Privacy Policy of D.med Healthcare Germany AG
This privacy policy applies to the website www.gynedil.com of D.med Healthcare Germany AG (“D.med”, “we”, or “us”) and as far as it is referred to..
In the following, you will learn when we collect and store which data from you and how we use it.
Contact details of the controller
D.med Healthcare Germany AG is responsible for the processing of your personal data. You can contact us in various ways, including by mail, email, or telephone, using the contact details below:
D.Med Healthcare Germany AG
Klaus-Bungert-Str. 3
40468 Duesseldorf
Germany
info@dmed-healthcare.com
+49 (0)211 560 415 60
Contact details of the data protection officer
You can contact our data protection officer in all matters relating to the processing of your personal data and the exercising of your rights. Please indicate the company name of the responsible entity and the reason for your request in the subject line.
You can contact our data protection officer by mail or e-mail using the following contact details:
D.Med Shared Services GmbH
Klaus-Bungert-Str. 3
40468 Duesseldorf
Germany
dataprotection@dmed-healthcare.com
Purposes and legal bases for the processing of your personal data and the retention periods for your personal data
Cookies
The Internet pages partly use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective, and safer. Cookies are small text files that are stored in your computer and saved by your browser.
Our website uses different types of cookies. Some cookies are set by third-party services that appear on our pages.
The list of cookies used by our website, their purposes and legal bases for their processing and retention period are shown in the table below:
| Necessary | CookieConsent | Provides proof that cookie consent has been obtained which refers to our legitimate interest. | Our legitimate interest (Article 6 para 1 lit f of GDPR) | 1 year |
| Necessary | _wpdm_client | Technical cookie that synchronizes the website and the CMS. This is used to update the website. | Our legitimate interest (Article 6 para 1 lit f of GDPR) | 1 year |
| Necessary | PHPSESSID | Technical cookie that synchronizes the website of the CMS. This is used to update the website. | Our legitimate interest (Article 6 para 1 lit f of GDPR) | 1 year |
| Statistic | _ga | Registers a unique ID that is used by Google Analytics to generate statistical data on how the visitor uses the website. | Your consent. (Article 6 para 1 lit a of GDPR) |
2 years |
| Statistic | _gat | Used by Google Analytics to throttle request rate. | Your consent (Article 6 para 1 lit a of GDPR) | 1 day |
| Statistic | _gid | Registers a unique ID that is used to generate statistical data on how the visitor uses the website. | Your consent (Article 6 para 1 lit a of GDPR) | 1 day |
We process the following personal data obtained via third party cookie providers: browser characteristics, IP address and website browsing actions for the purposes of 1) improvement of user experience, and 2) security of our website and business and 3) statistics/ marketing.
The retention periods as well as the legal bases for processing your personal data in the form of cookies can be found in the list above.
Manage cookie settings
You can easily accept and manage cookies when you visit our website for the first time by ticking the offered categories of cookies you agree with and selecting OK in the pop-up cookie banner.
Once you have agreed to the use of cookies, you can change your preferences regarding the use of cookies at any time by selecting the ‘Change Consent’ option in the cookie settings at the bottom of the website.
Website statistics
Cookies are used on our website to collect an anonymous analysis of the usage behavior of website visitors. When visiting our website, we therefore ask you to consent to the collection of this data through cookies (Art. 6 para. 1 a GDPR). On our website, Google Analytics is used by the company Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA ("Google"). Google Analytics uses "cookies" (text files) in its service, which are stored on your computer and thus enable an analysis of your surfing behavior when visiting the website. This makes it possible to assign data, sessions, and interactions across multiple devices to a pseudonymous user ID and thus analyze a user's activities across devices. The information generated by the cookies (e.g., time, place and frequency of website visits including the IP address) is transmitted to Google in the USA and stored there. With the help of the cookie banner on our website, you can reject and deactivate the tracking (see item Cookies and Mange Cookies of this privacy policy).
The data sent by us and linked to cookies, user identification (e.g., user ID) are automatically deleted after two years. We have concluded an order data processing contract with Google.
You can find more information about data protection and Google's terms of use at https://policies.google.com/terms?hl=en-US and https://marketingplatform.google.com/about/analytics/terms/us/.
Inquiry via contact form
You can use the contact form on this website to ask us to send you product information.
For this purpose, you provide us with the following personal data for processing your request:
- Company name,
- Surname,
- first name,
- position
- e-mail address and
- message.
In this case, your personal data is processed based on your consent given to us (Art. 6 para 1 lit a GDPR) and will be kept by us until you revoke your consent, or the purpose of the processing is achieved (your completed request for sending product information).
Email Newsletter
You can register on our website to receive our newsletter.
With this newsletter we inform you regularly and free of charge about product information and news by email.
Within the scope of the registration, the following personal data of you will be processed:
- Email address,
- Time and IP-address for subscription, and
- Time and IP-address of the click of the confirmation link.
We verify your registration and personal data using the double opt-in process, in which you will receive an automatic email after your registration asking you to confirm your email address and your consent to receive our newsletter by clicking on a link within 24 hours.
Your registration to receive our newsletter is only active after you have clicked the link in the confirmation email.
For sending the newsletter, we use our email provider and our IT-service with whom we have concluded a contract for order processing.
The legal basis for sending the newsletter is your consent given to us (Art. 6 para. 1 lit. a GDPR).
Your personal data will be stored until you revoke your consent.
After receiving a revocation of your consent to receive our newsletter, your email address will be marked with a blocking notice to be able to prove that you no longer wish to receive our newsletter in the future.
The blocking notice as well as your email address will be deleted by us two years after the end of the calendar year in which the blocking notice was deposited.
If you do not confirm your subscription to the newsletter as part of the double opt-in process, we block your data and delete it after seven days.
Unsubscribing from the newsletter is possible for you at any time, by sending a message to the contact option above, or by using the link provided for this purpose in the newsletter.
Social Media
We are represented on social media platforms with a company page. We would like to use these social media platforms to provide further information about the company, its products, and services and to offer the opportunity to contact us.
We are represented on
with a profile.
When you visit or interact with a profile on a social media site, personal data may be processed. The data associated with a profile when used is also personal data. In addition, during a visit to a profile, data is automatically collected about that visit, which may be personal data.
Visiting a Social Media Page
Facebook and Instagram
When you visit our Facebook or Instagram page, which we use to provide information about the company, its products and services, certain data about you is processed.
Meta Platforms Ireland Limited (“Meta”) is the sole controller of this processing of your data.
For more information about how Meta processes your personal data, please visit https://www.facebook.com/privacy/explanation.
Your options for objecting to certain of these data processing operations can be found at https://www.facebook.com/settings?tab=ads.
Through Meta, we receive anonymized data about the actions people take when using our Facebook or Instagram page ("Page Insights").
We and Meta are jointly responsible for the processing of this personal data. We have entered into an agreement with Meta regarding this joint responsibility of processing personal data. You can find this agreement at https://www.facebook.com/legal/terms/page_controller_addendum.
The processing of this personal data serves our legitimate interest in analyzing and evaluating user behavior when visiting our pages and improving our pages (Art. 6 para 1 lit f GDPR).
We cannot assign the data from the "page insights" received to individual Facebook profiles that have visited our profile.
For the personal data processing operations for which we and Meta are jointly responsible, you may also assert your rights against Meta.
You can find more information about this in Meta privacy policy at https://www.facebook.com/privacy/explanation.
In accordance with the Meta Privacy Policy, personal data is also processed in the USA or other third countries.
Meta will only transfer this data to countries for which an adequacy decision has been issued by the European Commission or on the basis of appropriate safeguards.
LinkedIn Ireland Unlimited Company (“LinkedIn”) is solely responsible for the processing of personal data when you visit our LinkedIn page.
For more information about how LinkedIn processes your personal data, please visit https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.
If you visit our LinkedIn page, follow this page or interact with it, LinkedIn processes personal data about this and provides us with this in anonymized form ("page insights").
In doing so, LinkedIn primarily processes data that you have already provided to LinkedIn via details of your profile (e.g., function, country, industry, seniority, company size and employment status).
In addition, LinkedIn processes data about how you interact with our site, such as whether you become a follower of our site.
With this data, LinkedIn does not provide us with any personal data, and it is also not possible for us to draw conclusions about individual users through this data.
We and LinkedIn are jointly responsible for the processing of this personal data.
These statistics enable us to analyze and evaluate user behavior on our site and to improve our site. The basis of this processing is our legitimate interest to improve our LinkedIn page (Art. 6 para 1 lit f GDPR).
We have entered into an agreement with LinkedIn regarding this joint responsibility of processing personal data. You can find this agreement at https://legal.linkedin.com/pages-joint-controller-addendum.
In accordance with this Agreement:
- LinkedIn is responsible for enabling them to exercise their rights under the GDPR. To do so, you can contact LinkedIn online (https://www.linkedin.com/help/linkedin/ask/PPQ?long=en) or reach LinkedIn using the contact details in the Privacy Policy. You can reach LinkedIn´s Data Protection Officer at https://www.linkedin.com/help/linkedin/ask/TSO-DPO. You may also, to exercise your rights in relation to the processing of personal data relating to Page Insights, contact us at the contact details provided here and we will refer your concern to LinkedIn.
- The Irish Data Protection Commission is the lead supervisory authority overseeing the processing of Page Insights. You always have the right to lodge a complaint with the Irish Data Protection Commission or any other supervisory authority.
In accordance with the LinkedIn Privacy Policy, personal data is also processed in the United States or other third countries.
The Irish Data Protection Commission is the lead supervisory authority overseeing the processing of Page Insights. You always have the right to lodge a complaint with the Irish Data Protection Commission or any other supervisory authority.
LinkedIn will only transfer this data to countries for which an adequacy decision has been issued by the European Commission or on the basis of appropriate safeguards.
Processing of personal data you provide to us via our social media pages
We also process information, such as username, contact details or a message to us, that you have provided to us via our social media pages. We only process this data if we have asked you to provide it to us. This processing is based on our legitimate interest in contacting the person making the request and processing the request (Art. 6 para 1 lit f GDPR).
In addition, we may process this data for evaluation and marketing purposes on the basis of our legitimate interest in developing and improving our offering so that we can provide you with targeted information about the company, its products and services (Art. 6 para 1 lit f GDPR).
Further data processing may take place if you have consented (Art. 6 para 1 lit a GDPR) or if this serves to fulfil a legal obligation (Art. 6 para 1 lit c GDPR).
Your rights regarding the processing of your personal data
Right to know whether and how your personal data are processed by us
You can request access to information about your personal data at any time in order to find out whether we process your personal data, what personal data we process about you and in what manner. You can also request copies of your personal data which we hold.
You can exercise this right by sending us a written notice via post or an e-mail indicating the request to access.
Right to get your personal data corrected
You can request for us to correct inaccurate or incomplete personal data which we hold on to for you.
You can submit this request by sending us a written notice via post or e-mail, stating which data is inaccurate or incomplete and how it should be corrected, followed by respective proofs, if applicable.
Right to get your personal data deleted
You can ask us to delete your personal data. Please note that the right to erasure could be refused under certain circumstances (e.g., in the case when processing is necessary for compliance of legal obligation or for the establishment, exercise or defense of legal claims).
The right to deletion applies when (i) we no longer need your personal data, (ii) when you have withdrawn consent for data processing, (iii) when we unlawfully process your personal data, (iv) when we have the legal obligation to erase them.
You can perform this right by sending us a written notice via post or e-mail with the indication of what personal data shall be deleted and why.
Right to limit how we use your personal data
You can request us to suspend the processing of your personal data in the following circumstances:(i) if you contested the accuracy of the personal data, for the period which is necessary to verify the data accuracy, (ii) if you objected to processing but we need to verify whether we have an overriding legitimate interest to use it, (iii) if your personal data were processed unlawfully, but you do not want us to erase it, (iv) if we no longer need your personal data but you want us to keep it so you can establish, exercise or defend legal claims.
You can perform this right by sending us a written notice via post or e-mail with an indication of which personal data shall be suspended and why.
Right to data portability
You can ask us to get your personal data in accessible and machine-readable form, as well as to transfer these data to a third party.
Please note that this right only applies to your personal data which is processed by automated means and the processing of which is based on consent (Article 6 para 1 lit a of the GDPR), which is the case when requests are made by you to receive product information.
You can exercise this right by sending us a written notice via post or e-mail indicating the data portability request.
Right to withdraw consent at any time
You may exercise this right any time as processing is performed based on your consent. It will apply if you have initially agreed to the use of cookies on our website but want to withdraw consent and stop their use in the future.
You can also exercise the right of withdrawal for requests made to send you product information.
It applies if you originally gave us your consent to send you product information but withdraw it because, for example, you no longer want or need to receive it.
Right to object to the use of your data
You can use your right to object only when we use your personal data based on our legitimate interest. In those cases, we shall stop processing your personal data unless we demonstrate that our legitimate grounds override your interests, rights, and freedoms.
Right to lodge a complaint to supervisory authority
In case you think that processing of your personal data is not in accordance with the applicable legislation, you can submit a complaint to the Commissioner for Data Protection and Freedom of Information of the North Rhine-Westphalia by filling out the complaint form available on the official webpage. The complaint form and supporting documentation shall be sent to the Commissioner via fax to the fax. no.: 0211 38424-10 or via e-mail to the e-mail address: poststelle@ldi.nrw.de or via post to:
Country Commissioner for Data Protection and Freedom of Information
North Rhine-Westphalia
Kavalleriestrasse 2-4
40213 Dusseldorf, Germany
You may also file the complaint with the supervisory authority of the EU Member State where you have your habitual residence, place of work or the place of the alleged infringement.
Do we share your personal data?
Access to your personal data shall be limited only to persons employed or engaged by D. med based on contractual arrangements.
Your personal data will also be shared with companies in the following categories of recipients who act on our behalf under contract processing agreements:
- IT Services,
- Marketing,
- Sales,
- consulting and advisory services.
Do we transfer your personal data to third countries?
In addition to these recipients, your personal data is transferred to countries outside the European Union, as some of our third-party providers operate in these countries. In these cases, however, the transfer is always made on the basis of contractual agreements with standard contractual clauses issued by the European Commission or to third countries established by the European Commission to ensure an adequate level of data protection.