Source: https://www.magnetotherapy.de/infos/data-security.html
Timestamp: 2019-04-21 16:42:47+00:00

Document:
We, AMS Advanced Medical Systems, are responsible for this online offer and as provider of a teleservice we have to inform you at the beginning of your visit on our online offer about type, extent and purpose of the collection and use of personal data in precise, transparent, understandable and easily accessible form in a clear and simple language. The content of the information must be available to you at all times. We are therefore obliged to inform you which personal data is collected or used. Personal data are all information relating to an identified or identifiable natural person.
We attach great importance to the security of your data and compliance with data protection regulations. The collection, processing and use of personal data is liable to the regulations of the currently valid European and national laws.
With the following data protection declaration we would like to show you how we handle your personal data and how you can contact us.
Personal data is all information relating to an identified or identifiable natural person. This may be your name, your address or your e-mail address, for example.
The GDPR refers to the processing of any transaction or series of transactions carried out with or without the aid of automated procedures in connection with personal data, such as the collection, organization, arrangement, storage, adaptation or modification, reading, querying, use, disclosure by transmission, dissemination or any other form of provision, comparison or linking, restriction, deletion or deletion.
We process, collect and use your personal data exclusively on the basis of the GDPR and this following data protection declaration.
Profiling means any automated processing of personal data consisting in the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to the performance of work, economic situation, health, personal preferences, interests, reliability, behaviour, whereabouts or relocation of that natural person.
Responsible person is a natural or legal person, authority, institution or other body which alone or together with others decides on the purposes and means of processing personal data.
Recipient is a natural or legal person, authority, institution or other body to which personal data is disclosed, regardless of whether it is a third party or not.
The data subject's consent is any voluntary declaration of consent in the specific case, in an informed and unequivocal manner, in the form of a declaration or other clear affirmative act, with which the data subject indicates that he/she agrees to the processing of his/her personal data.
The processing explicitly does not take place for the purpose of gaining knowledge about the person of the website visitor.
We guarantee that we collect, process, store and use your data only in connection with the processing of your enquiries and for internal purposes as well as to provide services or content requested by you.
We use software for the maintenance of customer data (CRM system) or comparable software based on our legitimate interests (efficient and fast processing of user enquiries).
The system is operated by us in-house. Therefore, no data will be passed on to third parties.
We would like to point out that e-mails can be read or changed during transmission unnoticed and without authorization. Furthermore, we would like to point out that we use a software for filtering unsolicited e-mails (spam filter). The spam filter can reject emails that have been falsely identified as spam by certain features.
Data will only be passed on to third parties within the framework of legal requirements. We only pass on user data to third parties if this is necessary, for example, for contractual purposes or on the basis of justified interests in the economic and effective operation of our business operations.
We would like to point out that due to the use of Google Analytics, data is transmitted when using our online offer.
With the newsletter we inform you 2-3 times a year about us and our offers. If you would like to receive the newsletter, we need a valid e-mail address from you as well as information that allows us to verify that you are the owner of the given e-mail address or that the owner agrees to receive the newsletter. Further data will not be collected or only on a voluntary basis. These data will only be used for sending the newsletter and will not be passed on to third parties.
The data entered in the newsletter registration form will be processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent to the storage of data, the e-mail address and its use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter or send us an appropriate e-mail to info@ams-ag.de. The legality of the data processing processes already carried out remains unaffected by the revocation.
The data you provide us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. e-mail addresses for the protected area) remain unaffected by this.
So-called cookies are used on the website. These are data packets that are exchanged between the website server and the visitor's browser. These are stored when visiting the website by the devices used (PC, notebook, tablet, smartphone, etc.). In this respect, cookies cannot cause any damage to the devices used. In particular, they do not contain viruses or other malware. Information is stored in the cookies that results in each case in connection with the specifically used terminal device. Under no circumstances can AMS GmbH obtain direct knowledge of the identity of the visitor to the website.
Cookies are largely accepted according to the basic browser settings. The browser settings can be set so that cookies are either not accepted on the devices used or that a special message is displayed before a new cookie is created. However, it should be noted that the deactivation of cookies may result in not all functions of the website being used in the best possible way.
Temporary cookies are used to improve user-friendliness. They are stored on the visitor's device for a temporary period of time. When the website is visited again, it is automatically recognized that the visitor has already visited the page at an earlier point in time and which entries and settings were made in order not to have to repeat them.
Cookies are also used to analyse calls of the website for statistical purposes and for the purpose of improving the offer. These cookies make it possible to recognize automatically with a renewed visit that the web page was already called up before by the visitor. The cookies are automatically deleted after a specified period of time.
The data processed by cookies are justified for the above-mentioned purposes for the protection of the legitimate interests of AMS GmbH according to Art. 6 para. 1 sentence 1 letter f) GDPR.
The legal basis for the use of the analysis tools is Art. 6 para. 1 sentence 1 letter f) GDPR. The website analysis is in the legitimate interest of AMS GmbH and serves the statistical recording of the use of the website for the continuous improvement of our website and the offer of our products.
The tracking activities listed below and used by us are carried out on the basis of Art. 6 para. 1 sentence 1 letter f GDPR. With the tracking activities that are used, we want to ensure that our website is designed to meet the needs of our customers and optimised on an ongoing basis. On the other hand, we use the tracking activities in order to statistically record the use of our website and to evaluate it for the purpose of optimising our offer. These interests are to be regarded as legitimate within the meaning of the aforementioned provision. An identification or conclusions about your person will be made.
We use Google Analytics, a web analysis service of Google Inc. "("Google"). Google Analytics uses "cookies", which are text files placed on users' computers, to help the website analyze how users use the site. The information generated by the cookie about users' use of this website is generally transmitted to and stored by Google on servers in the United States.
Data is therefore transferred to a third country. It is taken into account that appropriate/adequate guarantees are available and that you have enforceable rights and effective remedies at your disposal.
Die Nutzung von Google Maps erfolgt im Interesse einer ansprechenden Darstellung unserer Online-Angebote und an einer leichten Auffindbarkeit der von uns auf der Website angegebenen Orte. Dies stellt ein berechtigtes Interesse im Sinne von Art. 6 Abs. 1 lit. f GDPR dar.
You have the right to obtain information about your stored data free of charge. Upon request, we will inform you in writing what personal data we have stored about you in accordance with applicable law. This also includes the origin and recipients of your data as well as the purpose of data processing.
If necessary, in the case of transfer to recipients in third countries, unless the EU Commission has decided on the adequacy of the level of protection according to Art. 45 para. 3 GDPR, information on which suitable guarantees according to Art. 46 para. 2 GDPR are provided for the protection of personal data.
You can address your request for information informally by telephone, e-mail or fax to our contact data listed at the beginning of this data protection declaration (see under "1. Data protection at a glance").
If you find that we have incorrect personal data from you, you can ask us to correct this incorrect data immediately. In the case of incomplete personal data concerning you, you may request the completion. You can make your rectification and/or completion claim informally by telephone, by e-mail or, if applicable, by fax to our contact data listed at the beginning of this data protection declaration (see under 1. Data protection at a glance).
The basis of justification for the processing was exclusively your consent, which you have revoked.
You have filed an objection to the processing of your personal data, which we have made public.
You have objected to the processing of personal data not made public by us and there are no overriding legitimate reasons for the processing.
There is no claim for deletion if deletion is not possible or only possible with disproportionate effort in the case of legal, non-automated data processing due to the special type of storage and your interest in deletion is low. In this case, the restriction of processing takes the place of deletion.
You can address your deletion claim informally by telephone, by e-mail or, if applicable, by fax to our contact data listed at the beginning of this data protection declaration (see under 1. Data protection at a glance).
You can also have your data blocked. To ensure that your data can be blocked at any time, this data must be kept in a lock file for control purposes.
You have a right to data transferability, provided that the processing is based on your consent (Art. 6 para. 1 sentence 1 letter a) or Art. 9 para. 2 letter a) GDPR) or on a contract to which you are a contracting party and the processing is carried out using automated procedures. In this case, the right to data transfer includes the following rights, provided that this does not affect the rights and freedoms of other persons: You can ask us to receive the personal data you have provided to us in a structured, common and machine-readable format. You have the right to pass this data on to another person responsible without hindrance on our part. If technically feasible, you can request that we transfer your personal data directly to another person responsible. You can address your request for data transmission informally by telephone, e-mail or, if applicable, by fax to our contact data listed at the beginning of this data protection declaration (see under 1. Data protection at a glance).
If the processing is based on Article 6, paragraph 1, sentence 1, letter e) GDPR (performance of a task in the public interest or in the exercise of official authority) or on Article 6, paragraph 1, sentence 1, letter f) GDPR (legitimate interest of the person responsible or a third party), you have the right to object at any time to the processing of personal data concerning you for reasons arising from your particular situation. This also applies to profiling based on Article 6(1), first sentence, letter e) or letter f) of the GDPR. After exercising the right of objection, we will no longer process your personal data.
You may at any time object to the processing of personal data concerning you for direct marketing purposes. This also applies to profiling in connection with such direct advertising. After exercising this right of objection, we will no longer use the personal data concerned for direct marketing purposes. You have the option of addressing your objection informally by telephone, by e-mail or, if applicable, by fax to our contact data listed at the beginning of this data protection declaration (see under 1. Data protection at a glance).
We take contractual, organisational and technical security steps in accordance with the state of the art to ensure that the regulations of data protection laws are observed and thus to protect the data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorised persons.
The security precautions include in particular the encrypted transmission of data between your browser and our server.
This website uses SSL encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
Protecting the confidentiality of your personal data.
In order to protect the confidentiality of your personal data stored with us, we have taken various actions for access, login and access control.
Protecting the integrity of your personal data.
In order to maintain the integrity of your personal data stored with us, we have taken various steps for passing on and input control.
Maintaining the availability of your personal data.
In order to maintain the availability of your personal data stored with us, we have taken various precautions for order and availability control.
The security measures in use are continuously improved in line with technological developments. Despite these precautions, due to the uncertain nature of the Internet, we cannot guarantee the security of your data transmission to our online offer. Therefore, any data transmission from you to our online offer is at your own risk.
You have the right to revoke your consent at any time with effect for the future. The revocation of the consent can be communicated informally by telephone, by e-mail or, if necessary, by fax to the address under "1. data protection at a glance". The legality of the data processing, which is based on the consent until receipt of the revocation, is not affected by the revocation. After receipt of the revocation the data processing, which was based exclusively on your consent, is stopped.
If you believe that the processing of personal data concerning you is unlawful, you may lodge a complaint with a data protection supervisory authority responsible for the place of your stay or work or for the place of the alleged infringement.
If you are a Russian citizen resident in Russia, you are expressly informed that any personal data that you provide to us via this online offer is entirely at your own risk and responsibility. You further agree that you will not hold us responsible for any failure to comply with Russian Federation laws.
This privacy statement is dated May 25, 2018 and we reserve the right to update the privacy statement in due course in order to improve data protection and/or adapt it to changes in government practice or case law.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 45
 Art. 46
 Art. 9