promotional information (hereinafter "newsletters") only with the consent of the recipients or a legal permission. If the contents of a newsletter are specifically described within the scope of the registration, they are decisive for the consent of the users. Our newsletters contain information on medical topics and current market studies, especially in the field of medical market research, as well as on our company. This may include references to blog entries, lectures or workshops, our services or online appearances.
Subscription to our newsletter takes place in a so-called double opt-in procedure. This means that after registration you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no one can log in with other e-mail addresses.
Subscriptions to the newsletter are logged in order to be able to prove the registration process in accordance with legal requirements. This includes the storage of the login and confirmation time, as well as the IP address.
2.2.4 Use of the mailing service "MailChimp"
We send newsletters via "MailChimp", a mailing platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. The e-mail addresses of our newsletter recipients, as well as their further data later described in these notes, are stored on the servers of MailChimp in the USA. MailChimp uses this information to send and evaluate the newsletter on our behalf. Furthermore, MailChimp can use this data to optimize or improve its own services, e.g. to technically optimize the sending and presentation of the newsletter or for economic purposes, in order to determine from which countries the recipients come. However, MailChimp does not use the data of our newsletter recipients to write them on its own behalf or pass the data on to third parties.
We trust in the reliability and IT as well as data security of MailChimp. MailChimp is certified under the US-EU data protection agreement "Privacy Shield" and thus commits to comply with EU data protection regulations. Furthermore, we have concluded a data processing agreement with MailChimp. This is a contract in which MailChimp undertakes to protect the data of our users, to process them on our behalf in accordance with their data protection regulations and in particular not to pass them on to third parties. The data protection regulations of MailChimp can be viewed here.
To subscribe to the newsletter, it is sufficient to enter your e-mail address. Optionally, we ask you to enter your first and last name and other data (name of your clinic, department, your position and your interests). This information is only used to personalize the newsletter and to adapt the contents of the newsletter to the interests of our readers.
The newsletters contain a so-called "web-beacon", i.e. a pixel-sized file that is retrieved from the server of MailChimp when the newsletter is opened. Within the scope of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval are initially collected. This information is used to technically improve the services based on the data of the target groups and their reading behavior.
Statistical evaluations also include determining if the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our desire nor that of MailChimp to observe individual users. The evaluations serve to understand the reading habits of our users and to adapt our content or to send different content according to the interests of our users.
You can cancel the receipt of our newsletter at any time, i.e. revoke your consent. You will find a link to cancel the newsletter at the end of each newsletter. Alternatively, you can send your revocation request at any time to Welcome@dii-healthcare.com.
With your cancellation of the newsletter the statistical evaluations expires simultaneously. A separate cancellation of the newsletter via MailChimp and the statistical evaluation is not possible.
We would also like to point out that you can object to the future processing of your personaldata at any time in accordance with the statutory provisions of Art. 21 GDPR. The objection may be lodged in particular against processing for direct marketing purposes.
In accordance with the provisions of the General Data Protection Regulation (GDPR) in force from 25 May 2018, we inform you that your consents to the sending of e-mail addresses are based on Art. 6 para. 1 lit. a, 7 GDPR and § 7 para. 2 no. 3 and para. 3 UWG. The use of the service provider MailChimp, carrying out statistical surveys and analyses as well as logging of the registration procedure, are based on our legitimate interests pursuant to Art. 6 Para. 1 lit. f GDPR. We are interested in using a user-friendly and secure newsletter system that serves both our business interests and the expectations of users.
We offer you the opportunity to contact us using a form provided on our website. This form requires a valid e-mail address so that we know who sent the request and can respond to it. Further information can be provided voluntarily.
The data processing for the purpose of contacting us is in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntary consent. If contact is made to carry out pre-contractual measures (e.g. request for an offer), the data will be processed on the basis of Art. 6 para. 1 sentence 1 lit. b GDPR.
The personal data collected by us for the purpose of using the contact form will be automatically deleted after your request has been processed, except if the request concerns business correspondence (received commercial letter - obligation to keep records in accordance with § 257 Paragraph 1 No. 2 HGB, obligation to keep records for commercial and business letters § 147 Paragraph 1 No. 2, Paragraph 3 AO for 6 years).
After contacting you for the means of market research, our moderators store the following information in our project database: your name, your phone number, your email address. You have the right to object to the storing of this data. In case of incentive procedures after successfully done interviews, data information intelligence is obliged to store payment information like bank account data or private email addresses, tied to project information the incentive has been concerned with.
The results of all surveys are presented exclusively in anonymous form. No one can tell from the results by which person or institution the information was provided. Within the framework of our market and social research investigations, no personal data is passed on to third parties. Once the respective study has been completed, a personal reference can no longer be established. All employees of data information intelligence are contractually bound by data secrecy and social secrecy. The obligation to maintain secrecy shall continue to apply after the termination of the activity. In cases of doubt regarding data protection, the employee concerned must contact the office from which he received his order and the data protection officer of data information intelligence. Data information intelligence has installed various technical and organisational measures in accordance with Article 32 DS-GMO. An in-house data protection officer has been appointed.
Your personal contact data will be electronically stored in our CRM when you provide it to us while having full knowledge of our intent. We will only use these data for our own advertising. You have the right to withdraw at any time. We will never provide your data to third parties unless we are legally obliged to do so.
it is legally permissible, according to Art. 6 para. 1 sentence 1 lit. b GDPR and required for the settlement of contractual relationships with you.
The data processed by cookies is required for the aforementioned purposes in order to protect our legitimate interests and those of third parties pursuant to Art. 6 Para. 1 S. 1 lit. f GDPR. Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, the complete deactivation of cookies can lead to the fact that you cannot use all functions of our website.
to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular you may obtain information about the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if these have not been collected by us, and the existence of automated decision-making including profiling and, if applicable, the processing of your data.
to complain to a supervising authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervising authority of your usual place of residence or workplace or our office.
Our website uses the common SSL (Secure Socket Layer) method together with the highest level of encryption supported by your browser. Usually this is a 256 bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. Whether a single page of our website is transmitted in encrypted form is indicated by the closed display of the key or lock symbol in the lower status bar of your browser.
Generally, E-mails that are sent over the Internet without additional security measures (encryption) are as non-confidential as a postcard. If you communicate with us by e-mail without additional security, we assume that you are aware of this technical circumstance and allow us to answer you also by simple e-mail.
However, data security in our communication by e-mail is hugely important to us. Our provider automatically offers you secure e-mail communication via your e-mail provider.
Better and therefore recommended encryption (cryptography) of data transmission is possible with asymmetric encryption after the exchange of public keys. We are happy to provide you with our public PGP key (PGP: Pretty Good Privacy). You can use this key to encrypt messages.
Please import the public key into your local OpenPGP key management to encrypt a message to us.
This data protection declaration is currently valid and has the status 25.05.2018.

References: Art. 6
 Art. 6
 Art. 21
 Art. 6
 § 7
 Art. 6
 Art. 6
 Art. 6
 § 257
 § 147
 Art. 6
 Art. 6
 Art. 15
 Art. 77