Source: https://www.fahl-medizintechnik.de/en/footer-menu/privacy-policy/
Timestamp: 2019-04-18 18:21:40+00:00

Document:
We generally only collect and use personal data if this is required to provide a functional website as well as our contents and services. We only routinely collect and use our users' personal data after the user's consent. An exception is made where obtaining prior consent is not possible for factual reasons and processing the data is permitted by law.
If we require the data subject's consent for processing operations, the legal basis is Art. 6 Para. 1 lit. a EU General Data Protection Regulation (GDPR).
If personal data are processed because this is necessary for the performance of a contract to which the data subject is party, the legal basis is Art. 6 Para. 1 lit. b GDPR. This also applies to processing operations required to perform precontractual processes. If personal data are processed because this is required to comply with a legal obligation by which our company is bound, the legal basis is Art. 6 Para. 1 lit. c GDPR.
If vital interests of the data subject or another natural person require personal data to be processed, the legal basis is Art. 6 Para. 1 lit. d GDPR. If the processing is required to pursue a legitimate right of our company or a third party and the interests, fundamental rights and fundamental freedoms of the data subject do not override the former interest, the legal basis for the processing is Art. 6 Para. 1 lit. f GDPR.
The data subject's personal data will be erased or blocked as soon as the purpose for the storage no longer applies. Data may furthermore be stored if European or national legislation provides for this in EU regulations or laws or other provisions to which the controller is subject. The data may also be blocked or erased if a storage period prescribed by the mentioned rules expires unless it is required to continue to store the data in order to conclude or perform a contract.
Each time our internet site is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The IP addresses are stored in anonymised form. To that end, the last three numbers are removed, i.e. 127.0.0.1 is changed to 127.0.0.*. IPv6 addresses are also anonymised. Details regarding the directory protection user that was used are anonymised after one day.
The data are also stored in the log files of our system. These data are not stored together with other personal data concerning the user.
The system has to temporarily store the IP address so that the website can be delivered to the user's computer. To that end, the user's IP address must be stored for the duration of the session.
Storage in log files is required to ensure the functionality of the website. We furthermore use the data to optimise the website and ensure the security of our IT systems. The data will not be analysed for marketing purposes in this context.
These purposes also constitute our legitimate interest in processing the data pursuant to Art. 6 Para. 1 lit. f GDPR.
The data are deleted as soon as they are no longer required to achieve the purpose of their collection. In the case of data being recorded to provide the website, this is the case once the relevant session is terminated.
In the case of data being stored in log files, this is the case after seven days at the latest. Storage beyond that is possible. In this case, the users' IP addresses are deleted or pseudonymised so that it is no longer possible to identify the accessing client.
Error logs recording instances of failed site access are deleted after seven days. In addition to the error messages, they contain the accessing IP address and, depending on the error, the accessed webpage.
Collecting the data to provide the website and storing the data in log files is a mandatory requirement for operating the internet site. Therefore, the user cannot object.
We have decided to provide videos on our internet site. Videos are a good way to better convey contents and make complicated processes more comprehensible. For embedding our videos in our internet site, we use the technology and components by the company YouTube. YouTube permits uploading and retrieving all kinds of videos free of charge.
YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Each visit to a sub-page of our internet site where we have embedded a video provided via YouTube connects the user's internet browser to the servers provided by YouTube on the internet via the YouTube interface for downloading the video contents. Within the context of this process, YouTube and Google learn which concrete sub-page of our homepage the data subject visits.
If the data subject has a registered YouTube account and is logged on with this account whilst visiting our website, YouTube can trace the query back to the data subject's specific user account. If this is not desired, the data subject can prevent it by logging off from YouTube before visiting our internet site.
The user data collected this way are pseudonymised by technical means. Therefore, it is no longer possible to trace the data back to the accessing user. The data are not stored together with other personal data relating to the users.
When users access our website, a banner informs them that cookies are used for analytical purposes, and reference to this Data Privacy Statement is made. In this context, they are also informed about how storing cookies can be disabled in the browser settings.
When users access our website, they are informed about the fact that cookies are used for analytical purposes, and their consent to the processing of the personal data used in this context is obtained. In this context, reference to this Data Privacy Statement is also made.
The legal basis for the processing of personal data using cookies that are required from a technological point of view is Art. 6 Para. 1 lit. f GDPR.
The legal basis for the processing of personal data using cookies for analytical purposes - provided that the user has consented - is Art. 6 Para. 1 lit. a GDPR.
The purpose of using cookies that are required from a technological point of view is to make websites easier to use for the users. Some functions of our internet site cannot be offered unless cookies are used. For these, it is necessary to re-identify the browser after switching between pages.
The user data collected by cookies that are required from a technological point of view are not used to create user profiles.
The purpose of using analytical cookies is to improve the quality of our website and its contents. Analytical cookies tell us how the website is used, and we can thus continually optimise what we offer.
Cookies are stored on the user's computer and transmitted from it to our site. Therefore, you as user also have full control over the user of cookies. By changing settings in your internet browser, you can deactivate or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that not all functions of the website may be used fully anymore.
Please send me more information on the product selected. I hereby consent to Andreas Fahl Medizintechnik-Vertrieb GmbH contacting me in this regard.
I am interested in a personal consultation and consent to being contacted by Andreas Fahl Medizintechnik-Vertrieb GmbH via the preferred means stated above.
By submitting this form, I consent to Andreas Fahl Medizintechnik-Vertrieb GmbH using my data in the ways stated above, in particularly with regard to contacting me in person. I confirm that I have read and understood the Data Privacy Statement.
Your consent to processing the data will be obtained during the submission process, and reference to this Data Privacy Statement is made.
Alternatively, it is possible to contact us using the e-mail address provided. In this case, the user's personal data transmitted along with the email are stored.
In this context, data will not be shared with third parties. The data are solely used for processing the conversation.
The legal basis for processing the data - provided that the user has consented - is Art. 6 Para. 1 lit. a GDPR. The legal basis for processing the data transmitted within the context of sending an e-mail is Art. 6 Para. 1 lit. f GDPR. If the objective of the contact by e-mail is concluding a contract, an additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR.
The sole purpose of processing the personal data from the form is to establish contact. If we are contacted by e-mail, this also constitutes the required legitimate interest in processing the data. The other personal data processed during the submission process serve to prevent misuse of the contact form and to ensure the security of our IT systems.
The data are deleted as soon as they are no longer required to achieve the purpose of their collection. For the personal data entered into the contact form and the ones sent by e-mail, this is the case once the relevant conversation with the user is completed. The conversation with the user is completed when it can be deduced from the circumstances that the relevant issue has been resolved conclusively.
The personal data additionally collected during the submission process are deleted after a time period of seven days at the latest.
The user at any time has the option to withdraw his/her consent to the processing of personal data. If the user contacts us by e-mail, s/he can at any time object to his/her personal data being stored. In such a case, the conversation cannot be continued. This declaration of consent is voluntary and can be withdrawn at any time in writing by e-mail to vertrieb@fahl.de or by post to Andreas Fahl Medizintechnik-Vertrieb GmbH, August-Horch-Straße 4a, 51149 Cologne, using the subject line "Withdrawal of consent". All personal data stored within the context of the contact are deleted in this case.
You can request from the controller confirmation as to whether personal data concerning you are being processed by us.
(8) the existence of automated decision-making, including profiling, referred to in Art. 22 Para. 1 and 4 GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
You have the right to request to know whether personal data concerning you are transferred to a third country or to an international organisation. In this context, you can request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR relating to the transfer.
You have the right to obtain from the controller rectification and/or completion provided that processed personal data concerning you are inaccurate or incomplete. The controller shall rectify the data without undue delay.
(4) if you have objected to processing pursuant to Art. 21 Para. 1 GDPR pending the verification whether the legitimate grounds of the controller override those of you.
If processing of the personal data concerning you has been restricted, these data may, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the union or of a member state.
If the restriction of processing has been restricted as per the above requirements, you will be informed by the controller before the restriction is lifted.
(2) You withdraw your consent on which the processing was based according to Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR and there is no other legal basis for the processing.
Where the controller has made the personal data concerning you public and is obliged pursuant to Art. 17 Para. 1 to erase the personal data, the controller, taking account of available technology and the cost of implementation, takes reasonable steps, including technical measures, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
If you have exercised your right to rectification, erasure or restriction of the processing towards the controller, the controller is obliged to communicate this rectification or erasure of data or restriction of processing to each recipient to whom personal data concerning you have been disclosed, unless this proves impossible or involves disproportionate effort.
You are entitled to request from the controller to be notified of these recipients.
In exercising this right, you furthermore have the right to have the personal data transmitted directly from one controller to another, where technically feasible. This shall not adversely affect the rights and freedoms of others.
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Art. 6 Para. 1 lit. e or f GDPR, including profiling based on those provisions.
The controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing contributes to the establishment, exercise or defence of legal claims.
Where personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
You have the right to withdraw your consent under data protection law at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
However, these decisions shall not be based on special categories of personal data pursuant to Art. 9 Para. 1 GDPR, unless Art. 9 Para. 2 lit. a or g applies and suitable measures to safeguard the rights and freedoms and your legitimate interests are in place.
In the cases referred to in (1) and (3), the controller implements suitable measures to safeguard rights and freedoms and your legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 17
 Art. 6
 Art. 9
 Art. 9