Information on data protection regarding our data processing in accordance with Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR)
We take data protection seriously and hereby inform you how we process your data and which claims and rights you are entitled to under the current data protection regulations. Valid from 25 May 2018.
responsible body in terms of statutory data protection
Life Systems Medizintechnik-Service GmbH
Tel.: +49 2 166 14402 24
Fax: +49 2166 14402 15
Contact information for our data protection officer:
HEC Harald Eul Consulting GmbH
Auf der Höhe 34
The processing of personal data takes place for the implementation of our contracts with you and the execution of your orders as well as for the implementation of measures and activities in the context of precontractual relationships, e.g. with interested parties. In particular, the processing serves the provision of further information and to establish contact according to your orders and wishes and include the necessary services, measures and activities. These include, but are not limited to, contractual communications with you, the verifiability of transactions, orders and other agreements, as well as for quality control through appropriate documentation, goodwill procedures, measures to control and optimize business processes, as well as for the fulfilment of general due diligence, control and oversight by affiliated companies (e.g. parent company); statistical evaluations of corporate management, cost accounting and controlling, reporting, internal and external communications, emergency management, billing and tax assessment of operational services, risk management, asserting legal claims and defence against legal disputes; ensuring IT security (including system and plausibility tests) and general security, including building and system security, ensuring and exercising domiciliary rights (e.g. by access control); ensuring the integrity, authenticity and availability of data, preventing and resolving criminal offences; monitoring by oversight or supervisory bodies (e.g. for auditing).
In addition to the actual fulfilment of the contract or preliminary agreement, we may process your data, if necessary, in order to protect legitimate interests by us or third parties, in particular for the following purposes:
Processing of your personal data for specific purposes (e.g. use of your email address for marketing purposes) may also be based on your consent. As a rule, you can revoke your consent at any time. This also applies to the revocation of declarations of consent that were issued to us before the effective date of the GDPR, i.e. before 25 May 2018. You will be notified separately about the purposes and consequences of a withdrawal or non-issuance of consent in the corresponding to text of the consent.
In principle, the revocation of consent only takes effect for the future. Processing that occurred before the revocation is unaffected by it and remains legal.
Like everyone involved in business transactions, we too are subject to a variety of legal obligations. These are primarily legal requirements (e.g. commercial and tax laws), but also potentially regulatory or other official requirements (e.g.: German X-ray Ordinance , or similar) The purposes for processing include identity and age checks, prevention of fraud and money laundering, the prevention, combating and investigation of terrorist financing and endangerment of assets, comparison with European and international anti-terrorist lists, compliance with tax inspection and reporting obligations, as well as the archiving of data for privacy and data security purposes and auditing by tax and other authorities. Beyond that, the disclosure of personal data in the context of administrative/judicial action may be required for purposes of gathering evidence, prosecuting or enforcing civil claims.
If it is necessary for the provision of our services, we process personal data legitimately received from other companies or other third parties (e.g. credit bureaus, address directories). In addition, we process personal data that we have legitimately collected, obtained or acquired from publicly available sources (such as telephone directories, trade and association registries, press, internet and other media) and are allowed to process.
Relevant personal data categories may be in particular:
Within our company, your data is received by internal departments or organizational units, who need it to fulfil our contractual and legal obligations or use it in the context of the processing and implementing our legitimate interests. Your data is not forwarded to external agencies.
We process and store your data for the duration of our business relationship. This also includes the initiation of a contract (precontractual legal relationship) and the execution of a contract.
Furthermore, we are subject to various storage and documentation obligations, which include the German Commercial Code (HGB) and the Tax Code (AO). The deadlines for storage or documentation specified there are up to ten years beyond the end of the business relationship or the precontractual legal relationship.
Furthermore, specific statutory regulations may require a longer retention period, such as the preservation of evidence under the statutory limitation provisions. According to §§ 195 et seq. of the German Civil Code (BGB), the regular limitation period is three years; however, limitation periods of up to 30 years may also be applicable.
If the data is no longer required for the fulfilment of contractual or legal obligations and rights, they are regularly deleted, unless their limited further processing is necessary for the fulfilment of the purposes listed in Section 2.2 for a predominantly legitimate interest. Such an overriding legitimate interest exists, for example, even if deletion is not possible or only with disproportionately high costs due to the special nature of the storage and processing for other purposes through appropriate technical and organizational measures is excluded.
A transfer of data to offices in countries outside the European Union (EU) or the European Economic Area (EEA) takes place if it becomes necessary for the execution of an order/contract from or with you, if it is required by law (e.g. for tax reporting obligations), if it is part of the legitimate interest of us or a third party or if you have given us consent.
The processing of your data in a foreign country may also take place in connection with the involvement of service providers in order processing. Unless there is a decision by the EU Commission regarding the appropriate level of data protection for the country in question, we ensure that the rights and freedoms are adequately protected and guaranteed under relevant EU treaties. Corresponding detailed information is available upon request.
Information about the appropriate or reasonable warranties and the possibility of receiving a copy of them can be obtained from the data protection officer upon request.
Under certain conditions, you can assert your data protection rights with us
Your requests to exercise your rights should ideally be addressed in writing to the address indicated above or directly to our data protection officer.
All you need to do is provide the information necessary to enter into a business relationship or enter into a pre-contractual relationship with us, or that we are required to collect by law. Without this data we will generally not be able to conclude or execute the contract. This may also apply to data required later in the business relationship. If we request additional data from you, you will be made aware of the voluntary nature of the information separately.
Information about your right of objection according to Art. 21 of the GDPR
You have the right to object at any time to the processing of your data pursuant to Article 6 para. 1 f of the GDPR (data processing on the basis of a balance of interests) or Article 6 para. 1 e of the GDPR (data processing in the public interest) if there are grounds for it arising from your particular situation. This also applies to profiling based on this provision within the meaning of Art. 4 No. 4 of the GDPR. If you file your objection, we will no longer process your personal information unless we can establish compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purposes of asserting, exercising or defending legal claims.
We may also potentially process your personal data in order to generate direct mail. If you do not want to receive advertising, you have the right to object to it at any time; this also applies to profiling insofar as it is associated with such direct mail. We will comply with this objection for the future. We will no longer process your data for direct marketing purposes if you object to the processing for these purposes.
Additional data protection notices about our Facebook Fan Page
Within our Facebook fan page (available at: https://www.facebook.com/Life-Systems-Medizintechnik-Service-GmbH-574866525982962/) you also have the opportunity to obtain information about our services or contact us and interact. Our Facebook fan page is provided on the basis of the agreement reached with Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) on the joint processing of personal data under Art. 26 of the General Data Protection Regulation (GDPR) (‘Website Insights Supplement regarding the Responsible Controller’). According to this provision, we cannot make any decisions ourselves regarding the processing of insight data and implement them. The primary responsibility under the GDPR for the processing of insight data as well as the fulfilment of all obligations under the GDPR with regard to the processing of insight data is assumed by Facebook.
We would like to point out that during your visit of the Facebook fan page your user data may be processed outside the EU. The participating Facebook, Inc. undertakes to comply with EU data protection standards as a privacy shield-certified US provider: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active (last updated: 02/11/2018).
Your data may be processed for market research and promotional purposes, for example by creating usage profiles and using them for displaying advertisements based on your usage patterns. To this end, cookies are stored on your computer.
In this context, the ‘website insights’ feature allows us to retrieve statistical data of various categories related to the use of the Facebook fan page from Facebook, such as total page views, likes, web page activity, post interactions, video views, post reach, comments, shared content, answers, ratio of men and women, country and city of origin, language, views and clicks in the shop, clicks on route planner, and clicks on phone numbers. We use this information to make our pages more attractive and tailored to your needs (e.g. by identifying the right time to publish content).
Within the Facebook fan page, personal data of users is processed to safeguard our legitimate interests in a needs-based and target group-oriented configuration of our information offerings and communications with users (legal basis: Article 6 paragraph 1 lit. f GDPR). If you are asked by Facebook as the provider of the platform to give your consent to a particular data processing request, the processing to that extent takes place on the legal basis of Article 6 paragraph 1 lit. a GDPR.
With regard to exercising data subject rights and requests for information, we point out that you can assert this claim most effectively by addressing it directly with Facebook (see https://www.facebook.com/legal/terms/information_about_page_insights_data).
The objection does not require any special format and, if possible, should be addressed to
Life Systems Medizintechnik-Service GmbH
Tel.: +49 2 166 14402 24
Fax: +49 2166 14402 15
Our privacy statement and data protection information about our data processing according to Articles 13, 14 and 21 of the GDPR may change from time to time. All changes will be published on this page. Older versions are available for you to view in an archive.