Privacy Notice
Privacy Policy of Eisenhut Instrumente GmbH
In the following, we inform you about the collection of personal data when using our website. "Personal data" means any data that can be personally related to you (or another natural person), e.g. name, address, e-mail address or user conduct.
1. Name and contact details of the body responsible, data protection officer
The body responsible pursuant to article 4 paragraph 7 of EU General Data Protection Regulation (GDPR) is Eisenhut Instrumente GmbH, Schildeckstraße 28-30, 78655 Frittlingen, Germany, E-Mail: service@eisenhut.de, Telefon: 07424-981010, Telefax: 07424-9810129 (see our legal notice).
2. Collection and storage of personal data as well as nature and purpose of its use
a) Log data recorded when visiting our website
When calling up our website, the browser used on your terminal device automatically sends information to us. Whenever you visit our website, the following data is collected without any action on your part:
• the IP address
• the date and time of the request
• the content of the request (actual page)
• the access status/HTTP status code
• the amount of data transferred
• the website where the request originates
• the browser used
• the language and version of the browser software – the operating system and its interface.
The above-mentioned data will be processed by us for the following purposes:
• to ensure a smooth connection to the website
• to ensure the convenient use of our website
• to evaluate the security and stability of the system
• for other administrative purposes.
The legal basis for this data processing is article 6 paragraph 1, subparagraph 1 (f) of GDPR. Our legitimate interest derives from the above-mentioned purposes for data collection. Under no circumstances will we use the above-mentioned data to draw conclusions about you as a person.
In addition, we use cookies when you visit our website. You can find more detailed explanations on cookies in section 4 of this privacy policy.
b) When using our contact form
When you contact us using a contact form or by e-mail, the information you share with us (e.g. your e-mail address, your name as well as any other information you provide) will be stored by us to answer your inquiries.
Data processing for contact purposes is conducted in accordance with article 6, paragraph 1, subparagraph 1 (a) of the GDPR on the basis of your voluntarily granted consent.
We delete the data produced in this context once storage is no longer necessary, or limit their processing where statutory retention requirements apply.
c) When using our customer area and online store
If you wish to use our customer area or web shop, you must first register with your name, e-mail address, postal address and details of your surgery/clinic/MVZ. The provision of this data is necessary to create a user profile, to process your order in the web shop and to prevent misuse of our customer area. The legal basis for processing your data is article 6, paragraph 1, subparagraph 1 (a) of the GDPR and, in the case of ordering goods, article 6, paragraph 1, subparagraph 1 (b) of the GDPR.
You can order goods in our web shop. We process the data you provide to process the order. For the shipment of the goods ordered by you, it is necessary that we transmit your name and address to a parcel service provider. In addition, we can pass on your payment data to our house bank. The disclosure of personal data to third parties is limited to the minimum necessary. The legal basis for the aforementioned data processing operations is article 6, paragraph 1, subparagraph 1 (b) of the GDPR.
We may also process the data you provide in order to inform you by mail about further interesting products from our portfolio. The legal basis for this is article 6, paragraph 1, subparagraph 1 (f) of the GDPR.
We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years. After expiry of the retention periods, your data will be deleted, unless further storage is necessary for the purpose of evidence or you have expressly consented to longer storage.
3. Use of service providers, disclosure of data
To provide support and for administrative tasks in connection with our website, we use selected external service providers. These service providers may occasionally have access to your personal data. The service providers process your data solely on behalf of and in accordance with our instructions in compliance with this data protection policy and any applicable laws.
Your personal data shall only be disclosed to other third parties to the extent expressly mentioned in this data protection policy or for the following purposes:
• You have given your explicit consent in accordance with article 6, paragraph 1, subparagraph 1 (a) of GDPR.
• The disclosure is required to assert, exercise or defend legal claims and there is no reason to believe that you have an overriding interest warranting protection relating to the non-disclosure of your personal data. The legal basis for personal data processing in these cases is article 6 paragraph 1 (f) GDPR,
• In the event that a legal obligation exists for such disclosure pursuant to article 6, paragraph 1, subparagraph 1 (c) of GDPR.
• Disclosure is permitted by law and, pursuant to article 6, paragraph 1, subparagraph 1 (b) of GDPR, is necessary for settlement of the contractual relationship with you.
4. Cookies
We use cookies on our website. Cookies are small pieces of text information, which are stored by your browser (e.g. Internet Explorer or Mozilla Firefox) on your computer's hard drive and which allow the flow of specific information to us. This does not mean, however, that we can immediately determine your identity.
The use of cookies serves to make the use of our offer, especially our web shop, more pleasant for you. We use session cookies to detect that you have already visited certain pages of our website. Session cookies are creating a session ID, with which various requests from your browser can be assigned to the joint session. These session cookies will be deleted automatically after you leave our site.
Third-party cookies are not used on our website.
The data processing by cookies is necessary for the aforementioned purposes (in particular to optimize the usability of our web shop) to protect our legitimate interests as well as those of third parties in accordance with article 6, paragraph 1, subparagraph 1 (f) of GDPR.
You can configure your browser settings according to your preferences and refuse to accept cookies. Please note that you may not be able to use all features of our website if you refuse cookies.
The legal basis for the use of cookies is article 6, paragraph 1, subparagraph 1 (f) of GDPR.
5. Data security
We use state-of-the-art encryption methods to protect your data during transmission (TLS procedure with 128-bit key). We also take appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously being improved in accordance with technological developments. However, we cannot guarantee the security of any information you send us as a user. Therefore, any data transmission is at your own risk.
6. Your rights
You are entitled:
• Pursuant to article 15 of GDPR, to request information about your personal data processed by us. In particular, you may request information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data if not collected by us, as well as the existence of an automated decision-making, including profiling and, where applicable, meaningful information on its details.
• Pursuant to article 16 of GDPR, to request the immediate rectification of inaccurate data or the completion of personal data stored by us.
• Pursuant to article 17 of GDPR, to request the immediate deletion of your personal data stored by us, unless the processing is required to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest, or to assert, pursue or defend legal claims.
• Pursuant to article 18 of GDPR, to request that the processing of your personal data is restricted if, and to the extent, that the accuracy of the data is objected by you, the processing is unlawful, but you refuse the deletion of this data and we no longer need it, you however need it to assert, exercise or defend legal claims or if you have filed an objection against the processing in accordance with article 21 of GDPR.
• Pursuant to article 20 of GDPR, to receive the personal data you provided to us in a structured, common and machine-readable format or to request the transmission of the data to another data controller.
• Pursuant to article 7 paragraph 3 of GDPR, to withdraw the consent given to us at any time. As a result, we will no longer be permitted to continue processing data based on this consent.
If you wish to exercise the aforementioned rights, please send an e-mail to service@eisenhut.de or send us a message using the contact details specified in the legal notice.
Right of objection
If we use your personal data to protect legitimate interests within the meaning of article 6, paragraph 1, subparagraph 1 (f) of GDPR, you have the right, pursuant to article 21, paragraph 1 of GDPR, to object to this processing for reasons that arise from your personal circumstances. You have the right to object to the processing of your data for direct marketing purposes pursuant to article 21, paragraph 2 of GDPR at any time without stating a reason. To exercise your right to object, simply send us an informal notification, e.g. by e-mail to service@eisenhut.de.
Right of complaint
If you believe that the processing of personal data concerning you violates the General Data Protection Regulation, then in accordance with article 77 of GDPR you have the right to complain to a supervisory authority for data protection. The contact details of the supervisory authority responsible for us are as follows:
Landesbeauftragter für den Datenschutz und die
Informationsfreiheit Baden-Württemberg
Dr. Stefan Brink
address: Königstraße 10a, 70173 Stuttgart
postal address:Postfach 10 29 32, 70025 Stuttgart
telephone: 0049 711/61 55 41-0
e-Mail: poststelle@lfdi.bwl.de
7. Updating and changing this data protection policy
This data protection policy is currently valid and is dated July 2021. Due to the further development of our offers or due to changes in statutory or regulatory requirements, it may be necessary to modify this data protection policy. The current data protection policy can always be view at https://www.eisenhut.de/en/privacy-notice
In the following, we inform you about the collection of personal data when using our website. "Personal data" means any data that can be personally related to you (or another natural person), e.g. name, address, e-mail address or user conduct.
1. Name and contact details of the body responsible, data protection officer
The body responsible pursuant to article 4 paragraph 7 of EU General Data Protection Regulation (GDPR) is Eisenhut Instrumente GmbH, Schildeckstraße 28-30, 78655 Frittlingen, Germany, E-Mail: service@eisenhut.de, Telefon: 07424-981010, Telefax: 07424-9810129 (see our legal notice).
2. Collection and storage of personal data as well as nature and purpose of its use
a) Log data recorded when visiting our website
When calling up our website, the browser used on your terminal device automatically sends information to us. Whenever you visit our website, the following data is collected without any action on your part:
• the IP address
• the date and time of the request
• the content of the request (actual page)
• the access status/HTTP status code
• the amount of data transferred
• the website where the request originates
• the browser used
• the language and version of the browser software – the operating system and its interface.
The above-mentioned data will be processed by us for the following purposes:
• to ensure a smooth connection to the website
• to ensure the convenient use of our website
• to evaluate the security and stability of the system
• for other administrative purposes.
The legal basis for this data processing is article 6 paragraph 1, subparagraph 1 (f) of GDPR. Our legitimate interest derives from the above-mentioned purposes for data collection. Under no circumstances will we use the above-mentioned data to draw conclusions about you as a person.
In addition, we use cookies when you visit our website. You can find more detailed explanations on cookies in section 4 of this privacy policy.
b) When using our contact form
When you contact us using a contact form or by e-mail, the information you share with us (e.g. your e-mail address, your name as well as any other information you provide) will be stored by us to answer your inquiries.
Data processing for contact purposes is conducted in accordance with article 6, paragraph 1, subparagraph 1 (a) of the GDPR on the basis of your voluntarily granted consent.
We delete the data produced in this context once storage is no longer necessary, or limit their processing where statutory retention requirements apply.
c) When using our customer area and online store
If you wish to use our customer area or web shop, you must first register with your name, e-mail address, postal address and details of your surgery/clinic/MVZ. The provision of this data is necessary to create a user profile, to process your order in the web shop and to prevent misuse of our customer area. The legal basis for processing your data is article 6, paragraph 1, subparagraph 1 (a) of the GDPR and, in the case of ordering goods, article 6, paragraph 1, subparagraph 1 (b) of the GDPR.
You can order goods in our web shop. We process the data you provide to process the order. For the shipment of the goods ordered by you, it is necessary that we transmit your name and address to a parcel service provider. In addition, we can pass on your payment data to our house bank. The disclosure of personal data to third parties is limited to the minimum necessary. The legal basis for the aforementioned data processing operations is article 6, paragraph 1, subparagraph 1 (b) of the GDPR.
We may also process the data you provide in order to inform you by mail about further interesting products from our portfolio. The legal basis for this is article 6, paragraph 1, subparagraph 1 (f) of the GDPR.
We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years. After expiry of the retention periods, your data will be deleted, unless further storage is necessary for the purpose of evidence or you have expressly consented to longer storage.
3. Use of service providers, disclosure of data
To provide support and for administrative tasks in connection with our website, we use selected external service providers. These service providers may occasionally have access to your personal data. The service providers process your data solely on behalf of and in accordance with our instructions in compliance with this data protection policy and any applicable laws.
Your personal data shall only be disclosed to other third parties to the extent expressly mentioned in this data protection policy or for the following purposes:
• You have given your explicit consent in accordance with article 6, paragraph 1, subparagraph 1 (a) of GDPR.
• The disclosure is required to assert, exercise or defend legal claims and there is no reason to believe that you have an overriding interest warranting protection relating to the non-disclosure of your personal data. The legal basis for personal data processing in these cases is article 6 paragraph 1 (f) GDPR,
• In the event that a legal obligation exists for such disclosure pursuant to article 6, paragraph 1, subparagraph 1 (c) of GDPR.
• Disclosure is permitted by law and, pursuant to article 6, paragraph 1, subparagraph 1 (b) of GDPR, is necessary for settlement of the contractual relationship with you.
4. Cookies
We use cookies on our website. Cookies are small pieces of text information, which are stored by your browser (e.g. Internet Explorer or Mozilla Firefox) on your computer's hard drive and which allow the flow of specific information to us. This does not mean, however, that we can immediately determine your identity.
The use of cookies serves to make the use of our offer, especially our web shop, more pleasant for you. We use session cookies to detect that you have already visited certain pages of our website. Session cookies are creating a session ID, with which various requests from your browser can be assigned to the joint session. These session cookies will be deleted automatically after you leave our site.
Third-party cookies are not used on our website.
The data processing by cookies is necessary for the aforementioned purposes (in particular to optimize the usability of our web shop) to protect our legitimate interests as well as those of third parties in accordance with article 6, paragraph 1, subparagraph 1 (f) of GDPR.
You can configure your browser settings according to your preferences and refuse to accept cookies. Please note that you may not be able to use all features of our website if you refuse cookies.
The legal basis for the use of cookies is article 6, paragraph 1, subparagraph 1 (f) of GDPR.
5. Data security
We use state-of-the-art encryption methods to protect your data during transmission (TLS procedure with 128-bit key). We also take appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously being improved in accordance with technological developments. However, we cannot guarantee the security of any information you send us as a user. Therefore, any data transmission is at your own risk.
6. Your rights
You are entitled:
• Pursuant to article 15 of GDPR, to request information about your personal data processed by us. In particular, you may request information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data if not collected by us, as well as the existence of an automated decision-making, including profiling and, where applicable, meaningful information on its details.
• Pursuant to article 16 of GDPR, to request the immediate rectification of inaccurate data or the completion of personal data stored by us.
• Pursuant to article 17 of GDPR, to request the immediate deletion of your personal data stored by us, unless the processing is required to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest, or to assert, pursue or defend legal claims.
• Pursuant to article 18 of GDPR, to request that the processing of your personal data is restricted if, and to the extent, that the accuracy of the data is objected by you, the processing is unlawful, but you refuse the deletion of this data and we no longer need it, you however need it to assert, exercise or defend legal claims or if you have filed an objection against the processing in accordance with article 21 of GDPR.
• Pursuant to article 20 of GDPR, to receive the personal data you provided to us in a structured, common and machine-readable format or to request the transmission of the data to another data controller.
• Pursuant to article 7 paragraph 3 of GDPR, to withdraw the consent given to us at any time. As a result, we will no longer be permitted to continue processing data based on this consent.
If you wish to exercise the aforementioned rights, please send an e-mail to service@eisenhut.de or send us a message using the contact details specified in the legal notice.
Right of objection
If we use your personal data to protect legitimate interests within the meaning of article 6, paragraph 1, subparagraph 1 (f) of GDPR, you have the right, pursuant to article 21, paragraph 1 of GDPR, to object to this processing for reasons that arise from your personal circumstances. You have the right to object to the processing of your data for direct marketing purposes pursuant to article 21, paragraph 2 of GDPR at any time without stating a reason. To exercise your right to object, simply send us an informal notification, e.g. by e-mail to service@eisenhut.de.
Right of complaint
If you believe that the processing of personal data concerning you violates the General Data Protection Regulation, then in accordance with article 77 of GDPR you have the right to complain to a supervisory authority for data protection. The contact details of the supervisory authority responsible for us are as follows:
Landesbeauftragter für den Datenschutz und die
Informationsfreiheit Baden-Württemberg
Dr. Stefan Brink
address: Königstraße 10a, 70173 Stuttgart
postal address:Postfach 10 29 32, 70025 Stuttgart
telephone: 0049 711/61 55 41-0
e-Mail: poststelle@lfdi.bwl.de
7. Updating and changing this data protection policy
This data protection policy is currently valid and is dated July 2021. Due to the further development of our offers or due to changes in statutory or regulatory requirements, it may be necessary to modify this data protection policy. The current data protection policy can always be view at https://www.eisenhut.de/en/privacy-notice