meidrix header image: data protection

1. Data protection at a glance

General information

The following information provides a simple overview of what happens with your personal data when you visit this website. Personal data includes all data that can be used to personally identify you. Detailed information on the topic of data protection can be found in the Data Protection Declaration provided below this text.

Data collection on this website

Who is responsible for data collection on this website?
Data processing on this website is performed by the website owner, whose contact details can be found in the legal notice/imprint section of this website.

How do we collect your data?
One way your data is collected is by you sharing it with us. This may e.g. be data entered by you in a contact form.

Other forms of data are collected automatically by our IT systems when you visit the website or once you grant consent. This includes in particular technical data (e.g. Internet browser, operating system or time the website is visited). The collection of this data takes place automatically as soon as you access this website.

What do we use your data for?
Some of the data is collected to ensure that we can provide you with uninterrupted, trouble-free access to the website. Other data may be used to analyse your user behaviour.

What are your rights with regard to your data?
At any time you have the right to request, free of charge, information about the origin, recipient and purpose of your stored personal data. You also have the right to demand correction or deletion of this data. If you have granted consent to data processing, you can withdraw this consent at any time with effect for the future. Furthermore, you also have the right under certain circumstances to demand that the way your personal data is processed is restricted. In addition, you also have a right to appeal to the corresponding supervisory authorities.

You can contact us at any time in this regard and with any further questions on the topic of data protection. Please use the address provided in the legal notice/imprint section of this website.

Analysis tools and tools from third-party providers
When you visit this website, the way you use the site may be statistically analysed. This is done in particular with the aid of so-called analytics programs.
Detailed information about these analytics programs can be found in the Data Protection Declaration below.

2. Hosting and content delivery networks (CDN)

External hosting

This website is hosted at an external service provider (the “hoster”). The personal data recorded on this website is stored on the servers of the hoster. This can relate in particular to IP addresses, contact requests, metadata and communication data, contract data, contact data, names, website access data and other data that can be generated via a website.

The hoster is used for the purpose of contractual performance in relation to our potential and existing customers (article 6(1) point (b) of GDPR) and in the interest of safe, fast and efficient provision of our online offering by a professional service provider (article 6(1) point (f) of GDPR).

Our hoster will only process your data to the extent required to fulfil its performance obligations and will follow our instructions with regard to this data.

We use the following hoster:

webgo GmbH
Wandsbeker Zollstr. 95
22041 Hamburg, Germany

Conclusion of a contract about order processing

To ensure that processing complies with data protection legislation, we have concluded a contract about order processing with our hoster.

3. General information and required information

Data protection

The providers of these web pages take the protection of your personal data very seriously. We will treat your personal data confidentially and in accordance with the statutory data protection regulations and in accordance with this Data Protection Declaration.

When you use this website, various types of personal data are collected. The term ‘personal data’ includes all data with which you can be personally identified. This Data Protection Declaration explains which types of data we collect and what we use this data for. It also explains how this is done, and for what purpose.

We wish to draw your attention to the fact that the online transmission of data via the Internet (e.g. during e-mail communications) may potentially have security gaps. Complete protection of the data against third-party access is not possible.

Note about the responsible body

The responsible body for data processing on this website is:

meidrix biomedicals GmbH
Schelztorstraße 54-56
73728 Esslingen am Neckar, Germany
Tel.: +49 (0) 711 / 933 414 10
E-mail: info@meidrix.de

The responsible body is the natural or legal person who, alone or together with others, decides about the purposes and means of processing of personal data (e.g. names, e-mail addresses or similar).

Storage period

Unless a more specific storage period is specified within this Data Protection Declaration, your personal data will remain with us until the purpose for data processing no longer applies. If you submit a valid request for deletion, or if you withdraw your consent for data processing, your data will be deleted unless we have other legally permissible reasons to store your personal data (e.g. retention periods based on tax law or commercial law); in the latter case, the data will be deleted once the relevant reasons no longer apply.

Notes on forwarding of data to the USA

Among other things, tools from companies whose headquarters are in the USA are embedded on our website. If these tools are active, your personal data can be forwarded to the US servers of the relevant companies. We wish to inform you that the USA is not regarded a safe third country in the sense of EU data protection legislation. US companies are obliged to release personal data to security authorities without you, as the affected party, being able to take legal action against this. As a result, the possibility cannot be ruled out that US authorities (e.g. secret services) could process, evaluate and permanently store your data held on US servers for monitoring purposes. We have no influence over these data processing activities..

Right to object against data collection in special cases and against direct advertising (article 21 GDPR)

IF THE DATA IS COLLECTED ON THE BASIS OF ARTICLE 6(1), SECTION (E) OR (F) OF GDPR, YOU HAVE AT ALL TIMES THE RIGHT TO FILE AN OPPOSITION TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS RESULTING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RELEVANT LEGAL BASIS ON WHICH THE PROCESSING IS FOUNDED CAN BE FOUND IN THIS DATA PROTECTION DECLARATION. IF YOU FILE AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED DATA, UNLESS WE CAN DEMONSTRATE COMPELLING AND LEGITIMATE GROUNDS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PROCESSING SERVES FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION IN ACCORDANCE WITH ARTICLE 21(1) OF GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT ADVERTISING, THEN YOU HAVE THE RIGHT AT ANY TIME TO OBJECT AGAINST THE PROCESSING OF PERSONAL DATA RELATING TO YOU FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING, INSOFAR AS IT IS LINKED TO SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT ADVERTISING (OBJECTION IN ACCORDANCE WITH ARTICLE 21(2) OF GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT ADVERTISING, THEN YOU HAVE THE RIGHT AT ANY TIME TO OBJECT AGAINST THE PROCESSING OF PERSONAL DATA RELATING TO YOU FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING, INSOFAR AS IT IS LINKED TO SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT ADVERTISING (OBJECTION IN ACCORDANCE WITH ARTICLE 21(2) OF GDPR).

Right to appeal to the responsible supervisory authority:

In the event of violations against GDPR regulations, the affected party has the right to appeal to a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place in which the suspected infringement took place. The right to appeal applies irrespective of other legal remedies under administrative law or other judicial remedies.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in order to fulfil a contract delivered to you in a standard, machine-readable format. If you demand direct transmission of the data to another responsible party, this will only be done insofar as it is technically feasible.

SSL and/or TLS encryption

For security reasons and to protect transmissions of confidential content, such as orders or enquiries sent by you to us as the website owner, this website uses SSL and/or TLS encryption. You can recognise an encrypted connection by the fact that the address bar of the browser changes from “http://” to “https://” as well as by the padlock symbol in your browser line.

If the SSL and/or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Right to restriction of processing

You have the right to demand the restriction of processing of your personal data.
You can contact us for this purpose at any time at the address stated in the legal notice/imprint section of this website. The right to restriction of processing applies in the following cases:

  • If you dispute the correctness of the personal data we have stored, we will normally require time to check this. For the duration of these checks you have the right to demand the restriction of processing of your personal data.
  • If the processing of your personal data has taken place or is taking place unlawfully, then instead of deletion you can demand the restriction of data processing.
  • If we no longer require your personal data, but you still require them in order to exercise, defend or assert legal claims, you have the right to demand the restriction of your personal data instead of deletion.
  • If you have filed an objection in accordance with article 21(1) of GDPR, your interests will have to be weighed up against ours. As long as it has not yet been determined whose interests outweigh, you have the right to demand the restriction of processing of your personal data.

If you have restricted the processing of your personal data, apart from its storage this data is only permitted to be processed with your consent or for the assertion, exercise or defence of legal claims or in order to protect the rights of another natural or legal person, or for reasons of substantial public interest in the European Union or in a Member State. If you demand direct transmission of the data to another responsible party, this will only be done insofar as it is technically feasible.

Objection to advertising e-mails

The data published as part of our obligation to provide contact data in the legal notice/imprint section of this website must not be used for the purpose of sending advertising or information materials that have not been expressly requested. The owners of the web pages expressly reserve the right to take legal action if unsolicited advertising information is sent, for example in the form of spam e-mails.

4. Data collection on this website

Cookies

Our Internet pages use so-called “cookies”. Cookies are small text files that will do no harm to your terminal device. They are stored on your terminal device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted after the end of your visit to the website. Permanent cookies remain stored on your terminal device until you delete them yourself or they are deleted automatically by your web browser.

In some cases, third-party cookies may also be stored on your terminal device when you access our website. These enable us or you to access certain services provided by the third-party company (e.g. cookies for handling payment services).

Cookies have various functions. Numerous cookies are required for technical reasons, as certain website functions would not work without them (e.g. for the shopping cart function or for the display of videos). Other cookies serve to analyse user behaviour or display advertising.

Cookies that are required for execution of the electronic communication process (required cookies) or to provide certain functions requested by you (functional cookies, e.g. for the shopping cart function) or for optimisation of the website (e.g. cookies for measuring the web audience) are stored on the basis of article 6(1), section (f) of GDPR provided no alternative legal basis is given. The website owner has a legitimate interest in the saving of cookies to ensure that its services are offered free of technical faults and in an optimised manner. If consent for the saving of cookies has been requested, the affected cookies will only be stored on the basis of this consent (article 6(1), section (a) of GDPR); this consent can be withdrawn at any time..

You can adjust your browser settings so that you are informed when cookies are stored, you can only permit cookies to be stored in individual cases, you can refuse to accept cookies either in certain situations or generally, or you can enable automatic deletion of cookies when you close the browser window. If cookies are disabled then it is possible that not all the functions of this website will be available.
If cookies are used by third parties for analytical purposes then we will inform you about this separately as part of this Data Protection Declaration, and where necessary we will request your consent for this.

Server log files

The provider of these web pages automatically collects and stores information in so-called server log files, which are automatically sent by your browser to us. They contain the following information:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of server request
  • IP address

This data is not combined with other data sources.

This data is collected on the basis of article 6(1), section (f) of GDPR. The website owner has a legitimate interest in ensuring that its website is presented free of technical faults and that its website is optimised – for this purpose it is necessary to collect the server log files.

Contact form

If you send us information via the contact form, your details from the request form, including the contact data you provide there, will be stored by us for the purpose of handling your request and for any follow-up queries. We will not share this data with anyone else without your permission.

The processing of this data takes place on the basis of article 6(1), section (b) of GDPR, insofar as your request is associated with the performance of a contract or required for the performance of pre-contractual measures. In all other cases the processing is based on our legitimate interest in the effective handling of requests sent to us (article 6(1), section (f) of GDPR) or on your consent (article 6(1), section (a) of GDPR) if we have asked for this.

The data you have entered in the contact form remains with us until you ask us to delete it, withdraw your consent for saving it, or until the purpose for saving the data no longer applies (e.g. once the processing of your request has been completed). Mandatory statutory provisions – in particular in relation to storage periods – remain unaffected by this.

Request via e-mail, telephone or fax

If you contact us via e-mail, telephone or fax, your request including all personal data resulting from it (name, request) will be stored by us and processed for the purpose of handling your request. We will not share this data with anyone else without your permission.

The processing of this data takes place on the basis of article 6(1), section (b) of GDPR, insofar as your request is associated with the performance of a contract or required for the performance of pre-contractual measures. In all other cases the processing is based on our legitimate interest in the effective handling of requests sent to us (article 6(1), section (f) of GDPR) or on your consent (article 6(1), section (a) of GDPR) if we have asked for this.

The data you have entered in the contact form remains with us until you ask us to delete it, withdraw your consent for saving it, or until the purpose for saving the data no longer applies (e.g. once the processing of your request has been completed). Mandatory statutory provisions – in particular in relation to storage periods – remain unaffected by this.

5. Analytical tools and advertising

Google Analytics

This website uses functions provided by the web analytics service Google Analytics. This is provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and allow the way you use the website to be analysed. The information generated by the cookie about your usage of this website is normally transmitted to one of Google’s servers in the USA and stored there.

The saving of Google Analytics cookies and the usage of this analytics tool are based on article 6(1), section (f) of GDPR. The website owner has a legitimate interest in analysing user behaviour in order to optimise both its web offering and its advertising.

IP anonymisation

On this website we have enabled the IP anonymisation feature. As a result, your IP address is truncated by Google within a Member State of the European Union or within another contracting state of the Agreement on the European Economic Area before the IP address is transmitted to the USA. Only in exceptional cases is the full IP address sent to one of Google’s servers in the USA and truncated there. Google will use this information on behalf of the owner of this website in order to analyse your usage of the website, to compile reports about website activities, and to provide other services to the website owner in relation to website usage and Internet usage. The IP address transmitted from your browser as part of Google Analytics is not combined with other data by Google.

Browser plugin

You can change the settings in your browser software to prevent cookies from being stored; however, we wish to point out that, if you do this, you may not be able to take full advantage of all of the features of this website. In addition, you can also prevent the recording of data generated by the cookie in relation to your usage of the website (including your IP address) and the transmission of the data to Google as well as the processing of such data by Google by downloading and installing the browser plugin that is available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de .

Order processing

We have concluded a contract on order processing with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographics features in Google Analytics

This website uses the Google Analytics function “Demographic features”. As a result, reports can be generated containing information about the age, gender and interests of visitors to the website. This data comes from interest-related advertising from Google as well as from visitor data from third-party providers. This data cannot be assigned to a particular person. You can disable this feature at any time via the display settings in your Google account, or you can generally prohibit Google Analytics from collecting your data in the way described under “Objection to data collection”.

Storage period

Data stored by Google at user and event level that is linked with cookies, identification of the user (e.g. User ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) will be anonymised or deleted after 14 months. Details about this can be found under the following link: https://support.google.com/analytics/answer/7667196?hl=de

6. Newsletter

Newsletter data

If you would like to subscribe to the newsletter offered on the website, we will need an e-mail address from you along with information that allows us to verify that you are the owner of the e-mail address provided and that you consent to receiving the newsletter. Additional data will not be collected or will only be collected on a voluntary basis. We will only use this data to send out the requested information, and we will not share it with third parties.

Processing of the data entered in the newsletter registration form takes place solely on the basis of your consent (article 6(1), section (a) of GDPR). Once granted, you can withdraw your consent for storing the data and the e-mail address as well as for using them to send out the newsletter at any time, for example via the “Unsubscribe” link in the newsletter. The lawfulness of any data processing operations that have already taken place remains unaffected by such withdrawal of consent.

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us or by the newsletter service provider until you unsubscribe from the newsletter, and the data will be deleted from the newsletter distribution list after cancellation of the newsletter or once the data is no longer required for this purpose. We reserve the right to delete or block e-mail addresses from our newsletter distribution list at our own discretion within the scope of our own legitimate interests in accordance with article 6(1), section (f) of GDPR.

Once you have been removed from the newsletter distribution list, your e-mail address may, if applicable, be stored by us or by the newsletter service provider in a blacklist in order to prevent future mailings. Data from the blacklist will only be used for this purpose and will not be combined with other data. This serves both your interests and our interest in complying with the legal requirements when sending out newsletters (legitimate interest in the sense of article 6(1), section (f) of GDPR). The storage of data in the blacklist is not time-limited. You can object to this data storage if your interests outweigh our legitimate interest.

7. Plugins and tools

YouTube in Privacy-Enhanced Mode

This website embeds videos from YouTube. The operator of the web pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in Privacy-Enhanced Mode. According to YouTube, in this mode YouTube does not store information about visitors to this website before they view the video. By contrast, the sharing of data with YouTube partners is not necessarily excluded by using Privacy-Enhanced Mode. Consequently, regardless of whether or not you actually watch a video, YouTube establishes a connection to the Google DoubleClick network.

As soon as you launch a YouTube video on this website, a connection is established to the servers of YouTube. Here, the YouTube server is provided with information about which of our web pages you have visited.

If you are logged into your YouTube account, you are enabling YouTube to directly connect your surfing behaviour with your personal profile. You can prevent this by logging out from your YouTube account.

Furthermore, after a video is launched YouTube can save various cookies on your terminal device or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve user friendliness and combat attempts at fraud.

In some cases, after the launch of a YouTube video further data processing operations may be initiated over which we have no influence.

Usage of YouTube serves our interest of providing a visually attractive presentation of our online offerings. This represents a legitimate interest in the sense of article 6(1), section (f) of GDPR. If corresponding consent has been requested, the processing takes place solely on the basis of article 6(1), section (a) of DSGVO; the consent can be withdrawn at any time.

Further information about data protection at YouTube can be found in their data privacy statement at: https://policies.google.com/privacy?hl=de .

Google Maps

This website uses the map service Google Maps. It is provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

In order to use the features of Google Maps, it is necessary to save your IP address. This information is normally sent to one of Google’s servers in the USA and is stored there. The provider of this website has no influence over this data transmission.

Usage of Google Maps serves our interest of providing a visually attractive presentation of our online offerings and of making the locations offered by us on the website easy to find. This represents a legitimate interest in the sense of article 6(1), section (f) of GDPR. If corresponding consent has been requested, the processing takes place solely on the basis of article 6(1), section (a) of DSGVO; the consent can be withdrawn at any time.

The data transmission to the USA is based on the standard contractual clauses of the EU Commission.
Details can be found here:
https://privacy.google.com/businesses/gdprcontrollerterms/ and
https://privacy.google.com/businesses/gdprcontrollerterms/sccs/ .
More information about the handling of user data can be found in the data privacy statement of Google: https://policies.google.com/privacy?hl=de .

8. Own services

Applications

We offer you the opportunity to apply to work for us (e.g. via e-mail, by post or via our online application form). In the following we provide information for you about the scope, purpose and usage of your personal data collected as part of the application process. We confirm that the collection, processing and usage of your data are compliant with applicable data protection laws and all further legal provisions, and that your data will be treated with strict confidentiality.

Scope and purpose of data collection
If you submit an application to us, we will process your associated personal data (e.g. contact and communication data, application documents, notes made as part of application interviews etc.) to the extent necessary in order to decide whether or not to engage in an employment relationship. The legal basis for this is § 26 of the new Germany Privacy Act (“BDSG-neu”) based on German law (initiation of an employment relationship), article 6(1), section (b) of GDPR (general initiation of a contract) and – provided you have granted consent – article 6(1), section (a) of GDPR. This consent can be withdrawn at any time. Your personal data will only be shared within our company with people who are involved in dealing with your application.

If the application is successful, the data you have submitted will be stored in our data processing systems on the basis of § 26 of the new Germany Privacy Act (“BDSG-neu”) and article 6(1), section (b) of GDPR for the purpose of establishing the employment relationship.

Scope and purpose of data collection
If we are unable to offer you a job, you reject a job offer, withdraw your application, withdraw your consent for data processing or ask us to delete your data, then the data you have submitted, including any remaining physical application documents, will be stored or retained for a maximum period of 6 months after conclusion of the application process (retention period) so that details of the application process can be understood in the event of any disagreements (article 6(1), section (f) of GDPR).

YOU CAN OBJECT TO THIS STORAGE OF DATA IF THERE ARE LEGITIMATE INTERESTS ON YOUR SIDE THAT OUTWEIGH OUR INTERESTS.

After the end of the retention period, the data will be deleted as long as there are no legal requirements to store the data or any other legal grounds exist that require further retention. If it is evident that your data will need to continue to be stored after the end of the retention period (e.g. due to a pending or ongoing legal dispute), the data will not be deleted until the data is no longer relevant. Other legal retention requirements remain unaffected by this.

Source: www.e-recht24.de