Information regarding the collection and processing of your personal data
Accuracy and transparency form the basis of our interaction with customers: a collaborative approach that is based on trust. We are therefore providing you with information on how we use your data and how you can exercise your rights under the General Data Protection Regulation. The personal data that we use and the purpose for which it is used depend on the applicable contractual relationship
1. Who is responsible for processing the data?
The party responsible is the T&T medilogic Medizintechnik GmbH, Mittelstraße 9, 12529 Schönefeld, Germany
2. How can you contact the Data Protection Officer?
Our Data Protection Officer’s contact details are:
Dipl.-Ing. Frank Obenaus
Mittelstr. 9, 12529 Schönefeld
3. Which personal data do we use?
We process your personal information if you submit a query, receive a quote from us or sign a contract with us. We also process your personal data for purposes, which include fulfilling our legal obligations, safeguarding a legitimate interest, or on the basis of the consent that you have granted us.
Depending on the legal basis, this concerns the following categories of personal data:
- First name, surname
- Communication data (telephone number, e-mail address)
- Contract-related master data, in particular contract number, duration, cancellation period, type of contract
- Invoice data/sales data
- Payment data/account details
- Customer group/interests
- Customer number
- Contact history
- Appointment data
- Occupation-related information
4. Which sources are used to obtain the data?
We process personal data that we receive from our customers, service providers and suppliers.
We receive personal data from the following sources:
- Publicly accessible sources: commercial or association registers
5. What do we use your data for and what is our legal basis for doing so?
We process your personal data with particular consideration of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG), as well as in accordance with all further relevant legislation.
To fulfil a contract (Art. 6 (1b) GDPR)
T & T medilogic GmbH offers measurement and analysis systems for motion analysis as well as related maintenance and service services.
6. To whom do we forward your data?
To fulfil our contractual and legal obligations your personal data is disclosed to various public bodies, as well as to external service Providers.
External service providers:
- Accounting service providers
- Payment service providers
In addition, we may be required to pass on your personal data to other entities, such as to authorities for the fulfilment of legal reporting obligations.
- Financial authorities
- Customs authorities
- Social insurance agencies
Should you have further questions regarding the individual recipients, please contact us at firstname.lastname@example.org.
7. Will your data be transmitted to countries outside the European Union (known as ‘third countries’)?
We will not transmit your data to ‘third countries’.
8. How long will my data be stored for?
We store your personal data for as long as is required to allow us to fulfil our legal and contractual obligations.
Should it no longer be necessary to store the data for the purposes of fulfilling contractual or legal obligations, your data will be deleted, unless further processing is necessary due to the following reasons:
- Retention requirements in accordance with the German Medicinal Devices Act
- Fulfilling commercial and tax retention obligations. This includes retention periods from the German Commercial Code (HGB) or the General Fiscal Code (AO).
- Preserving evidence in the context of the regulatory statute of limitations. According to the statute of limitations of the German Civil Code (BGB), these limitation periods can, in some cases, be up to 30 years; the regular limitation period is three years.
9. What rights do you have regarding the processing of your data?
Each individual affected has the right to information as per Art. 15 GDPR, the right to correction as per Art. 16 GDPR, the right to deletion as per Art. 17 GDPR, the right to limiting the processing as per Art. 18 GDPR, the right to appeal as per Art. 21 GDPR and the right to data portability as per Art. 20 GDPR. With regard to the right to information and the right to deletion, restrictions apply in accordance with §§ 34 and 35 BDSG.
Right to appeal
You may veto the use of your data for advertising purposes at any time without incurring anything other than the transmission costs based on the basic tariffs.
- What are your rights in the event of data processing for your legitimate or public interest?
In accordance with Art. 21 (1) GDPR, due to reasons that arise from your particular situation, you have the right at any time to file an objection against the processing of personal data concerning you that takes place on the basis of Art. 6 (1e) GDPR (data processing in the public interest), or Art. 6 (1f) GDPR (data processing for the purposes of safeguarding a legitimate interest) this also applies to profiling based on this provision.
In the event of your objecting we will no longer process your personal data, unless we can prove that we have compelling legitimate reasons for doing so, which outweigh your interests, rights and freedoms; or if processing serves to enforce, exercise or defend legal claims.
- What rights do you have in the event of data being processed for the purposes of direct mail advertising?
If we process your personal data for the purposes of direct mail advertising, you have the right, in accordance with Art. 21 (2) GDPR, to file an objection at any time against the processing of personal data pertaining to yourself for the purposes of this type of advertising; this also applies to profiling, insofar as it is associated with this direct mail advertising.
In the event of your objecting to processing for the purposes of direct mail advertising, we will no longer process your personal data for this purpose.
You can revoke your consent for the processing of your personal data at any time. Please be aware that the revocation is only effective for the future.
Right to information
You can request information regarding whether we have stored personal data about you. Should you so wish, we will inform you what data we hold on you, what the data is being used for, to whom the data has been disclosed, how long the data will be stored and what further rights you have in relation to this data.
In addition, you have the right to correct data that is incorrect or to have your data deleted. Where there is no reason to store it, further we will delete your data; otherwise, we will limit the processing of it. You can also demand that we provide you, or a person or company of your choice, with all personal data that you have provided us with, in a structured, commonly acceptable and machine-readable Format.
Furthermore, you have a right of appeal to the data protection supervisory authority responsible (Art. 77 GDPR in conjunction with § 19 BDSG).
Being aware of your rights
To find out your rights you can contact those officials responsible or the data protection authorities using the contact details provided. We will process your requests promptly and in accordance with the legal requirements and inform you of the measures we have taken.
10. Is there an obligation to provide your personal data?
To enter into a business relationship you must provide us with the personal data required to implement the contractual relationship, or that we are required to collect due to legal stipulations. If you do not provide us with this data, we will not be able to implement or perform the contractual relationship.
11. Changes to this Information
If the purpose or methods of the processing of your personal data are subject to significant changes, we will update and publish this information in a timely manner a.