Privacy policy
This is a translation for convenience. The German version is legally binding.
General information on data protection
Introduction
We, AIRAmed GmbH, thank you for visiting our website. As a manufacturer of medical devices, handling your data securely is particularly important to us. Below we explain how we collect and process data on the website available at www.airamed.de. This version of the privacy policy applies from the launch of the new website. Further development of our website and services, or changes in legal or regulatory requirements, may make it necessary to change this privacy policy.
You can use our website without providing any personal data. This website sets no cookies, uses no analytics or tracking services and loads no content from third parties. Fonts and maps are part of the website itself. We only process personal data that you give us yourself, for example by email, and in the technically necessary logs of our hosting provider (see below).
Personal data is always processed in accordance with the General Data Protection Regulation (GDPR) and the country-specific data protection provisions that apply to AIRAmed GmbH.
The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Königstraße 10a, 70173 Stuttgart, Germany.
Phone: +49 (0)711 615 541-0
Fax: +49 (0)711 615 541-15
Email: poststelle@lfdi.bwl.de
Web: www.baden-wuerttemberg.datenschutz.de
A list of all other supervisory authorities is available at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Definitions
This privacy policy uses the terms of the GDPR. In particular:
Personal data: Any information relating to an identified or identifiable natural person ("data subject").
Data subject: Any identified or identifiable natural person whose personal data is processed by the controller.
Processing: Any operation performed on personal data, such as collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, restriction, erasure or destruction.
Restriction of processing: The marking of stored personal data with the aim of limiting its future processing.
Profiling: Any form of automated processing of personal data to evaluate personal aspects of a natural person.
Pseudonymisation: The processing of personal data in such a way that it can no longer be attributed to a specific data subject without additional information that is kept separately.
Controller: The natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
Processor: A natural or legal person who processes personal data on behalf of the controller.
Recipient: A natural or legal person to whom personal data is disclosed.
Third party: Any natural or legal person other than the data subject, the controller, the processor and persons authorised to process the data under their direct authority.
Consent: Any freely given, specific, informed and unambiguous indication of the data subject's wishes by which they agree to the processing of their personal data.
Data of persons under 13 (children)
To protect children, AIRAmed GmbH does not intend to process data of persons under 13. Visitors under 13 should therefore not provide their data to AIRAmed GmbH.
Controller
The controller within the meaning of the GDPR and other data protection laws is:
AIRAmed GmbH
Konrad-Adenauer-Str. 13
72072 Tübingen, Germany
Phone: +49 (0) 7071 / 53 933 40
Email: info@airamed.de
Web: www.airamed.de
Data protection officer
The data protection officer of the controller is:
Christian Dugall
Authorised officer (Prokurist) of
datenschutz süd GmbH
Head office:
Wörthstraße 15
97082 Würzburg, Germany
Stuttgart office:
Holderäckerstraße 4
70499 Stuttgart, Germany
Your data
Hosting and server logs
This website is delivered through Cloudflare Pages, provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA ("Cloudflare"). On every request, Cloudflare processes the technically necessary connection data on our behalf, in particular the IP address, date and time of access, the requested address, browser type and operating system, and the previously visited page (referrer). This data is needed to deliver the website, to keep it secure and stable, and to fend off attacks. We draw no conclusions about you from it and do not combine it with other data.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is a secure and reliable provision of the website. A data processing agreement under Art. 28 GDPR is in place with Cloudflare. A transfer to the USA cannot be ruled out. Cloudflare is certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR). More information is in Cloudflare's privacy policy: www.cloudflare.com/privacypolicy.
Storage in your browser
The website sets no cookies. To navigate within the website, your browser temporarily keeps technical details, such as the scroll position when going back, in its session storage. These details do not leave your device and are deleted when you close the browser window. This access is strictly necessary for the service you requested (Section 25(2) no. 2 TDDDG).
Finding a radiologist near you
When you enter a postcode or town, your browser calculates the distance to our partner radiology sites. The input is processed only on your device and is not sent to us. For this, the website loads a list of postcodes from our own server.
With the button "Use my location" you can share your location. Your browser asks for permission first. The location is also used only on your device to calculate distances and is not sent to us.
The "Directions" link opens Google Maps. Only when you click it are the address of the radiology site and, if you searched, your search location sent to Google. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google's privacy policy applies: policies.google.com/privacy.
Contacting us
When you contact us by email or phone or request trial access, we process your details (for example name, institution, email address, phone number and your message) to handle your request and to get in touch with you. The legal basis is Art. 6(1)(b) GDPR where your request concerns a contract or pre-contractual measures, and Art. 6(1)(f) GDPR otherwise. We do not pass the data on to third parties. We delete it once the request is settled and no statutory retention obligations apply.
Links to social networks and other websites
Our website contains plain links to our profiles on LinkedIn, YouTube and X (formerly Twitter) and links to websites of other providers. These are not social plugins. Visiting our website does not connect you to these providers. Only when you click a link do you leave our website, and the privacy policy of the respective provider applies. AIRAmed GmbH is not responsible for the content of other providers' websites.
Statutory or contractual requirements to provide personal data
Providing personal data is partly required by law (for example tax regulations) or can result from contractual provisions (for example details about the contracting party). Concluding a contract may require that you provide personal data that we then have to process. If you do not provide it, the contract could not be concluded.
Legal basis of processing
Art. 6(1)(a) GDPR is our legal basis for processing based on consent for a specific purpose. Processing necessary for the performance of a contract with you, or for pre-contractual measures such as inquiries about our products or services, is based on Art. 6(1)(b) GDPR. Processing required to meet a legal obligation, such as tax duties, is based on Art. 6(1)(c) GDPR. In rare cases, processing may be necessary to protect vital interests of you or another natural person (Art. 6(1)(d) GDPR). Processing not covered by these bases may rely on Art. 6(1)(f) GDPR where it is necessary for our legitimate interests or those of a third party, unless your interests, fundamental rights and freedoms override them.
Legitimate interests of the controller
Where processing is based on Art. 6(1)(f) GDPR, our legitimate interest is conducting our business for the benefit of all our employees and shareholders.
Retention period, routine erasure and blocking of personal data
We process and store personal data only for as long as needed to achieve the purpose of storage, or as provided for by laws or regulations that apply to us. When the purpose no longer applies or a statutory retention period expires, the personal data is routinely blocked or erased in accordance with the law.
Your rights
You have the following rights regarding your personal data. To exercise them, contact us at any time using the contact details above.
Right of confirmation and access (Art. 15 GDPR)
You can ask for confirmation whether we process personal data about you and, if so, for information about this data, in particular the purposes of processing, the categories of data, the recipients, the planned storage period, the origin of the data and the existence of automated decision-making.
Right to rectification (Art. 16 GDPR)
You can ask us to correct inaccurate personal data about you without delay and to complete incomplete data.
Right to erasure (Art. 17 GDPR)
You can ask us to erase personal data about you without delay, for example if it is no longer needed for its purpose, if you withdraw your consent, or if it was processed unlawfully, unless processing is still required, for example to meet a legal obligation or to establish, exercise or defend legal claims.
Right to restriction of processing (Art. 18 GDPR)
You can ask us to restrict processing, for example while the accuracy of the data is being checked, or if you need the data to establish, exercise or defend legal claims although we no longer need it.
Right to data portability (Art. 20 GDPR)
You can ask to receive the personal data you provided to us in a structured, commonly used and machine-readable format, and to have it transmitted to another controller where technically feasible.
Right to object (Art. 21 GDPR)
You can object at any time, on grounds relating to your particular situation, to processing based on Art. 6(1)(e) or (f) GDPR. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves to establish, exercise or defend legal claims.
Automated individual decision-making including profiling (Art. 22 GDPR)
We do not use automated decision-making or profiling.
Right to withdraw consent (Art. 7(3) GDPR)
You can withdraw consent you have given at any time with effect for the future.
Right to lodge a complaint (Art. 77 GDPR)
You can lodge a complaint with a supervisory authority, in particular the one named above.