Data privacy

Privacy Policy

GMED Healthcare Solutions GmbH thanks you for visiting our website and for your interest in our company and our services. The protection of your privacy when processing personal data is an important concern for us, which we take into account in our business processes. GMED Healthcare Solutions GmbH collects, processes and uses your personal data in accordance with the applicable data protection regulations.

You can visit our website without telling us who you are. In order to be able to display our websites, you are only obliged to provide the data transmitted by your browser to our server (see “Logfiles”). Further personal data will only be stored if you voluntarily enter it on the website or use corresponding functions, e.g. input via our contact form.

Contact

You can enter your personal data on our website to contact us. Only the data required to process your request is mandatory and marked as such. Providing further data may be helpful for the processing of your request, but is not mandatory (voluntary data). With your consent, these data are used and stored exclusively for the purpose of processing your message (Art. 6 para. 1 sentence 1 lit. a DSGVO). A use for other purposes or a passing on to third parties does not take place, unless you agree expressly (consent).

Online applications

Our applicant portal or the Simon Hegele Group's online application portal gives you the opportunity to send us your information about your application. We collect different types of information in your application. This includes in particular your personal data with contact information as well as a description of your education, work experience and skills. The fields marked with an asterisk are mandatory and require information. In addition, you have the option of providing us with electronically stored documents such as certificates or cover letters. Notwithstanding the above, it is also possible to send us application documents by post. With your application you assure that the information you provide is true. We point out that any false statement or deliberate omission may constitute a reason for a cancellation or subsequent dismissal. We do not require any information from you that is not usable under the General Equal Treatment Act (race, ethnic origin, gender, religion or belief, disability, age or sexual identity). We also do not ask you to provide information on illness, pregnancy, ethnic origin, political opinions, philosophical or religious beliefs, membership of a trade union, physical or mental health or sex life. The same applies to content that is likely to infringe the rights of third parties (e.g. copyrights, press law or general rights of third parties). Personal data will only be collected, stored, processed and used for purposes in connection with your interest in current or future employment with us and the processing of your application; the legal basis is Art. 6 para. 1 sentence 1 lit. b DSGVO, § 26 German Federal Data Protection Act. Other than to processors or group companies the data will not be passed on to third parties. If your application is successful, the data provided may be used for administrative purposes in the context of employment or for the purpose of carrying out the employment relationship. Your online application will only be processed and taken note of by the relevant contacts at our company. All employees entrusted with data processing are obliged to maintain the confidentiality of your data. Your details will not be disclosed to third parties under any circumstances. The processing of the data takes place exclusively in Germany. If we are unable to offer you employment, we will keep the information you provide for up to six months for the purpose of answering questions relating to your application and refusal. However, if your application documents are of general interest and only currently no suitable employment is available, we will keep and store your data accordingly. This way we can contact you for future vacancies.

Cookies

You can set your Internet browser so that you are informed as soon as a web server wants to send you a cookie. You can then agree to accept the cookie or reject it. You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. We would like to point out that you may not be able to use all the functions of this website. You can find out more about this in the help system of your Internet browser.

To manage cookies and your consent in this regard, we use a solution from Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark ("Usercentrics"), namely the Cookie Consent Manager Cookiebot. As part of order processing, we therefore transmit personal data (consent data: Date and time of visit or consent / refusal, device information) to Usercentrics as processor. The data is processed for the purpose of complying with legal obligations and the associated documentation of consent and thus on the basis of Art. 6 para. 1 lit. c) DSGVO. Local storage is used to store the data. The consent data is stored for 3 years. The data is stored exclusively in the EU. Further information on the data collected and contact options can be found at

Privacy policy (cookiebot.com)

Details on the cookies used and the option to consent to the use of cookies can also be found in the settings of the Cookie Consent Manager Cookiebot.

This stored information is stored separately from any other data you may have provided to us. In particular, the cookie data is not linked to your other data, if such data is transmitted.

IV. Links to social media platforms

Our website links to our pages on various social media platforms. We would like to point out that by clicking on these links, you leave our website and also the scope of this privacy policy. On the social media platforms, the respective data protection declarations and terms of use of the operator of the social media platform apply exclusively.

V. Log files

Each time you access our website, we collect the following information about your computer: the IP address of your computer, the request from your browser and the time of this request. In addition, the status and the amount of data transferred as part of this request are recorded, as well as product and version information about the browser used and the operating system of your computer. We also record the website from which our site was accessed. The IP address of your computer is only stored for the duration of your use of the website and is then immediately deleted or anonymized by shortening it. The other data is stored for a limited period of time. We use this data for the operation of our website, in particular to detect and eliminate errors on the website, to determine the utilization of the website and to make adjustments or improvements (legal basis: Art. 6 para. 1 sentence 1 lit. f DSGVO).

VI Google Analytics

We use Google Analytics to analyze website usage. The data obtained from this is used to optimize our website and advertising measures.

Google Analytics is provided to us by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google processes the website usage data on our behalf and is contractually obliged to take measures to ensure the security and confidentiality of the processed data.

The following data is recorded during your visit to the website:

- Pages accessed on our website

- The achievement of "website goals" (e.g. contact requests and newsletter registrations)

- Your behavior on the pages (e.g. length of stay, clicks, scrolling behavior)

- Your approximate location (country and city)

- Your IP address (in abbreviated form, so that no clear assignment is possible)

- Technical information such as browser, internet provider, end device and screen resolution

- Source of origin of your visit (i.e. via which website or advertising medium you came to us)

Personal data such as name, address or contact details are never transferred to Google Analytics.

This data is transferred to Google servers in the USA. We would like to point out that the same level of protection under data protection law cannot be guaranteed in the USA as within the EU.

Google Analytics stores cookies in your web browser for a period of two years since your last visit. These cookies contain a randomly generated user ID with which you can be recognized on future visits to the website. The recorded data is stored together with the randomly generated user ID, which makes it possible to analyze pseudonymous user profiles. This user-related data is automatically deleted after 14 months. Other data remains stored in aggregated form indefinitely.

If you do not agree to the collection of data, you can prevent this by installing the browser add-on to deactivate Google Analytics or by rejecting cookies via our cookie settings dialog.

VII Google Adwords Conversion Tracking

We use the offer of Google Adwords to draw attention to our offers with the help of advertising materials (so-called Google Adwords) on external websites. We are able to determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. We are interested in showing you advertisements that are of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs. These advertising media are delivered by Google via so-called “Ad Servers”. For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as the insertion of ads or clicks by users, can be measured. If you access our website via a Google ad, Google Adwords stores a cookie on your PC. These cookies usually expire after 30 days and are not intended to identify you personally. For this cookie, the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (mark that the user no longer wishes to be addressed) are usually stored as analysis values. These cookies enable Google to recognize your Internet browser. If a user visits certain pages of an Adwords customer's website and the cookie stored on their computer has not expired, Google and the customer can recognize that the user has clicked on the ad and has been redirected to this page. Each Adwords customer is assigned a different cookie. Cookies cannot therefore be traced via the websites of Adwords customers. We do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. On the basis of these evaluations we can recognize which of the used advertising measures are particularly effective. We do not receive any further data from the use of advertising material; in particular, we cannot identify users on the basis of this information. Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the extent and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: By integrating AdWords Conversion, Google receives the information that you have accessed the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google may associate your visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address. You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly, in particular by suppressing third-party cookies, you will not receive any ads from third-party providers; b) by deactivating cookies for conversion tracking, by setting your browser so that cookies are blocked by the domain “www.googleadservices.com”, https://www.google.de/settings/ads, this setting being deleted when you delete your cookies; c) by deactivating the interest-based ads of the providers that are part of the “About Ads” self-regulation campaign via the link http://www.aboutads.info/choices, this setting being deleted when you delete your cookies; d) by permanently deactivating Firefox, Internet Explorer or Google Chrome in your browsers under the link https://www.google.com/settings/ads/plugin. Please note that in this case you may not be able to use all functions of this offer in full. The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. f DSGVO. The use of cookies as described above is based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO. a DSGVO. Further information on data protection at Google can be found here: https://www.google.com/intl/de/policies/privacy. Google has submitted to the EU-US Privacy Shield.

Google Remarketing

Besides Adwords Conversion we use the application Google Remarketing. This is a process we would like to use to contact you again. This application allows you to see our advertisements after visiting our website when you continue to use the Internet. This is done by means of cookies stored in your browser, which are used to record and evaluate your usage behaviour when visiting various websites by Google. This is how Google can determine your previous visit to our website. According to Google's own statements, Google does not merge the data collected in the context of remarketing with your personal data, which may be stored by Google. According to Google, pseudonymisation is used for remarketing in particular.

Facebook Custom Audiences

The website also uses the remarketing function “Custom Audiences” of Meta PlatformsInc. („Facebook“). This allows users of the website to see interest-based advertisements (“Facebook ads”) when visiting the social network Facebook or other websites that also use the process. We are interested in showing you advertisements that are of interest to you in order to make our website more interesting for you. Due to the marketing tools used, your browser automatically establishes a direct connection to the Facebook server. We have no control over the extent and further use of the data collected through Facebook's use of this tool and therefore inform you according to our level of knowledge: By integrating Facebook Custom Audiences, Facebook receives the information that you have visited the corresponding website on our website, or that you have clicked on an ad from us. If you are registered with a Facebook service, Facebook can associate your visit with your account. Even if you are not registered with Facebook or have not logged in, it is possible that the provider may obtain and store your IP address and other identifying information. Disabling the Facebook Custom Audiences feature is availabe for logged in users under facebook settings. The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. DSGVO. For more information about Facebook's data processing, please www.facebook.com/about/privacy.

X. Information about your right to object

Right to object to data collection in special cases and to direct marketing (Art. 21 DSGVO):

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(e) DSGVO (data processing in the public interest) and Article 6(1)(f) DSGVO (data processing on the basis of a balancing of interests).

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims (objection pursuant to Art. 21 (1) DSGVO).

In individual cases, we process your personal data for the purpose of direct advertising. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising.

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes (objection pursuant to Art. 21 (2) DSGVO). The objection can be made informally and should preferably be addressed to:

GMED Healthcare Solutions GmbH

Rittigfeld 1

91301 Forchheim

Tel. +49 (0) 9191 72050

Fax +49 (0) 9191 7205 5563

E-Mail: datenschutz_at_hegele.de

XI. Disclosure of your data to third parties

In general, we do not pass on your data to third parties unless it is necessary in the context of contract processing and fulfillment of the contractually agreed service with you or we have commissioned third parties as processors (Art. 28 DSGVO). Otherwise, however, your data will only be passed on if we have informed you in detail and you have given us your written consent to pass on your data.

We use subcontractors in the context of the processing of personal data and conclude a contract with these processors in accordance with the requirements of Art. 28 DSGVO.

1. the company IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, is used as processor for hosting the website.

2. for the administration of consent data, we use the company Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, as a processor, which provides us with the "Cookiebot" tool.

XII Legal bases

In accordance with Art. 13 DSGVO, we inform you of the legal basis of our data processing:

- Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a DSGVO serves as the legal basis.

- When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

- Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c DSGVO serves as the legal basis.

- The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f DSGVO.

- The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f DSGVO.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f DSGVO serves as the legal basis for the processing.

- If the processing of personal data is based on Article 6(1)(f) DSGVO, our legitimate interest is the performance of our business activities for the benefit of the well-being of all our employees and our shareholders as well as the legitimate interest in an appropriate presentation of our company on the Internet.

XIII Rights of the data subjects

The user and other data subjects have the following rights in relation to their personal data:

- Right of access to the personal data concerned (Art. 15 DSGVO)

- Right to rectification (Art. 16 DSGVO)

- Right to erasure (Art. 17 DSGVO)

- Right to restriction of processing (Art. 18 DSGVO)

- Right to object to the processing if the data processing is based on Art. 6 para. 1 lit. e or lit. f DSGVO (Art. 21 DSGVO); see also the following reference to the right to object pursuant to Art. 21 DSGVO

- Right to data portability (Art. 20 DSGVO)

- Right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal, if the data processing is based on consent pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a DSGVO.

- You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us (Art. 77 DSGVO).

The data protection supervisory authority responsible for us is: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Postfach 1349, 91504 Ansbach, phone: +49 (0) 981 180093-0, fax: +49 (0) 981 180093-800, e-mail: poststelle_at_lda.bayern.de.

XIV Security

We take technical and organizational measures in accordance with the requirements of Art. 32 DSGVO to protect the user's personal data. All our employees involved in the processing of personal data are obliged to maintain data secrecy. The user's personal data is encrypted during transmission to the website using HTTPS.

We have set up a so-called SSL certificate for our website. You can recognize an encrypted connection by the https:// address line of your browser and the lock symbol in the browser line. SSL or TLS encryption makes it possible for you to send us your request (data) via our contact form without third parties being able to read it.

We do not use automated decision-making or profiling.

XV Responsible person

GMED Healthcare Solutions GmbH

Rittigfeld 1

91301 Forchheim

Tel. +49 (0) 9191 72050

Fax +49 (0) 9191 7205 5563

E-Mail: datenschutz_at_hegele.de

XVI Data Protection Officer

You can contact our data protection officer at datenschutz_at_hegele.de or at our postal address with the addition "The Data Protection Officer".

XVII Changes to this privacy policy

We reserve the right to amend this privacy policy at any time in compliance with the applicable data protection regulations. We will publish the amended version of the privacy policy in the same place as this privacy policy.

Status: March 2024