Source: https://geratherm.com/dataprotectioncustomer/
Timestamp: 2019-04-22 16:49:39+00:00

Document:
We provides you with information about the processing of your personal data by Geratherm Medical AG and your rights under data protection legislation.
1. Who is responsible for data processing, and who is the data protection officer?
Dr. Gert Frank is the authorised representative.
Of course, you may also contact the controller with any questions you have about data protection. We also have complete versions available for inspection of the Federal Data Protection Act as published on 14 January 2003 (Federal Law Gazette I p. 66), last amended by Art. 10 Para. 2 of the Act dated 31 October 2017 (Federal Law Gazette I p. 3618) (hereinafter referred to as the FDPA (new)), and of the EU General Data Protection Regulation (hereinafter referred to as the GDPR), which has been legally binding since 25 May 2018.
• The information (economic profile and commercial data) required for implementation of your project.
The data is processed at your request; pursuant to Art. 6 Para. 1 Sent. 1 Letter b GDPR, this processing is necessary for the aforementioned purposes so that the business relationship can be managed in the appropriate manner, and so that both parties can meet their obligations under the contractual relationship which they have concluded.
The personal data which is collected is stored and then deleted at the end of the statutory prescribed period for claims arising from the contractual relationship, i.e. in most circumstances once three years have elapsed since the end of the year in which the claim first arose, unless we are obliged to store such data for a longer period pursuant to Art. 6 Para. 1 Sent. 1 Letter c GDPR because of our obligations regarding the retention and documentation of data under tax or commercial law (on the legal basis of the German Commercial Code (HGB), the German Criminal Code (StGB) or the German Fiscal Code (AO)), or if you have consented to a longer period of retention pursuant to Art. 6 Para. 1 Sent. 1 Letter a GDPR.
Your personal data shall not be disclosed to third parties for reasons other than those specified below.
Your personal data shall be disclosed to a third party if this is necessary for the management of a contractual relationship with you pursuant to Art. 6 Para. 1 Sent. 1 Letter b GDPR. This includes in particular disclosure to participants in the project and their representatives. Data shared in this way may only be used by the third parties for the specified purposes.
• pursuant to Art. 77 GDPR to lodge a complaint with a supervisory authority. This can usually be the supervisory authority with jurisdiction at your habitual place of residence or place of work, or at our company headquarters.
5. Who can I turn to if I want to complain?

References: Art. 10
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 77