Source: https://www.meding.com/english/privacy-policy.html
Timestamp: 2019-04-19 02:28:56+00:00

Document:
I. Who is the responsible body (“controller” in terms of the GDPR) and how can I contact the data protection officer?
You can contact our data protection officer which is JURANDO GmbH (https://www.jurando.de) under datenschutz@meding.com or by postal letter to our address; in the latter case, please add: “Att. data protection officer”.
The legal basis for this is Art. 6 subs. 1 f) GDPR; our legitimate interest consists in the afore-mentioned purposes.We erase this data after seven days at the latest. We will only store data beyond that time after the personal data has been erased or anonymized. In the case of IP addresses, anonymization can be procured by appropriate shortening of the IP address.
When you use our contact form, we will use the data you have transferred to us; the only information you must necessarily disclose to us is a valid email address, all other information is disclosed to us voluntarily to enable us to answer your request. The information you disclose to us may be stored in a Customer Relationship Management System ("CRM system") or similar software.
Data processing for the purposes of communication is based on Art. 6 subs. 1 b) GDPR if and to the extent that your request pertains to the performance of contractual duties or initial approaches for contract conclusion (“taking steps prior to entering into a contract”). In other cases, the legal basis is Art. 6 subs. 1 f) GDPR; our legitimate interest consists in the purposes mentioned above.
The personal data we collect when you use the contact form are deleted automatically after your request has been settled unless we are required by law to retain the data or we need the data for contract performance. You may also at any time object to the processing when the processing is based on a legitimate interest.
When you place an order in our web shop, you have to disclose personal data for contract conclusion that is required for executing your order. Required fields are marked as such, disclosure of other data is voluntary. We process the data you have disclosed to us for the purpose of executing your order. In this context, we also disclose your data to our main bank and/or payment services provider as well as to the commissioned carrier or shipping company.
You can also open a customer account. In this case, we store your data for further purchase orders you may place with us in the future. You may at any time delete your customer account in the customer area.
The legal basis for this is Art. 6 subs. 1 b) GDPR.
We further process your data to provide you with information on other interesting products from our product range. The legal basis for this is Art. 6 subs. 1 f) GDPR, § 7 subs. 3 of the German Unfair Competition Act (Gesetz gegen den unlauteren Wettbewerb - “UWG“).You may at any time object to, and thus prohibit, the use of your data for this purpose.
We are obliged under commercial and tax law to store your address, payment and order data for a period of ten years. We will however restrict the processing after two years which means that your data is then only retained and used to comply with legal obligations.
We currently use the following social media plug-ins: [Facebook, Google+, Twitter, Xing, T3N, LinkedIn, Flattr, Pintrest]. For such purpose, we use the so-called double-click solution or another technically equivalent solution. This means that, when you visit our website, as a rule, no personal data is transferred to the plug-in provider at first. You can recognize the provider by the mark in the box above the provider’s initial letter or by its logo. We offer you the possibility to communicate directly with the plug-in provider via the button. Only when you click the marked field and thus activate it, the plug-in provider is informed that you have accessed the relevant website of our online presentation. In addition, the data collected during your visit to our website is transferred, too. In the case of facebook and XING, pursuant to the information provided by the relevant providers in Germany, the IP address is anonymized immediately after collection. This means that, when you activate the plug-in, your personal data is transferred to the relevant plug-in provider and stored there (in the case of US-American providers in the USA). Since the plug-in provider collects data especially by cookies, we recommend that you delete all cookies in the security settings of your browser before you click the greyed-out box.
We have no influence on the collected data or data processing activities nor are we aware of the scope of data collection, the purposes of the processing and the duration of data storage. We do not know about deletion of the collected data by the plug-in provider either.
The plug-in provider stores the data collected from you in the form of user profiles and uses them for advertising and market research purposes and/or to tailor its website to the users’ demands. The analysis in particular serves to display customized advertisements (also for users who are not logged in) and to inform other users of the social network about your activities on our website. You have the right to object to, and thus prevent, the preparation of user profiles; if you want to exercise this right, you have to address the relevant plug-in provider. We offer you the possibility, via the plug-ins, to interact with the social networks and other users which enables us to improve our presentation and services and offer you as the user a more interesting design.
The legal basis for the use of the plug-ins is Art. 6 subs. 1 f) GDPR; our legitimate interest consists in the marketing purposes we pursue. When you click the plug-in and thus give your consent, the legal basis is Art. 6 subs. 1 a) GDPR.
The data is transferred regardless of whether or not you have an account with the plug-in provider and whether or not you are logged-in there. When you are logged-in to the plug-in provider, the data we have collected from you is immediately allocated to your account with the plug-in provider. When you click the activated button and, for instance, set a link on the page, the plug-in provider will also store this information in your user account and publicly communicate it to your contacts. We recommend that you generally log out when you have visited a social network, especially before you activate the social media plug-in button to prevent any allocation to your profile with the plug-in provider.
Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook joined the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=de. Google joined the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter joined the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Xing AG, Gänsemarkt 43, 20354 Hamburg, DE / Germany; http://www.xing.com/privacy.
LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy. LinkedIn joined the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Flattr Network Ltd. with registered office in: 2nd Floor, White bear yard 114A, Clerkenwell Road, London, Middlesex, England, EC1R 5DF, Great Britain; https://flattr. com/privacy.
We embed videos from the “Vineo” platform. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. The data collected during your visit to our website is transferred to this provider. In particular, the IP address needs to be transferred to enable the provider to transfer the contents.
The legal basis for embedding the Vimeo videos is Art. 6 subs. 1 f) GDPR. Our legitimate interest consists in the marketing purposes we pursue.
Further information on the purpose and scope of data collection and data processing by the plug-in provider is available in the provider’s privacy policies which also contain further information on your rights and the possible settings to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google processes your personal data also in the USA and joined the EU-US Privacy Shield, https://www.privacy-shield.gov/EU-US-Framework.
This website uses the online advertising service Google AdSense which allows us to show you advertisements which are tailored to your interests. We thereby pursue the objective to show you advertisements which might be interesting for you to offer you a more interesting website presentation. For such purpose, statistical information is collected about you which is processed by our advertising partners. The advertisements can be identified as such by the note “Google advertisements” shown in the relevant advertisement.
When you visit our website, Google is informed that you have accessed our website. In this context, Google uses a web beacon to place a cookie on your computer. The data collected during your visit to our website is transferred. We have no influence on the data collected nor do we know about the scope of data collection and the duration of data storage. Your data is transferred to the USA and analysed there. When you are logged in to your Google account, your data can be directly allocated to your account. If you do not want your data to be allocated to your Google profile, you have to log out. It is also possible that this data is disclosed and transferred to contractual partners of Google, third parties and authorities.
You can prevent the installation of cookies by Google AdSense in different ways: a) you can set your browser software to prevent the installation of cookies; the suppression of third-party cookies in particular prevents receipt of advertisements from third-party providers; b) you can deactivate interest-based Google advertisements via the link http://www.google.de/ads/preferences; this setting will however be deleted when you delete your cookies; c) you can deactivate interest-based advertisements from providers which are part of the self-regulation campaign “About Ads” via the link http://www.aboutads.info/choices; this setting will however be deleted when you delete your cookies; d) you can permanently deactivate the cookies in your browsers Firefox, Internet Explorer or Google Chrome under the link http://www.google.com/settings/ads/plugin.
Google joined the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
http://www.google.com/intl/de/policies/privacyandhttps://services.google.com/sitestats/de.html. Alternatively, you can visit the website of Network Advertising Initiative (NAI) at http://www.networkadvertising.org. Google joined the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
The marketing tools we use cause your browser to automatically establish a direct connection with the Google server. We have no influence on the scope and further use of the data which Google collects by this tool, and therefore we inform you about what we actually know: Where DoubleClick is used, Google is informed that you have accessed the relevant part of our Internet presentation or clicked an advertisement we have posted. If you are registered with a Google service, Google can allocate your visit to your account. Even if you are not registered with Google or are not logged in to Google, the provider might identify and store your IP address.
You can prevent participation in this tracking procedure in different ways: a) you can set your browser software to prevent the installation of cookies; the suppression of third-party cookies in particular prevents receipt of advertisements from third-party providers; b) you can deactivate conversion tracking cookies by setting your browser to block cookies from the domain “www.googleadservices.com“, https://www.google.de/settings/ads; this setting will however be deleted when you delete your cookies; c) you can deactivate interest-based advertisements from providers which are part of the self-regulation campaign “About Ads” via the link http://www.aboutads.info/choices; this setting will however be deleted when you delete your cookies; d) you can permanently deactivate this function in your browsers Firefox, Internet Explorer or Google Chrome under the link http://www.google.com/settings/ads/plugin.
https://www.google. de/intl/de/policies/privacy. Alternatively, you can visit the website of Network Advertising Initiative (NAI) at http://www.networkadvertising.org. Google joined the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
The legal basis is Art. 6 subs. 1 b) GDPR as well as § 26 of the German Federal Data Protection Act (Bundesdatenschutzgesetz - BDSG). If you voluntarily transfer to us special categories of personal data such as health data or religion, also Art. 9 subs. 2 b) GDPR serves as legal basis.
Until that time, the data is stored to answer any possible queries relating to the application procedure and to comply with our documentation duties under the German Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz - AGG). If you withdraw your application, we will delete your data immediately.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 § 7
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 § 26
 Art. 9