Source: https://orsoft.net/en/data-protection-declaration
Timestamp: 2019-04-23 12:56:55+00:00

Document:
ORSOFT GmbH (ORSOFT), a subsidiary of OR Soft Jänicke GmbH, takes the protection of your personal data very seriously and always adheres to the legal provisions when processing personal data, in particular observing the current data protection regulations. This data protection statement provides information on the type, scope and purposes of ORSOFT's collection and use of your data, in particular personal data. This declaration also applies to all affiliated companies of ORSOFT.
ORSOFT strives to collect as little data as possible from you. The use of ORSOFT's website for informational purposes is possible without the provision of personal data. In this section, general information is collected which serves to ensure the operational safety of ORSOFT's website (see item 9). Personal data will only be requested, processed and used to the extent necessary to comply with the purposes stated under point 5.
Therefore, personal data that ORSOFT receives in advance or in the course of a business relationship with a company for which you are the contact person or legal representative will be processed. In addition, personal data is processed when you contact ORSOFT by e-mail or by using the electronic contact form. In individual cases, ORSOFT may process personal data collected from publicly accessible sources (e.g. networking platforms) in a legally permissible manner.
ORSOFT processes the following categories of personal information in the event that you provide it: General and business communication data (title, first name, surname, e-mail address, telephone number, fax number, company name, job title, business address). ORSOFT also collects and processes general information as defined in Section 9 of this Statement.
ORSOFT processes personal data in accordance with the requirements of the General Data Protection Regulation (GDPR) and the amendment provisions of the German National GDPR Implementation Act (in short: BDSG-neu). ORSOFT collects, processes and uses your personal data exclusively for the following purposes provided that at least one of the conditions specified under Section 5 a) to d) is fulfilled.
Providing information on ORSOFT as well as on current proprietary products and services (which may be similar to services already purchased) and selected proprietary conferences, on the condition this is legally possible (in terms of data protection and competition) without your consent (e.g. § 7 section. 3 of the German Act Against Unfair Competition) and you have not objected to the use of your data for the purpose of direct advertising.
You can revoke your consent at any time with effect for the future without affecting the legality of the processing carried out on the basis of the consent until revocation.
In the context of a contractual relationship between your company and ORSOFT, you may be required to provide the personal data specified under section 4 (with the exception of general information) if this should be necessary for the establishment and execution of the business relationship or the corresponding contractual obligations or for the implementation of pre-contractual measures.
Failure to provide your personal information would result in ORSOFT being unable to provide the information content or services you have requested.
At ORSOFT and within the ORSOFT Group, only relevant departments receive the data they need to fulfil legal obligations or to carry out the (possibly pre-) contractual relationship between ORSOFT and your company (in particular to advise and support you on various aspects of operational software, supply chain management, master data maintenance and hospital planning). In particular for internal administrative purposes, your data will also be transmitted within the group of companies. If required by law, your consent will be obtained separately.
Processors used by ORSOFT within the meaning of Art. 28 GDPR receive your data exclusively for the purposes stated under section 5. Service providers used by ORSOFT are obliged to treat your personal data in accordance with the currently applicable data protection regulations, in particular in accordance with the GDPR.
Other recipients will only receive your data if such disclosure is required by law or ORSOFT is required to do so by official and/or court order, if you have given your separate consent or if ORSOFT is authorised to disclose such data without your consent.
Your personal data will not be actively transferred to a country outside the EEA or to an international organisation.
ORSOFT adheres to the principles of data avoidance and data economy. ORSOFT will therefore only retain your personal data for as long as is necessary to achieve the stated purposes (e.g. to conduct a business relationship and/or to safeguard ORSOFT's legitimate interests) or as stipulated by the various legal requirements for retention and documentation (e.g. in accordance with the German Commercial Code or the Tax Code). In particular, the legal retention periods are ultimately the decisive criterion for the length of time your data is retained.
After the respective processing purpose has ceased or after expiry of these periods, the corresponding data will be deleted routinely and in accordance with statutory provisions or, if necessary, initially temporarily blocked. In addition, ORSOFT will immediately delete your data in the event of a request pursuant to Art. 21 GDPR, unless there are legitimate reasons for processing and/or ORSOFT is legally obliged to archive your data.
General information collected by the website within the scope of section 9 will be routinely deleted after 14 days.
When you access ORSOFT websites, general information, that is technologically necessary to view the website, is automatically collected. This information includes the type of web browser used, the operating system used, date and time of access, referrer URL (previously visited page) and the computer's IP address. This data cannot be traced back to specific persons. Information collected in this way is evaluated by ORSOFT solely for statistical purposes; it is not merged with other data sources. The data will not be used for any other purpose or passed on to third parties. It is routinely deleted after 14 days.
ORSOFT uses few proprietary session cookies. These are small text files that are stored on a device you use and for example, make visiting a website more comfortable or safer.
ORSOFT uses technical and organisational security measures to protect your ORSOFT data from accidental or intentional manipulation, loss, destruction or access by unauthorised persons. ORSOFT's security measures are continuously being improved as new technology develops. However, ORSOFT cannot guarantee complete security of data transmission over the internet. ORSOFT therefore does not guarantee complete protection of data against access by third parties.
As a person concerned within the meaning of Art. 4 No. 1 GDPR, you have the right under Art. 15 GDPR to obtain information about your personal data stored by ORSOFT at any time. You also have the right to have your data corrected in accordance with Art. 16 GDPR, processing restricted in accordance with Art. 18 GDPR or your personal data deleted in accordance with Art. 17 GDPR: With regard to the right to information and deletion, reference is made to the applicable restrictions pursuant to §§ 34 and 35 BDSG-neu. You have the right to data portability under Art. 20 GDPR and the right to complain to a competent supervisory authority under Art. 77 GDPR in connection with § 19 BDSG-neu. In general, the supervisory authority of ORSOFT is the Saxon Data Protection Officer.
Furthermore, you have a right of objection in accordance with Art. 21 GDPR. If the processing of the data is based on your consent, you may revoke this consent at any time pursuant to Art. 7 para. 3 GDPR by notifying ORSOFT with effect for the future. The legality of the processing carried out based on consent until revocation remains unaffected.
If your data is processed on the basis of Article 6 paragraph 1 item e or f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation.
In this event, ORSOFT will cease processing your personal data, provided that ORSOFT cannot find compelling legitimate grounds for processing that outweigh your interests, rights and freedoms and if the processing does not serve to assert, exercise or defend legal claims.
If ORSOFT processes your personal data for direct marketing purposes, you have the right to opt-out of the processing of your personal data at any time for the purposes of such advertising.
If you exercise this right of objection, ORSOFT will no longer process your personal data for direct marketing purposes.
Your objection can be made in any form, preferably in writing by e-mail to privacy@orsoft.de or by post to ORSOFT GmbH, Martin-Luther-Ring 13, 04109 Leipzig.
Should you have any questions or suggestions regarding the processing of your personal data by ORSOFT, please do not hesitate to contact ORSOFT. In this case, please contact the responsible data protection officer directly, who is also available in the event of requests for information, applications or complaints.
ORSOFT reserves the right to modify this declaration of data protection in the course of its existence, in particular to adapt it to current legal requirements or to implement changes to services in the data protection declaration, e.g. when introducing new services. Accordingly, the new data protection declaration applies to any subsequent visit to the website. If this change is not required by law or permitted by applicable law without your consent, you will be separately informed of any change in the purpose of data processing before this Data Protection Declaration is amended. ORSOFT will, if necessary, obtain your consent.

References: § 7
 Art. 28
 Art. 21
 Art. 4
 Art. 15
 Art. 16
 Art. 18
 Art. 17
 Art. 20
 Art. 77
 § 19
 Art. 21
 Art. 7