Source: https://en.life-systems.de/en/privacy-policy/
Timestamp: 2019-12-10 12:43:40
Document Index: 651020889

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', '§ 195', 'Art. 15', '§ 34', 'Art. 16', 'Art. 17', '§ 35', 'Art. 18', 'Art. 21', 'Art. 20', 'Art. 77', 'Art. 21', 'Art. 4', 'Art. 26']

Life Systems | Privacy Policy
Information on data protection regarding our data processing in accordance with Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR)
We take data protection seriously and hereby inform you how we process your data and which claims and rights you are entitled to under the current data protection regulations. Valid from 25 May 2018.
Responsible body for data processing and contact details
responsible body in terms of statutory data protection
41238 Mönchengladbach,
Tel.: +49 2 166 14402 24
datenschutz@life-systems.de
Contact information for our data protection officer:
Datenschutzbeauftragter LifeSystems
Datenschutz-LifeSystems@he-c.de
Purpose and legal basis on which we process your data
We process personal data in accordance with the provisions of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (FDPA) and other applicable data protection regulations (details below). Which data specifically is processed and how it is used depends largely on the services requested or agreed upon. Further details or additions to the purposes of data processing can be found in the respective contract documents, forms, a declaration of consent and/or other information provided to you (e.g. as part of the use of our website or our terms and conditions). In addition, this privacy policy may be updated from time to time, as you can see on our website www.life-systems.de.
Purposes for the performance of a contract or precontractual measures (Art. 6 para. 1 b of the GDPR)
The processing of personal data takes place for the implementation of our contracts with you and the execution of your orders as well as for the implementation of measures and activities in the context of precontractual relationships, e.g. with interested parties. In particular, the processing serves the provision of further information and to establish contact according to your orders and wishes and include the necessary services, measures and activities. These include, but are not limited to, contractual communications with you, the verifiability of transactions, orders and other agreements, as well as for quality control through appropriate documentation, goodwill procedures, measures to control and optimize business processes, as well as for the fulfilment of general due diligence, control and oversight by affiliated companies (e.g. parent company); statistical evaluations of corporate management, cost accounting and controlling, reporting, internal and external communications, emergency management, billing and tax assessment of operational services, risk management, asserting legal claims and defence against legal disputes; ensuring IT security (including system and plausibility tests) and general security, including building and system security, ensuring and exercising domiciliary rights (e.g. by access control); ensuring the integrity, authenticity and availability of data, preventing and resolving criminal offences; monitoring by oversight or supervisory bodies (e.g. for auditing).
Purposes within the scope of a legitimate interest by us or third parties (Art. 6 para. 1 f of the GDPR)
In addition to the actual fulfilment of the contract or preliminary agreement, we may process your data, if necessary, in order to protect legitimate interests by us or third parties, in particular for the following purposes:
for advertising or market and opinion research, provided that you have not objected to the use of your data;
for the review and optimization of demand analysis procedures;
for the enrichment of our data, including through the use or research of publicly available data;
for the assertion of legal claims and defence in legal disputes that are not directly attributable to the contractual relationship;
for the limited storage of data, if deletion is not possible or only with disproportionately high costs due to the special nature of the storage;
Purposes within the scope of your consent (Art. 6 para. 1 a of the GDPR)
Processing of your personal data for specific purposes (e.g. use of your email address for marketing purposes) may also be based on your consent. As a rule, you can revoke your consent at any time. This also applies to the revocation of declarations of consent that were issued to us before the effective date of the GDPR, i.e. before 25 May 2018. You will be notified separately about the purposes and consequences of a withdrawal or non-issuance of consent in the corresponding to text of the consent.
In principle, the revocation of consent only takes effect for the future. Processing that occurred before the revocation is unaffected by it and remains legal.
Purposes for the fulfilment of legal requirements (Art. 6 para. 1 c of the GDPR) or in the public interest (Art. 6 para. 1 e of the GDPR)
Like everyone involved in business transactions, we too are subject to a variety of legal obligations. These are primarily legal requirements (e.g. commercial and tax laws), but also potentially regulatory or other official requirements (e.g.: German X-ray Ordinance , or similar) The purposes for processing include identity and age checks, prevention of fraud and money laundering, the prevention, combating and investigation of terrorist financing and endangerment of assets, comparison with European and international anti-terrorist lists, compliance with tax inspection and reporting obligations, as well as the archiving of data for privacy and data security purposes and auditing by tax and other authorities. Beyond that, the disclosure of personal data in the context of administrative/judicial action may be required for purposes of gathering evidence, prosecuting or enforcing civil claims.
The data categories processed by us, insofar as we do not receive data directly from you, and their origin
If it is necessary for the provision of our services, we process personal data legitimately received from other companies or other third parties (e.g. credit bureaus, address directories). In addition, we process personal data that we have legitimately collected, obtained or acquired from publicly available sources (such as telephone directories, trade and association registries, press, internet and other media) and are allowed to process.
Relevant personal data categories may be in particular:
Personal data (name, occupation/industry and comparable data)
Contact details (address, email address, telephone number and comparable data)
Address information (registration data and comparable data)
Data about your use of telemedia offered by us (e.g. time of accessing our websites, apps or newsletters, clicked pages/links, input data and comparable data)
Recipients or categories of recipients of your data
Within our company, your data is received by internal departments or organizational units, who need it to fulfil our contractual and legal obligations or use it in the context of the processing and implementing our legitimate interests. Your data is not forwarded to external agencies.
Duration of storage of your data
Furthermore, we are subject to various storage and documentation obligations, which include the German Commercial Code (HGB) and the Tax Code (AO). The deadlines for storage or documentation specified there are up to ten years beyond the end of the business relationship or the precontractual legal relationship.
Furthermore, specific statutory regulations may require a longer retention period, such as the preservation of evidence under the statutory limitation provisions. According to §§ 195 et seq. of the German Civil Code (BGB), the regular limitation period is three years; however, limitation periods of up to 30 years may also be applicable.
If the data is no longer required for the fulfilment of contractual or legal obligations and rights, they are regularly deleted, unless their limited further processing is necessary for the fulfilment of the purposes listed in Section 2.2 for a predominantly legitimate interest. Such an overriding legitimate interest exists, for example, even if deletion is not possible or only with disproportionately high costs due to the special nature of the storage and processing for other purposes through appropriate technical and organizational measures is excluded.
Processing of your data in another country or by an international organization
A transfer of data to offices in countries outside the European Union (EU) or the European Economic Area (EEA) takes place if it becomes necessary for the execution of an order/contract from or with you, if it is required by law (e.g. for tax reporting obligations), if it is part of the legitimate interest of us or a third party or if you have given us consent.
The processing of your data in a foreign country may also take place in connection with the involvement of service providers in order processing. Unless there is a decision by the EU Commission regarding the appropriate level of data protection for the country in question, we ensure that the rights and freedoms are adequately protected and guaranteed under relevant EU treaties. Corresponding detailed information is available upon request.
Information about the appropriate or reasonable warranties and the possibility of receiving a copy of them can be obtained from the data protection officer upon request.
Under certain conditions, you can assert your data protection rights with us
Thus you have the right to obtain information from us about your stored data according to the rules of Art. 15 of the GDPR (possibly with restrictions according to § 34 of the FDPA).
Upon your request, we will correct the data stored about you according to Art. 16 of the GDPR, if they are inaccurate or incorrect.
If you wish, we will delete your data in accordance with the principles of Art. 17 of the GDPR, provided that this does not conflict with other legal provisions (e.g. legal storage obligations or the restrictions according to § 35 of the FDPA) or an overriding interest on our part (e.g. to defend our rights and claims).
Under consideration of the requirements of Art. 18 of the GDPR, you may require us to restrict the processing of your data.
Furthermore, you can object to the processing of your data in accordance with Art. 21 of the GDPR, which requires us to stop processing your data. However, this right to objection only applies in the case of very special circumstances regarding your personal situation, whereby rights of our company may possibly conflict with your right of objection.
You also have the right to retrieve your data under the conditions of Art. 20 of the GDPR in a structured, common and machine-readable format or to have it transmitted to a third party.
In addition, you have the right to withdraw your consent to the processing of your personal data at any time with regard to us with future effect (cf. Section 2.3).
You also have a right of appeal to a data protection supervisory authority (Art. 77 of the GDPR). However, we always recommend that you first file a complaint with our data protection officer.
Your requests to exercise your rights should ideally be addressed in writing to the address indicated above or directly to our data protection officer.
Scope of your obligations to provide us with your data
All you need to do is provide the information necessary to enter into a business relationship or enter into a pre-contractual relationship with us, or that we are required to collect by law. Without this data we will generally not be able to conclude or execute the contract. This may also apply to data required later in the business relationship. If we request additional data from you, you will be made aware of the voluntary nature of the information separately.
Information about your right of objection according to Art. 21 of the GDPR
You have the right to object at any time to the processing of your data pursuant to Article 6 para. 1 f of the GDPR (data processing on the basis of a balance of interests) or Article 6 para. 1 e of the GDPR (data processing in the public interest) if there are grounds for it arising from your particular situation. This also applies to profiling based on this provision within the meaning of Art. 4 No. 4 of the GDPR. If you file your objection, we will no longer process your personal information unless we can establish compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purposes of asserting, exercising or defending legal claims.
We may also potentially process your personal data in order to generate direct mail. If you do not want to receive advertising, you have the right to object to it at any time; this also applies to profiling insofar as it is associated with such direct mail. We will comply with this objection for the future. We will no longer process your data for direct marketing purposes if you object to the processing for these purposes.
Additional data protection notices about our Facebook Fan Page
Within our Facebook fan page (available at: https://www.facebook.com/Life-Systems-Medizintechnik-Service-GmbH-574866525982962/) you also have the opportunity to obtain information about our services or contact us and interact. Our Facebook fan page is provided on the basis of the agreement reached with Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) on the joint processing of personal data under Art. 26 of the General Data Protection Regulation (GDPR) (‘Website Insights Supplement regarding the Responsible Controller’). According to this provision, we cannot make any decisions ourselves regarding the processing of insight data and implement them. The primary responsibility under the GDPR for the processing of insight data as well as the fulfilment of all obligations under the GDPR with regard to the processing of insight data is assumed by Facebook.
We would like to point out that during your visit of the Facebook fan page your user data may be processed outside the EU. The participating Facebook, Inc. undertakes to comply with EU data protection standards as a privacy shield-certified US provider: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active (last updated: 02/11/2018).
Your data may be processed for market research and promotional purposes, for example by creating usage profiles and using them for displaying advertisements based on your usage patterns. To this end, cookies are stored on your computer.
In this context, the ‘website insights’ feature allows us to retrieve statistical data of various categories related to the use of the Facebook fan page from Facebook, such as total page views, likes, web page activity, post interactions, video views, post reach, comments, shared content, answers, ratio of men and women, country and city of origin, language, views and clicks in the shop, clicks on route planner, and clicks on phone numbers. We use this information to make our pages more attractive and tailored to your needs (e.g. by identifying the right time to publish content).
Within the Facebook fan page, personal data of users is processed to safeguard our legitimate interests in a needs-based and target group-oriented configuration of our information offerings and communications with users (legal basis: Article 6 paragraph 1 lit. f GDPR). If you are asked by Facebook as the provider of the platform to give your consent to a particular data processing request, the processing to that extent takes place on the legal basis of Article 6 paragraph 1 lit. a GDPR.
With regard to exercising data subject rights and requests for information, we point out that you can assert this claim most effectively by addressing it directly with Facebook (see https://www.facebook.com/legal/terms/information_about_page_insights_data).
Further information regarding the processing and use of data as well as the rights and configuration options to protect your privacy, including opt-out, can be found in the privacy policy of Facebook at https://www.facebook.com/about/privacy/ as well as in the ‘Information About Page Insights Data’ section under https://www.facebook.com/legal/terms/information_about_page_insights_data
Opt-Out: https://www.facebook.com/settings?tab=ads orhttp://www.youronlinechoices.com
The objection does not require any special format and, if possible, should be addressed to
info@life-systems.de
Our privacy statement and data protection information about our data processing according to Articles 13, 14 and 21 of the GDPR may change from time to time. All changes will be published on this page. Older versions are available for you to view in an archive.