Source: https://www.hipp-endoskopservice.com/en/meta/privacy-policy
Timestamp: 2019-04-26 11:39:55+00:00

Document:
The protection of your personal data is important to us and therefore we would like to give you the simplest and most accurate information possible on contact options and about the data concerned.
First you will receive the following information about the possibilities for contacting our data protection officer, as well as options for encrypted contact. Then we introduce the legal and technical terms that will be used later. After that you will get an overview of the rights of the person concerned. Following that you will find the details of the person responsible. And finally the technologies, services and our handling will be addressed.
Our preferred contact option is email. But you can also of course contact the data protection officer by post or phone. If you want to encrypt your email to our data protection officer we recommend that you read the following section.
When an email is received during normal working hours, we confirm receipt of the email the same day. If you do not receive confirmation, please contact us by phone.
If you make a postal request, we will still send you a confirmation of receipt on the day of delivery, but no later than one day after delivery. If you do not receive confirmation, please contact us by phone.
For a telephone enquiry you are kindly requested to call the number of our data protection partner, eye-i4 GmbH, directly.
We are advocates of encrypted transmission by email. Therefore, to maintain confidentiality and integrity, we offer you the possibility of encrypting your requests to the data protection officer.
If you would like fingerprint verification please, contact our data protection partner, eye-i4 GmbH, by phone.
If you have further questions about encryption you can contact our data protection officer.
“Person responsible” means the natural or legal person, authority, institution or other body which alone or together with others decides on the purposes and means of processing personal data; if the purposes and means of this processing are determined by Union law of the law of the Member States the person responsible or the specific criteria for their appointment may be provided for under Union law or the law of the Member States.
“Processing” means any process carried out with or without the aid of automated procedures, or any such series of operations relating to personal data, such as collecting, recording, organising, ordering, storing, adapting or altering, selecting, retrieving, using, disclosing through transmission, dissemination, or any other form of provision, matching or linking, restriction, deletion or destruction.
“Processor” means a natural or legal person, authority, institution or other body which processes personal data on behalf of the person responsible.
The “recipient” is a natural or legal person, authority, institution or other body to whom personal data are disclosed, whether or not it is a third party. However, authorities which may receive personal data in connection with a particular investigation according to Union or Member State law are not considered to be recipients; the processing of these data by said authorities takes place in accordance with the applicable data protection rules according to the purposes of the processing.
“Third Party” means a natural or legal person, authority, institution or other body, besides the data subject, the person responsible, the processor and the persons authorised under the direct responsibility of the person responsible or the processor to process the personal data.
“Consent” of the data subject means any expression of will which is voluntarily given for the particular case, in an informed manner and unambiguously given, in the form of a statement or other unambiguous confirmatory act, with which the data subject indicates that they are in agreement with the processing of the personal data relating to them.
“Breach of personal data protection” means a breach of security which leads to destruction, loss or alteration, whether inadvertent or unlawful, or to the unauthorised disclosure of, or unauthorised access to, personal data which are transmitted, stored, or otherwise processed.
“Health Data” means personal data relating to the physical or mental health of a natural person, including the provision of health services, and from which information about their health status emerges.
“Company” means a natural or legal person which carries on an economic activity, regardless of its legal form, including partnerships or associations which regularly engage in economic activity.
The “supervisory authority” is an independent public authority established by a Member State in accordance with Article 51.
The “relevant and well-founded appeal” means an appeal with regard to whether or not there has been a breach of this regulation, or whether the intended action against the responsible person or processor is in accordance with this regulation, which appeal clearly demonstrates the scope of the risks posed by the draft decision in relation to the fundamental rights and freedoms of data subjects and, where appropriate, the free movement of personal data within the Union.
The “file system” is any structured collection of personal data that is accessible according to certain criteria, irrespective of whether this collection is managed centrally, in a decentralised manner, or organised according to functional or geographical criteria.
Cookies are text files that are stored on your device by a website using your browser. These text files can be aimed at implementing technical issues such as a shopping cart mechanism, or also to infect your visitor behaviour. For this purpose the text files can be provided with identification features and additional information.
You have the option of preventing the storage of cookies in the browser of your terminal device. If cookies are deactivated, there may be technical restrictions on the use of the website.
Server logs are log files which are created by the web server and document access to a website. A log entry can contain a variety of information such as access time, browser type, the IP address of the visitor, etc.
The referrer indicates that which brought someone to the page of the person responsible. With server logs, for example, the referrer can be read out.
The person affected data has the right to obtain information about the personal data held about the person affected, if the data was collected from person affected or if the data were not collected from the person affected. Corresponding is regulated in section Art. 13 and 14 DSGVO.
The person affected has the right to ask the person responsible for confirmation whether relevant personal data relating to him are processed; if this is the case, he has a right to information about this personal data and to further information pursuant to Art. 15 DSGVO.
The person affected has the right to immediately demand the correction of incorrect data concerning him from the person responsible.
In consideration of the purposes of processing, the person affected has the right to request the completion of incomplete personal data, including by means of a supplementary statement.
The person affected the right to ask the person responsible for the personal data concerned to be deleted immediately, and the person responsible is obliged to delete personal data immediately if one of the reasons in accordance with Art. 17 DSGVO applies.
The person affected has the right to demand that the person responsible for processing restricts processing, if one of the requirements of Art. 18 DSGVO is fulfilled.
The person responsible shall notify all recipients, whose personal data have been disclosed, of any correction or deletion of the personal data or a restriction of the processing in accordance with Art. 16, Art. 17 para. 1 and Art. 18 DSGVO, unless this proves to be impossible or is associated with a disproportionate effort.
The person responsible will inform the person affected about these recipients, if the person responsible requests this.
The person affected has the right to obtain the personal data concerning him, which he has provided to a person responsible, in a structured, common and machine-readable format and he has the right to transfer these data to another person without hindrance by the person responsible, to whom the personal data were provided.
The person affected has the right, for reasons resulting from his particular situation, to object to the processing of personal data relating to him in accordance with Article 6 paragraph 1 letter e or f; this also applies to profiling based on these provisions. The person responsible will no longer process the personal data unless he can demonstrate compelling legitimate grounds for processing that outweigh the interests, rights and freedom of the person affected, or the processing serves for the purpose of enforcing, pursuing or defending legal claims.
In accordance with Art. 77 DSGVO, you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or the seat of the person responsible.
You can obtain further information regarding the person responsible from the imprint.
When using our website, cookies are stored on your computer. You can configure your browser settings according to your wishes and e.g., refuse acceptance of third party cookies. Please note that you will then not be able to use all the functions of this website.
Transient cookies are automatically cancelled when you close your browser. This includes session cookies in particular. These store a so-called “session ID,” by which various enquiries from your browser are assigned to a common session. Thus your computer can be recognized when you return to our website. The session cookies are cancelled when you log out or close your browser.
this is legally permissible and required under article 6 section 1 S.1 b) DSGVO for the processing of contractual relationships with you.

References: Art. 13
 Art. 15
 Art. 17
 Art. 18
 Art. 16
 Art. 17
 Art. 18
 Art. 77